Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
File:                     TlFGu04hl0T1jCaOnsYhwY3SKcM.mft (raw, json)
Hash identifier:          gbTqaADydoZWPsSyfjyXmGtxBemZciCaVE6p4D9x0rQ=
Subject key identifier:   FA:A2:FC:9A:C7:8A:06:05:1F:17:53:3C:94:6A:9A:A6:A5:38:F1:3C
Authority key identifier: 4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
Certificate issuer:       /CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Certificate serial:       01A08D8D951D651AE356D05536BDFA5001B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
Manifest number:          1A5C
Signing time:             Thu 10 Sep 2026 23:01:01 +0000
Manifest this update:     Thu 10 Sep 2026 23:01:01 +0000
Manifest next update:     Fri 11 Sep 2026 23:01:01 +0000
Files and hashes:         1: KFywMW4737-JPpo7ntDdVjcljY0.roa (hash: y+0Jhvx7MYfdfSZW5SGIaISfaSBvz9VuHqmA13RqQx0=)
                          2: K_yCMW3gEKPx-UvDR4vcUDQfi04.asa (hash: 5ltTYL5p8Fw8k0ASnDZeUNbyyXbm27rjjhji8a6UNc0=)
                          3: TlFGu04hl0T1jCaOnsYhwY3SKcM.crl (hash: MhsBFGhqt7iMYC19Gz8hEEVOkLSinEMmGr3IQFDS4MU=)
                          4: fhNDpez0tEXT55T0FQuT3YRDXos.roa (hash: +VEaHjpilB4sNBhuKG3GgrFbP8VWjeNr6HEMkdwaBYk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8d:8d:95:1d:65:1a:e3:56:d0:55:36:bd:fa:50:01:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
        Validity
            Not Before: Sep 10 23:01:01 2026 GMT
            Not After : Sep 11 23:01:01 2026 GMT
        Subject: CN=faa2fc9ac78a06051f17533c946a9aa6a538f13c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6c:81:ab:d4:ea:d6:f9:0f:5b:a9:f2:e1:ad:
                    94:64:e0:93:b2:ab:76:f8:ba:33:25:4d:6f:d1:33:
                    a8:53:f7:5a:32:b7:29:45:09:13:12:9e:3f:59:20:
                    c2:28:55:2d:1d:38:9e:be:89:f5:4f:fd:d8:f9:c2:
                    1b:9b:39:89:d8:08:2d:6a:ee:2a:c6:27:47:3e:72:
                    81:1a:15:27:4c:de:73:8b:4f:94:d2:f3:a2:83:e8:
                    32:4b:34:b8:dd:0f:5b:c8:1c:4c:0e:0b:88:04:e1:
                    ad:99:d3:c3:3d:38:55:50:14:12:b7:00:f3:a9:d9:
                    61:75:ed:75:b4:8e:dc:91:f1:12:3d:c9:70:01:c8:
                    dd:1c:ac:71:01:81:c2:a9:38:28:85:94:f8:57:1a:
                    cf:fd:12:23:5d:ae:b1:7d:42:23:e4:c8:f9:64:29:
                    13:fc:22:23:33:ca:62:01:7a:c1:78:41:59:98:e8:
                    1f:0f:7c:77:d8:69:b4:68:a3:8e:89:80:d4:83:01:
                    31:3a:32:2a:e9:37:f8:9a:7b:17:5e:d0:19:94:38:
                    ce:c0:49:f3:bc:ab:62:72:ad:ff:1a:50:b1:8a:3b:
                    9d:0f:87:61:15:8a:eb:bd:d8:fb:76:8e:c0:be:a0:
                    bd:53:b2:52:a3:fd:03:11:20:c4:74:45:67:57:dc:
                    d1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A2:FC:9A:C7:8A:06:05:1F:17:53:3C:94:6A:9A:A6:A5:38:F1:3C
            X509v3 Authority Key Identifier:
                keyid:4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:fc:80:2b:44:2a:2e:94:36:b2:00:af:74:a7:5b:78:88:78:
         f0:7c:fe:12:bb:91:45:e4:6f:31:85:a8:cd:88:36:17:e4:72:
         19:47:7c:4f:8b:dc:5e:82:8e:88:a7:73:0a:02:a1:de:33:96:
         ab:dc:19:cc:20:6f:13:d2:30:bc:3d:4f:42:75:6f:54:ae:30:
         8f:a4:7e:bc:b3:6d:9b:91:48:12:76:91:ab:99:0a:6e:66:d5:
         f9:09:7c:9b:ea:5a:ae:80:83:de:de:a7:24:b8:43:45:d6:38:
         d6:b4:ee:ff:48:e6:4a:1c:ba:c4:49:56:88:3f:37:c0:5c:88:
         a6:a9:ae:64:19:99:21:7f:02:78:ba:b2:2e:a4:80:94:b8:d8:
         03:35:f2:17:9c:45:79:c3:a4:b9:52:e8:04:1e:e1:b0:55:eb:
         36:ea:d1:a3:a1:ef:2b:b7:8b:ea:8b:c9:24:8c:a2:d5:52:00:
         88:88:28:9a:74:71:bb:5e:b0:ac:60:cc:7b:1e:a0:a7:73:2f:
         aa:ef:98:c2:d7:06:a0:ae:f5:61:72:5b:73:f0:3e:98:e0:e6:
         4e:65:c3:5b:40:d2:47:c3:a2:6f:5e:6e:73:5b:18:67:b9:55:
         e2:0f:3b:cd:66:20:1a:8c:34:66:c3:eb:41:56:60:c2:cb:83:
         9c:e4:04:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:27:08 2026 by rpki-client