Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
File:                     TdGyWHSQrQYcsgcXa97sgaUxWIw.mft (raw, json)
Hash identifier:          Qipq2K88B5imngMJdoaDLXnI978jamxL1EG/qlL5bMM=
Subject key identifier:   03:09:B9:84:7B:1C:E2:F2:4C:6A:14:E8:1E:B9:FB:86:D8:7C:3B:58
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Certificate issuer:       /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial:       019FD9BD7A138915551AF3CA3154EA3D88C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
Manifest number:          1A04
Signing time:             Fri 07 Aug 2026 01:01:41 +0000
Manifest this update:     Fri 07 Aug 2026 01:01:41 +0000
Manifest next update:     Sat 08 Aug 2026 01:01:41 +0000
Files and hashes:         1: 02kOZkpvmw6H06A_7TJUg4SFXaQ.roa (hash: TpRuYePLiA4791T1EEAGr2x5CqL+fTtzRjsvGFbZMFE=)
                          2: 2uonQk8lw16FeBIvKKSSmhsYIS0.roa (hash: 2dNCmgQW6KMhs3bZJLn40BJuFp8E7ETzKi/EDLa0p5s=)
                          3: 5ziyZMsm-eF8rQKEiPIRLUjKrJc.roa (hash: ST0tOCj/lVMKy70YCsjUG8APQaOubaCeSEbJbdk4mkA=)
                          4: 8EjBwuh_9in2Z1YECnIBdQ9VNrg.roa (hash: PZyLvuJ766MtPxGWe7ycqZ9uJ2ybPMELzypr1ODKQyU=)
                          5: FwWBUFukI5sYaoIJXPQl_VpBKGw.roa (hash: 1A5Wlz49N8I7V2ONwfh6sYJRe2syIOSrNYZlIXmZWdY=)
                          6: Gy-LFbASJWTVYACt4LtWc2cmLuw.roa (hash: ujJsb5LhZ8X8O1ISoHR/MP5k+2QVAPis3/2ApXdZZ3g=)
                          7: MO6J3ImYDWqYVzymL0l4FvP1thU.roa (hash: e0dvPY/H6He44W+ZncCzFUHFzRAKvhD4nFOOCJSgnhw=)
                          8: NjCxVetchGZ0XWn7taqHcdtexeY.roa (hash: luZWHi8jfVZ+lGh40HXz9Aj5QcdjwpUbYNovF4whMXA=)
                          9: TdGyWHSQrQYcsgcXa97sgaUxWIw.crl (hash: 26buiN0v3eQn0zIeAp6zPH+j9PNLGXDQmyVKZB7t7vA=)
                          10: YtD0hgbunNZVqmVM-mTLvyyQEfg.roa (hash: bXNfm9p7iVN39qRXUc3z+rEBdxvoCN2D2p6tjPh77Uk=)
                          11: aXSOc-PVHMUBKt_487iYToOm7qo.roa (hash: TgcrpfHL47vgaiMhXn3iuqbilgXgoWpFYf29PAeU7PQ=)
                          12: esYBbdHlmzNrFPaZHG9t4u-VPHc.roa (hash: lkNqbXeTq7xSvC4HTyeLweRSSMj+JVz2/1P8Io014A8=)
                          13: fk1NDywalDt7uylAx-JbeK2KndA.roa (hash: GjjjXn/c5RKterLew0goE2oPgtQT51gR0GQhu+Gw67E=)
                          14: gH8loGqHuQUgS7s-27j8UFtooRI.roa (hash: 3c/uPZsoFkC/+vu1WnVFt+9jcD0vxFLrQc/tSOZVhig=)
                          15: irMc3rrBTtXnxu6Y6x7SlrREl3k.roa (hash: odarHoY4Wy3X+9/gV/9gi100gxxZ4b3sXjkX8UmBWCw=)
                          16: jSXCL2nU6ig_-VGukqzzbg83BZk.roa (hash: Az+cF5wKpW/d6F9stZPF4IUccQjeYz6jWseSjP0L2T0=)
                          17: kYEWFQU5-czKs7zv1vGT343BJ-g.roa (hash: xWtvvMN7qcqpohmug6+MXQLfldtO5B6k2u+O9bf+VTA=)
                          18: oitUYkAPeYiroXJK68BhqiN_Xek.roa (hash: zYA61o9aLXKLXeSg2vp84zehihqtVq61hd+jWJCYfGg=)
                          19: rbrxUA36Uj_W2cv5ysZhTVIwxp4.roa (hash: OT7C6O/C6TgYrrzLBRPYDZUiybzraaRPGIJN5wW++Ak=)
                          20: u0RIuGfpHnx-Tn2Xp-wlaIQU95A.roa (hash: VuT5SalQp4yYIzm6lgKxTmu1Rlv5TD85uBnxUVTY7eo=)
                          21: yLMV5lCxmugxTcjR0kvs8qTvDQs.roa (hash: VAFUfjT6/8ZbId3UHCjjJDfpK2X5rUeLGtPsXPOBDAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 07 Aug 2026 22:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:d9:bd:7a:13:89:15:55:1a:f3:ca:31:54:ea:3d:88:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
        Validity
            Not Before: Aug  7 01:01:41 2026 GMT
            Not After : Aug  8 01:01:41 2026 GMT
        Subject: CN=0309b9847b1ce2f24c6a14e81eb9fb86d87c3b58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:80:64:90:8c:0b:65:2b:c9:70:e4:b0:de:bd:
                    b9:be:76:6d:c9:d8:46:ac:1d:e6:53:db:1d:a6:51:
                    26:a4:7a:86:a4:99:0e:6d:09:24:20:f9:b8:41:69:
                    ef:fe:6b:a6:f0:e8:2e:a7:cc:d7:79:dc:bf:c4:12:
                    3f:03:35:b7:70:20:f9:81:e4:dc:6a:a2:82:d1:f8:
                    05:fa:3b:3a:34:60:52:33:cc:ae:bf:9f:99:11:c5:
                    bd:f6:89:02:9e:e5:7f:8f:a9:13:f4:3a:b0:2c:fd:
                    bd:2f:21:b8:a6:77:ad:29:c1:d3:15:73:ea:82:60:
                    83:6e:9e:55:c1:f2:e3:74:2c:99:7d:62:0a:3b:48:
                    cd:a3:22:2a:e1:f1:59:44:01:4e:7f:62:26:e5:84:
                    a1:1e:3e:ad:54:d6:d1:8b:f5:dc:77:87:cf:9c:1f:
                    9d:4e:25:04:dd:dc:ac:3b:c7:c4:ee:25:af:a0:7a:
                    84:73:c4:48:22:79:f9:bd:8d:7c:f5:b0:77:5a:24:
                    ef:43:b2:ad:66:81:50:47:0b:ab:ab:4d:08:ec:63:
                    2e:d8:64:b7:ee:23:d8:23:1a:9d:36:04:89:eb:96:
                    e0:27:e4:da:60:b3:6f:16:21:ca:d9:ca:6e:96:4f:
                    d2:41:2f:10:dc:0a:42:88:20:28:13:6f:a4:de:94:
                    b9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:09:B9:84:7B:1C:E2:F2:4C:6A:14:E8:1E:B9:FB:86:D8:7C:3B:58
            X509v3 Authority Key Identifier:
                keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:6c:c9:57:66:ce:e3:08:87:37:43:bf:01:1c:d9:c1:7c:c9:
         06:eb:e6:95:df:80:f9:6f:c1:2c:87:66:52:be:21:2a:66:11:
         ad:30:51:38:6a:df:93:f3:e7:59:4e:c0:37:10:3a:8d:5e:e3:
         cf:2e:24:32:c7:ce:91:91:f8:f6:45:be:4f:ac:d3:fe:77:77:
         30:21:49:3d:90:86:d6:93:10:46:5c:d3:21:d4:78:c6:36:02:
         5a:fa:15:e7:d1:2c:ae:d0:f1:7f:eb:6c:6e:b4:77:79:4a:38:
         b4:94:db:40:19:1b:99:ee:80:58:fe:21:ff:5e:77:6c:00:7b:
         29:dc:50:00:86:d4:4b:3d:9b:31:62:7f:39:ca:51:8c:a9:c6:
         04:0a:eb:e2:63:74:97:50:f7:89:32:72:b2:d6:dd:4d:06:68:
         0c:99:02:39:f0:7b:a0:d8:61:3c:d9:92:d1:ed:a1:2e:67:0f:
         a0:05:e6:83:8c:d1:a8:a5:29:75:fc:2e:b9:5b:c6:a7:fa:30:
         89:ac:7e:a6:29:1c:95:8d:f6:df:c1:a6:96:fe:6b:78:af:b2:
         22:0b:e7:57:49:c7:fc:76:d8:90:57:5d:f9:e1:4c:78:2e:03:
         5f:4c:b7:b7:66:b1:1f:fd:2a:d7:33:e5:33:ba:37:2e:08:d8:
         b7:93:3b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 06:28:25 2026 by rpki-client