Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
File:                     tgcVWH7cyzJajXwPWkLY8EOHHbc.mft (raw, json)
Hash identifier:          lAFUwCcxxgzRt2hXYz8sP3dMpVJjQdl5BNMv19ZpCrc=
Subject key identifier:   A4:B5:63:B2:AB:7A:CE:CA:9D:A3:4E:31:D2:D4:CA:01:BA:61:A8:62
Authority key identifier: B6:07:15:58:7E:DC:CB:32:5A:8D:7C:0F:5A:42:D8:F0:43:87:1D:B7
Certificate issuer:       /CN=b60715587edccb325a8d7c0f5a42d8f043871db7
Certificate serial:       01A088D4D54A076F155EAD67A95BD54102AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
Manifest number:          056C
Signing time:             Thu 10 Sep 2026 01:00:44 +0000
Manifest this update:     Thu 10 Sep 2026 01:00:44 +0000
Manifest next update:     Fri 11 Sep 2026 01:00:44 +0000
Files and hashes:         1: eB4gEEpPyWFq6clsUK7vv51vvfQ.roa (hash: vOzaKzOf/nV2cWIeYZMZ7vTHjq9ov1FtZCm3hsoyh/8=)
                          2: tgcVWH7cyzJajXwPWkLY8EOHHbc.crl (hash: vkaW/owxsApe5GyNeqjduA86//B6g7aVNZY/nF7ufrQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 01:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:88:d4:d5:4a:07:6f:15:5e:ad:67:a9:5b:d5:41:02:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b60715587edccb325a8d7c0f5a42d8f043871db7
        Validity
            Not Before: Sep 10 01:00:44 2026 GMT
            Not After : Sep 11 01:00:44 2026 GMT
        Subject: CN=a4b563b2ab7aceca9da34e31d2d4ca01ba61a862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:30:21:cd:f3:5b:4e:4e:0a:77:dd:98:00:55:
                    72:f5:1c:dd:80:ac:f3:5f:4f:94:5f:0e:a0:b1:65:
                    17:21:ea:d8:27:82:33:a0:35:f5:f2:e8:52:ec:43:
                    48:13:4b:f0:ef:f7:53:62:8a:82:41:0a:20:72:7b:
                    23:72:b9:6a:59:a8:ac:18:3a:b5:f6:06:96:71:a1:
                    0e:16:59:86:3a:27:5b:87:c5:7b:56:e0:7b:99:6f:
                    eb:42:3a:d9:bd:d6:ec:8f:4b:50:1f:5f:d8:67:e9:
                    b5:d3:c8:21:df:11:22:4a:07:29:50:2e:03:89:53:
                    5b:7e:cc:fb:be:54:a9:1f:c8:82:c2:32:87:fd:1f:
                    2e:be:2f:61:9d:37:7a:ac:5c:ad:3f:7c:d8:44:63:
                    fd:b7:42:87:27:91:af:ac:c6:b3:c0:25:ae:37:a5:
                    34:02:d1:31:41:00:44:0c:2e:9a:97:56:d6:4e:0c:
                    bf:65:7c:ea:fa:d4:45:e0:57:22:4e:71:f0:5a:16:
                    d7:e1:8c:7c:ee:af:37:11:36:98:c4:15:2d:09:ae:
                    31:e8:b0:07:0f:62:c1:66:51:ab:8e:49:46:96:6b:
                    71:52:55:be:de:73:6b:ca:70:54:2f:68:5a:38:30:
                    ff:96:69:fc:b6:cb:89:aa:f1:36:63:c1:48:cd:b6:
                    6f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B5:63:B2:AB:7A:CE:CA:9D:A3:4E:31:D2:D4:CA:01:BA:61:A8:62
            X509v3 Authority Key Identifier:
                keyid:B6:07:15:58:7E:DC:CB:32:5A:8D:7C:0F:5A:42:D8:F0:43:87:1D:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:e0:d6:10:2e:92:6c:58:d3:04:56:11:96:9d:85:83:6c:0e:
         2c:d7:1a:30:bb:06:2f:f0:a1:4a:ea:85:77:6f:96:6c:77:f3:
         7c:8e:e4:c8:33:ec:78:49:97:75:53:76:22:17:90:cd:76:47:
         ab:50:39:45:85:0a:b7:c4:ed:93:91:b5:36:de:58:1b:91:9c:
         d8:85:34:5f:96:15:57:f4:44:fb:76:47:2b:56:a4:9a:23:d3:
         2a:7e:60:2d:4d:77:2f:02:f7:a4:8e:81:b6:32:12:bd:ec:23:
         4f:a3:e6:12:3a:f9:6e:c7:12:5d:cc:ab:d3:c9:89:fc:e1:10:
         b5:2a:b3:c9:a3:8b:f0:25:d5:4e:00:c1:ce:2f:a4:27:6b:48:
         53:d4:0b:99:16:3f:3d:11:ee:19:ae:ed:dc:13:ce:b1:41:13:
         da:ec:26:92:35:d6:ff:e7:1b:78:86:57:e1:c0:78:a4:3a:cb:
         14:39:28:27:ce:39:60:77:59:f7:28:1f:4e:f6:e9:a5:bc:3b:
         dc:cd:1e:f7:74:f4:e9:11:42:c2:4a:c5:f2:1a:76:0c:ae:be:
         21:4d:b7:7c:58:3f:4c:22:79:58:fd:07:35:d5:c9:7c:fe:40:
         8c:6f:32:e6:97:74:d7:c8:56:e1:35:2e:75:83:27:c4:98:44:
         5f:a7:12:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCI1NVKB28VXq1nqVvVQQKqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MDcxNTU4N2VkY2NiMzI1YThkN2MwZjVhNDJkOGYwNDM4
NzFkYjcwHhcNMjYwOTEwMDEwMDQ0WhcNMjYwOTExMDEwMDQ0WjAzMTEwLwYDVQQD
EyhhNGI1NjNiMmFiN2FjZWNhOWRhMzRlMzFkMmQ0Y2EwMWJhNjFhODYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTAhzfNbTk4Kd92YAFVy9RzdgKzz
X0+UXw6gsWUXIerYJ4IzoDX18uhS7ENIE0vw7/dTYoqCQQogcnsjcrlqWaisGDq1
9gaWcaEOFlmGOidbh8V7VuB7mW/rQjrZvdbsj0tQH1/YZ+m108gh3xEiSgcpUC4D
iVNbfsz7vlSpH8iCwjKH/R8uvi9hnTd6rFytP3zYRGP9t0KHJ5GvrMazwCWuN6U0
AtExQQBEDC6al1bWTgy/ZXzq+tRF4FciTnHwWhbX4Yx87q83ETaYxBUtCa4x6LAH
D2LBZlGrjklGlmtxUlW+3nNrynBUL2haODD/lmn8tsuJqvE2Y8FIzbZvuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKS1Y7Kres7KnaNOMdLUygG6YahiMB8GA1UdIwQY
MBaAFLYHFVh+3MsyWo18D1pC2PBDhx23MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGdjVldIN2N5ekphalh3UFdrTFk4RU9ISGJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8zNTlkNzEtMWU5ZS00MzlmLTkzZjEt
MWY1NDI4Njg0ZmM3LzEvdGdjVldIN2N5ekphalh3UFdrTFk4RU9ISGJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8zNTlkNzEtMWU5ZS00MzlmLTkzZjEtMWY1NDI4Njg0ZmM3
LzEvdGdjVldIN2N5ekphalh3UFdrTFk4RU9ISGJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGODWEC6S
bFjTBFYRlp2Fg2wOLNcaMLsGL/ChSuqFd2+WbHfzfI7kyDPseEmXdVN2IheQzXZH
q1A5RYUKt8Ttk5G1Nt5YG5Gc2IU0X5YVV/RE+3ZHK1akmiPTKn5gLU13LwL3pI6B
tjISvewjT6PmEjr5bscSXcyr08mJ/OEQtSqzyaOL8CXVTgDBzi+kJ2tIU9QLmRY/
PRHuGa7t3BPOsUET2uwmkjXW/+cbeIZX4cB4pDrLFDkoJ845YHdZ9ygfTvbppbw7
3M0e93T06RFCwkrF8hp2DK6+IU23fFg/TCJ5WP0HNdXJfP5AjG8y5pd018hW4TUu
dYMnxJhEX6cSGg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 10:17:47 2026 by rpki-client