Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
File:                     TCuJw8V6PilqpAYelihAvnro8Bg.mft (raw, json)
Hash identifier:          if1N5DjxuIt+XrA8YM0Ey4yt6MovdWzVLWftbzBmugU=
Subject key identifier:   66:39:F7:DD:94:AC:9F:E3:02:AC:AA:8C:1F:C4:74:33:30:C2:C7:49
Authority key identifier: 4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
Certificate issuer:       /CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Certificate serial:       01A1058051C8D29B02B8543A0BF0A127B4C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
Manifest number:          1A9E
Signing time:             Sun 04 Oct 2026 06:00:57 +0000
Manifest this update:     Sun 04 Oct 2026 06:00:57 +0000
Manifest next update:     Mon 05 Oct 2026 06:00:57 +0000
Files and hashes:         1: 5VIlaSHQH8NxTnw-lkuxFUsxkAY.roa (hash: sPTPxc0CroKVp6si6UEZ5BaO2FHxg18oEZaAVxG/qgA=)
                          2: JwHH6LBZedJ4Hv0TunMjXoDshWM.roa (hash: D5XiTo1X7KneliPOhbgW7WFXSwpdBlipBaJGWbMwuis=)
                          3: TCuJw8V6PilqpAYelihAvnro8Bg.crl (hash: rU609f7lsedhN+YBGPS1SggLBrsT7jHWI94PtnO/Roo=)
                          4: c-8uzc_bF5FkL0h-HqsGRbGhsWg.roa (hash: +aU4slc8iEEQxB/Bu7Kcz1ZF7yrHgsBSwr8YzuDbZ/0=)
                          5: g3ecyqqZSPjg-6ccrLkDwCQkrnQ.roa (hash: SV51OkrNOpOVdTqiKqHM9Ro93TRFuichJHgxteFHtRM=)
                          6: tYudPSYbftTU4j3hgTGLKXhO4P4.roa (hash: Wb5twGJdbpT/Rb1UlbeVOOTStMG3K3OQ+0w1qq8xOmA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 05:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:05:80:51:c8:d2:9b:02:b8:54:3a:0b:f0:a1:27:b4:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
        Validity
            Not Before: Oct  4 06:00:57 2026 GMT
            Not After : Oct  5 06:00:57 2026 GMT
        Subject: CN=6639f7dd94ac9fe302acaa8c1fc4743330c2c749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:54:0e:80:fd:a2:e7:9a:94:00:99:cc:26:09:
                    55:6f:8b:6b:22:c6:4d:9a:75:30:31:a9:6b:57:e6:
                    17:e6:de:aa:cd:06:a2:68:0a:4e:8c:c9:5c:d5:40:
                    95:8c:43:63:82:45:32:c7:4f:32:3c:de:6b:7d:48:
                    9d:42:60:94:0b:9d:b2:74:ac:04:27:44:43:e4:cf:
                    9b:c0:8a:b4:89:a3:84:48:42:30:53:f8:e7:86:97:
                    11:36:b0:32:7c:49:08:f7:ec:43:a5:e6:d8:8a:ad:
                    20:86:9b:1d:24:f9:28:96:df:0f:75:eb:04:db:d6:
                    c5:e7:6b:e8:07:95:c6:8a:29:e5:3c:fd:61:f5:f1:
                    8d:ba:26:ec:db:12:2f:5a:a1:56:6f:ef:4e:cc:10:
                    a1:d7:57:93:c8:9e:98:c4:b0:ee:b5:c2:73:66:07:
                    53:97:d9:8e:79:f7:c9:e1:7a:f6:69:2c:f5:10:c7:
                    78:48:9e:c2:e6:00:1a:1f:4b:a7:8a:40:57:f1:1b:
                    0e:67:c1:d0:e5:1a:d0:12:cc:69:02:9a:49:df:2b:
                    fb:ed:41:5c:7f:e5:c9:92:20:51:d2:b9:46:f3:b0:
                    e9:2a:c2:b0:97:28:59:e3:a2:2c:08:5d:a3:93:8c:
                    1d:87:17:82:4c:fd:38:d4:bb:d5:41:e4:bc:3a:98:
                    5a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:39:F7:DD:94:AC:9F:E3:02:AC:AA:8C:1F:C4:74:33:30:C2:C7:49
            X509v3 Authority Key Identifier:
                keyid:4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:92:7e:f6:41:d0:1d:c8:96:b1:7d:e0:40:2d:79:03:29:34:
         4c:fe:39:14:ea:be:08:54:a2:e8:df:48:d4:fa:6d:60:52:13:
         65:1c:0c:89:a4:36:4f:1a:83:68:27:04:6c:01:44:55:a2:f0:
         3b:5d:03:c4:c8:16:34:95:26:12:70:ef:03:27:e6:39:43:0b:
         9c:7f:6b:5b:d2:fb:36:e2:e2:c5:86:d7:e3:24:47:52:74:76:
         be:9a:5b:67:b5:5b:9e:b9:3e:17:e5:a8:e2:12:cb:73:b1:2c:
         d4:c7:3e:1e:8c:cd:db:26:bc:45:c0:92:08:25:18:97:6d:71:
         97:1b:e8:32:a0:ec:80:05:23:20:4b:b9:82:16:c8:55:06:3f:
         fa:1b:cf:2f:5b:d7:38:b5:55:f7:e8:0f:e3:11:12:0a:1b:43:
         10:ea:5f:31:8f:ac:0d:d4:c4:1e:95:c1:52:4a:ae:15:c1:cc:
         9e:f8:d4:7c:e3:57:b9:b2:d2:55:75:1a:d8:01:51:67:1e:a0:
         b4:0b:84:04:a3:2a:28:b2:10:ee:6a:18:78:78:79:87:1e:6a:
         63:da:9e:95:96:02:dd:72:1d:e9:b4:1a:bb:5b:0f:7d:53:8e:
         84:c6:fb:6d:34:0f:61:c3:29:62:a2:df:14:66:38:06:b0:ca:
         00:95:bb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:18:48 2026 by rpki-client