Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
File:                     TVopIfvrikSOeuHsWhG4q4mNIv0.mft (raw, json)
Hash identifier:          c863y6zS++UoExrzwVuiLbNY2DfbGgIK+hXkfAuoqio=
Subject key identifier:   73:0A:38:32:F3:34:DC:EA:69:13:F3:EE:6F:65:F5:6F:5F:16:62:A3
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Certificate issuer:       /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial:       01A1464DBCBC715235B4DC759C91E450BDDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
Manifest number:          0DA7
Signing time:             Fri 16 Oct 2026 20:01:02 +0000
Manifest this update:     Fri 16 Oct 2026 20:01:02 +0000
Manifest next update:     Sat 17 Oct 2026 20:01:02 +0000
Files and hashes:         1: 5ykEZF8wevgZaB_1ODGOMH0aKu0.roa (hash: eiKZrkndtioGJrHaag8vJV+0KJ7aMqNliXoe9zqh9WE=)
                          2: 7Rla9QVnfsxlz6Y6Nm_NmW3xX64.roa (hash: ovO2WIxGdKrdBl4v+JKFRzOJXhbiW8rNyVp+5FP+SVc=)
                          3: DJHov9oo258LJAX-skLATEZmb24.roa (hash: BvgWs2DMJzCQ/+rSzXmElWcCRg8ATtA8ZvVRth/ykZk=)
                          4: EKynAMYgPjw0oPtAzNG9Bf_1jrw.roa (hash: sBJGHZRR//ShLKCu0otFo6KYcAN2JoMGd5WaxRgQK80=)
                          5: FDeSLWmKZoUs_Rkx4-kR-Eoo6Pw.roa (hash: n1xwEasJEqjxAoMLGxTYYkvBB/HWZgyHw69tjdtRsDk=)
                          6: Hv2YRVYv7Z8AR8dCPVtr57sXJF8.roa (hash: ofYgaGP1LV5MUlg5Nl52wgXMuZZaXQIahwgOP2WTrCg=)
                          7: IpbgzIod3SCOC-4M-yKJq7eJBCY.roa (hash: s4j/BLtlxyZ9cBFkOSjluXgeEHFBUHkPfFueXlPAOPE=)
                          8: O5GpUR3kqUwHM30F2bDcPcb5bmo.roa (hash: rpBjt2DMLqseXS01iOhjDQ4RnLWsDmcSm0GPL/qK3I4=)
                          9: Oc3Pl8vt5msIpuo1Qft7AEygjlU.roa (hash: fw0vLvCgyhMAg7PoEo5OwVd+c6rQftcmPr9WX9qeUeg=)
                          10: PAOf68ulivD1aol29ZpsFsfmh6U.roa (hash: jVRSAsjZHmTYM3trAFPulIyR64hXc4NZZtE5vQLDdmE=)
                          11: TVopIfvrikSOeuHsWhG4q4mNIv0.crl (hash: QckQ0mayJFWuv+SaQ0QsQWGVy9uFV6m8sXmEVk5mYXU=)
                          12: TknJkmvzG8YhZtluEmk6_ght3O0.roa (hash: B33bezM0KMWOQmLJLJFWWvp47uN0bahJpyMZqKV6Mi8=)
                          13: UO2QnnjSvQipGSNVD6Yo4Ceqp-g.roa (hash: MOM35AzipdN4H3i+5rszMg7XFIcuLyvsdUA52+H+VJE=)
                          14: _kKh1SIW-Zu-hrLTEq1pbc-XAUA.roa (hash: SexbsCEi+yARHDIbAfK05XC5sAMvM+DyaRl106OI1Io=)
                          15: baWpJacH22lwvMp-0Q3sr_wlZMw.roa (hash: sRCadDkwVNmCUfiGTkcWKw2SuyKd0BdUjPjB7kA8SyA=)
                          16: buyY8Ac2KpmpHFfgVONVdAfwNbA.roa (hash: BGQ1r8F2zGT+tMqc/Ky+y50SA0bVIp41VORitmqGR/I=)
                          17: fIACLuWd2jewktBlpXCJABXEMc8.roa (hash: Mwyuy8cEipm8N81d8QDxoLU5fwxQmRil4rQ7sh4HFAI=)
                          18: hJI-Spsz0GINZUeNyhTaYAzwubQ.roa (hash: XJy8oyX2ahcRPXnMDc+74R24O9EqPSlBTqPW+tBwiIQ=)
                          19: jFXDMyBxt_rZFmF6PohErV1Pb58.roa (hash: uh+Jrdsuoti6Ep9gi2o2yliWk0/DQy5WnEc2+Y2h7OU=)
                          20: l6MLB0LgtASn9W23NuichcY0SDQ.roa (hash: Evn5ntYFo14Ys2yIlYsVCrrZxOTsZs+7nH8bIMWWulU=)
                          21: m9Kdsxil7NkQWMJunpKO2XkDqno.roa (hash: zjAzBSPErOPYrB/Iu+ltMoiodbIhn3rD5/Hsty9Kj80=)
                          22: nooMTOO2DE_ZskHEteOTpSXxsjQ.roa (hash: LgX52c2g0nnW+2cwcKrThUj7bQHcl+rXSclKVVog+uE=)
                          23: ova4eahV3TxUxXU4zSO93zx-Fy0.roa (hash: tw3X1/YbzbSfvAMeGnSPS5mPtfbS/OdO74q7gizYMc8=)
                          24: oywwoa3u6O9SBHQ8yKsKSnYKa7c.roa (hash: KgxXs067QD5Y09mePRyVF8hKQftpA+Ff/I39BypEv98=)
                          25: qhe8MyZcsm7s8bUc-1QLuxrlgmc.roa (hash: ch37dlscCrrj/Zah686777uUvKZ5V0l/gR0k7sundNU=)
                          26: sTRe3hxafWevdrqOFig7u6J6HfA.roa (hash: nyjzS+9tJ9roL4d7zEK+Keibmb89RslH82XWEtel2Ls=)
                          27: sbNZ4_gtOeuNBI2OMUGnYKyVZnc.roa (hash: FU3HAHLK7PKxgkhKQZVUjDiWif3ooKAbB6Pzr2fCyJI=)
                          28: yLu29NKuR8T_MSH1sV3ONALBBDI.roa (hash: OQA7MhMBpIcMUz5zqkugZZr87qooUoo7ZKBCcr5Mwp4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 20:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:46:4d:bc:bc:71:52:35:b4:dc:75:9c:91:e4:50:bd:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
        Validity
            Not Before: Oct 16 20:01:02 2026 GMT
            Not After : Oct 17 20:01:02 2026 GMT
        Subject: CN=730a3832f334dcea6913f3ee6f65f56f5f1662a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3d:17:66:3b:8c:45:e6:62:98:08:ca:35:76:
                    87:50:45:b1:25:3a:3e:0d:ec:ab:60:54:9e:53:03:
                    69:c8:80:e0:ab:62:8c:66:d8:05:d2:f1:37:72:d1:
                    f6:65:68:62:e1:db:a1:28:06:3c:b9:7b:b0:ba:eb:
                    34:da:aa:9b:63:14:a5:db:77:24:4d:00:ab:a9:68:
                    2d:3b:f8:59:d5:56:0d:67:41:d7:07:a9:75:91:fd:
                    5c:7f:64:19:f5:93:08:83:44:18:c6:21:e8:30:9e:
                    da:9c:4d:c5:18:50:6f:e3:67:21:47:a6:c2:66:8b:
                    7b:fb:36:27:36:17:d6:12:3a:81:72:1a:3e:2b:58:
                    67:bd:9f:cc:83:f6:cd:ef:54:65:76:35:a3:79:7a:
                    2f:4e:9e:7d:5d:32:77:1f:31:52:ae:f4:85:84:54:
                    82:b9:63:fa:78:74:e0:67:7b:96:b5:7c:2c:20:ed:
                    a7:fc:b1:52:a7:bd:ce:d5:cc:a1:60:14:91:1b:d7:
                    34:ad:d9:3b:ea:af:59:07:11:c9:0f:24:3b:c5:3c:
                    1c:bb:a0:16:48:81:d6:08:07:7d:d8:ee:b6:b8:33:
                    c8:66:31:90:13:a4:60:17:60:d8:ef:59:c8:9a:1a:
                    a7:90:c8:19:ef:6c:cb:ce:1e:21:52:93:57:cb:81:
                    a9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:0A:38:32:F3:34:DC:EA:69:13:F3:EE:6F:65:F5:6F:5F:16:62:A3
            X509v3 Authority Key Identifier:
                keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:15:4e:ba:64:14:86:a3:4a:5a:a9:92:e8:21:dc:3f:14:fd:
         cd:4e:1b:d2:35:c6:c8:03:0d:1e:15:f9:de:f8:2f:9a:a7:f0:
         5c:69:9f:bc:2d:c5:dc:40:d4:33:30:31:a6:fd:f0:fe:d0:6d:
         17:34:2b:96:7a:b5:77:5f:cd:65:3b:fc:b7:e6:7e:66:fb:e5:
         58:64:cb:39:93:ed:18:04:1e:9e:61:54:f2:79:3b:4b:fd:08:
         d2:95:53:87:76:13:c0:7a:3f:14:22:ff:ec:21:45:f1:e7:60:
         d5:97:3e:20:af:68:d4:40:4c:09:27:84:70:5c:e7:13:a9:6d:
         ff:70:be:32:50:42:4c:4f:1b:1c:2f:e9:95:ab:34:1d:04:16:
         a3:1c:c9:e6:ed:1a:be:fb:c1:86:47:7b:55:5c:aa:32:38:e2:
         84:51:0f:3e:6a:86:38:1c:0a:40:ea:fe:84:1b:c2:ab:54:60:
         16:85:df:57:ec:64:26:3d:2d:a7:e2:49:ab:e0:7d:c4:5a:1d:
         c9:f4:bf:ec:76:1f:85:6a:6c:eb:11:f8:95:c6:e0:43:96:71:
         93:fd:d4:8f:e6:74:9e:2f:a5:43:85:91:20:ed:49:1a:95:a7:
         aa:07:dd:86:b4:68:39:e9:28:b6:e9:04:f1:08:72:ff:77:93:
         ac:d4:7d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 07:08:28 2026 by rpki-client