Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
File:                     TiopnxgqH9UdSwNimXr3qq4Na-k.mft (raw, json)
Hash identifier:          iNRfJF2ZbqMhdv8WDajCFhuV4aPSwitDjd+vJsZ7hiI=
Subject key identifier:   63:0D:EF:CF:40:C7:86:F7:28:92:59:0F:F9:98:D3:66:69:A0:2C:7A
Authority key identifier: 4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9
Certificate issuer:       /CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
Certificate serial:       01A003265B9EFAA52EDD8706CCAD19060F46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
Manifest number:          1A04
Signing time:             Sat 15 Aug 2026 02:00:40 +0000
Manifest this update:     Sat 15 Aug 2026 02:00:40 +0000
Manifest next update:     Sun 16 Aug 2026 02:00:40 +0000
Files and hashes:         1: 2k317uytVg1LgjGnM4csFnuL6uw.roa (hash: X5Q8tV/hqbcuK15v8loayY7mcbXwTofvZ2nrjL9ZwFs=)
                          2: RQBMarFkU3OrDTBkZypKiOwxqg8.roa (hash: WhhYg2h0zkcqk2yaFPJERRYww67tY59hAk64ZXv/RAg=)
                          3: TiopnxgqH9UdSwNimXr3qq4Na-k.crl (hash: vPiC86gLXSVx/V/dfSfOtJg0ptTcj1Ops8SUZz9liHc=)
                          4: v9i47anpnbrdLEZ-n1nwTrZVjyg.roa (hash: z6aINaroQHvMvD3JovJtp4EHLXzys7G2ZYIjVrJrEgw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:26:5b:9e:fa:a5:2e:dd:87:06:cc:ad:19:06:0f:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
        Validity
            Not Before: Aug 15 02:00:40 2026 GMT
            Not After : Aug 16 02:00:40 2026 GMT
        Subject: CN=630defcf40c786f72892590ff998d36669a02c7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:21:14:24:49:f0:07:d5:8a:6e:f4:1d:05:30:
                    45:52:f8:09:a2:61:f8:13:33:55:df:4f:c0:0b:49:
                    9f:79:38:b9:da:4d:f4:36:ea:fe:7d:89:4f:ef:df:
                    20:e1:de:c8:60:b8:72:81:5e:ba:8a:cf:11:06:80:
                    4a:c6:78:17:5c:34:2e:ae:89:b6:5d:2b:ca:ec:2c:
                    2b:8a:d5:16:37:92:31:57:8e:82:db:20:5b:59:7d:
                    9d:cd:ef:b2:42:9b:ca:30:1b:2c:21:ff:5a:04:42:
                    b9:8f:ea:32:d6:55:87:2b:3c:82:50:8a:9d:8f:83:
                    1f:c4:fe:dc:8e:1e:80:3d:5b:49:a5:47:6f:3b:96:
                    d2:38:71:d8:e0:53:1f:48:46:4b:c3:b1:15:c0:be:
                    6c:aa:b7:b1:9e:6e:11:06:71:68:ba:d7:5b:75:0c:
                    7e:c0:0b:ee:e6:2d:c8:09:f3:d6:bd:fa:e8:df:6a:
                    0e:75:0d:21:5a:3f:c3:90:e8:e1:cd:5a:d7:23:55:
                    b6:c8:da:86:ba:80:b5:6a:e2:40:95:6f:54:52:28:
                    06:0e:82:bc:77:ab:db:0d:3d:96:95:76:e7:79:ca:
                    7f:64:93:29:25:9f:bb:d3:3a:bd:7f:40:80:b9:24:
                    6a:2e:94:4e:6a:41:60:80:0a:97:51:96:7b:07:ca:
                    0e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:0D:EF:CF:40:C7:86:F7:28:92:59:0F:F9:98:D3:66:69:A0:2C:7A
            X509v3 Authority Key Identifier:
                keyid:4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:3a:c1:4e:8c:71:3f:22:b5:e2:05:65:c3:8a:08:1c:97:62:
         37:b4:98:2d:5d:f8:bb:2e:2f:21:0e:a3:e2:d5:83:79:b2:f1:
         35:1d:72:49:b7:f7:17:f7:c9:84:ea:62:19:5d:01:a9:7f:e2:
         3e:b4:4d:30:f1:d8:ce:0f:db:f5:2a:ce:e4:7d:4b:7d:ca:32:
         66:00:0a:32:39:6d:0c:cc:e5:83:5b:71:e4:ac:e7:fc:4b:89:
         75:18:ba:e9:9d:31:ca:62:9b:b2:b2:4e:7e:63:ef:ad:6f:61:
         d0:37:d4:a0:01:56:f9:cb:b5:1f:12:0a:cf:0e:57:88:5e:6b:
         fe:50:28:3b:0c:67:97:4c:e8:c3:af:68:23:21:ea:da:81:b8:
         d0:b3:42:fb:ab:6e:31:99:75:92:be:23:6a:50:6d:27:87:0a:
         83:c1:19:fb:5c:45:41:bf:e5:55:35:16:89:dc:48:10:3f:d6:
         71:62:2d:aa:f4:32:46:1a:dc:03:d2:db:32:d0:f3:57:d9:75:
         4a:72:9d:6a:3a:b9:5a:fd:d4:a7:5e:89:d1:61:35:cf:f5:06:
         0a:bf:ad:1c:a6:33:33:c6:e6:ad:2e:0c:cf:aa:77:5f:f0:ab:
         6b:18:b1:a6:81:6f:01:57:a5:bc:88:55:8a:7b:ed:38:0b:2c:
         3f:ee:97:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:46:20 2026 by rpki-client