Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
File:                     TzYQM0T807V1ny2z88cHE3b54jM.mft (raw, json)
Hash identifier:          nlrGC6KQepEkXkAXlUIYDCR5/an/6SSbkw4t5p65UkU=
Subject key identifier:   14:17:35:EE:5D:98:2B:57:D4:DE:18:C7:2E:36:11:3C:27:0C:A5:A3
Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
Certificate issuer:       /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Certificate serial:       01A089B0738F323CE938691419FD5C7B5B3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
Manifest number:          1A35
Signing time:             Thu 10 Sep 2026 05:00:37 +0000
Manifest this update:     Thu 10 Sep 2026 05:00:37 +0000
Manifest next update:     Fri 11 Sep 2026 05:00:37 +0000
Files and hashes:         1: 87ELvGR-tVd6OIalv11-VasMdI0.roa (hash: GT+ViPlDKtnswlta2ucK3jOCqFPeg5F12bpU1G0NLyM=)
                          2: 9HtQbFiuMYK5vn6ZdJ9A8WN33CU.roa (hash: NhpPo4MiaM2h+3uIW+206u04bojlNWdCKr/u5d1izOo=)
                          3: EgoHat_Mmduzy9sVoMLljVSWe1M.roa (hash: sKWx6PYAthDawxft6PEnQMKdlybWEO/LK5TV06bp3aI=)
                          4: Kdv421FxArGX_lR7dnoK8dbBkd8.roa (hash: QF5wI0hLNiGqV5YB/2mk9biUU4gFL01FMlpDcSvN+Dk=)
                          5: TzYQM0T807V1ny2z88cHE3b54jM.crl (hash: W5AvrRuXhtgBwsWiPESU/lA554yJjfXS+CaZ8Ed69qU=)
                          6: VOy2pqg45DcbaU8g-AYkzB6uwX4.roa (hash: VFjQyoH7Ml5NUEDn/pVO3lEP5cH7fnzrRe/Tnl0alSQ=)
                          7: jueFlTq5Wpmf63P1qlwF3ekSIBo.roa (hash: 73q0Fc/38Tfq14N513XX+nWtiK95t2QQLqH0dSyYsFc=)
                          8: weCSLgcy81oriQwLxEbz5cBeJzg.roa (hash: TJPfh6TbLdnCL07UGvGbszVyYvuSMqDOujw1k7u6TFw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 05:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:b0:73:8f:32:3c:e9:38:69:14:19:fd:5c:7b:5b:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
        Validity
            Not Before: Sep 10 05:00:37 2026 GMT
            Not After : Sep 11 05:00:37 2026 GMT
        Subject: CN=141735ee5d982b57d4de18c72e36113c270ca5a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:af:f6:06:ce:04:21:d3:55:36:b6:90:7f:6f:
                    9a:2f:0f:50:4a:7a:b6:78:0c:e8:79:3f:1a:85:4e:
                    0b:5a:cd:15:fe:9e:ee:4e:6a:fb:85:c0:b7:bc:cb:
                    82:c0:ba:f8:a7:89:47:ee:37:41:a3:b8:b6:60:c9:
                    c8:00:dc:92:4e:79:81:b8:91:cd:7f:25:8d:4d:0f:
                    12:11:19:7b:b8:de:d4:c0:f9:8d:0e:f4:c9:a5:8f:
                    39:ee:24:c1:32:6c:87:33:6a:a1:b5:dc:1f:c8:62:
                    32:5b:74:5f:c5:d3:9b:e0:f7:2d:6a:f4:15:fa:6b:
                    de:75:7a:8a:21:06:79:a3:5b:fd:b0:92:d4:41:5f:
                    ce:a7:27:89:5c:6c:76:01:c1:23:f7:08:57:3a:79:
                    50:7e:5b:5d:06:77:09:21:e1:dd:59:a8:f5:e0:c2:
                    63:41:e6:9b:ec:ba:b5:35:a7:28:a9:29:fb:8e:4b:
                    42:3e:2f:b3:02:f8:d3:1a:78:a5:96:f5:f4:97:a5:
                    fa:1d:72:6a:f2:a1:f0:cb:7e:2e:44:4c:8c:b8:f9:
                    11:e7:b9:8e:62:d3:8c:9a:fc:a9:ea:a2:d6:74:58:
                    89:5d:2a:41:dc:0f:f1:fa:3d:bb:6d:64:05:eb:1a:
                    f2:be:d9:60:63:8f:8d:55:7a:ea:2e:b0:ef:b7:90:
                    6a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:17:35:EE:5D:98:2B:57:D4:DE:18:C7:2E:36:11:3C:27:0C:A5:A3
            X509v3 Authority Key Identifier:
                keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:e9:e1:24:ff:a3:98:d2:77:c7:3b:9c:7d:c4:d9:ec:28:92:
         34:81:55:f6:53:e5:6d:e4:da:f0:56:20:bd:db:bf:5a:7c:29:
         d7:4c:c3:cd:43:4e:4f:66:9b:e8:6a:b0:f2:3f:db:4a:84:93:
         67:50:84:6f:c1:89:fc:af:14:7b:0a:f7:e4:9c:44:72:2a:b7:
         cc:65:17:a9:8c:2e:72:a9:4b:77:22:b6:08:35:f9:03:62:7c:
         54:12:c1:52:61:90:ee:92:6d:e9:f1:08:1a:98:57:0c:0e:4d:
         4e:04:31:66:67:e9:b7:89:cc:10:27:5b:e4:5b:28:fd:c2:4c:
         c8:e1:84:01:b0:ea:21:9d:15:41:e4:e0:aa:58:9b:67:47:2b:
         6b:5b:fc:e6:f1:25:9c:d6:79:87:5e:49:d1:21:f7:3a:60:5b:
         59:1d:d3:cd:39:1e:1f:54:7e:34:75:db:8f:ff:19:d9:9b:f5:
         8c:f4:b6:26:33:a2:9c:87:7d:d6:95:35:79:b3:4d:45:44:79:
         54:b7:de:57:c3:23:52:78:bc:5f:39:da:21:89:bc:15:50:a7:
         ef:11:af:bb:a3:4d:36:21:70:eb:77:75:da:e4:a0:d0:72:4e:
         25:c1:30:32:7b:ca:96:96:4c:18:4d:44:ba:5c:df:bd:37:e4:
         4d:de:cc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:13:49 2026 by rpki-client