Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
File:                     TDJWN81N6a_lO9TxIav2IkX2cU8.mft (raw, json)
Hash identifier:          3V9EcOzFYmJ+OGX8JMAwoQzNw9hWC59noVpGC1VlIKk=
Subject key identifier:   A7:79:A2:E1:B6:0E:22:8D:BF:B5:E8:3C:E5:7A:C0:E8:A7:58:8C:64
Authority key identifier: 4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F
Certificate issuer:       /CN=4c325637cd4de9afe53bd4f121abf62245f6714f
Certificate serial:       019FD04CA8CFDE2E2CEF77281F0BBFB3375C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
Manifest number:          0ADC
Signing time:             Wed 05 Aug 2026 05:01:52 +0000
Manifest this update:     Wed 05 Aug 2026 05:01:52 +0000
Manifest next update:     Thu 06 Aug 2026 05:01:52 +0000
Files and hashes:         1: TDJWN81N6a_lO9TxIav2IkX2cU8.crl (hash: LlwM1/Me/znbaI4IDBJcbCoaBrXZTE3aWVKeQcyz+UQ=)
                          2: oPCuq54P2bsSATikpn82yn6-AEM.roa (hash: lHLmqu6Ruee6ZqCasWZKuPLRXPXPUX8ZgrdyBMM4hU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Aug 2026 05:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:d0:4c:a8:cf:de:2e:2c:ef:77:28:1f:0b:bf:b3:37:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c325637cd4de9afe53bd4f121abf62245f6714f
        Validity
            Not Before: Aug  5 05:01:52 2026 GMT
            Not After : Aug  6 05:01:52 2026 GMT
        Subject: CN=a779a2e1b60e228dbfb5e83ce57ac0e8a7588c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:82:19:9d:75:a3:54:11:2a:0b:03:d4:89:6e:
                    8d:28:7d:1c:84:5e:cb:6b:ae:ea:d6:19:67:98:75:
                    23:b3:af:7f:cd:e5:bf:1b:4e:90:51:fd:93:68:e8:
                    a4:4d:46:7e:14:b9:4d:a7:02:82:15:f6:d1:68:8c:
                    e2:93:5f:09:c6:50:66:91:87:55:66:d0:c7:0d:97:
                    44:d7:21:8a:7b:2c:ad:d8:02:e1:c4:cf:4e:98:cb:
                    39:4e:4b:9f:b2:c1:a8:b5:ea:73:f4:48:e6:94:26:
                    e1:3e:f8:eb:c6:ea:e1:d8:a8:ad:ab:c4:68:cd:2b:
                    83:c9:b2:fb:02:eb:5f:7a:0c:ab:2e:8d:4b:c9:7f:
                    3d:c7:d9:ec:2c:62:4b:20:94:de:e4:82:98:da:5b:
                    f6:18:9d:9c:14:9b:f7:83:72:49:c4:92:a5:1c:0f:
                    7b:19:4b:21:cb:26:61:50:7c:5c:0e:8c:d0:04:a8:
                    47:d4:36:20:71:62:5a:95:38:7d:08:99:35:ae:8e:
                    c8:7e:ac:08:e8:b1:be:c1:c9:e1:d5:66:37:72:90:
                    1e:dc:ee:4d:9b:17:97:07:0a:a4:d2:3c:2c:17:41:
                    dd:f5:d7:0f:69:bf:95:55:7b:1b:97:01:4d:fe:d8:
                    14:20:30:e7:33:bb:98:5d:fd:d0:90:20:21:da:f7:
                    9c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:79:A2:E1:B6:0E:22:8D:BF:B5:E8:3C:E5:7A:C0:E8:A7:58:8C:64
            X509v3 Authority Key Identifier:
                keyid:4C:32:56:37:CD:4D:E9:AF:E5:3B:D4:F1:21:AB:F6:22:45:F6:71:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDJWN81N6a_lO9TxIav2IkX2cU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/598415-445e-468d-9f8e-d19839206ce6/1/TDJWN81N6a_lO9TxIav2IkX2cU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:8b:4b:ef:13:69:3a:09:68:56:a8:e4:6c:e1:97:28:6e:91:
         38:0d:47:49:f7:47:b7:04:3f:47:b7:3a:64:e6:86:07:29:5d:
         cc:90:92:3e:a0:83:97:66:7e:8b:28:3f:50:b8:66:31:45:05:
         2c:e5:c8:c6:d3:15:25:77:a9:ea:76:fa:d4:5a:bc:cd:55:6e:
         92:17:e4:a9:3e:f5:97:71:c0:b7:9c:85:4d:22:f6:7f:d8:35:
         f7:96:c8:7c:ca:bf:2e:17:48:98:93:15:df:c8:6c:fe:37:9a:
         d7:b3:81:63:c9:fb:e0:e9:ca:c8:4d:34:96:a9:dc:65:b2:74:
         da:3d:b1:bc:62:7a:96:71:ad:d8:f6:63:20:92:01:05:af:d9:
         7d:c4:b9:ca:d0:83:9f:c3:93:ab:81:45:d7:d1:de:8e:26:60:
         1d:6d:74:b5:b7:aa:1a:93:d8:8d:9e:f9:0a:1e:35:33:d6:26:
         a9:71:5b:f4:61:d3:1d:b3:00:f3:9e:e4:7f:66:58:5c:11:14:
         70:c5:e8:c4:bb:0b:1c:90:75:97:5a:3d:52:6c:fb:61:d3:24:
         ae:32:97:1a:56:9c:2f:3b:2a:21:8f:51:b8:c7:b8:9c:ea:28:
         34:e4:2b:c1:c1:4b:d1:bc:62:51:25:2d:4f:89:16:ac:e4:3d:
         d9:5f:97:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/QTKjP3i4s73coHwu/szdcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMzI1NjM3Y2Q0ZGU5YWZlNTNiZDRmMTIxYWJmNjIyNDVm
NjcxNGYwHhcNMjYwODA1MDUwMTUyWhcNMjYwODA2MDUwMTUyWjAzMTEwLwYDVQQD
EyhhNzc5YTJlMWI2MGUyMjhkYmZiNWU4M2NlNTdhYzBlOGE3NTg4YzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IIZnXWjVBEqCwPUiW6NKH0chF7L
a67q1hlnmHUjs69/zeW/G06QUf2TaOikTUZ+FLlNpwKCFfbRaIzik18JxlBmkYdV
ZtDHDZdE1yGKeyyt2ALhxM9OmMs5TkufssGotepz9EjmlCbhPvjrxurh2Kitq8Ro
zSuDybL7AutfegyrLo1LyX89x9nsLGJLIJTe5IKY2lv2GJ2cFJv3g3JJxJKlHA97
GUshyyZhUHxcDozQBKhH1DYgcWJalTh9CJk1ro7IfqwI6LG+wcnh1WY3cpAe3O5N
mxeXBwqk0jwsF0Hd9dcPab+VVXsblwFN/tgUIDDnM7uYXf3QkCAh2vecBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKd5ouG2DiKNv7XoPOV6wOinWIxkMB8GA1UdIwQY
MBaAFEwyVjfNTemv5TvU8SGr9iJF9nFPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVERKV044MU42YV9sTzlUeElhdjJJa1gyY1U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81OTg0MTUtNDQ1ZS00NjhkLTlmOGUt
ZDE5ODM5MjA2Y2U2LzEvVERKV044MU42YV9sTzlUeElhdjJJa1gyY1U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy81OTg0MTUtNDQ1ZS00NjhkLTlmOGUtZDE5ODM5MjA2Y2U2
LzEvVERKV044MU42YV9sTzlUeElhdjJJa1gyY1U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYItL7xNp
OgloVqjkbOGXKG6ROA1HSfdHtwQ/R7c6ZOaGByldzJCSPqCDl2Z+iyg/ULhmMUUF
LOXIxtMVJXep6nb61Fq8zVVukhfkqT71l3HAt5yFTSL2f9g195bIfMq/LhdImJMV
38hs/jea17OBY8n74OnKyE00lqncZbJ02j2xvGJ6lnGt2PZjIJIBBa/ZfcS5ytCD
n8OTq4FF19HejiZgHW10tbeqGpPYjZ75Ch41M9YmqXFb9GHTHbMA857kf2ZYXBEU
cMXoxLsLHJB1l1o9Umz7YdMkrjKXGlacLzsqIY9RuMe4nOooNOQrwcFL0bxiUSUt
T4kWrOQ92V+XrA==
-----END CERTIFICATE-----
Generated at Wed Aug 5 15:04:57 2026 by rpki-client