Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/604a53-c658-4ef2-8ceb-d7a829ce76e7/1/trd-wiTAuY75edCwxeWH5MtB9sI.mft
File:                     trd-wiTAuY75edCwxeWH5MtB9sI.mft (raw, json)
Hash identifier:          mvRiYoLZfwQ37G7uHL5YK90fAeYovPJ9VVxIASGkjFA=
Subject key identifier:   E6:1A:2D:B1:E5:07:B0:FD:56:7A:C2:AC:D8:BF:10:BF:2D:A0:C8:7D
Authority key identifier: B6:B7:7E:C2:24:C0:B9:8E:F9:79:D0:B0:C5:E5:87:E4:CB:41:F6:C2
Certificate issuer:       /CN=b6b77ec224c0b98ef979d0b0c5e587e4cb41f6c2
Certificate serial:       019DCE99167865B2BC468F40D60C78E1991B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/trd-wiTAuY75edCwxeWH5MtB9sI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/604a53-c658-4ef2-8ceb-d7a829ce76e7/1/trd-wiTAuY75edCwxeWH5MtB9sI.mft
Manifest number:          0141
Signing time:             Mon 27 Apr 2026 11:00:32 +0000
Manifest this update:     Mon 27 Apr 2026 11:00:32 +0000
Manifest next update:     Tue 28 Apr 2026 11:00:32 +0000
Files and hashes:         1: 73YyR5FHSrGikXmoFdt-u87EbLY.roa (hash: tDxXok8jabxviQSDV+iOxxhZu5aLP8xDqLw+KYO6rW8=)
                          2: oKoXOOmpzJrUGHUgP3nTP78DjrU.roa (hash: rhHYDFryCBw+zMaDvkTRZUKKLZTJQ6aJiRbn4bMPHzo=)
                          3: trd-wiTAuY75edCwxeWH5MtB9sI.crl (hash: 0FWicMGRCLb/E1/n3We+mptlRtmEPeW2/z7/TcPOS8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/604a53-c658-4ef2-8ceb-d7a829ce76e7/1/trd-wiTAuY75edCwxeWH5MtB9sI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/604a53-c658-4ef2-8ceb-d7a829ce76e7/1/trd-wiTAuY75edCwxeWH5MtB9sI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/trd-wiTAuY75edCwxeWH5MtB9sI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ce:99:16:78:65:b2:bc:46:8f:40:d6:0c:78:e1:99:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6b77ec224c0b98ef979d0b0c5e587e4cb41f6c2
        Validity
            Not Before: Apr 27 11:00:32 2026 GMT
            Not After : Apr 28 11:00:32 2026 GMT
        Subject: CN=e61a2db1e507b0fd567ac2acd8bf10bf2da0c87d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a3:f8:1b:b2:95:a1:7b:3f:1d:03:d6:e5:dd:
                    4b:6a:c4:63:fc:67:60:ec:32:f5:3c:f9:40:56:0a:
                    c2:58:33:c7:1e:e4:ef:d5:0a:16:b8:05:f1:bb:32:
                    d1:2d:00:14:d4:d0:28:e8:7c:6c:d0:83:f4:10:fb:
                    9c:81:f2:e4:44:0d:f6:a5:7a:6c:aa:48:61:1f:e8:
                    3f:bc:37:36:0f:e9:fe:5c:91:7e:f9:fb:a2:d9:ed:
                    ad:5b:4e:79:6c:82:a6:05:6d:b0:44:2e:5a:1c:d6:
                    76:7e:88:8d:d0:15:5f:39:6f:cf:d1:65:ba:62:a4:
                    47:80:f4:86:bb:20:c8:ce:81:17:0a:8b:97:f9:da:
                    d0:66:5f:00:c4:aa:e3:dd:31:e3:1f:12:78:33:c0:
                    5c:9c:d5:b8:5d:19:cc:12:f7:ee:a0:b1:bd:4e:41:
                    27:ef:d5:80:c3:ab:54:33:7c:22:1b:88:01:02:28:
                    a6:40:d4:f6:d0:3f:1f:32:07:3e:36:1d:a0:f9:3c:
                    70:a2:85:d6:3b:66:12:e2:86:54:0d:f8:0c:05:fa:
                    a5:86:4a:a0:7c:6b:a9:42:59:39:69:43:75:d3:6c:
                    ca:4c:56:cb:35:83:10:b4:18:01:82:ef:8e:c1:ae:
                    74:16:96:58:29:ae:48:70:9a:80:b0:78:3d:13:2c:
                    0f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:1A:2D:B1:E5:07:B0:FD:56:7A:C2:AC:D8:BF:10:BF:2D:A0:C8:7D
            X509v3 Authority Key Identifier:
                keyid:B6:B7:7E:C2:24:C0:B9:8E:F9:79:D0:B0:C5:E5:87:E4:CB:41:F6:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trd-wiTAuY75edCwxeWH5MtB9sI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/604a53-c658-4ef2-8ceb-d7a829ce76e7/1/trd-wiTAuY75edCwxeWH5MtB9sI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/604a53-c658-4ef2-8ceb-d7a829ce76e7/1/trd-wiTAuY75edCwxeWH5MtB9sI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:4c:ec:08:68:b6:82:38:5e:45:27:42:bd:66:f2:dd:2a:db:
         0d:b8:c0:9c:f3:d1:cd:10:dc:81:75:a4:f4:b9:3d:ab:c2:1b:
         c2:2c:0e:79:50:b1:8d:fc:26:ea:d6:08:81:fb:f9:76:a3:59:
         82:0d:9e:a1:5d:72:6f:2c:dd:3f:30:55:6c:47:32:00:30:0d:
         e6:6e:7f:3b:21:77:dc:27:17:1d:dd:05:cd:3e:3a:47:08:43:
         e4:b8:75:56:b8:95:2a:85:b1:6e:5f:6d:14:a0:db:94:b9:f4:
         af:ff:32:1a:c5:51:3c:71:b3:a0:44:ac:a5:db:86:ad:96:57:
         f2:bd:e1:10:f8:c5:7f:6b:20:76:86:42:cb:76:54:e4:a5:a5:
         f7:42:f3:7b:21:56:b2:db:4a:a0:3f:75:bf:78:63:68:64:95:
         4a:08:49:d9:f6:ab:53:1a:77:04:3b:26:d3:c2:4c:43:fd:43:
         f9:82:a0:3d:1e:ac:31:58:71:5c:72:09:36:bd:50:aa:fb:4d:
         f3:f9:bb:75:49:1e:c5:70:b7:7d:71:01:90:e3:84:93:ac:01:
         6f:21:00:c1:fe:8b:10:6c:98:22:b7:ac:ec:48:13:89:3a:da:
         aa:82:4a:03:d1:f1:d4:8b:03:8c:a4:ca:da:c3:16:45:ac:0b:
         16:7e:4a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:34:50 2026 by rpki-client