Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
File:                     TsVuJbACVuJM2jJN6yGqnRMBX2U.mft (raw, json)
Hash identifier:          771xdF4+hR9a5FYqj6Pz92SCF/ThUNPROpi1J0lk16A=
Subject key identifier:   99:62:77:F5:60:28:1E:98:B4:28:E6:E6:A9:A1:82:AA:8F:37:5C:06
Authority key identifier: 4E:C5:6E:25:B0:02:56:E2:4C:DA:32:4D:EB:21:AA:9D:13:01:5F:65
Certificate issuer:       /CN=4ec56e25b00256e24cda324deb21aa9d13015f65
Certificate serial:       01A089B0D36BD3515CEF09976B1023C74285
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
Manifest number:          0402
Signing time:             Thu 10 Sep 2026 05:01:01 +0000
Manifest this update:     Thu 10 Sep 2026 05:01:01 +0000
Manifest next update:     Fri 11 Sep 2026 05:01:01 +0000
Files and hashes:         1: TsVuJbACVuJM2jJN6yGqnRMBX2U.crl (hash: fxmA7pPj3UOIJKl5cA08Elz1ot382c80huCYa3v0J/o=)
                          2: wHDlfBopH7fz7jDzeFXZD4ZkpZo.roa (hash: cPAx2SbQ0v1kqx0TCQ2lzpiQRVAwNSEcLw8CDwp9CuE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 05:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:b0:d3:6b:d3:51:5c:ef:09:97:6b:10:23:c7:42:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ec56e25b00256e24cda324deb21aa9d13015f65
        Validity
            Not Before: Sep 10 05:01:01 2026 GMT
            Not After : Sep 11 05:01:01 2026 GMT
        Subject: CN=996277f560281e98b428e6e6a9a182aa8f375c06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cb:af:78:c6:3b:d3:6f:ff:e3:5c:52:e5:27:
                    6e:95:35:27:25:c8:1b:55:5e:95:06:d1:42:28:98:
                    c6:a9:8d:5e:11:ef:91:07:e9:24:c4:81:ce:2e:23:
                    ff:69:44:37:08:93:29:f5:97:85:98:3f:93:65:b2:
                    97:82:90:c4:3f:88:bf:c9:50:35:98:cb:67:b0:29:
                    85:63:0a:f0:a8:b3:26:06:4c:fe:d8:7b:fc:bb:61:
                    b6:7c:34:29:cd:96:5b:f7:33:99:37:74:3e:04:ec:
                    ed:16:35:44:91:03:bd:00:ba:a6:54:39:ae:a9:08:
                    64:0c:1e:dc:e6:19:25:5c:c6:f6:07:35:bb:36:59:
                    08:aa:b0:ce:09:31:f3:0d:32:47:df:20:97:1f:a2:
                    a6:bf:43:d6:3b:fa:45:ad:59:3c:98:f8:ff:51:e3:
                    18:d1:fd:21:86:80:13:d4:51:7c:79:92:e7:66:e5:
                    49:d4:72:9d:a6:bc:1d:af:63:7a:9a:16:c6:bd:89:
                    24:cf:76:14:01:74:45:a5:1c:e7:2f:72:3d:9e:8a:
                    b8:47:b4:46:65:88:cf:58:0d:24:eb:37:f2:4a:3d:
                    3a:da:1e:5e:39:27:8f:45:ea:ec:ae:f1:59:b1:b1:
                    a0:1d:83:2b:80:9e:79:97:ba:f0:fd:bd:31:9c:b3:
                    c0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:62:77:F5:60:28:1E:98:B4:28:E6:E6:A9:A1:82:AA:8F:37:5C:06
            X509v3 Authority Key Identifier:
                keyid:4E:C5:6E:25:B0:02:56:E2:4C:DA:32:4D:EB:21:AA:9D:13:01:5F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:82:57:bc:29:65:a1:8c:4a:c3:ca:bc:34:5f:99:60:26:0b:
         98:9a:ad:64:da:76:41:40:34:46:ee:c5:56:ec:14:b5:cf:fa:
         03:aa:95:ab:a2:de:9c:50:63:b0:39:3a:c6:ef:9b:dc:2c:1e:
         30:33:84:f8:0f:78:a3:a1:f1:15:9a:68:b8:a8:d6:7c:21:d3:
         56:ef:ed:a1:2c:94:b9:2e:29:f2:dc:c4:f7:ea:3d:ee:40:bb:
         1d:51:1e:a1:b9:52:50:6f:79:40:b1:04:a4:e1:c8:60:eb:9c:
         5f:ec:cc:64:3b:3a:db:c4:46:59:96:99:da:8a:33:2c:d7:fb:
         bf:d4:9f:95:4a:74:04:af:41:98:2d:72:1e:93:e1:60:12:ee:
         73:00:54:58:09:5a:9c:d0:2e:44:8f:f2:56:13:43:ed:89:30:
         cc:67:fa:8c:41:58:74:0e:4d:fe:e3:2a:d2:e0:65:36:cd:48:
         3b:fc:93:b4:e1:e9:00:5b:be:78:36:ba:31:e5:26:36:97:6a:
         ae:84:25:30:52:7e:bb:60:b8:e7:d1:27:cf:1f:e5:76:5f:f2:
         2c:48:7e:9e:71:ef:df:f1:84:17:bc:27:ae:89:25:37:9c:a3:
         b6:a3:d6:d0:dd:45:92:69:8e:72:64:7c:a0:fa:e5:71:2f:2e:
         b7:c8:e7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:33:00 2026 by rpki-client