Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
File:                     TXCvGpmIbJEB0TX1S9K97zWLJm4.mft (raw, json)
Hash identifier:          RR597Ia0qvAYf8dsSTds616eRjp1jE002FNA2Ddv9QE=
Subject key identifier:   5A:63:BC:46:08:38:BB:7D:4A:5E:D9:A3:B5:29:03:FE:84:D3:6F:1D
Authority key identifier: 4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E
Certificate issuer:       /CN=4d70af1a99886c9101d135f54bd2bdef358b266e
Certificate serial:       019D99995A2555651766389BB3A2E9A24FA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
Manifest number:          0FA6
Signing time:             Fri 17 Apr 2026 04:00:57 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:57 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:57 +0000
Files and hashes:         1: 0tktadOdx4n8mac4w9y4uxxnQb4.roa (hash: n46RKOzZ9/eSRXSwMZil9zlLwS3ZgBVtTMxO4eNCf08=)
                          2: 42YWr5OhbKc0Pizwtc2S4hATTvI.roa (hash: DjyBYoPw3TsTXrbKpaqqcR6UDSKAlprPGT2cyckJMMA=)
                          3: AzQxJhJ4Z1TEqxs8ToOa3faLKx8.roa (hash: aCSm8m0t4y+fvwbcBrYNhHamTehxOv4Ukp4HETVoDPE=)
                          4: IZQtORr-3U05VM82NLGSac5kUKo.roa (hash: vKvrHvX6TuHXpl6ZvCaEsWmF+MUfHlyXbUCXrMpEZ9U=)
                          5: TXCvGpmIbJEB0TX1S9K97zWLJm4.crl (hash: w7bsJ9i46Q36Y2J/kpbQg6wFXRpetqRJDrYoz+SZGZE=)
                          6: rd1TYdEXPHhLUYvq912Q58Dh15E.roa (hash: ged8RYg6t00YYbjATYOf0qeEgk1jUhkA3s1XP4KCL6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:5a:25:55:65:17:66:38:9b:b3:a2:e9:a2:4f:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d70af1a99886c9101d135f54bd2bdef358b266e
        Validity
            Not Before: Apr 17 04:00:57 2026 GMT
            Not After : Apr 18 04:00:57 2026 GMT
        Subject: CN=5a63bc460838bb7d4a5ed9a3b52903fe84d36f1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3e:49:82:12:10:63:53:be:0e:8b:63:6c:ad:
                    6a:7e:c4:cb:8f:69:8f:9f:c0:79:5d:ba:02:85:ff:
                    f9:9e:98:0b:ba:50:c1:1b:01:75:0c:9b:b0:af:3a:
                    ed:36:7f:e3:ad:c2:de:db:ac:ea:0b:0c:e9:31:79:
                    85:cd:55:78:a3:35:1b:74:01:2c:d4:29:2b:11:09:
                    96:f7:34:08:a5:25:c2:68:8a:a4:58:f8:c2:6c:63:
                    77:09:dd:ac:a0:ac:f8:19:a5:94:2f:cd:cd:6b:0e:
                    52:6c:55:86:95:23:05:7e:d2:73:60:cf:5c:ae:a4:
                    45:86:3c:36:84:92:c6:5f:c8:a3:8a:ab:89:c6:77:
                    87:f0:e9:fd:ef:86:85:ee:49:02:99:88:1f:d3:12:
                    ab:47:64:e3:81:d7:d4:33:c9:64:0f:a8:e8:f9:bc:
                    35:0e:43:83:7c:3c:3c:9e:72:96:08:cd:bf:98:16:
                    af:c0:29:39:c4:de:01:4a:9b:61:65:e3:dd:57:af:
                    ac:3b:2c:6b:a0:b4:e9:41:64:54:06:83:12:47:db:
                    6a:8c:8e:91:26:d1:c1:41:82:47:83:3a:46:1f:1e:
                    b2:de:c6:c6:12:1a:d5:56:ff:74:e2:a0:b3:d1:df:
                    85:53:c7:c0:24:b5:67:7f:9e:b1:3c:6e:9b:96:66:
                    fd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:63:BC:46:08:38:BB:7D:4A:5E:D9:A3:B5:29:03:FE:84:D3:6F:1D
            X509v3 Authority Key Identifier:
                keyid:4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:29:4f:e3:9b:04:bb:a8:a1:e9:9c:12:fb:70:b6:72:13:6c:
         83:1d:d2:2a:e3:c6:15:03:f7:a6:33:3b:e6:8e:d0:b8:95:3a:
         e5:d2:16:6a:71:36:05:f7:6a:40:b0:0c:be:32:ed:19:65:53:
         53:84:6b:0a:65:cb:37:33:61:13:89:d9:82:32:51:af:78:29:
         45:4a:88:c4:e8:f0:12:db:12:0e:af:db:46:d9:26:24:25:d1:
         bf:2f:0c:de:93:3e:a7:cb:4a:9e:bf:68:4b:29:26:f9:c9:f2:
         4f:f6:d1:bc:82:41:64:43:0a:f1:2d:4e:8f:8f:ef:8a:97:05:
         90:63:2f:df:d2:d1:f6:5f:bc:30:43:f8:69:e6:f1:a7:7b:07:
         1b:36:49:87:ab:19:a3:63:6d:3c:06:09:72:3d:fe:c3:b9:7e:
         8b:f2:e7:7e:c1:b5:ad:ab:09:c4:b8:d9:e7:07:be:5e:d5:5e:
         71:fa:62:4b:64:6f:ba:3b:86:1a:5e:cd:4c:f0:23:89:85:e9:
         fc:59:e5:f3:4c:b5:33:58:6c:05:36:d7:f4:16:c4:96:44:5f:
         85:64:13:cf:02:74:20:fa:09:93:1e:8d:75:c4:7f:4c:19:89:
         0c:43:dd:03:46:0c:90:25:e4:b1:f9:ad:e1:21:26:25:34:ca:
         38:fd:8c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:19:48 2026 by rpki-client