Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
File:                     TXCvGpmIbJEB0TX1S9K97zWLJm4.mft (raw, json)
Hash identifier:          HhyfavIq/HsRYDGqc3JzLeY2e2yzWnYSLxLvnGb6dfI=
Subject key identifier:   7D:F1:D4:9E:4C:17:96:07:6E:CA:69:CB:AA:E7:11:22:D3:05:BC:11
Authority key identifier: 4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E
Certificate issuer:       /CN=4d70af1a99886c9101d135f54bd2bdef358b266e
Certificate serial:       01A0CA7E2E5C4A21DB329E2EC5BD58412AE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
Manifest number:          114E
Signing time:             Tue 22 Sep 2026 19:01:02 +0000
Manifest this update:     Tue 22 Sep 2026 19:01:02 +0000
Manifest next update:     Wed 23 Sep 2026 19:01:02 +0000
Files and hashes:         1: 0tktadOdx4n8mac4w9y4uxxnQb4.roa (hash: n46RKOzZ9/eSRXSwMZil9zlLwS3ZgBVtTMxO4eNCf08=)
                          2: AzQxJhJ4Z1TEqxs8ToOa3faLKx8.roa (hash: aCSm8m0t4y+fvwbcBrYNhHamTehxOv4Ukp4HETVoDPE=)
                          3: IZQtORr-3U05VM82NLGSac5kUKo.roa (hash: vKvrHvX6TuHXpl6ZvCaEsWmF+MUfHlyXbUCXrMpEZ9U=)
                          4: TXCvGpmIbJEB0TX1S9K97zWLJm4.crl (hash: ebajRaefW01UH53uun4dlUQJ/w1WXFbSEFCP0y8Kpsk=)
                          5: rd1TYdEXPHhLUYvq912Q58Dh15E.roa (hash: ged8RYg6t00YYbjATYOf0qeEgk1jUhkA3s1XP4KCL6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 19:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:7e:2e:5c:4a:21:db:32:9e:2e:c5:bd:58:41:2a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d70af1a99886c9101d135f54bd2bdef358b266e
        Validity
            Not Before: Sep 22 19:01:02 2026 GMT
            Not After : Sep 23 19:01:02 2026 GMT
        Subject: CN=7df1d49e4c1796076eca69cbaae71122d305bc11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:15:b8:0c:67:01:92:bf:01:a4:91:69:f5:a4:
                    6b:a6:95:e8:2b:b8:9e:61:11:6a:e0:9c:eb:14:e9:
                    04:ec:86:ce:2c:ea:83:cd:1f:16:77:69:1d:81:c5:
                    e2:e2:0f:9f:6c:87:be:5b:c1:83:2e:ae:86:2d:3a:
                    87:bf:61:f7:46:ca:ce:df:ca:36:1d:26:c8:c1:91:
                    d2:02:ae:d5:de:2a:9d:bf:23:7a:f0:91:5d:d9:2d:
                    a0:f8:b2:62:d1:07:fb:11:1b:30:ac:f6:da:11:f8:
                    f6:a5:a9:67:de:94:64:a1:3a:1f:ad:b9:4a:97:71:
                    1e:64:9d:d6:05:ff:7d:fd:09:f2:d6:ea:3d:3e:23:
                    a0:00:b7:68:a5:50:7e:c8:6c:bf:2b:11:4c:49:90:
                    a6:36:7a:ec:d2:91:0c:a5:1d:96:85:8a:97:15:9f:
                    04:23:3f:c2:b6:df:76:37:f6:de:f8:1a:2a:ba:e5:
                    50:aa:93:d3:d8:e7:a1:6d:29:3e:f5:fe:1c:2b:92:
                    10:9d:a4:80:41:29:14:36:ec:a0:75:f0:f0:1c:55:
                    fe:dc:94:47:58:41:c8:45:69:19:c5:ef:bd:3a:38:
                    ff:20:ac:49:f5:bb:78:c5:96:5b:b9:b6:e2:e9:3d:
                    6e:8c:16:d1:bd:58:de:93:14:ee:64:01:dc:d4:d1:
                    52:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F1:D4:9E:4C:17:96:07:6E:CA:69:CB:AA:E7:11:22:D3:05:BC:11
            X509v3 Authority Key Identifier:
                keyid:4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:33:ef:04:f0:37:53:af:f1:32:08:d2:06:74:7e:17:77:4f:
         76:a1:e5:68:bc:a4:87:91:dc:4a:7f:b6:43:68:b2:4c:17:61:
         dd:9d:5a:3c:db:ba:f0:7e:f3:b9:53:73:6c:f6:66:39:e6:a8:
         da:d7:ba:84:19:62:42:8f:0b:9f:bb:e9:82:23:8a:fd:33:d4:
         fd:db:31:f0:b1:d4:28:06:a8:db:a6:0d:ea:cd:dc:b6:6b:a9:
         e6:8f:fc:92:91:97:5c:c5:5d:71:83:ff:22:67:0b:9c:9d:81:
         46:00:80:b3:49:f5:f7:94:53:52:75:a5:8f:6e:37:a7:46:bd:
         aa:a2:c2:69:cd:4e:8d:25:ab:55:80:4b:45:1c:fd:0a:77:d5:
         44:96:8f:82:e1:92:16:a3:35:93:9b:91:19:e8:29:ca:58:65:
         96:02:69:c6:3c:a6:41:b1:a7:fd:66:50:36:8a:1b:2c:26:79:
         3c:4c:ab:24:d5:b8:a1:e9:7a:cf:c9:82:c8:e9:a9:ba:34:93:
         a9:40:a5:41:28:b2:32:b6:ed:b6:05:dd:5a:7f:a8:9b:0a:5c:
         54:74:16:5e:d8:f6:80:3e:36:46:05:6c:01:d2:bb:a2:86:f3:
         f6:e4:8d:e7:e4:13:16:31:ad:b2:37:63:4a:38:66:67:0e:b5:
         85:2b:b6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:14:59 2026 by rpki-client