Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
File:                     TTpxp39MqbpTb5hhKpxW1AwMO50.mft (raw, json)
Hash identifier:          RWeTzFNkV5/2LefNJlpMNChFtodjY5ToULM9qUVoZrQ=
Subject key identifier:   73:F1:FF:05:F2:8F:64:ED:B2:AD:98:81:31:8C:5D:F0:A9:59:F8:9B
Authority key identifier: 4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D
Certificate issuer:       /CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d
Certificate serial:       01A0BBE6265D73C809A8A2BCC6732A3DE80C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
Manifest number:          1A5F
Signing time:             Sat 19 Sep 2026 23:00:17 +0000
Manifest this update:     Sat 19 Sep 2026 23:00:17 +0000
Manifest next update:     Sun 20 Sep 2026 23:00:17 +0000
Files and hashes:         1: TTpxp39MqbpTb5hhKpxW1AwMO50.crl (hash: skkZhVDMVismrMbwHGg27TBNS8Xk61tX0wliSUamly8=)
                          2: pBnqzIAytKpHQhX8QDpU_OY1RKw.roa (hash: pra/+hq5WQ/StXcBlep+m5KO06sTkTgn3LjOqqbBjzA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Sep 2026 20:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bb:e6:26:5d:73:c8:09:a8:a2:bc:c6:73:2a:3d:e8:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d
        Validity
            Not Before: Sep 19 23:00:17 2026 GMT
            Not After : Sep 20 23:00:17 2026 GMT
        Subject: CN=73f1ff05f28f64edb2ad9881318c5df0a959f89b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1e:d7:3c:0e:7f:96:76:fc:25:fd:fe:cb:d9:
                    67:3c:7d:ab:d9:0e:02:58:31:3a:8c:48:e8:6f:a3:
                    13:7a:14:03:d0:b6:d1:f5:bf:5e:0d:9e:f2:90:18:
                    da:c8:68:21:69:93:17:d9:28:5a:57:3d:b7:41:3b:
                    9a:f0:6b:b8:92:74:85:2e:3b:2f:33:d5:55:24:62:
                    99:40:78:89:ec:ae:62:f5:b4:02:11:76:97:51:11:
                    27:9c:ea:a8:c6:46:fb:dc:78:10:36:39:9a:ff:84:
                    91:8f:4a:c8:66:4f:6e:a5:80:87:2f:e8:f8:72:30:
                    b6:9d:55:6c:fa:ff:84:cc:b4:08:85:de:7b:c1:b7:
                    78:d8:0d:df:b3:70:d7:fc:84:77:d6:f9:20:2e:0c:
                    e9:4c:cb:7c:65:e3:c9:58:c0:d1:a7:2a:0b:57:b5:
                    fd:de:58:ae:7a:64:e8:79:c6:5f:f9:66:3e:c3:02:
                    eb:27:36:66:f9:cd:eb:10:df:cc:66:47:b8:75:67:
                    36:5b:f6:1e:ec:cf:4c:f8:78:86:7e:e2:e0:26:66:
                    39:ad:3e:5f:d2:b0:de:42:e4:93:eb:56:35:c9:7c:
                    33:e2:c0:a5:71:71:71:82:da:2b:d7:ed:0d:01:65:
                    3e:76:5d:1c:54:f3:be:b6:8a:6f:87:c2:60:16:67:
                    43:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F1:FF:05:F2:8F:64:ED:B2:AD:98:81:31:8C:5D:F0:A9:59:F8:9B
            X509v3 Authority Key Identifier:
                keyid:4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:09:6e:53:7e:57:19:d0:7c:7b:28:80:7e:3a:e1:37:d3:98:
         96:8c:fc:a7:25:ad:e2:40:7b:06:45:28:79:26:b5:21:34:b5:
         19:c4:42:e2:b7:86:76:d4:b4:e9:99:a5:3a:00:65:07:37:cf:
         8a:32:5c:4b:4c:b2:f2:dc:2c:be:17:76:b4:44:a5:b9:01:f6:
         ca:b4:0c:f0:73:fb:a4:ed:f3:6e:2d:e6:70:2f:69:9a:1b:bf:
         b8:b6:db:be:c8:04:bd:78:a2:af:a3:ab:fe:8c:01:89:c6:43:
         75:fe:6b:2b:f9:a4:26:08:40:d3:1f:42:9f:19:a4:4c:fa:4f:
         7b:f7:15:41:1d:53:73:94:15:7c:b7:33:57:ad:f9:cb:52:d7:
         57:54:ef:ad:2f:38:71:1d:42:ab:00:1f:13:b3:fb:76:36:6e:
         d8:dd:7c:6c:36:c9:01:53:7c:6a:48:79:39:99:72:82:c2:c5:
         53:00:0b:38:22:9f:8f:20:3b:f0:a9:b9:29:cd:02:33:6a:29:
         bc:3b:aa:56:3e:7b:00:e0:8d:3f:d9:4f:49:b3:f5:be:7f:2f:
         c8:37:45:0a:86:95:df:bb:ce:16:59:3a:a3:3b:78:71:b1:15:
         ad:a9:b9:35:0f:c8:4d:04:d6:1a:e1:04:85:97:9f:df:b8:be:
         f6:f0:67:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 02:35:53 2026 by rpki-client