Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
File:                     TzYQM0T807V1ny2z88cHE3b54jM.mft (raw, json)
Hash identifier:          pTUJeXwnSa5tZccafBuZx+HM7g/RXq4P5A4ov348x8o=
Subject key identifier:   0B:4F:6A:B9:F5:29:35:01:2A:78:58:D6:65:AE:43:E3:B3:79:78:C4
Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
Certificate issuer:       /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Certificate serial:       01A18B9C6D419D4CBC9C38FA34B758862C26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
Manifest number:          1ABB
Signing time:             Fri 30 Oct 2026 07:00:46 +0000
Manifest this update:     Fri 30 Oct 2026 07:00:46 +0000
Manifest next update:     Sat 31 Oct 2026 07:00:46 +0000
Files and hashes:         1: 87ELvGR-tVd6OIalv11-VasMdI0.roa (hash: GT+ViPlDKtnswlta2ucK3jOCqFPeg5F12bpU1G0NLyM=)
                          2: EgoHat_Mmduzy9sVoMLljVSWe1M.roa (hash: sKWx6PYAthDawxft6PEnQMKdlybWEO/LK5TV06bp3aI=)
                          3: Kdv421FxArGX_lR7dnoK8dbBkd8.roa (hash: QF5wI0hLNiGqV5YB/2mk9biUU4gFL01FMlpDcSvN+Dk=)
                          4: QzoE7YI2JkwI9mVxwsF8DHIXYGE.roa (hash: 7XDAG6QnwyxT0wvAWUAuUI4m88iqJ1Pi9UntCRyGfgQ=)
                          5: TzYQM0T807V1ny2z88cHE3b54jM.crl (hash: ZpB0xIdJO4XJDPrbNlp4V7st6nA9VX72ff4af8tV0Fo=)
                          6: VOy2pqg45DcbaU8g-AYkzB6uwX4.roa (hash: VFjQyoH7Ml5NUEDn/pVO3lEP5cH7fnzrRe/Tnl0alSQ=)
                          7: jueFlTq5Wpmf63P1qlwF3ekSIBo.roa (hash: 73q0Fc/38Tfq14N513XX+nWtiK95t2QQLqH0dSyYsFc=)
                          8: weCSLgcy81oriQwLxEbz5cBeJzg.roa (hash: TJPfh6TbLdnCL07UGvGbszVyYvuSMqDOujw1k7u6TFw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8b:9c:6d:41:9d:4c:bc:9c:38:fa:34:b7:58:86:2c:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
        Validity
            Not Before: Oct 30 07:00:46 2026 GMT
            Not After : Oct 31 07:00:46 2026 GMT
        Subject: CN=0b4f6ab9f52935012a7858d665ae43e3b37978c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4f:4d:e4:ed:bd:93:7c:56:f4:6f:5f:83:7d:
                    fa:53:af:47:2c:1a:0a:c8:67:ca:58:f2:8f:45:7f:
                    ec:e5:0a:a5:79:64:7b:93:56:e1:47:14:ad:8d:5e:
                    3b:83:53:1f:d6:46:3d:6a:2c:8c:10:07:23:ab:00:
                    77:4c:6b:cd:2e:a9:de:4f:af:fb:de:18:c7:99:7b:
                    9d:cd:f0:fe:ff:83:96:97:f4:82:21:7b:e6:f4:27:
                    4f:bd:f8:80:13:49:f1:05:af:d8:2e:69:de:80:97:
                    0a:35:cd:8b:c3:0a:15:01:fc:a9:f1:6d:a9:e6:14:
                    32:47:e5:cf:e4:03:39:70:ce:ed:a4:74:7f:17:60:
                    87:cd:c2:05:3f:2d:27:38:13:86:6a:ae:73:f8:43:
                    44:88:61:b0:23:d0:e6:43:f1:cb:3b:0f:6b:bf:22:
                    10:e1:fb:3a:9f:5a:89:dd:60:d1:c8:98:2a:86:54:
                    4c:f7:59:27:23:e3:01:0c:42:10:f9:05:1d:6e:7e:
                    56:a5:8d:c5:b1:07:b2:a3:df:ae:bb:45:63:1e:e0:
                    81:e0:e8:04:da:58:67:ff:68:c6:b6:fb:b5:46:ce:
                    2d:37:e7:6e:a5:fb:d1:b7:a3:3d:c8:10:64:9d:0c:
                    5d:56:bb:3e:47:08:37:61:11:1f:87:4a:49:ca:d6:
                    f2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4F:6A:B9:F5:29:35:01:2A:78:58:D6:65:AE:43:E3:B3:79:78:C4
            X509v3 Authority Key Identifier:
                keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:87:2e:0f:8c:6f:09:7e:a2:0d:3c:4c:e3:60:f3:06:18:ab:
         b4:74:e6:2a:d6:b8:b3:6d:ce:1f:ad:0e:69:a3:97:e3:7f:81:
         0a:c5:4d:6d:58:d3:89:35:1b:d7:2e:b5:0c:fb:15:8a:1f:85:
         70:d8:09:a9:91:c3:54:a3:71:55:5c:b1:7f:3d:1f:cb:a2:98:
         0a:ed:23:23:89:04:e6:c4:96:f7:0e:52:e2:d9:34:db:1f:f2:
         33:7c:8f:62:92:30:26:44:8c:41:e9:08:97:d4:16:10:a4:18:
         cd:2f:93:52:e7:38:d3:c9:42:6e:22:a6:fc:e3:f0:35:c4:97:
         1d:e7:4e:ba:3d:65:7a:d6:53:59:0a:82:a4:40:a6:53:c9:2b:
         de:ea:c2:b8:07:f7:2c:6d:53:7e:ef:05:17:ea:35:f1:00:59:
         a4:06:f6:ff:f0:fa:18:df:eb:3e:e1:3e:ab:6e:21:76:f7:16:
         4d:e3:54:6c:13:9d:ef:d5:73:e7:8a:43:6a:f2:60:7b:93:a9:
         29:5d:61:5e:0f:6b:d8:6c:54:1e:0f:6f:c7:26:0c:50:c8:c0:
         ea:34:f4:8a:49:4b:fd:b4:5a:06:b6:39:ac:14:f8:41:e8:55:
         82:e3:df:dd:e3:3b:c0:f6:b1:7b:86:a2:14:47:c2:ea:fa:42:
         34:a1:b0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 10:21:16 2026 by rpki-client