Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
File:                     tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft (raw, json)
Hash identifier:          2A7S/aSC4iL9s9K/MzEY9YS+oCSaNpUn1Xkn0/Z4duM=
Subject key identifier:   D4:77:1E:76:3A:E8:18:BD:7B:EA:A8:7F:C6:4D:64:CA:C0:AC:B5:F1
Authority key identifier: B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
Certificate issuer:       /CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Certificate serial:       01A17F618C27A3E5999C37D1548089CD2457
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
Manifest number:          1192
Signing time:             Tue 27 Oct 2026 22:01:01 +0000
Manifest this update:     Tue 27 Oct 2026 22:01:01 +0000
Manifest next update:     Wed 28 Oct 2026 22:01:01 +0000
Files and hashes:         1: 6_uqscAUqLl-U-FOdnB8b80ymVs.roa (hash: 6iIxj8hFU1rpgiG9WHmnrQdt6HoHVlv0NufbYcZmLKU=)
                          2: Asdq0CBEIsgp9XnIZOINz9u9Cp8.roa (hash: nOKPYxisoFhulj9H3B7lMkY5LfDFsGYXQ3OYtNKl888=)
                          3: I2T7UeDGLA8H6P-KL1eFGnyz1sw.roa (hash: v4p0Y6w9BB4bsfMbtUIZ8Y6YLTCCJcFeqfZJdPcFyGU=)
                          4: Rb8NbhTAxdW8Qozx0F0hMesjBeQ.roa (hash: vFhA2KjCPdOcJsVjA7uGx7jrzbvsOL97jtv5aYxWqgs=)
                          5: T8Dbsh4zVrcDCWYdie_KKcz5lhY.roa (hash: vcaKh14UhiubGPoD7LFzTkYgKRP/XyUztgI2DoRz8eg=)
                          6: tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl (hash: F2PyvKMSZfAlEarPG7fMu77JvwiF8OZkBQVs7/eBqn4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7f:61:8c:27:a3:e5:99:9c:37:d1:54:80:89:cd:24:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
        Validity
            Not Before: Oct 27 22:01:01 2026 GMT
            Not After : Oct 28 22:01:01 2026 GMT
        Subject: CN=d4771e763ae818bd7beaa87fc64d64cac0acb5f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c8:46:f4:06:96:8e:76:a3:02:8e:60:5a:f5:
                    31:b6:0d:e5:3f:ac:fc:a6:e3:b4:f4:77:89:2e:c1:
                    7a:5b:0f:e5:ba:a8:e1:2f:96:59:e7:e5:62:5c:c6:
                    95:c0:89:57:f5:a7:dd:ad:1c:73:17:02:be:2c:ba:
                    eb:18:f9:4d:49:fd:d0:03:75:d5:c3:14:4a:14:a1:
                    54:99:a7:af:81:e3:f3:a7:18:7c:10:df:f0:d9:f4:
                    91:10:cc:78:df:51:98:1e:d5:7e:85:56:1f:99:2d:
                    4a:07:d4:ca:27:aa:88:b4:9e:8a:69:f5:5d:4e:24:
                    95:d3:3e:bd:28:4a:cb:09:7c:81:0a:de:ba:07:88:
                    71:88:fe:62:89:11:74:90:f6:01:8d:99:d2:43:66:
                    c4:3c:70:58:fc:fb:99:d6:8b:1f:89:55:e1:89:3f:
                    6c:16:2b:23:48:b9:ec:94:05:f5:74:74:17:a9:01:
                    e5:fb:bf:93:81:02:7d:d1:f5:c8:b6:00:79:0d:9c:
                    e8:7e:62:d2:b2:c3:9e:a6:4d:d5:ae:76:f4:75:2a:
                    db:49:53:d5:65:18:56:b4:f9:d8:9c:ae:f0:c0:16:
                    88:33:28:a0:20:d5:37:8e:8c:32:14:60:b1:3c:b6:
                    84:d4:68:c8:3f:55:dc:b0:e9:bd:5e:a3:8a:46:00:
                    e4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:77:1E:76:3A:E8:18:BD:7B:EA:A8:7F:C6:4D:64:CA:C0:AC:B5:F1
            X509v3 Authority Key Identifier:
                keyid:B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:a7:4c:a1:0e:0b:97:d9:6f:f6:10:30:1f:21:17:35:19:93:
         12:47:f1:6c:60:5d:19:8e:e0:84:fb:f4:ee:6e:d6:3c:93:de:
         a1:28:4a:31:32:3c:10:d5:fe:18:22:8e:2b:a5:43:f2:a1:77:
         bf:61:46:ca:3b:a5:63:14:28:dd:db:97:0f:41:8d:5f:5c:67:
         f5:11:31:1f:db:1f:75:d3:18:8e:5d:68:31:0c:0b:f6:14:33:
         44:06:23:44:0e:42:df:08:ca:12:fd:f2:6a:7c:5d:fd:34:5e:
         ef:6b:73:8f:62:fb:eb:02:58:ab:48:be:5c:49:a8:d4:47:ec:
         37:11:dd:3f:3a:27:39:f9:98:d7:63:64:19:82:14:cb:13:59:
         cd:4c:7b:95:3e:3a:3b:16:7e:1e:59:08:d2:76:a2:df:59:19:
         78:6e:e1:74:0c:f0:2a:86:ba:69:db:e5:c4:26:e2:9a:ba:25:
         05:3e:4b:a0:63:76:a4:57:a6:2f:f2:88:20:af:da:fd:a1:46:
         c4:78:f3:75:f8:d3:f6:32:de:a7:33:9c:0c:7a:12:4f:ab:ef:
         f1:50:af:95:71:ab:6d:b3:7e:78:6a:f0:89:3b:d2:00:bf:b1:
         c3:15:7f:c7:13:4b:ef:fb:10:f2:d1:3e:41:a4:00:f7:2c:6c:
         eb:d4:68:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:21:19 2026 by rpki-client