Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/d7beed-df98-4ec8-87b6-4072557c47fa/1/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.mft
File:                     Ts11pRCeLBBuEZPVfuK5mf7Cf-A.mft (raw, json)
Hash identifier:          7J6LNduykVB7dOhWfJRhzxcI6LfubIUxKS5qYcqP0Pc=
Subject key identifier:   B2:2F:D7:A9:9A:A4:32:6B:1A:94:94:6D:0C:D0:7C:0E:89:E2:D2:86
Authority key identifier: 4E:CD:75:A5:10:9E:2C:10:6E:11:93:D5:7E:E2:B9:99:FE:C2:7F:E0
Certificate issuer:       /CN=4ecd75a5109e2c106e1193d57ee2b999fec27fe0
Certificate serial:       01A0890C4DD461A738DD4A1106F7965CC878
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/d7beed-df98-4ec8-87b6-4072557c47fa/1/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.mft
Manifest number:          096B
Signing time:             Thu 10 Sep 2026 02:01:19 +0000
Manifest this update:     Thu 10 Sep 2026 02:01:19 +0000
Manifest next update:     Fri 11 Sep 2026 02:01:19 +0000
Files and hashes:         1: Ts11pRCeLBBuEZPVfuK5mf7Cf-A.crl (hash: IcNKCnby467DoYN/uL3VY+9siZ8he1Ew2hFaDCwfyXg=)
                          2: WPJYGGNKSo2_VzT6YDs17mCdxT0.roa (hash: t5I7bwusgjgVCBgWsBNne8we8EByIbOOjE3czuEG77s=)
                          3: kmh_Ra1IgfFWjLP7TM3jmp_Cn3w.roa (hash: QHu8yh0Y3kXquJoPEQjGqt3qu3+kAFvXU8lxglUm7PM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/d7beed-df98-4ec8-87b6-4072557c47fa/1/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/d7beed-df98-4ec8-87b6-4072557c47fa/1/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:0c:4d:d4:61:a7:38:dd:4a:11:06:f7:96:5c:c8:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ecd75a5109e2c106e1193d57ee2b999fec27fe0
        Validity
            Not Before: Sep 10 02:01:19 2026 GMT
            Not After : Sep 11 02:01:19 2026 GMT
        Subject: CN=b22fd7a99aa4326b1a94946d0cd07c0e89e2d286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0b:a1:8a:89:de:7e:9c:dd:e8:44:f2:9c:70:
                    3c:7c:f0:92:e2:7b:31:6b:62:34:51:47:fb:07:cf:
                    e8:b3:13:ae:29:d3:d0:20:2b:f0:ff:37:c5:dd:dc:
                    a3:58:af:c6:c9:af:6d:ae:f1:98:13:6f:92:a6:3d:
                    83:94:a8:0f:dc:48:40:d3:50:61:c8:96:5d:2d:40:
                    e5:9c:2d:43:e5:05:15:3f:83:c6:1b:73:6d:82:df:
                    e9:38:f3:3d:8b:b8:3a:c0:0a:3a:6f:18:95:a2:07:
                    bc:a9:8c:72:1b:48:6b:bb:34:a9:df:b1:0f:6f:41:
                    c4:d9:44:6f:06:f0:bd:6d:a2:fc:31:09:26:f1:57:
                    a6:04:a6:0a:23:6b:c6:05:cd:89:86:4b:8c:47:eb:
                    70:0a:88:82:96:55:0d:e3:c8:f7:55:b1:03:7a:ee:
                    b7:b4:b4:87:b1:07:73:33:84:b8:14:34:14:3a:0b:
                    f9:6c:d8:d5:bb:77:d6:4f:7d:0b:e8:f4:c1:21:1f:
                    c5:05:b6:8f:dd:06:4b:79:b1:87:d5:97:54:77:50:
                    65:08:b1:cc:bb:8b:1c:56:68:03:3a:65:3b:1f:58:
                    c5:ab:cd:0d:63:a2:92:e2:22:ab:94:c0:e7:41:aa:
                    17:b2:2f:e7:01:63:dd:e3:59:2d:25:13:0a:44:dd:
                    e6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:2F:D7:A9:9A:A4:32:6B:1A:94:94:6D:0C:D0:7C:0E:89:E2:D2:86
            X509v3 Authority Key Identifier:
                keyid:4E:CD:75:A5:10:9E:2C:10:6E:11:93:D5:7E:E2:B9:99:FE:C2:7F:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d7beed-df98-4ec8-87b6-4072557c47fa/1/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d7beed-df98-4ec8-87b6-4072557c47fa/1/Ts11pRCeLBBuEZPVfuK5mf7Cf-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:11:c0:ee:75:31:58:fb:a6:d9:f4:56:5e:3e:2d:28:a7:1d:
         e7:ee:c8:28:4d:0c:b0:c3:f5:45:4a:7d:0e:34:6d:e8:1f:5d:
         5a:87:74:5e:e3:05:71:1f:6e:d4:33:07:f4:20:fb:f7:ac:2e:
         e0:9b:24:9c:cb:35:c3:5f:e5:86:f1:78:04:38:8f:83:d9:73:
         64:9a:1e:67:ff:f5:cc:43:94:69:4d:da:09:f0:7c:5b:83:d2:
         97:1e:bd:24:34:e1:8d:4c:a6:c4:ba:11:7c:76:07:8c:30:7b:
         b1:1e:25:34:4a:64:17:5d:81:6a:66:9b:fd:b9:6b:64:63:a5:
         f5:0c:82:90:85:05:f3:85:73:4c:1c:13:7a:23:17:6e:3b:81:
         ee:14:e4:43:97:2f:f7:3c:28:29:25:fb:f5:ee:87:3d:e9:b4:
         4d:98:47:56:0d:4e:44:3c:8c:b3:14:91:f7:f5:49:85:49:10:
         bb:3f:c2:8a:0c:6d:bc:62:c2:44:d3:b3:f6:eb:e2:a9:b1:e4:
         a8:7d:54:bf:97:60:37:65:e2:a3:3b:49:49:8e:44:09:2f:83:
         42:6d:ab:0a:93:f8:3f:de:9e:41:f3:ce:e2:0f:3a:ce:c0:a5:
         f3:bb:17:d4:83:c9:85:2e:7a:15:32:cd:c7:1e:4b:fa:63:0b:
         13:6a:af:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:12:53 2026 by rpki-client