Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
File:                     ThXfaIw66uP2he1Es5bCGYOVhh0.mft (raw, json)
Hash identifier:          P/wyD+XYvPZl51xmwJVkX97EAeNfd+R1DfM2gzYp21g=
Subject key identifier:   30:D4:E1:9D:3F:AE:39:58:3E:4C:9E:89:6E:DB:AC:74:D8:30:7D:E5
Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Certificate issuer:       /CN=4e15df688c3aeae3f685ed44b396c2198395861d
Certificate serial:       01A10C272E946CF7708D7F3EB90740C315EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
Manifest number:          1039
Signing time:             Mon 05 Oct 2026 13:00:56 +0000
Manifest this update:     Mon 05 Oct 2026 13:00:56 +0000
Manifest next update:     Tue 06 Oct 2026 13:00:56 +0000
Files and hashes:         1: 8O3AGuQIhrlb2IfzM6V4tcLRdYw.roa (hash: WlnM/QzatMyerGm0OoWe7csktSam0ZWSgVvAv1lTVgg=)
                          2: HWctAdx2obrE3iukcBA26ddQb60.roa (hash: mlqXm7llYZDIH4sG8l62C5xHyOEbOOaYIPrVf894QoY=)
                          3: Nu3EJkNT_L4Y1dVbXdBaOuwi8ak.roa (hash: w7pIzOCnx2UvrBAGfaTsFND3uOFAQFekA5rwetnu5CE=)
                          4: RFfxQlgpEPrKePaKGQadR6EJSqs.roa (hash: oi8mU13gbqdkE5qYPVo/94WYOHiVBIqcRLFc6Pbaf40=)
                          5: ThXfaIw66uP2he1Es5bCGYOVhh0.crl (hash: wa5Oswsz3nJ0Rp2cflNqdWap1Usd8G4qDI6FLY4PKCY=)
                          6: Zh6-sCTrmtyYMbiN3qaDaEUjzS8.roa (hash: 4ShBh5y0hjz1aSzm7VwIqgbx0rRcZCyuU9YRysEUjUM=)
                          7: chNBYIE4gA8jrWAxZUlShBGqlPs.roa (hash: qmmZ4LhW1qkM2Wcq2XSopnjfKwBuiAKH7aTKlWJ/VMA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 13:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0c:27:2e:94:6c:f7:70:8d:7f:3e:b9:07:40:c3:15:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d
        Validity
            Not Before: Oct  5 13:00:56 2026 GMT
            Not After : Oct  6 13:00:56 2026 GMT
        Subject: CN=30d4e19d3fae39583e4c9e896edbac74d8307de5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:05:04:58:cb:d1:9b:f9:74:f1:37:41:c0:40:
                    49:17:9e:6b:46:f8:63:54:cd:b9:df:b7:81:7d:31:
                    62:9a:e4:be:8d:7c:17:f1:fb:85:38:56:52:6d:80:
                    1d:f2:3f:02:88:29:23:da:e3:02:21:51:42:ff:a8:
                    d6:d6:74:70:f3:57:0a:94:c5:dd:f2:6c:10:2f:09:
                    20:6d:1d:e6:e8:6e:bc:e9:3c:eb:96:cb:43:0f:1f:
                    b7:1a:d3:c1:06:32:c4:de:ac:20:83:81:ee:d6:65:
                    01:29:3b:cf:dd:90:fa:ef:1d:0c:ee:95:ee:cd:b7:
                    d0:ca:87:c8:3f:76:dc:e6:c7:4e:98:95:d8:4a:b1:
                    4d:60:c9:e0:7a:6a:03:ea:80:48:d9:98:6e:4d:8a:
                    ea:ec:b7:4a:ee:57:6a:a1:16:ab:af:4d:e7:d5:3b:
                    f9:a2:3d:c7:bd:8d:8f:3f:68:bd:91:e0:4b:5c:98:
                    b9:a6:a3:31:a9:6c:14:a3:4b:74:0c:bf:0b:f1:1f:
                    9c:46:51:c9:da:b3:70:e8:05:83:b9:bd:86:0a:82:
                    5e:e9:36:b0:52:51:96:38:b0:23:85:3f:f5:ff:b7:
                    f9:74:4e:57:c8:a1:7e:dc:6f:a5:7f:4b:a9:63:7b:
                    9d:f3:c4:73:4d:ea:63:5c:f4:6f:91:65:74:4c:68:
                    66:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D4:E1:9D:3F:AE:39:58:3E:4C:9E:89:6E:DB:AC:74:D8:30:7D:E5
            X509v3 Authority Key Identifier:
                keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:9d:e3:2a:80:2a:c4:e7:16:06:23:4c:a0:d1:b8:a0:e2:47:
         5a:a9:24:95:8d:c0:b5:37:ca:e4:0f:e8:5c:ff:e8:07:a4:c8:
         a5:3e:3b:10:3f:3d:f3:bf:b0:3f:4d:2a:90:35:cd:b4:5e:86:
         cf:98:15:06:8b:c8:22:59:03:97:61:31:36:7e:f5:3b:17:04:
         33:ca:41:b4:5b:94:a8:c2:68:1d:f3:81:e8:02:f2:66:c9:1b:
         d7:60:af:1a:2e:e5:d6:2c:56:d5:28:c9:1e:d6:de:6c:5f:12:
         26:31:0d:23:30:76:a0:76:c1:5b:8d:4e:b6:16:15:2f:19:09:
         6a:f3:5d:d2:b9:9b:f5:16:f6:19:c9:37:a3:09:17:4d:3a:1e:
         10:1c:71:62:0e:b9:ee:f3:38:6d:f0:0e:56:2f:14:6b:85:db:
         f9:2c:14:d9:34:b9:7d:69:5a:68:e3:0e:53:01:11:9a:36:f6:
         5e:82:dc:52:11:6f:29:c1:1a:be:d7:23:f9:bb:54:07:c2:d8:
         c4:6f:75:d6:61:44:73:c5:50:d1:08:bd:5c:0f:fd:61:32:e6:
         d2:e3:95:7f:b3:1a:e2:3f:a9:bc:39:e8:de:b4:ed:6c:6d:11:
         6a:ab:78:ea:5e:69:99:34:2d:e7:55:83:48:88:d6:e3:2b:3c:
         64:31:79:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 00:58:13 2026 by rpki-client