Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
File:                     TFTszmy8nFSSnqpLIrM3sP2bNr8.mft (raw, json)
Hash identifier:          qWBZqIhNFz2L0VfFgp01izxr6oL9a5SoQ6O8FAcXIbY=
Subject key identifier:   E8:E1:DE:3A:69:F0:5B:79:1E:35:7F:7B:74:D8:41:2D:FB:D7:23:44
Authority key identifier: 4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
Certificate issuer:       /CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Certificate serial:       01A0208C7B0779921DE20DCFA223EF1BBDAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
Manifest number:          1A12
Signing time:             Thu 20 Aug 2026 19:01:12 +0000
Manifest this update:     Thu 20 Aug 2026 19:01:12 +0000
Manifest next update:     Fri 21 Aug 2026 19:01:12 +0000
Files and hashes:         1: G6FeIPbrFYt0Xs4RMbl3hxFSgPI.roa (hash: pCJOng4j62RgLgH4PaC9a8+B4/vINuGKFVNtITN4RoM=)
                          2: M_rnheFHEJEhvuv8N_w2Hds5XxU.roa (hash: 9c9DQN1bBCgnWk4FhLy9o/RslqwQ5t8KVo6nKa0ccUI=)
                          3: TFTszmy8nFSSnqpLIrM3sP2bNr8.crl (hash: Y1ZYs1EtJAt+Uz4zH+1dDNVQSnL77q8NO+QsxOm/VsE=)
                          4: nEGo15KsyAjBD-x5zbk8ARJINQU.roa (hash: 0lT9gQ6lEsFlDbleFuI9ud8vDG/jc8OcFzQhfPnweOI=)
                          5: vCLyUWR776gkWz1fg6zz0ef3IxM.roa (hash: SjoathDw0sUup7FL2NVGvfEYMvEvs24sBQi8PhmuU7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 13:32:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:20:8c:7b:07:79:92:1d:e2:0d:cf:a2:23:ef:1b:bd:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
        Validity
            Not Before: Aug 20 19:01:12 2026 GMT
            Not After : Aug 21 19:01:12 2026 GMT
        Subject: CN=e8e1de3a69f05b791e357f7b74d8412dfbd72344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:67:83:80:38:e5:8c:02:3a:4f:bd:9f:39:f7:
                    fb:03:6e:78:4b:e8:eb:75:93:6e:8d:e4:60:cd:07:
                    47:a0:c6:14:72:8a:dc:a3:43:2f:09:93:e4:16:25:
                    6b:2e:d0:ac:93:71:6a:8c:87:61:8a:c6:01:99:a4:
                    8c:a4:e6:c7:49:0d:17:07:dc:a4:43:3a:3e:b9:02:
                    5c:83:07:f9:2d:e2:f6:b9:af:56:9b:fd:c2:3c:06:
                    3d:85:e6:54:de:f1:86:52:4d:28:bf:bb:2a:51:3f:
                    db:7b:cd:f0:9d:74:aa:10:e1:d3:73:f8:55:62:0a:
                    f5:11:36:13:5e:ab:7e:8d:0e:6b:f7:36:77:c8:8f:
                    e0:8f:40:db:3a:e0:f3:75:78:ca:54:58:79:55:c3:
                    e1:de:8a:0a:56:3d:12:1f:01:d7:28:6b:8e:4a:ef:
                    91:7b:b5:c5:62:b1:af:a0:59:ee:23:d8:e5:16:e3:
                    41:c7:7d:47:cf:cc:1a:0e:b0:ba:4a:c6:11:d9:76:
                    74:d0:95:c5:1a:9a:c5:f7:81:7b:5e:bb:7b:23:c9:
                    2e:22:38:e6:af:fa:80:24:7c:79:28:11:d8:16:92:
                    06:5a:38:c7:8c:ac:31:53:56:6c:ec:a5:f0:49:88:
                    9d:36:f7:b6:1d:7c:ad:c0:1a:10:9e:89:93:3a:1c:
                    7e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E1:DE:3A:69:F0:5B:79:1E:35:7F:7B:74:D8:41:2D:FB:D7:23:44
            X509v3 Authority Key Identifier:
                keyid:4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:7d:3a:c1:08:00:0d:a5:6d:06:15:08:dc:58:7f:fe:e4:59:
         f1:bb:56:57:02:9c:2a:cb:94:59:ca:40:7d:12:72:c0:91:75:
         9f:a8:6f:b4:89:6d:10:69:1a:8a:57:0a:aa:cb:23:c6:08:f7:
         dc:07:45:1e:dd:54:bd:cd:72:76:81:ba:6a:d3:74:a4:72:f9:
         09:9e:81:8e:d4:89:0e:ca:ce:74:a1:e6:79:b0:47:78:55:cf:
         33:58:5a:ee:8d:c4:78:11:38:f8:dd:ea:b6:a1:cc:ef:a0:5d:
         cc:6f:17:b2:1c:92:04:85:f7:5f:96:61:12:17:85:8f:2f:c0:
         05:20:98:34:68:ca:6d:b5:21:86:1a:7c:26:79:1b:a3:90:63:
         5d:10:a6:9a:e1:75:49:4b:00:d5:24:65:15:ed:09:22:86:a9:
         3a:0c:3c:a5:02:bc:99:73:9f:d2:cf:7c:17:c1:e0:66:56:20:
         87:84:9d:0f:3a:c5:c6:ae:a9:e4:06:5d:87:2b:ca:3c:5c:2f:
         1d:94:72:87:38:f7:60:b6:45:e8:51:41:a9:e5:7a:4f:6a:a0:
         96:f4:fd:a8:02:ed:2f:40:16:c8:83:e4:2e:c7:19:c5:99:b1:
         25:0d:a4:d4:b8:5b:cf:74:85:2b:3c:f0:4e:8b:7a:78:be:cc:
         94:15:13:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:57 2026 by rpki-client