Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
File:                     TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft (raw, json)
Hash identifier:          Nvw4/w53p3NM9iwZcRIgnrGbMLeCT0aafRbvbPIvHOA=
Subject key identifier:   89:22:D1:1D:61:52:21:F9:6A:3B:2B:21:26:E8:C9:0B:7F:7A:BA:3C
Authority key identifier: 4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
Certificate issuer:       /CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Certificate serial:       01A08CE864A76BDE4D8E1EB74C6CC6A23CEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
Manifest number:          1A60
Signing time:             Thu 10 Sep 2026 20:00:35 +0000
Manifest this update:     Thu 10 Sep 2026 20:00:35 +0000
Manifest next update:     Fri 11 Sep 2026 20:00:35 +0000
Files and hashes:         1: 3nUsl4RKj2z8CbMrvpcEfFCm3Ec.roa (hash: xOzepGbNFbatCq0zjXI/FXTlrydlg5FPTLxwydIci84=)
                          2: TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl (hash: vW2ca60XJtHcBZfE6TdWZYmLRB6urYHk76H5TD4EIHQ=)
                          3: ac39p23Mlso4QNH8cdOzO3mni7Q.roa (hash: zNEIIVv/2x4DKy5eI3kHXbKd5gO+/WjIv8WvcZ4JDUY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:e8:64:a7:6b:de:4d:8e:1e:b7:4c:6c:c6:a2:3c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
        Validity
            Not Before: Sep 10 20:00:35 2026 GMT
            Not After : Sep 11 20:00:35 2026 GMT
        Subject: CN=8922d11d615221f96a3b2b2126e8c90b7f7aba3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ce:fb:4b:d0:f1:6d:52:e7:30:de:02:f3:af:
                    07:45:85:b4:df:9f:71:ba:61:7d:1e:8f:b2:50:71:
                    1e:f0:24:08:5f:37:d5:23:c7:1e:50:d7:95:59:67:
                    13:21:d9:cd:c4:6b:18:46:62:ae:9a:6c:b7:6d:3c:
                    38:a3:c8:0e:90:54:c1:04:48:07:92:e2:c5:07:40:
                    0c:fe:07:38:97:2c:67:76:1a:21:f5:2e:67:ca:91:
                    7d:bc:c6:99:ad:87:aa:65:3f:5c:6c:da:c2:ae:1e:
                    50:17:fc:17:3d:9f:08:2b:20:45:0c:5e:af:3a:10:
                    11:28:0f:f0:17:76:d5:26:48:09:d0:a2:1c:82:88:
                    13:d6:54:bc:fe:75:5c:5d:49:1d:eb:eb:11:1d:32:
                    43:46:bd:e5:a3:98:ba:fb:e9:f4:42:32:b5:ce:c5:
                    2c:db:52:a0:7f:67:d0:f8:29:9c:c4:84:83:d2:7e:
                    c0:e5:52:c4:e5:df:2c:f9:e9:9a:1d:8c:14:63:35:
                    f4:c5:4d:06:4d:c3:0f:7d:de:a3:5d:79:fa:b5:38:
                    fa:cf:cc:93:44:85:d1:cb:c7:c1:81:f0:9e:aa:61:
                    11:db:1a:8d:06:1f:5c:e5:b8:70:f0:63:3e:ce:bd:
                    ce:96:66:b2:3a:81:c6:11:e6:33:78:d1:89:03:d7:
                    81:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:22:D1:1D:61:52:21:F9:6A:3B:2B:21:26:E8:C9:0B:7F:7A:BA:3C
            X509v3 Authority Key Identifier:
                keyid:4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:7e:55:f0:22:7e:8a:82:fc:5a:f0:38:89:45:c3:26:73:c0:
         13:6a:14:16:49:fe:6b:6d:e8:95:ad:f7:d7:79:f6:3f:fc:50:
         06:ac:60:fa:1b:b4:22:7a:b6:34:05:dc:a6:3c:56:99:d2:bc:
         17:f1:c6:94:46:ec:4f:87:d7:96:f5:e1:a2:77:5a:e2:bc:7e:
         f8:09:7c:01:c1:d5:2d:20:81:31:5e:f2:29:84:5b:e1:56:88:
         30:e4:94:19:91:5b:fa:23:79:cb:49:72:a5:a9:a5:f7:b4:de:
         b1:ea:b3:0b:e2:44:95:1b:7d:69:69:b8:b0:7c:f0:c4:b2:65:
         73:f5:61:4d:18:20:71:97:e8:f1:fb:bd:8b:af:41:94:d0:ff:
         b8:a4:21:87:df:f1:14:2d:2c:64:3b:22:5c:6e:20:22:1b:2b:
         7c:82:29:98:ed:45:0a:19:6b:89:7c:78:32:25:d0:43:e0:df:
         1c:a6:33:05:65:05:de:72:5a:0d:4d:77:7f:80:1f:de:a0:c6:
         d9:65:8b:4c:e8:46:77:f1:09:b4:c7:6e:c0:fb:4b:89:c2:1b:
         f3:09:a5:f4:7f:69:62:42:31:37:22:2f:a9:16:d0:62:74:a8:
         9f:a1:59:1b:41:30:5a:d1:d9:89:9c:b6:10:6d:4f:4f:3a:18:
         5c:bb:f4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:26:14 2026 by rpki-client