Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File:                     t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier:          5r01Tt96OZkJ6PUWyTsvDFGI5H1IDyd3JnZBNs7evNY=
Subject key identifier:   6C:A7:CF:11:D0:96:F0:07:AD:EB:87:78:40:81:0B:CA:95:45:B1:3A
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer:       /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial:       01A03B27C82ACEBE20B29076FB1730108E13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number:          1A23
Signing time:             Tue 25 Aug 2026 23:00:57 +0000
Manifest this update:     Tue 25 Aug 2026 23:00:57 +0000
Manifest next update:     Wed 26 Aug 2026 23:00:57 +0000
Files and hashes:         1: 3PZtOtEP32pxmagHDWpHuXtCCRc.roa (hash: bpJEOxuRCU5ZgS5FbAAwutvMDXKwEbHigoSaJaf1e2M=)
                          2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
                          3: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
                          4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: t61ae34vPvgqwAEimq8mzsdt4Q3nxNutNpbfUS4tUHo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Aug 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3b:27:c8:2a:ce:be:20:b2:90:76:fb:17:30:10:8e:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
        Validity
            Not Before: Aug 25 23:00:57 2026 GMT
            Not After : Aug 26 23:00:57 2026 GMT
        Subject: CN=6ca7cf11d096f007adeb877840810bca9545b13a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5c:ab:1a:a1:70:49:6a:35:fe:d4:90:b4:79:
                    bd:24:4e:e1:45:0a:de:f8:f8:80:50:30:1a:e1:ab:
                    27:4b:db:35:c2:86:cf:76:14:45:9c:ff:5c:56:92:
                    ae:ab:e1:ae:0e:e4:a0:72:d5:08:23:57:27:78:81:
                    63:6f:8e:48:80:24:e9:d2:7a:b1:46:43:08:18:e9:
                    c3:f4:c9:bb:f9:41:9f:20:5c:df:a0:70:0a:03:70:
                    c5:e6:c7:f1:16:21:15:ac:d5:84:9e:df:e9:fa:9d:
                    b4:23:a3:f6:f0:8e:18:bb:9b:82:d1:51:bf:4c:60:
                    2f:ef:5f:3b:b9:72:75:7d:74:31:47:6c:9b:c2:36:
                    d7:dc:64:62:38:9a:d1:25:04:a0:44:ee:28:ef:77:
                    48:0f:65:24:7e:f5:1a:c1:35:d0:b0:b1:aa:3d:22:
                    d4:97:75:5e:ff:1e:13:f9:f0:5e:c0:5a:f5:02:b8:
                    3e:f9:dc:1a:62:58:5d:f9:87:8c:61:2c:fc:42:5f:
                    31:3e:15:6d:a7:d7:8f:1f:87:50:cd:c7:f9:a1:c9:
                    66:db:ae:94:fb:6d:d9:02:87:db:cb:af:95:89:40:
                    84:24:93:9c:2a:a9:95:d6:23:aa:b0:ad:76:3f:8e:
                    45:64:f3:23:af:a2:52:41:08:80:8e:6c:5f:07:2f:
                    b2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A7:CF:11:D0:96:F0:07:AD:EB:87:78:40:81:0B:CA:95:45:B1:3A
            X509v3 Authority Key Identifier:
                keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:80:d5:be:9f:44:f0:b1:4c:2a:a5:01:f4:50:2a:ab:d1:a9:
         6f:88:f2:4c:c1:67:b1:23:0e:7f:9d:dd:7d:57:50:87:28:0f:
         10:99:d2:dd:c0:40:9f:3f:28:64:f4:b2:64:b4:04:8f:68:28:
         e9:28:de:a3:88:8a:92:d7:2f:1c:52:7a:d1:ba:ea:a7:9a:3f:
         15:d1:8d:30:89:77:26:aa:ea:57:5c:84:3a:3b:4d:54:05:bf:
         c9:4c:29:49:e3:0e:49:16:44:41:d6:c0:da:d6:86:ed:b9:6f:
         db:43:6b:12:52:35:19:dd:15:e4:5f:0d:f9:a9:ba:7c:ab:88:
         25:ce:41:23:86:0d:ba:7d:92:3f:5e:f8:4f:fb:44:8b:59:f1:
         69:8a:0a:ed:6f:a1:2b:06:9c:93:b7:f3:fa:21:90:dd:59:bb:
         2e:6d:60:04:2a:3a:f7:73:1a:a8:09:c5:c4:53:c1:8e:88:ed:
         c2:dd:8c:7e:2a:ea:7f:21:2c:69:b9:0e:fc:e7:36:38:64:85:
         d2:1b:93:4b:f1:7a:b8:c8:49:53:b3:e0:4f:25:c6:3d:b0:4c:
         c2:94:67:db:90:66:6d:3c:4d:78:02:98:25:32:86:7e:24:05:
         3f:16:0d:cb:9c:16:c4:89:78:87:25:9d:65:c9:c4:5f:10:d4:
         99:0d:ba:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 08:08:11 2026 by rpki-client