Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
File:                     TXCvGpmIbJEB0TX1S9K97zWLJm4.mft (raw, json)
Hash identifier:          lqjwg0WsFsvCRXrBRj9xBuYgPpMyvGAzsKs2j8SV33Q=
Subject key identifier:   23:33:D5:4C:A9:A6:D2:1E:4E:3C:A6:9A:65:A0:05:D4:E8:84:13:FA
Authority key identifier: 4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E
Certificate issuer:       /CN=4d70af1a99886c9101d135f54bd2bdef358b266e
Certificate serial:       019FAABEBEA5B128CD396383B6EF04FB0506
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
Manifest number:          10B8
Signing time:             Tue 28 Jul 2026 22:00:55 +0000
Manifest this update:     Tue 28 Jul 2026 22:00:55 +0000
Manifest next update:     Wed 29 Jul 2026 22:00:55 +0000
Files and hashes:         1: 0tktadOdx4n8mac4w9y4uxxnQb4.roa (hash: n46RKOzZ9/eSRXSwMZil9zlLwS3ZgBVtTMxO4eNCf08=)
                          2: 42YWr5OhbKc0Pizwtc2S4hATTvI.roa (hash: DjyBYoPw3TsTXrbKpaqqcR6UDSKAlprPGT2cyckJMMA=)
                          3: AzQxJhJ4Z1TEqxs8ToOa3faLKx8.roa (hash: aCSm8m0t4y+fvwbcBrYNhHamTehxOv4Ukp4HETVoDPE=)
                          4: IZQtORr-3U05VM82NLGSac5kUKo.roa (hash: vKvrHvX6TuHXpl6ZvCaEsWmF+MUfHlyXbUCXrMpEZ9U=)
                          5: TXCvGpmIbJEB0TX1S9K97zWLJm4.crl (hash: y7OdtwurIT5aSlwOeRmU0Nb7fHWfcBZ/utMf1p1mE3k=)
                          6: rd1TYdEXPHhLUYvq912Q58Dh15E.roa (hash: ged8RYg6t00YYbjATYOf0qeEgk1jUhkA3s1XP4KCL6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:be:be:a5:b1:28:cd:39:63:83:b6:ef:04:fb:05:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d70af1a99886c9101d135f54bd2bdef358b266e
        Validity
            Not Before: Jul 28 22:00:55 2026 GMT
            Not After : Jul 29 22:00:55 2026 GMT
        Subject: CN=2333d54ca9a6d21e4e3ca69a65a005d4e88413fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:77:c0:03:c8:4f:b3:f6:ff:b9:73:4e:14:f9:
                    f7:ae:9d:1d:06:bb:8c:09:68:54:0a:07:08:b4:99:
                    6f:5f:ee:09:8d:5f:83:05:64:4b:83:55:da:4e:ee:
                    74:a0:52:d5:fe:a8:bc:f7:1a:ce:15:05:3e:e0:62:
                    b6:8a:d2:aa:85:1d:38:4f:b7:be:bc:73:5a:28:de:
                    20:7a:fc:76:1e:31:a8:57:91:ca:8c:85:66:62:e1:
                    51:70:b8:44:59:61:3b:c4:6c:f8:e4:ec:14:92:a6:
                    4b:40:14:dc:c1:07:01:0a:89:2e:47:1d:71:55:54:
                    53:82:85:e1:2f:51:f7:38:c1:65:aa:11:45:50:46:
                    d9:2a:eb:43:3a:f9:bc:28:8f:12:3d:60:0b:b8:7c:
                    13:15:bb:62:2f:0d:75:ab:62:64:58:b7:e6:92:ed:
                    37:0c:7e:1d:b6:a0:e4:31:14:9c:01:25:cd:f6:61:
                    d8:b1:77:24:12:f2:4c:1a:32:67:33:89:a3:0d:67:
                    80:07:59:9c:da:ed:59:2e:87:6d:99:17:46:1f:35:
                    b7:28:71:68:f1:11:b7:b2:4f:8e:2e:08:e8:0a:06:
                    e1:fb:a5:83:91:8c:a9:6a:94:9a:2e:b9:01:fe:d2:
                    9d:0c:11:7a:e8:73:6e:53:c5:4f:98:c1:d8:c2:dd:
                    1d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:33:D5:4C:A9:A6:D2:1E:4E:3C:A6:9A:65:A0:05:D4:E8:84:13:FA
            X509v3 Authority Key Identifier:
                keyid:4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:85:05:70:16:93:4e:77:38:b9:81:76:ef:a7:fb:66:01:bd:
         2c:1d:5e:c1:7e:7c:c6:06:ba:1f:92:20:36:c9:2c:aa:af:e4:
         c8:43:41:f2:9c:46:9c:1d:4b:12:0a:12:31:d6:b0:71:dd:48:
         b7:fa:bf:2f:8c:ad:b0:f5:db:3c:a0:04:c8:70:44:c1:2c:ef:
         d2:c2:5a:df:20:2d:75:a3:a3:e9:33:d0:ec:19:56:41:25:85:
         80:5f:2e:6a:f3:a9:c1:4a:27:da:f1:ae:73:d9:ff:8e:04:41:
         e9:f2:50:b7:f5:a5:db:47:00:35:9b:8b:9d:ae:cc:55:92:e8:
         30:b9:ac:b9:e4:aa:72:fd:18:8b:26:8d:b8:3a:21:be:6a:f3:
         ae:d9:61:a9:49:74:40:b2:ad:17:ec:5f:f8:57:98:08:ae:51:
         6a:d5:97:45:32:21:38:19:3d:2e:cb:dd:c3:0b:53:0b:71:6e:
         52:54:c9:39:64:40:eb:54:79:37:c7:b1:2f:2a:51:cd:7a:a5:
         4a:f7:8b:a3:be:49:b2:ee:70:a6:b4:20:70:fd:cb:40:2d:13:
         49:80:85:da:ae:7e:0b:f8:44:38:b0:4a:a6:46:56:09:00:fb:
         4d:b5:cc:95:06:88:20:9e:c8:c8:c0:c3:df:8a:50:34:20:8e:
         7c:f6:01:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:37:09 2026 by rpki-client