Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File:                     t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier:          NLSehZjtbSZOe6qpvA/jew3y2DT9eMBvC7jGLZb+XM8=
Subject key identifier:   81:44:FF:41:5D:F2:39:44:A3:2E:34:28:04:67:1F:0F:43:7A:BB:19
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer:       /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial:       01A06D5DB3E43EF5FB3A070F1D38CD19D7F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number:          1A3D
Signing time:             Fri 04 Sep 2026 17:00:52 +0000
Manifest this update:     Fri 04 Sep 2026 17:00:52 +0000
Manifest next update:     Sat 05 Sep 2026 17:00:52 +0000
Files and hashes:         1: 3PZtOtEP32pxmagHDWpHuXtCCRc.roa (hash: bpJEOxuRCU5ZgS5FbAAwutvMDXKwEbHigoSaJaf1e2M=)
                          2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
                          3: iE0cS-gjGQ2wH2CEFbUXZzlClEs.roa (hash: zt5rLB2IKmjF4fOUcKb7lO1SdJgaIMds/uhpaf0hUX0=)
                          4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: gX592+ozd7vZ/E/3O5auxvVJqszD9uemWhjHS+Z0PSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:5d:b3:e4:3e:f5:fb:3a:07:0f:1d:38:cd:19:d7:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
        Validity
            Not Before: Sep  4 17:00:52 2026 GMT
            Not After : Sep  5 17:00:52 2026 GMT
        Subject: CN=8144ff415df23944a32e342804671f0f437abb19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cb:81:b9:d7:78:f0:59:45:b9:1e:5c:b8:9d:
                    fb:dd:67:8e:58:c8:b7:cc:90:f5:9a:78:a4:7c:0a:
                    db:87:b3:da:64:de:cd:7b:6a:e4:e3:a3:ba:0b:ba:
                    b8:9f:47:12:8f:27:4a:69:f0:0f:2a:b7:d5:59:bb:
                    85:83:f5:35:55:21:b9:f7:7a:b9:ac:ce:67:dc:a2:
                    22:ef:6e:ef:64:01:ec:62:37:88:73:0c:d6:52:8a:
                    d2:65:f1:93:e5:c4:c3:c2:20:3e:de:66:9d:0d:01:
                    9b:2c:30:ab:38:ea:bf:6d:0b:8d:95:de:ac:ab:c4:
                    7b:ef:dd:d0:29:04:54:63:c3:f6:74:fa:66:76:e1:
                    d5:03:69:94:29:75:fe:a2:9f:7d:64:6d:de:90:d9:
                    35:29:dc:4a:0f:42:a4:28:2b:8d:bb:e8:eb:68:88:
                    e7:07:82:f4:15:63:b1:00:e7:50:74:37:3e:7b:ba:
                    65:eb:d3:45:2a:d4:46:6d:1c:fa:bc:5a:2a:48:de:
                    8c:47:8b:0f:51:36:5a:9c:56:ae:02:f6:18:63:9c:
                    23:33:7f:ca:5d:f0:33:19:db:1d:32:0e:e2:8c:2d:
                    f8:47:ff:8e:6f:4c:59:c7:d3:3a:e9:92:16:bb:5c:
                    ba:3e:fe:9b:f3:4f:79:15:39:1a:02:39:89:9a:84:
                    90:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:44:FF:41:5D:F2:39:44:A3:2E:34:28:04:67:1F:0F:43:7A:BB:19
            X509v3 Authority Key Identifier:
                keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:04:eb:3f:eb:5d:27:a3:13:7d:7d:38:07:e9:f7:e6:19:8e:
         9e:e2:f6:83:e9:be:c2:a9:e7:4d:d4:e1:59:ac:86:59:67:72:
         63:ce:c3:c2:c0:f0:9c:a7:70:b4:59:65:ee:86:c9:bd:15:42:
         1a:a5:73:33:46:5f:b6:89:62:d4:be:b1:24:5c:fe:a0:7c:fd:
         05:ab:3c:9a:91:6a:3b:52:07:c8:2a:fa:74:df:fa:79:c3:65:
         5a:37:6d:72:82:d4:4b:48:13:67:75:12:6c:dd:38:d3:92:94:
         27:4f:89:33:50:72:13:0e:e3:e5:3a:3f:3b:d4:be:78:00:96:
         9e:6e:12:d3:8c:14:84:1d:d4:b4:b1:7b:60:3a:63:ab:03:ab:
         58:62:9c:fe:23:3f:96:45:24:e4:4f:fc:a9:e7:3a:0c:d4:08:
         e2:30:c0:b1:c3:9e:c0:d3:4b:8c:78:67:f6:ad:db:f9:a1:cd:
         f3:f0:cf:a2:f7:72:47:e2:4d:5f:36:1a:fa:24:8a:8d:d5:2f:
         cf:6b:26:d1:bc:fe:91:7f:7a:c1:4f:e4:cd:b0:b4:e1:4c:2b:
         c7:ce:47:66:a9:f3:5a:9b:c6:f0:4a:58:be:1d:1c:05:61:ae:
         87:56:f0:4d:a0:ec:2a:7b:ae:af:50:8c:95:58:fc:57:32:1a:
         71:81:06:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:24:17 2026 by rpki-client