Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
File:                     TAf2nWArfrt_YzDXFcnsPlq6MPo.mft (raw, json)
Hash identifier:          ygYcTsfUuyIdu+rUTkUSZb0Pqc9ZC1hKaQRRIsZN7As=
Subject key identifier:   7F:C6:A2:82:FD:0F:03:0F:74:D7:33:5C:CE:75:6C:EA:51:EB:DA:1F
Authority key identifier: 4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA
Certificate issuer:       /CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
Certificate serial:       01A06EA762E888CF0B2F05BFAA531A6150CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
Manifest number:          0E29
Signing time:             Fri 04 Sep 2026 23:00:58 +0000
Manifest this update:     Fri 04 Sep 2026 23:00:58 +0000
Manifest next update:     Sat 05 Sep 2026 23:00:58 +0000
Files and hashes:         1: 4GpPsuXyTB7mqbStOGGvgQlaA3c.roa (hash: YkMMZt5aZTSuVgtlcIOQUlozXasUkQvk7oFEC+EzncM=)
                          2: TAf2nWArfrt_YzDXFcnsPlq6MPo.crl (hash: qXpb2nyrTy2nkXkUhDFbUUHwEk71UktFNDaVG9e8ntg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 23:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:a7:62:e8:88:cf:0b:2f:05:bf:aa:53:1a:61:50:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
        Validity
            Not Before: Sep  4 23:00:58 2026 GMT
            Not After : Sep  5 23:00:58 2026 GMT
        Subject: CN=7fc6a282fd0f030f74d7335cce756cea51ebda1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ae:77:95:a2:89:05:15:7d:68:ae:4f:96:13:
                    02:e9:86:cb:ea:ab:53:d9:64:6c:f2:fc:4e:b1:32:
                    57:11:d8:b0:f0:ba:d8:e8:20:08:3c:20:83:f0:31:
                    78:3a:cf:2a:64:e8:53:22:f5:1f:b7:4f:6e:8c:87:
                    c8:bb:1d:81:75:6e:f0:96:17:0a:7c:81:48:e9:f9:
                    d0:38:fe:c5:ae:29:6f:7d:b4:ff:91:61:ac:9c:8c:
                    d4:3d:f3:97:c1:be:15:5e:52:4a:1c:56:a6:11:80:
                    c8:b1:57:4d:25:7a:57:0b:ae:a3:b9:ba:87:06:24:
                    94:7e:95:fc:e3:2c:8e:0d:43:b0:66:d1:7b:2f:45:
                    3c:08:89:97:d1:a6:86:3e:c5:bb:17:5f:49:59:86:
                    fd:36:18:1b:47:10:54:e4:de:81:bc:ac:f7:6f:1a:
                    44:77:d7:b9:dd:03:d1:cc:c1:36:4b:82:fe:b8:31:
                    d9:bc:6e:90:a4:2a:29:a1:99:a9:19:ed:07:46:5b:
                    8d:28:ed:bf:33:b9:89:98:3c:32:ec:93:fd:bd:62:
                    88:6d:b6:9e:d8:d7:a9:fb:16:da:fa:d5:81:15:ae:
                    6a:ac:fd:f5:b5:9f:3a:57:af:e5:cb:b5:c2:d4:12:
                    e8:55:38:62:6a:7a:02:61:93:46:79:e0:47:bd:3c:
                    60:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C6:A2:82:FD:0F:03:0F:74:D7:33:5C:CE:75:6C:EA:51:EB:DA:1F
            X509v3 Authority Key Identifier:
                keyid:4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:2e:48:75:dc:6d:60:5a:e2:57:6e:48:be:82:6c:49:fb:03:
         fc:83:85:ce:08:cd:9d:da:5f:4d:cf:ec:cb:2b:a3:1a:a7:e2:
         2a:f7:45:32:63:3d:a2:85:aa:a3:00:0e:2a:2d:2d:fc:55:46:
         d7:0b:27:af:6c:a0:ad:7e:58:90:d5:de:03:40:bf:5e:58:fb:
         a8:38:48:02:ce:34:a2:c9:90:7d:b9:28:de:06:93:ab:f8:3a:
         00:18:f1:bc:9f:70:07:ca:f7:5e:77:12:01:94:7f:a4:99:0f:
         98:15:45:bc:d0:e1:d3:1a:a3:47:4b:ac:b7:45:ca:8e:bf:4a:
         36:55:1d:d4:46:73:4a:61:27:e3:b5:ab:6f:ea:82:d6:b6:c4:
         17:d0:b8:bb:d5:23:e4:a4:ad:a8:2e:1d:e2:b1:70:bb:31:ca:
         63:2f:51:05:a2:15:52:50:fd:ff:95:71:3f:99:7e:4d:3a:86:
         f2:65:ab:1d:3d:2e:44:bc:13:2d:bc:ee:06:d3:a1:dd:85:29:
         f4:f3:56:b2:41:80:ff:4c:d5:88:ea:85:e2:5b:21:7b:f9:4d:
         e7:3c:9b:14:d4:e3:f1:77:19:3e:79:e9:b5:b9:06:7e:09:d0:
         07:ea:c9:c5:65:bb:7e:72:c1:58:4f:dc:08:5c:21:ee:0b:4e:
         61:bb:e8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:56:48 2026 by rpki-client