Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
File:                     TPgIAsZXmk1KEGCNz5LprOmQWxY.mft (raw, json)
Hash identifier:          kbqoE3yPn7+ZHZGFT3SzO3py+lIGQfJciQGLXGck1aI=
Subject key identifier:   84:B7:3B:93:A8:D1:B9:DD:D6:9A:9E:87:1F:B0:77:94:4A:B1:7B:84
Authority key identifier: 4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
Certificate issuer:       /CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Certificate serial:       01A187BFA6D998F4A7FE92F1CFD83F19DE0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
Manifest number:          0995
Signing time:             Thu 29 Oct 2026 13:00:46 +0000
Manifest this update:     Thu 29 Oct 2026 13:00:46 +0000
Manifest next update:     Fri 30 Oct 2026 13:00:46 +0000
Files and hashes:         1: MyDBxuxHjE1UjZ06-D4Xls72e2k.roa (hash: ujdPm62GD2JKSu06a5kdzzKz/zzSLFEp1QNe1saBzo4=)
                          2: TPgIAsZXmk1KEGCNz5LprOmQWxY.crl (hash: xw5/tt68tjmYw6iQ7TVxKwrH1ZFdIKx/xcjBQGnP7vs=)
                          3: nYD17mll_27ZXiDBVbfu9pAFZUI.asa (hash: aqqjluAZqn8ok88nfidc6bqSZjUpiWBj4TFvOPAr5AU=)
                          4: odFrLcZzZa3lGHkplTYFOeTL_lk.roa (hash: WkZkaCnol/FFO1wh5d5UvdfBIOI/M/3rlDA0bdxo8+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 13:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:87:bf:a6:d9:98:f4:a7:fe:92:f1:cf:d8:3f:19:de:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
        Validity
            Not Before: Oct 29 13:00:46 2026 GMT
            Not After : Oct 30 13:00:46 2026 GMT
        Subject: CN=84b73b93a8d1b9ddd69a9e871fb077944ab17b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1a:63:1b:6b:a1:64:fb:51:2c:e2:97:34:a3:
                    33:bb:a4:2a:38:4e:6c:5a:af:82:42:f4:88:fb:88:
                    c5:97:51:4e:c8:29:c4:12:aa:82:fc:6b:ae:9b:fb:
                    12:b2:7f:f1:d4:d3:2e:61:7b:f8:66:c2:6a:ce:22:
                    80:f4:bd:15:21:b3:68:ab:75:5a:7c:26:a6:a9:fd:
                    19:cd:f2:2d:86:9c:9a:7b:cf:35:27:b6:4b:10:ba:
                    1f:92:fa:0f:2f:88:d2:a9:a6:31:10:88:b1:5d:c5:
                    35:39:61:c1:a1:b3:4d:d2:79:f2:72:14:b7:bc:21:
                    44:8c:ec:74:1a:b9:1f:31:ab:fd:63:68:ac:98:79:
                    cc:78:43:a6:77:ec:29:0e:c2:63:8a:c6:e4:47:89:
                    a5:b2:ea:89:39:cb:ea:4f:40:70:25:c7:37:61:cf:
                    5b:33:b9:63:6c:b2:4e:3b:7b:ca:f2:66:fb:da:47:
                    ee:c7:10:9e:5b:cc:e7:2a:74:7f:d8:3e:96:a7:7b:
                    04:24:a2:45:ca:4a:47:bb:8a:6e:5e:1c:c0:d2:71:
                    9f:5f:2f:e6:9f:87:3d:8f:be:39:95:dd:bf:70:de:
                    57:51:8a:de:59:e5:67:2a:ed:93:71:28:03:8b:be:
                    bd:25:1d:7d:3f:85:85:37:99:d4:50:1e:78:dc:3a:
                    11:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B7:3B:93:A8:D1:B9:DD:D6:9A:9E:87:1F:B0:77:94:4A:B1:7B:84
            X509v3 Authority Key Identifier:
                keyid:4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:cc:cf:5a:eb:9a:18:05:1c:8f:ef:18:5a:cd:1a:54:25:ef:
         49:1a:d5:e6:94:bf:a0:09:02:b7:60:e4:4c:e0:d6:7e:14:04:
         92:3c:ae:1d:e1:f6:63:0a:ef:94:4f:f7:28:d1:9f:d9:bd:ca:
         97:5a:bd:b6:61:35:78:2a:d0:71:75:8a:f7:53:aa:b8:11:85:
         8c:b0:99:49:89:f3:01:c5:f0:8a:18:39:8f:a0:80:86:93:33:
         6a:3d:34:d1:63:e4:9b:77:04:9e:91:00:c0:1f:13:df:e7:9b:
         96:8b:a9:71:9e:5d:13:51:25:98:dd:b0:3f:cf:f3:dd:b5:c8:
         26:c9:6c:fb:01:d0:74:b8:fe:60:96:8f:44:bb:c8:3b:ff:4a:
         79:da:6a:b1:61:aa:e3:14:65:6d:c2:8d:0c:bd:c4:33:b3:70:
         28:a6:bd:58:74:7d:6e:2c:65:cc:1c:80:ad:88:dc:e5:3b:5e:
         1f:44:7a:61:31:f4:99:c9:e9:ab:21:b8:2f:ef:b4:6b:79:3f:
         58:76:11:02:2f:fd:82:99:29:47:f3:20:8a:04:c8:30:4b:ca:
         dd:71:d3:6c:b0:73:73:1f:e8:f8:f6:62:d1:05:28:ff:7f:ba:
         1b:03:73:bc:28:11:67:b3:e6:e1:8e:a1:dc:da:06:4b:8a:ee:
         3e:18:1f:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGHv6bZmPSn/pLxz9g/Gd4NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZjgwODAyYzY1NzlhNGQ0YTEwNjA4ZGNmOTJlOWFjZTk5
MDViMTYwHhcNMjYxMDI5MTMwMDQ2WhcNMjYxMDMwMTMwMDQ2WjAzMTEwLwYDVQQD
Eyg4NGI3M2I5M2E4ZDFiOWRkZDY5YTllODcxZmIwNzc5NDRhYjE3Yjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xpjG2uhZPtRLOKXNKMzu6QqOE5s
Wq+CQvSI+4jFl1FOyCnEEqqC/Guum/sSsn/x1NMuYXv4ZsJqziKA9L0VIbNoq3Va
fCamqf0ZzfIthpyae881J7ZLELofkvoPL4jSqaYxEIixXcU1OWHBobNN0nnychS3
vCFEjOx0GrkfMav9Y2ismHnMeEOmd+wpDsJjisbkR4mlsuqJOcvqT0BwJcc3Yc9b
M7ljbLJOO3vK8mb72kfuxxCeW8znKnR/2D6Wp3sEJKJFykpHu4puXhzA0nGfXy/m
n4c9j745ld2/cN5XUYreWeVnKu2TcSgDi769JR19P4WFN5nUUB543DoRVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIS3O5Oo0bnd1pqehx+wd5RKsXuEMB8GA1UdIwQY
MBaAFEz4CALGV5pNShBgjc+S6azpkFsWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFBnSUFzWlhtazFLRUdDTno1THByT21RV3hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8zOThiYmItMTg0Zi00ODUxLWIyYTAt
OTFmNDlkOGQxMTVkLzEvVFBnSUFzWlhtazFLRUdDTno1THByT21RV3hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8zOThiYmItMTg0Zi00ODUxLWIyYTAtOTFmNDlkOGQxMTVk
LzEvVFBnSUFzWlhtazFLRUdDTno1THByT21RV3hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB8zPWuua
GAUcj+8YWs0aVCXvSRrV5pS/oAkCt2DkTODWfhQEkjyuHeH2YwrvlE/3KNGf2b3K
l1q9tmE1eCrQcXWK91OquBGFjLCZSYnzAcXwihg5j6CAhpMzaj000WPkm3cEnpEA
wB8T3+ebloupcZ5dE1ElmN2wP8/z3bXIJsls+wHQdLj+YJaPRLvIO/9KedpqsWGq
4xRlbcKNDL3EM7NwKKa9WHR9bixlzByArYjc5TteH0R6YTH0mcnpqyG4L++0a3k/
WHYRAi/9gpkpR/MgigTIMEvK3XHTbLBzcx/o+PZi0QUo/3+6GwNzvCgRZ7Pm4Y6h
3NoGS4ruPhgfGw==
-----END CERTIFICATE-----
Generated at Thu Oct 29 22:54:21 2026 by rpki-client