Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
File:                     TqZcftukadCZ12qs19wmP03-xes.mft (raw, json)
Hash identifier:          8pAOX+8GRX4xpdDWrH0reJr3CwD6+7n0mnS5fjtBIuE=
Subject key identifier:   A0:84:D1:D0:23:AF:00:14:3A:3F:5F:15:20:A5:13:DC:74:D9:E3:77
Authority key identifier: 4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB
Certificate issuer:       /CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb
Certificate serial:       01A138C98154AF21C3175E10EE714160E91A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
Manifest number:          09DE
Signing time:             Wed 14 Oct 2026 05:01:32 +0000
Manifest this update:     Wed 14 Oct 2026 05:01:32 +0000
Manifest next update:     Thu 15 Oct 2026 05:01:32 +0000
Files and hashes:         1: NE-Gskahv4yhz4NSW0eOQznOBbc.roa (hash: 2cjZe+aPFDte9rIu8wJCuhBoVs4OYpmJVxKR+K10wPw=)
                          2: QBVvQVEZlQ_FtBHlQ6LkxII5X7Y.roa (hash: is6gKcJbbow/p4d83+z8Fk6rRj/Sh2SQuegCzSpgZjg=)
                          3: RH3gRlxhVGrL9P1FAsxvNcZGcKg.roa (hash: BUrryx952cBQrnyyvdxiH2Hn6rJcg6+93M8bhY0hK8s=)
                          4: Rl7efdhYeXftFwvFAmfRH2As_rs.roa (hash: Fkewx2otKYj7NOwHTF8pWpF8lfCLVjfeAiN9uWh62QU=)
                          5: TqZcftukadCZ12qs19wmP03-xes.crl (hash: bH5DEZS9XOjHBgnSAq5Z7UwosNXxFwTOSMlzBLChMjI=)
                          6: ncCiHV5R8jHZ0soKsN7Ip4AqqnA.roa (hash: /O4pxVo1nhy254bmusK8i5RqU2c/+1dTlDhCRL7gqs4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:38:c9:81:54:af:21:c3:17:5e:10:ee:71:41:60:e9:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb
        Validity
            Not Before: Oct 14 05:01:32 2026 GMT
            Not After : Oct 15 05:01:32 2026 GMT
        Subject: CN=a084d1d023af00143a3f5f1520a513dc74d9e377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:10:c5:01:3f:e8:69:f9:22:36:07:e2:b3:15:
                    74:b5:7f:37:04:b1:a3:d9:be:1d:69:4d:83:e4:8c:
                    33:9c:64:a6:24:11:48:49:c4:d7:98:de:03:d7:46:
                    8b:a4:db:1c:4f:99:71:f0:dd:ed:03:66:f4:b3:f7:
                    fe:f9:f8:d8:73:5a:c3:6e:f2:1d:ca:2d:a9:7f:be:
                    2a:ff:62:28:4d:4b:bc:91:74:30:81:58:39:b0:60:
                    10:53:a5:bf:f4:fd:58:4d:f6:09:70:ff:9f:a6:c7:
                    94:db:65:aa:48:8b:ba:7b:b4:7a:b6:e8:70:ce:f3:
                    a1:1c:88:90:59:72:db:ab:4b:4c:8b:cc:c2:83:75:
                    8c:09:a1:0c:f0:b8:a4:00:4d:bf:da:5c:ca:c2:d3:
                    c3:a4:b8:6c:72:5f:1f:d0:5a:e4:4c:69:7d:0c:55:
                    c7:46:75:dd:dd:24:a3:4d:f4:f6:f9:05:85:b5:da:
                    74:75:ee:48:61:44:4a:11:ce:8d:2e:34:ce:e1:9c:
                    4b:35:7b:b0:fc:e5:68:40:52:81:51:69:ca:d3:eb:
                    9b:e1:32:ce:df:3f:52:eb:1d:b8:24:08:8b:85:5d:
                    65:6f:29:da:3e:9a:45:98:03:07:bf:2a:73:77:f0:
                    66:87:64:a1:c5:b5:a0:ce:b2:69:8a:94:94:3b:88:
                    cc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:84:D1:D0:23:AF:00:14:3A:3F:5F:15:20:A5:13:DC:74:D9:E3:77
            X509v3 Authority Key Identifier:
                keyid:4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:99:a2:69:b1:fd:25:f2:f8:79:89:e1:35:2a:93:c0:e1:ad:
         66:71:e2:f5:4b:cb:5d:a1:9c:6c:9e:d3:58:20:eb:3f:8c:1e:
         58:16:e1:b1:70:0f:d8:89:79:ab:27:ac:c9:24:bc:a9:f6:47:
         0c:8b:50:fe:96:ac:22:00:cb:0f:d5:a8:0f:10:89:42:f1:e7:
         69:f3:36:14:db:b8:e3:84:f8:ae:de:d2:d4:cb:e9:5d:49:f1:
         ea:71:96:9b:c6:d9:2a:c6:a7:15:df:cc:d8:7b:ea:82:14:e0:
         b9:8f:79:45:7a:52:d3:d8:2c:f4:df:d8:e6:2a:d9:ad:2e:af:
         9c:d3:64:e9:a8:be:43:25:19:a7:03:c1:79:03:f9:c1:87:a3:
         87:70:52:08:eb:ad:36:f3:5a:cc:1c:23:6e:7c:dc:e4:85:48:
         e0:cb:fd:79:e5:bf:e7:2b:a2:19:18:8f:aa:38:3a:8a:1a:ed:
         ab:27:b1:3c:7b:d8:50:07:af:8b:17:bd:45:06:9f:f6:15:ef:
         b0:e6:6a:a6:57:3e:8d:fb:cf:04:d2:16:86:30:fe:6d:34:74:
         f6:26:4b:8a:51:81:1e:0a:10:ee:d0:af:b8:e4:ae:f4:db:68:
         db:d3:44:96:51:d1:ed:a2:af:48:39:db:bf:39:54:8f:05:a1:
         7d:28:87:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE4yYFUryHDF14Q7nFBYOkaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlYTY1YzdlZGJhNDY5ZDA5OWQ3NmFhY2Q3ZGMyNjNmNGRm
ZWM1ZWIwHhcNMjYxMDE0MDUwMTMyWhcNMjYxMDE1MDUwMTMyWjAzMTEwLwYDVQQD
EyhhMDg0ZDFkMDIzYWYwMDE0M2EzZjVmMTUyMGE1MTNkYzc0ZDllMzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRDFAT/oafkiNgfisxV0tX83BLGj
2b4daU2D5IwznGSmJBFIScTXmN4D10aLpNscT5lx8N3tA2b0s/f++fjYc1rDbvId
yi2pf74q/2IoTUu8kXQwgVg5sGAQU6W/9P1YTfYJcP+fpseU22WqSIu6e7R6tuhw
zvOhHIiQWXLbq0tMi8zCg3WMCaEM8LikAE2/2lzKwtPDpLhscl8f0FrkTGl9DFXH
RnXd3SSjTfT2+QWFtdp0de5IYURKEc6NLjTO4ZxLNXuw/OVoQFKBUWnK0+ub4TLO
3z9S6x24JAiLhV1lbynaPppFmAMHvypzd/Bmh2ShxbWgzrJpipSUO4jMNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCE0dAjrwAUOj9fFSClE9x02eN3MB8GA1UdIwQY
MBaAFE6mXH7bpGnQmddqrNfcJj9N/sXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHFaY2Z0dWthZENaMTJxczE5d21QMDMteGVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wN2YyNzAtYzZjYy00OWNkLWFlNDYt
NTEwMGEyNmQyNzRiLzEvVHFaY2Z0dWthZENaMTJxczE5d21QMDMteGVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8wN2YyNzAtYzZjYy00OWNkLWFlNDYtNTEwMGEyNmQyNzRi
LzEvVHFaY2Z0dWthZENaMTJxczE5d21QMDMteGVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKpmiabH9
JfL4eYnhNSqTwOGtZnHi9UvLXaGcbJ7TWCDrP4weWBbhsXAP2Il5qyesySS8qfZH
DItQ/pasIgDLD9WoDxCJQvHnafM2FNu444T4rt7S1MvpXUnx6nGWm8bZKsanFd/M
2HvqghTguY95RXpS09gs9N/Y5irZrS6vnNNk6ai+QyUZpwPBeQP5wYejh3BSCOut
NvNazBwjbnzc5IVI4Mv9eeW/5yuiGRiPqjg6ihrtqyexPHvYUAevixe9RQaf9hXv
sOZqplc+jfvPBNIWhjD+bTR09iZLilGBHgoQ7tCvuOSu9Nto29NEllHR7aKvSDnb
vzlUjwWhfSiH6A==
-----END CERTIFICATE-----
Generated at Wed Oct 14 10:04:24 2026 by rpki-client