Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
File:                     TahNJHzjfNzPBuFXHSJqK4Vne80.mft (raw, json)
Hash identifier:          rC5JiGtFXLQELwm+naLzFUs1z4vYY6iGGmxXrQ5pfT8=
Subject key identifier:   B4:C9:8E:83:3D:88:87:54:63:70:5D:45:6A:11:EF:EA:B0:58:AA:6D
Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
Certificate issuer:       /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Certificate serial:       01A16A5A3CD3B6D80916E197FC3D780EDBAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
Manifest number:          1AE5
Signing time:             Fri 23 Oct 2026 20:01:01 +0000
Manifest this update:     Fri 23 Oct 2026 20:01:01 +0000
Manifest next update:     Sat 24 Oct 2026 20:01:01 +0000
Files and hashes:         1: L-JyaLSktZhU500CZ2Jm-DzL3yI.roa (hash: oJkt8aUX20M7CKsCfdRcWZpuHilWXCMczf1t5NXS0eI=)
                          2: LSbbMYdiIbKuzkhAXFAGLH6GBd0.roa (hash: GVdnAx+VDnNLGbmaTGIwya+qx7bw2STQGx8OmUTU30Q=)
                          3: TahNJHzjfNzPBuFXHSJqK4Vne80.crl (hash: gpwtJ6ZdDg4Kszye76/YZgaGLzl5agRlbPOX4miDGP8=)
                          4: UDY2HDyFl77CPOX4Htn0Pi3kyOA.roa (hash: bc7atEIrT/sE9wxUJS6KJvtPGbS/vBzLhwKBt1msWHM=)
                          5: WR-L1F3QM0wsQgyDImuXxlRoCDo.roa (hash: IHbgb1ma7MkT5FXl6QhQC1/9vSdkNkwBhS8js+Uq138=)
                          6: caXkdOh26Ng2luhqokI4XXlYMpU.roa (hash: K5rOjRfhlR9NLMm+bd9NoV6sfAdU4dteUmtcqkGa+PE=)
                          7: gaATxSq9HGX7yQm--_dWZbOgZT0.roa (hash: Qix9w4DVsLBDeru6CjO9qF+q42J9rHLmd1kVGLn1F3E=)
                          8: jvNpPdYrQ3MflssnyijS0GZ1M3s.roa (hash: deTd1PHJQcy87xcvtVedQ3VEDL3wpdVtSrEJZUUIk/A=)
                          9: kWTQcrgSZmOTsMHh7K_EG0H2IuE.roa (hash: Hf4S7R+wJUfntE+MhCot7Q15rmGM0xxlIUdL/asz+MU=)
                          10: mr4GPzNHl1BXdqqKxPgtpJ_bvG4.roa (hash: uZhqzJ/VBEcqt1cjJm9DgjFyfds9tNiF+cC3M9YmS6Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Oct 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6a:5a:3c:d3:b6:d8:09:16:e1:97:fc:3d:78:0e:db:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
        Validity
            Not Before: Oct 23 20:01:01 2026 GMT
            Not After : Oct 24 20:01:01 2026 GMT
        Subject: CN=b4c98e833d88875463705d456a11efeab058aa6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8e:56:83:6a:7f:0d:1b:19:b4:38:93:be:33:
                    01:92:0e:7d:d6:9f:ea:3c:2b:4f:7c:1d:30:fb:31:
                    be:c0:9d:3f:e2:5f:5a:54:0e:4e:2a:fc:59:83:21:
                    9e:05:75:68:53:c5:98:86:0a:1b:fe:ef:bb:0a:10:
                    10:f5:d5:1e:05:29:58:68:da:e3:02:57:6d:b8:9a:
                    26:58:31:b1:13:bd:7e:33:2e:78:d5:14:e2:59:9c:
                    e1:86:c7:7b:b4:92:c3:8b:3b:51:1d:35:b7:0e:7c:
                    ff:da:3e:70:67:86:eb:b9:91:8d:da:de:a6:02:73:
                    c4:9b:dc:25:8b:d1:6a:74:27:2c:32:5c:d6:20:c1:
                    ac:6d:4e:2c:4e:97:45:6c:8b:b1:ed:0c:d7:e0:e5:
                    5a:f9:3e:5a:41:fb:72:59:e4:93:3a:eb:db:e8:c8:
                    73:2f:90:98:ad:53:e7:35:19:56:f6:37:4d:63:de:
                    9c:56:9d:84:01:a8:eb:27:2c:7f:34:c4:82:f2:1a:
                    ee:59:8d:93:59:68:cb:5f:b5:c3:b9:8f:bf:91:a4:
                    27:1d:18:84:43:e9:ba:b7:3a:f5:a2:15:f2:ea:ad:
                    1a:f3:1b:db:21:9b:1c:4d:5e:5f:41:ea:4a:1c:cd:
                    db:34:f0:39:6a:2c:f4:9c:97:a4:9a:ef:e1:60:be:
                    21:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C9:8E:83:3D:88:87:54:63:70:5D:45:6A:11:EF:EA:B0:58:AA:6D
            X509v3 Authority Key Identifier:
                keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:8d:a7:71:87:cb:1f:e8:35:4a:09:f2:22:80:dd:17:36:87:
         72:62:3c:dc:95:4f:91:b1:4c:5f:f8:d4:5b:ff:25:1e:da:38:
         06:5b:16:36:84:2f:1c:3f:88:6a:69:a8:de:32:f8:4f:c0:67:
         4b:0e:ec:67:0e:82:50:b6:b6:5f:4b:79:b1:84:a1:b9:16:35:
         99:6f:fe:05:11:9d:f5:3f:c4:b2:99:10:11:8f:e4:02:46:c7:
         a5:43:a2:12:1f:be:ec:f1:71:42:56:ec:12:3b:9d:ae:9b:26:
         de:1a:72:a0:3e:f3:88:fd:96:e8:7e:fa:96:f3:bf:af:5d:81:
         07:48:95:d0:b8:b3:e2:45:52:53:01:a8:4b:86:45:c2:ff:10:
         64:25:61:7f:09:48:4f:87:c2:44:b7:d4:df:06:6e:03:f3:bd:
         a7:0e:58:f9:1f:e8:b2:94:e6:fc:0c:a6:9f:12:9b:fc:76:b8:
         e3:24:c7:df:58:b7:f5:25:9c:b6:50:2c:f8:da:56:c1:9c:ad:
         91:ea:c4:27:b0:38:bd:55:25:62:bc:2e:ad:22:26:e2:f8:7e:
         33:6a:e6:b8:e2:b3:14:09:5e:89:e4:a2:93:fa:9e:f9:cd:a7:
         12:ec:7a:0c:a6:a1:4e:6a:fc:7c:a8:12:95:65:48:8b:9e:41:
         6c:f2:38:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFqWjzTttgJFuGX/D14DtuuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYTg0ZDI0N2NlMzdjZGNjZjA2ZTE1NzFkMjI2YTJiODU2
NzdiY2QwHhcNMjYxMDIzMjAwMTAxWhcNMjYxMDI0MjAwMTAxWjAzMTEwLwYDVQQD
EyhiNGM5OGU4MzNkODg4NzU0NjM3MDVkNDU2YTExZWZlYWIwNThhYTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4o5Wg2p/DRsZtDiTvjMBkg591p/q
PCtPfB0w+zG+wJ0/4l9aVA5OKvxZgyGeBXVoU8WYhgob/u+7ChAQ9dUeBSlYaNrj
AldtuJomWDGxE71+My541RTiWZzhhsd7tJLDiztRHTW3Dnz/2j5wZ4bruZGN2t6m
AnPEm9wli9FqdCcsMlzWIMGsbU4sTpdFbIux7QzX4OVa+T5aQftyWeSTOuvb6Mhz
L5CYrVPnNRlW9jdNY96cVp2EAajrJyx/NMSC8hruWY2TWWjLX7XDuY+/kaQnHRiE
Q+m6tzr1ohXy6q0a8xvbIZscTV5fQepKHM3bNPA5aiz0nJekmu/hYL4hFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTJjoM9iIdUY3BdRWoR7+qwWKptMB8GA1UdIwQY
MBaAFE2oTSR843zczwbhVx0iaiuFZ3vNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGIt
NTU1OGE4YjUzZTNkLzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGItNTU1OGE4YjUzZTNk
LzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALY2ncYfL
H+g1SgnyIoDdFzaHcmI83JVPkbFMX/jUW/8lHto4BlsWNoQvHD+Iammo3jL4T8Bn
Sw7sZw6CULa2X0t5sYShuRY1mW/+BRGd9T/EspkQEY/kAkbHpUOiEh++7PFxQlbs
Ejudrpsm3hpyoD7ziP2W6H76lvO/r12BB0iV0Liz4kVSUwGoS4ZFwv8QZCVhfwlI
T4fCRLfU3wZuA/O9pw5Y+R/ospTm/AymnxKb/Ha44yTH31i39SWctlAs+NpWwZyt
kerEJ7A4vVUlYrwurSIm4vh+M2rmuOKzFAleieSik/qe+c2nEux6DKahTmr8fKgS
lWVIi55BbPI4QQ==
-----END CERTIFICATE-----
Generated at Sat Oct 24 02:20:53 2026 by rpki-client