Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
File:                     TO1MeGdCnuAvXNwa--qlunEzYAg.mft (raw, json)
Hash identifier:          /eWW38ej6tYZ9rXcNt2CgQKyTGpG7L/p1mgNxm2CLSk=
Subject key identifier:   07:08:96:38:09:D8:B0:FF:1D:88:85:D9:E5:99:AD:71:7B:E6:BB:7B
Authority key identifier: 4C:ED:4C:78:67:42:9E:E0:2F:5C:DC:1A:FB:EA:A5:BA:71:33:60:08
Certificate issuer:       /CN=4ced4c7867429ee02f5cdc1afbeaa5ba71336008
Certificate serial:       01A08C43A3C7D9C41EF036FDADEC0C8EE4D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
Manifest number:          1A45
Signing time:             Thu 10 Sep 2026 17:00:38 +0000
Manifest this update:     Thu 10 Sep 2026 17:00:38 +0000
Manifest next update:     Fri 11 Sep 2026 17:00:38 +0000
Files and hashes:         1: IvfRGdnfN7_UPGAiz9QzeIqr6I8.roa (hash: ht/PdnItSCVuCn0LFXjdxW5Jjp/nTLMvvbH6aoSlok0=)
                          2: TO1MeGdCnuAvXNwa--qlunEzYAg.crl (hash: F/rmayIaMunsoig0vWoQYSY3uzRhZKNjCXHyxcwdEVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:43:a3:c7:d9:c4:1e:f0:36:fd:ad:ec:0c:8e:e4:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ced4c7867429ee02f5cdc1afbeaa5ba71336008
        Validity
            Not Before: Sep 10 17:00:38 2026 GMT
            Not After : Sep 11 17:00:38 2026 GMT
        Subject: CN=0708963809d8b0ff1d8885d9e599ad717be6bb7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a4:dd:1b:25:60:ac:6b:d0:dd:3e:c0:ed:a5:
                    47:d2:a8:b2:cb:1e:9b:62:25:f1:17:bd:3b:02:f7:
                    23:1f:19:2f:ba:33:bd:67:01:01:83:fb:d6:1e:47:
                    bc:67:c5:13:aa:e6:16:94:1e:78:70:52:44:a3:56:
                    ca:76:3f:9b:66:45:c1:74:5f:b6:57:e9:78:e4:03:
                    f9:9b:4e:53:63:6d:50:b7:e7:af:76:9e:3f:dd:1b:
                    d3:d6:6a:82:71:2c:92:c8:11:14:b8:6d:7b:2f:61:
                    af:c7:0b:36:ff:79:df:ea:f1:b7:32:ee:0b:61:d5:
                    1b:ab:5d:51:13:16:d7:6d:db:a3:94:53:c0:11:6d:
                    85:41:ff:6a:79:a8:dc:0c:8d:6e:a4:5a:29:a5:47:
                    72:70:72:9b:4c:3a:25:40:5c:8f:24:63:91:e3:4d:
                    73:8f:de:8f:a5:56:e9:a6:dc:0e:8e:95:60:fe:28:
                    d0:0e:fc:5a:cc:5e:0e:c6:a6:b8:23:91:ce:cb:9f:
                    ed:0b:ea:5a:0c:fc:89:7d:0f:55:f9:3d:50:99:4d:
                    b5:82:76:b1:6b:ba:18:04:24:34:77:c0:7e:e3:d8:
                    b7:ad:da:09:0a:66:0e:da:4f:9e:b1:57:ea:3b:6f:
                    30:b3:30:35:a4:45:2a:87:29:d9:de:a6:14:e3:15:
                    90:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:08:96:38:09:D8:B0:FF:1D:88:85:D9:E5:99:AD:71:7B:E6:BB:7B
            X509v3 Authority Key Identifier:
                keyid:4C:ED:4C:78:67:42:9E:E0:2F:5C:DC:1A:FB:EA:A5:BA:71:33:60:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:37:45:4b:39:0d:b4:51:e2:d3:b2:e2:62:cc:25:cc:95:31:
         50:4b:f1:5f:cc:3b:fa:fc:44:e8:43:f8:b9:d1:fb:a6:41:6a:
         c7:8b:49:5e:42:0a:87:86:1d:fd:44:22:18:4b:c4:55:9d:67:
         85:5d:d4:e5:c9:85:03:11:eb:f0:21:54:67:99:67:e4:92:58:
         26:08:65:59:3e:a9:40:41:75:ce:0f:ea:0a:fe:7b:4b:64:f8:
         62:7d:ad:bb:f1:85:42:68:34:e9:0d:c3:fd:cf:b1:0d:1e:e4:
         42:ea:e4:63:52:3c:32:2d:94:9d:ae:b8:f2:53:a8:f2:b1:46:
         64:9f:b4:18:45:db:92:43:32:7f:51:95:61:c6:05:66:37:09:
         47:05:fc:7c:70:51:d2:17:ef:07:b4:5b:4c:b2:5a:68:16:6f:
         cb:e2:a1:fb:b2:ad:15:05:80:e6:f4:9b:41:cc:5a:25:05:2d:
         09:c6:ae:11:bb:3e:c2:c1:c6:6d:86:65:6a:ca:65:dc:ec:5f:
         c1:3f:6a:ed:07:76:04:46:9d:30:c1:17:0c:e6:7f:2c:96:fb:
         33:92:95:3d:62:bd:0c:3a:0e:3e:d4:65:ca:87:ac:56:03:ec:
         fd:68:1a:bd:77:2a:41:19:ae:62:eb:5b:e2:7a:69:b0:fa:fb:
         8e:90:3b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:32:18 2026 by rpki-client