Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/6bfb8f-3c46-4cc2-acfd-4f9e895631fe/1/1OodcM1C51E6wjM51h241Ap--tg.mft
File:                     1OodcM1C51E6wjM51h241Ap--tg.mft (raw, json)
Hash identifier:          sU5wekAxbth4ux6JXSGmDL+zQ+i7l16+l/F0OBugZVE=
Subject key identifier:   A3:7B:94:6A:93:5E:F9:0E:AA:9B:24:85:F7:94:80:18:9C:2A:40:F5
Authority key identifier: D4:EA:1D:70:CD:42:E7:51:3A:C2:33:39:D6:1D:B8:D4:0A:7E:FA:D8
Certificate issuer:       /CN=d4ea1d70cd42e7513ac23339d61db8d40a7efad8
Certificate serial:       01A0404E97F4AE12AFD9CF2DF83345DF891E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1OodcM1C51E6wjM51h241Ap--tg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/6bfb8f-3c46-4cc2-acfd-4f9e895631fe/1/1OodcM1C51E6wjM51h241Ap--tg.mft
Manifest number:          9A
Signing time:             Wed 26 Aug 2026 23:01:27 +0000
Manifest this update:     Wed 26 Aug 2026 23:01:27 +0000
Manifest next update:     Thu 27 Aug 2026 23:01:27 +0000
Files and hashes:         1: 1OodcM1C51E6wjM51h241Ap--tg.crl (hash: hlU0wbUQxF05gnHzliYy8tiUMZaAeR7Jxvf2WfNPC98=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/6bfb8f-3c46-4cc2-acfd-4f9e895631fe/1/1OodcM1C51E6wjM51h241Ap--tg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/6bfb8f-3c46-4cc2-acfd-4f9e895631fe/1/1OodcM1C51E6wjM51h241Ap--tg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1OodcM1C51E6wjM51h241Ap--tg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:4e:97:f4:ae:12:af:d9:cf:2d:f8:33:45:df:89:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4ea1d70cd42e7513ac23339d61db8d40a7efad8
        Validity
            Not Before: Aug 26 23:01:27 2026 GMT
            Not After : Aug 27 23:01:27 2026 GMT
        Subject: CN=a37b946a935ef90eaa9b2485f79480189c2a40f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:35:89:24:96:31:0e:bc:5d:77:34:0e:c6:df:
                    46:0d:9e:2b:1f:14:db:af:dd:bd:1a:cb:e4:90:de:
                    68:39:35:41:bf:31:e4:13:6a:9f:fd:c3:57:02:63:
                    2e:1e:d8:07:9d:69:4c:4a:9f:ca:f0:b3:ff:a9:ec:
                    7e:e6:bd:10:fb:e5:c2:aa:75:20:e0:5f:b6:05:b9:
                    62:05:63:ae:06:14:7f:2b:35:51:0e:8c:66:d5:15:
                    63:bd:2b:20:1e:4b:dc:62:7d:f4:b8:82:ea:b5:da:
                    47:73:d0:2d:8c:07:14:89:bd:36:63:17:8f:de:33:
                    59:92:21:88:5d:f5:fb:e9:24:3a:f0:15:8f:28:8b:
                    b2:d9:eb:f7:fe:20:62:ee:46:31:97:50:b7:80:10:
                    68:11:1c:87:3b:23:3d:82:df:14:17:94:fa:fd:7d:
                    54:04:ac:1d:0b:91:33:aa:b1:3b:10:e4:0b:1d:5b:
                    0c:fd:23:3e:b9:57:73:ed:ec:f3:31:26:cf:d5:21:
                    60:1a:7a:d8:40:ea:de:35:4a:17:3a:a9:8b:71:2c:
                    b1:1a:30:6c:b8:ea:ac:8e:6d:8d:22:ec:bc:1d:63:
                    80:f8:b5:61:d1:59:da:62:d0:ba:62:99:e3:ef:f8:
                    77:76:3d:d9:bf:bc:89:cd:78:cd:81:1d:15:38:69:
                    a2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7B:94:6A:93:5E:F9:0E:AA:9B:24:85:F7:94:80:18:9C:2A:40:F5
            X509v3 Authority Key Identifier:
                keyid:D4:EA:1D:70:CD:42:E7:51:3A:C2:33:39:D6:1D:B8:D4:0A:7E:FA:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OodcM1C51E6wjM51h241Ap--tg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6bfb8f-3c46-4cc2-acfd-4f9e895631fe/1/1OodcM1C51E6wjM51h241Ap--tg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6bfb8f-3c46-4cc2-acfd-4f9e895631fe/1/1OodcM1C51E6wjM51h241Ap--tg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:e9:2f:f4:9a:86:1c:5f:dc:32:f9:b8:c1:8a:02:9a:c0:d4:
         7a:1e:cf:a7:4c:a6:78:ca:be:68:e2:74:bb:cc:11:a5:9c:3e:
         72:9f:b6:dc:de:6a:c1:90:27:db:88:9f:44:0e:48:1b:40:7a:
         29:5a:91:b8:d9:fa:d8:eb:ba:28:46:8e:73:b3:d1:fc:16:18:
         68:89:92:a7:9a:b0:c9:25:87:a4:d4:f6:a8:91:46:84:be:7d:
         6f:e8:cc:d5:7b:ec:b4:dc:ce:50:33:5a:55:14:37:9a:0b:12:
         d6:84:78:ec:48:cd:a9:29:9a:a8:67:a8:5e:ff:28:77:5f:85:
         cd:ba:da:c4:a3:c1:a9:dd:50:0e:10:02:b4:13:90:e6:70:e4:
         ae:53:7b:8d:95:1e:05:a9:fa:9c:80:1e:69:a0:cb:85:dc:84:
         cf:2d:e7:49:43:ae:6b:88:4c:87:2a:e6:23:5a:9e:af:26:66:
         33:02:69:8c:54:97:84:37:ee:8d:06:68:56:52:df:c6:da:fe:
         f6:f7:ab:3d:c0:1f:1c:4b:96:b4:6d:de:c8:9f:1c:c5:03:cb:
         50:bd:88:41:ee:ee:06:4b:0c:78:fa:f9:69:aa:27:b2:51:7b:
         ce:b5:4d:68:60:92:40:ce:d6:db:7d:ce:fe:5c:2e:1e:27:dc:
         41:08:a3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:49:47 2026 by rpki-client