Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
File:                     TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft (raw, json)
Hash identifier:          ApYSdIlMJS/LO5b+vMZ90SGNa/p0+1S8JaUqadUnguk=
Subject key identifier:   19:05:4A:C3:C6:51:BF:AB:8B:93:A0:93:3B:75:43:62:96:2C:41:07
Authority key identifier: 4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
Certificate issuer:       /CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
Certificate serial:       01A189AE260DD17BDF5B3F0020771FE7732E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
Manifest number:          1ACF
Signing time:             Thu 29 Oct 2026 22:00:53 +0000
Manifest this update:     Thu 29 Oct 2026 22:00:53 +0000
Manifest next update:     Fri 30 Oct 2026 22:00:53 +0000
Files and hashes:         1: 7f9mWNQ21808rBtQKs150YeYGdQ.roa (hash: K2kDNGbgaaoiVLGCQASew4TmUVDveF6R8yGfvf0iat0=)
                          2: TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl (hash: kXZZbfoqitMMZ0s/h4rKmUCJWMckQBhz5gxtJOZKhAw=)
                          3: dCeEUKq5kmdnMuFfpYvwjIyzv9w.roa (hash: 2QyCh0B58qW05lbELCp+HEAzhlYTZ0tv3CzPpDu8Nro=)
                          4: g2R1TiS3jxFeB9U54WChv60i8Dc.roa (hash: Fmq9gKwDLBwoIVihbRm78ylA/Jays/PNcsKOWbH91nY=)
                          5: pbffqVIcAirnQONXIVnNslpP08U.roa (hash: 5VbKEPwbiJ5zZD1DvoWLqE1iDiZFdWOMUbRQcOz5CGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 22:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:89:ae:26:0d:d1:7b:df:5b:3f:00:20:77:1f:e7:73:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
        Validity
            Not Before: Oct 29 22:00:53 2026 GMT
            Not After : Oct 30 22:00:53 2026 GMT
        Subject: CN=19054ac3c651bfab8b93a0933b754362962c4107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b6:f6:b0:39:08:8a:57:6b:4a:b3:08:80:18:
                    62:bb:f9:5f:94:1b:88:a8:cf:e2:b0:5c:43:62:ea:
                    8d:82:ca:60:f3:91:b8:32:0d:53:87:ea:26:75:c5:
                    f6:a1:4f:67:5e:64:50:cf:20:c1:4a:28:2a:6f:64:
                    61:c0:84:b9:90:25:1f:d6:a7:16:6c:0d:02:fa:94:
                    9f:c9:e7:20:0a:9b:7b:66:87:96:11:07:bc:2f:f7:
                    81:21:90:1b:2e:f7:76:b4:bb:59:1c:ff:16:25:ad:
                    25:9f:8e:8b:63:29:cd:9c:28:50:9a:9a:8b:55:7e:
                    9a:c1:12:d1:db:56:bf:69:19:cf:82:a3:d1:d8:4f:
                    95:6d:bc:72:79:70:cd:62:58:35:e6:03:21:6a:9a:
                    fd:e5:b7:fa:39:c4:fa:29:a6:ec:40:75:0c:54:a2:
                    3e:30:a1:10:a5:22:33:18:d1:b1:5b:e8:6a:b2:2f:
                    c8:86:d4:05:49:80:01:99:56:fd:c3:26:2d:94:9e:
                    7d:29:2a:4d:2b:80:64:0a:a9:74:d0:8c:0f:09:ed:
                    03:c3:4c:29:4e:63:38:26:da:52:2e:5d:94:87:2b:
                    08:d1:84:04:4f:af:54:12:68:07:05:41:db:69:18:
                    5a:a2:e8:9b:ec:f5:5b:95:ff:f8:31:ac:91:9d:5a:
                    3f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:05:4A:C3:C6:51:BF:AB:8B:93:A0:93:3B:75:43:62:96:2C:41:07
            X509v3 Authority Key Identifier:
                keyid:4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:bb:13:74:90:7c:32:ae:74:f5:f4:f7:9f:36:4c:68:b6:8b:
         4f:65:52:1c:a9:bd:17:3b:56:56:c3:ad:fe:98:0d:98:16:86:
         e9:d0:59:70:5b:91:c6:36:cc:bf:de:2a:f2:df:04:bb:6e:12:
         cc:9d:fa:72:b8:7f:6e:e6:66:b8:eb:c7:16:10:bd:a8:06:88:
         7b:34:e5:fa:28:71:4e:69:ce:79:bb:93:97:77:df:5e:52:81:
         62:bf:83:72:09:93:c1:33:18:df:80:12:99:e9:b3:0b:07:dd:
         db:a4:15:c9:58:26:68:a2:f4:b3:9f:12:a5:95:66:c4:dd:7f:
         0b:83:b2:ed:4e:f9:d9:4c:6f:43:8c:43:95:04:54:04:40:02:
         53:aa:0d:c2:d9:b1:0e:67:b6:cb:44:6d:5f:84:7b:b9:03:4f:
         2f:9b:8c:9a:bf:79:93:31:3a:fb:d2:22:4b:64:18:35:61:df:
         f9:fb:ca:f5:a8:88:a7:47:13:f1:a7:7c:50:d0:fc:94:91:3d:
         ba:1e:15:37:79:5d:53:7f:c2:8c:3b:15:e0:b8:93:b6:e4:19:
         a3:43:6f:3c:44:4c:4d:30:c5:ac:53:f1:f6:1c:1d:6c:98:de:
         a2:6a:69:7a:d5:7f:71:8d:37:d9:70:96:8e:59:31:1e:82:2c:
         cc:35:b7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 02:59:42 2026 by rpki-client