Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
File:                     taJj0Y61xUD3R4glu3LvrG8o-Cs.mft (raw, json)
Hash identifier:          QdwoBwxSkZussTxLyrP04DIXZhKfaIXOcakaTIo4IjU=
Subject key identifier:   A5:99:14:3A:D9:FB:18:33:70:96:11:D7:4E:53:A5:07:C4:10:84:1A
Authority key identifier: B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B
Certificate issuer:       /CN=b5a263d18eb5c540f7478825bb72efac6f28f82b
Certificate serial:       01A0BE42DE02DA30BE5E4A70EB0E0D10D7C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
Manifest number:          19F3
Signing time:             Sun 20 Sep 2026 10:00:48 +0000
Manifest this update:     Sun 20 Sep 2026 10:00:48 +0000
Manifest next update:     Mon 21 Sep 2026 10:00:48 +0000
Files and hashes:         1: mGuGgApHSUc3pkLejONy6uxFa8I.roa (hash: 72owtSfE8WtU3O8vsf/pSLMkM235o/0ogXWxdafrLec=)
                          2: taJj0Y61xUD3R4glu3LvrG8o-Cs.crl (hash: YLl3An6nPOAPY3er6R32sKeRCbQlkR3iYcKDoxh+avA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:be:42:de:02:da:30:be:5e:4a:70:eb:0e:0d:10:d7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5a263d18eb5c540f7478825bb72efac6f28f82b
        Validity
            Not Before: Sep 20 10:00:48 2026 GMT
            Not After : Sep 21 10:00:48 2026 GMT
        Subject: CN=a599143ad9fb1833709611d74e53a507c410841a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4f:b7:db:1e:9d:3b:66:e3:19:7b:10:db:35:
                    c0:6e:a0:b0:e3:06:3c:80:4a:c4:f7:4f:b4:0a:82:
                    64:ce:04:80:ac:18:0c:e6:61:1c:d2:3c:d9:92:ad:
                    65:f0:ac:02:7f:d5:bb:26:89:23:08:a2:6c:02:52:
                    6d:bc:c4:09:17:ca:ea:e5:13:10:07:84:79:b7:7f:
                    d2:74:13:0e:c0:30:cb:5d:04:ab:ab:c1:1a:ef:6f:
                    fb:33:4a:4a:35:fa:f0:a2:b1:fe:07:e9:9e:91:00:
                    21:c2:f9:be:28:55:71:2e:56:64:6a:c0:fc:ae:bf:
                    36:84:89:5e:e8:61:d4:aa:91:27:d8:0c:a0:8a:13:
                    f8:48:5f:0a:d3:20:38:b0:05:77:c4:8a:98:ce:97:
                    40:78:93:f2:33:74:b6:fe:dd:ee:3c:e1:da:fa:89:
                    80:44:af:14:af:14:19:ae:36:d4:79:d4:32:b1:ef:
                    93:d7:3e:09:15:7e:bd:35:f2:5b:aa:74:f0:7c:b3:
                    d7:53:3a:43:e8:24:b9:48:b2:02:96:fd:0b:be:9d:
                    b7:11:76:c5:05:c5:d1:c5:75:bc:3c:6b:7f:31:72:
                    b0:8f:87:6c:bc:d6:80:03:39:2c:0f:ef:91:91:72:
                    a1:9a:33:94:7e:40:94:b0:64:1a:a3:7a:b4:13:4e:
                    71:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:99:14:3A:D9:FB:18:33:70:96:11:D7:4E:53:A5:07:C4:10:84:1A
            X509v3 Authority Key Identifier:
                keyid:B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:33:68:43:cf:6d:fe:a6:a3:67:83:61:06:63:83:db:65:df:
         d9:6c:40:54:1d:db:f6:98:3a:fc:35:9c:5e:ec:19:01:1c:18:
         8d:51:e9:24:b1:86:22:47:fe:f7:d6:40:bf:35:80:b5:28:77:
         cd:5f:fc:dd:f5:a5:2d:fb:4c:83:88:98:60:c6:fc:c0:8c:15:
         a1:3c:d2:e4:37:c3:d0:68:01:02:21:8c:b3:5b:e8:26:ea:09:
         77:85:b5:82:55:f6:0e:54:7f:79:c9:89:4d:ea:5d:75:53:00:
         c3:f8:12:ca:62:fc:9c:b8:a4:83:3a:77:59:ed:33:49:75:4f:
         66:a4:16:81:a0:e2:34:ce:75:e4:df:03:63:af:b7:5c:1e:a1:
         5b:79:db:86:40:76:c6:83:f7:65:fd:de:80:8b:04:dc:ec:a0:
         43:ca:d9:e0:f1:a0:97:7e:42:32:b0:07:82:6b:32:82:7f:d2:
         60:31:5c:32:76:76:c2:b4:02:92:f6:8a:22:ea:61:3a:db:28:
         a0:60:8f:42:3c:8b:f3:e9:78:7d:54:aa:38:2b:ab:be:b8:23:
         b7:68:59:ed:c1:f0:c0:0f:4a:b2:50:a3:82:a8:3b:fb:a7:01:
         3a:96:f8:e4:de:65:52:93:92:c4:0d:53:ae:36:76:d4:b7:5b:
         66:0c:c0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:57:59 2026 by rpki-client