Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
File:                     TnRhR3tZt7wJBvbOYGULs60t7lc.mft (raw, json)
Hash identifier:          6PRrKZogAppyoLuHlqg6mBIBXtZNK52vOrHe2QBCb2w=
Subject key identifier:   27:F6:8B:D2:7B:5B:92:2F:65:91:FA:15:25:25:4B:39:78:21:48:C7
Authority key identifier: 4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
Certificate issuer:       /CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Certificate serial:       019FCA49ED1CB5E2B1D79FC6FB0CBDCEFF69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
Manifest number:          0A39
Signing time:             Tue 04 Aug 2026 01:01:10 +0000
Manifest this update:     Tue 04 Aug 2026 01:01:10 +0000
Manifest next update:     Wed 05 Aug 2026 01:01:10 +0000
Files and hashes:         1: 75HOIa64fDxinyOIx01Blej1elM.roa (hash: EnalwxHiL7Yvbfzav+WqLHXQw4xqRSm24VA6Qft2ERI=)
                          2: TnRhR3tZt7wJBvbOYGULs60t7lc.crl (hash: nDNxey9R9ZqvfCVu0b7o1lcvkfHRuW334zSvjZSV5vE=)
                          3: gNIwlQhqrQHrAmcQt_v7U7yPQls.roa (hash: m7SKJRURhbOe8VuRCSBhxT8f7MRPwICOeiYwoIYek9I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 04 Aug 2026 23:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ca:49:ed:1c:b5:e2:b1:d7:9f:c6:fb:0c:bd:ce:ff:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
        Validity
            Not Before: Aug  4 01:01:10 2026 GMT
            Not After : Aug  5 01:01:10 2026 GMT
        Subject: CN=27f68bd27b5b922f6591fa1525254b39782148c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6c:fb:98:03:c3:3b:93:cf:ce:86:8d:d0:2b:
                    22:09:5e:5c:8f:12:6a:25:ba:20:bb:2e:a5:7b:dc:
                    79:e1:16:d6:61:8b:91:17:3b:f4:d6:fa:5a:60:6a:
                    f1:7b:be:56:94:03:1b:30:a5:c4:19:a7:75:76:39:
                    c2:5f:7e:a1:2c:87:79:ee:ff:a1:8b:2c:b3:a2:25:
                    f0:29:27:9b:84:69:79:76:57:75:c5:63:b9:f4:4a:
                    36:b7:64:c5:ef:ca:5b:0b:c1:db:ce:4e:1d:8d:3e:
                    18:2d:e5:1b:02:69:18:24:ea:06:2f:f5:76:7d:5a:
                    cd:c3:a9:11:80:9e:ed:85:f7:fd:a7:d2:d1:da:d6:
                    0a:89:21:b5:9b:e0:fc:c4:73:fc:69:1e:92:08:a9:
                    c8:34:53:92:4b:2a:82:28:f2:e2:f2:e8:9d:c6:d4:
                    a7:f1:9b:73:e7:71:5c:27:a3:7b:9e:bf:ee:9d:49:
                    68:28:4b:8d:bc:1a:68:21:de:9b:72:75:ae:3d:5d:
                    76:c0:c5:3e:82:5a:79:1e:af:fc:91:a9:ed:6f:2f:
                    a3:0f:49:17:6d:aa:d1:8f:df:2d:6a:35:e0:a6:3a:
                    d9:1d:1d:ca:16:33:a6:aa:4c:e4:a2:0d:e5:aa:bc:
                    a2:c3:7f:ce:70:d2:70:08:dc:d0:2e:05:63:31:34:
                    80:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F6:8B:D2:7B:5B:92:2F:65:91:FA:15:25:25:4B:39:78:21:48:C7
            X509v3 Authority Key Identifier:
                keyid:4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:fc:99:25:d6:96:f2:cb:59:d6:20:29:05:7c:69:71:95:24:
         e2:65:7c:9e:cd:f0:ba:f0:5d:87:be:ab:9e:d7:dd:7a:95:1c:
         88:b1:ac:bf:29:89:40:7f:eb:ba:b1:f8:5d:06:1d:e6:f5:6b:
         fc:63:73:18:2f:ef:98:8e:dc:4f:47:71:5e:ee:a2:e8:9d:a7:
         ef:1a:24:7d:d9:ec:42:98:d2:a0:13:79:2a:44:5c:b3:b2:7c:
         18:90:97:52:95:e8:6f:09:66:7d:81:03:1b:d8:b6:7d:63:32:
         29:25:20:94:4d:df:f6:3e:37:61:8d:40:e3:31:3e:15:3b:c3:
         11:28:89:45:dd:0e:fb:8c:ef:c2:87:3c:c5:9e:5c:0c:1f:ee:
         89:6d:bf:dc:ba:09:52:8f:f7:76:04:92:1c:8b:41:0e:dd:54:
         b2:e4:d9:c9:fe:67:de:7f:4d:9e:44:6e:dd:7c:2e:4f:26:75:
         35:10:dd:de:0f:38:06:ec:8c:ac:e5:e8:13:a0:da:82:1d:d9:
         f2:56:7e:74:87:3a:cd:4e:22:cb:dd:b1:e3:ac:7a:43:13:ba:
         e1:3d:82:ec:eb:95:8b:5c:cf:36:9c:56:8d:6b:6a:8b:bc:75:
         cd:e1:fc:79:15:c9:a6:83:82:27:85:70:11:aa:a8:94:34:b7:
         e7:73:ca:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 09:54:24 2026 by rpki-client