Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft
File:                     Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft (raw, json)
Hash identifier:          v8QFlGZgjWYcm63o4Htnvs13z4lZIb5FP/YWYlBQmyM=
Subject key identifier:   5A:F9:A0:89:B9:4C:6A:70:8A:BB:DD:BB:20:F0:78:40:A3:C9:66:5E
Authority key identifier: 4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92
Certificate issuer:       /CN=4eaf14b67e051cfbd5e1b1d51693d44682392792
Certificate serial:       01A12BE90E9A886CA26970836F39697E2C4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft
Manifest number:          1AB6
Signing time:             Sun 11 Oct 2026 17:00:56 +0000
Manifest this update:     Sun 11 Oct 2026 17:00:56 +0000
Manifest next update:     Mon 12 Oct 2026 17:00:56 +0000
Files and hashes:         1: BrIm_z1kkv8RckEqhOuO9GLHSNo.asa (hash: D7Q+B8ChIGVwHpq7x6SOCB27HyUsaYE/TBbIK6j7j4Q=)
                          2: Dpgo4cDU1mscMX_CBOiypw89lis.roa (hash: 8mfwVN6lhdlH9CLh9R1lsuHG76iz8iY1mnvSJDuNBqo=)
                          3: T9mevdqWtNZfyBgMq55mLo4_NGY.asa (hash: i1bQotm0KZ02q33gBaWmVlAwdUqJwdGXipOsl27HFpE=)
                          4: Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl (hash: iD2xZw5Itw4LNoXx9JBhm0ioN+jOLEZVapkUXdg0zSA=)
                          5: Zd7eWqpO82rj4tMVM1FiOzZTNwI.roa (hash: GTjYTfCCVp1Wx0hphN/N2xZgmhKU/cU0xSNlx/oabus=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2b:e9:0e:9a:88:6c:a2:69:70:83:6f:39:69:7e:2c:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eaf14b67e051cfbd5e1b1d51693d44682392792
        Validity
            Not Before: Oct 11 17:00:56 2026 GMT
            Not After : Oct 12 17:00:56 2026 GMT
        Subject: CN=5af9a089b94c6a708abbddbb20f07840a3c9665e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1c:1b:02:3d:8c:f3:b6:ad:f2:45:4f:42:01:
                    30:38:21:a7:d9:88:fc:f6:15:7d:2b:96:bc:95:9d:
                    fb:f9:b8:6e:af:09:3a:20:f4:b6:62:1d:bc:2f:d1:
                    d8:42:63:ed:05:b3:fb:a1:05:17:f4:c6:b4:2d:33:
                    3c:71:7b:14:2e:9e:9c:fe:ef:66:e8:3b:0d:c0:03:
                    ed:59:88:19:9c:29:6d:a9:08:16:2c:37:7d:d6:53:
                    41:45:8f:ec:bb:fd:77:a7:82:45:28:d7:ff:8e:2c:
                    4e:5e:e4:18:3f:b4:fe:21:08:31:bb:b4:94:f3:20:
                    82:92:ac:e6:ac:c9:c3:0a:14:31:f7:e0:3a:59:22:
                    e0:79:16:01:25:31:5b:3b:d8:78:f6:eb:f9:d7:f5:
                    99:30:7a:c3:cc:62:49:3c:12:48:c2:ff:78:bb:ea:
                    ad:48:2a:93:bb:df:d2:81:7f:4e:48:a2:df:bb:28:
                    04:5f:25:c1:ff:88:ad:24:37:72:0d:b2:1b:aa:a2:
                    bd:a0:1d:96:c4:4e:53:47:d5:ce:4e:4c:e5:3b:87:
                    97:6d:ed:02:a1:23:52:2c:ad:68:bd:39:ca:c3:e2:
                    00:42:0c:14:88:3b:36:a1:d8:a9:26:14:45:5e:30:
                    f6:9a:74:4e:e0:1d:a7:ba:e2:91:b4:96:43:86:ce:
                    c7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F9:A0:89:B9:4C:6A:70:8A:BB:DD:BB:20:F0:78:40:A3:C9:66:5E
            X509v3 Authority Key Identifier:
                keyid:4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:ed:44:df:ca:1b:93:56:48:78:1e:fb:b4:3c:8b:6b:ed:b1:
         f1:fb:0f:74:82:48:67:1c:90:e3:9f:43:a0:46:d1:1c:b6:5b:
         13:9c:9b:a9:cb:69:8d:51:b6:c2:48:d9:b3:71:1d:b6:9c:6b:
         97:df:12:de:d4:12:f4:d3:d8:f6:e0:ff:a1:4f:51:3c:e9:cd:
         43:77:6c:71:2d:af:52:98:c4:69:93:34:9e:ca:8a:c6:d0:f4:
         22:c9:b4:d3:b7:c8:49:a9:da:51:7c:45:44:e6:ef:05:aa:0c:
         22:59:cf:91:3e:8a:3b:69:77:c7:bd:ae:aa:ca:bb:bd:57:1a:
         6b:34:62:70:f2:90:ba:f8:2d:8b:ef:6a:15:9f:66:81:cd:b8:
         19:76:0b:c1:08:aa:c6:d3:36:dc:f4:2f:99:16:ea:0f:ae:4f:
         97:af:b8:bb:0d:d7:11:d3:6b:10:8e:b3:8c:45:dc:7b:f5:e7:
         5a:40:14:ad:a0:47:e0:da:d9:95:bb:91:06:79:aa:57:ca:e0:
         2b:89:a7:3b:ff:a9:e5:95:cf:67:3a:c5:39:52:0e:52:e3:d1:
         95:ab:3f:9d:27:da:28:cd:53:59:df:06:ab:8a:36:a5:77:bc:
         7e:20:80:56:d1:0e:c2:f0:2d:93:c2:d3:d4:25:d2:e3:1b:17:
         d2:d6:82:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:55:16 2026 by rpki-client