Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
File:                     TqZcftukadCZ12qs19wmP03-xes.mft (raw, json)
Hash identifier:          uOjzs+u+CaHK+tQfm5jvIwnzkDdNnPFrhFgwXVX9Y1I=
Subject key identifier:   67:2D:A7:BC:30:FA:A4:1D:AA:10:B0:F0:30:BE:D7:9F:6C:B6:4D:A8
Authority key identifier: 4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB
Certificate issuer:       /CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb
Certificate serial:       01A136DABC3EDFA00A978AA13730113079AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
Manifest number:          09DD
Signing time:             Tue 13 Oct 2026 20:01:06 +0000
Manifest this update:     Tue 13 Oct 2026 20:01:06 +0000
Manifest next update:     Wed 14 Oct 2026 20:01:06 +0000
Files and hashes:         1: NE-Gskahv4yhz4NSW0eOQznOBbc.roa (hash: 2cjZe+aPFDte9rIu8wJCuhBoVs4OYpmJVxKR+K10wPw=)
                          2: QBVvQVEZlQ_FtBHlQ6LkxII5X7Y.roa (hash: is6gKcJbbow/p4d83+z8Fk6rRj/Sh2SQuegCzSpgZjg=)
                          3: RH3gRlxhVGrL9P1FAsxvNcZGcKg.roa (hash: BUrryx952cBQrnyyvdxiH2Hn6rJcg6+93M8bhY0hK8s=)
                          4: Rl7efdhYeXftFwvFAmfRH2As_rs.roa (hash: Fkewx2otKYj7NOwHTF8pWpF8lfCLVjfeAiN9uWh62QU=)
                          5: TqZcftukadCZ12qs19wmP03-xes.crl (hash: 7Rh9bBAu/s6TtwFZbwvizcM2nwA6bpvmzYe/IIKcfMI=)
                          6: ncCiHV5R8jHZ0soKsN7Ip4AqqnA.roa (hash: /O4pxVo1nhy254bmusK8i5RqU2c/+1dTlDhCRL7gqs4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 20:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:36:da:bc:3e:df:a0:0a:97:8a:a1:37:30:11:30:79:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb
        Validity
            Not Before: Oct 13 20:01:06 2026 GMT
            Not After : Oct 14 20:01:06 2026 GMT
        Subject: CN=672da7bc30faa41daa10b0f030bed79f6cb64da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ee:99:0b:95:6b:6c:9f:9f:39:16:06:43:be:
                    b1:53:98:e3:92:3a:9b:bc:fd:58:07:3c:da:ba:c0:
                    7f:86:92:4e:22:c3:69:18:2b:2a:44:65:3a:b9:9e:
                    fe:bc:d8:44:f6:b7:0e:d3:fb:6b:1e:f4:6e:65:28:
                    d6:3c:05:53:f3:c2:65:eb:ec:d7:88:fe:f2:90:79:
                    73:d7:21:ba:df:db:e9:08:8f:17:ac:6f:c8:b5:d7:
                    c6:df:cc:7a:24:8f:d9:47:07:a2:5e:53:51:8b:8a:
                    2b:55:ba:7c:8f:7e:9f:36:d9:48:8e:2a:0f:f2:cb:
                    60:5a:5b:c1:c9:6c:24:c3:18:59:3b:8f:62:7e:96:
                    f2:2e:96:da:ff:43:a3:53:94:4e:b7:0e:17:6e:72:
                    8b:f9:ac:76:00:0d:42:bb:47:31:4d:f5:a1:64:df:
                    d7:48:58:e2:ba:61:75:8d:37:18:d3:80:d8:80:ad:
                    54:28:b0:ee:bb:a4:55:cd:d5:5f:6b:b8:4c:dd:32:
                    4c:84:f4:f8:bd:70:10:e8:53:88:bf:f7:43:ea:79:
                    d1:9b:58:b1:e2:49:27:61:71:02:6c:da:a1:2d:c9:
                    8f:57:c4:ab:e4:a4:b4:53:30:6a:36:16:8b:06:93:
                    fa:0f:69:5e:c9:f7:90:0c:d0:e2:c8:9f:47:9c:10:
                    1a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:2D:A7:BC:30:FA:A4:1D:AA:10:B0:F0:30:BE:D7:9F:6C:B6:4D:A8
            X509v3 Authority Key Identifier:
                keyid:4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:6f:b2:7b:c6:c3:ef:5f:0a:29:be:5c:76:b6:cb:d7:fb:b1:
         17:bf:ac:ff:17:7f:e2:8a:8f:cb:59:6d:d5:ff:73:ea:0b:0c:
         88:6f:27:8b:84:26:ee:5d:90:a6:18:78:7d:9b:6c:0b:b7:6c:
         ad:31:f6:4e:9b:d4:b7:6b:54:66:80:7b:5f:26:68:d9:ae:be:
         9c:d4:c4:f1:60:64:ca:7c:9c:7d:44:2a:f0:1a:e1:03:57:32:
         47:ad:9c:b3:e7:87:e6:8a:82:89:ec:81:e4:b6:81:d5:78:31:
         a1:14:c3:56:76:eb:d9:b0:3b:1b:f0:a4:bd:15:e5:a4:47:d1:
         e6:0f:50:3e:2d:7f:e7:8d:6d:da:75:0b:2b:2a:95:af:68:9e:
         6d:fc:7c:7a:a9:70:e6:e9:e1:0b:21:1c:44:79:02:d2:8b:8f:
         26:36:9b:57:9d:dc:95:23:90:bb:fc:4d:a9:02:5e:3e:ac:e1:
         dd:17:b4:4c:aa:ad:82:cf:61:73:8d:b5:6e:3c:96:93:33:ce:
         0a:8f:78:9a:a7:ca:17:41:ca:08:3a:9b:9f:23:fd:53:ab:d7:
         8f:c0:3b:37:ae:c2:87:66:34:75:77:af:f9:b9:87:a7:9a:7d:
         a7:37:e7:40:d8:20:d5:35:46:f7:50:26:5f:58:a2:45:ba:bd:
         10:c1:ca:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:27:15 2026 by rpki-client