Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
File:                     TXCvGpmIbJEB0TX1S9K97zWLJm4.mft (raw, json)
Hash identifier:          XxpTQzd2qdKFSM0Ye2WMne2CDlVth6lHc9gxCvGA2tc=
Subject key identifier:   C1:95:C6:17:10:9E:B4:6D:06:48:00:99:C7:7F:D9:5E:9D:CF:B9:28
Authority key identifier: 4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E
Certificate issuer:       /CN=4d70af1a99886c9101d135f54bd2bdef358b266e
Certificate serial:       01A16CB60BD18C4F4BAD5CC4875AD78E9C7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
Manifest number:          11A2
Signing time:             Sat 24 Oct 2026 07:00:32 +0000
Manifest this update:     Sat 24 Oct 2026 07:00:32 +0000
Manifest next update:     Sun 25 Oct 2026 07:00:32 +0000
Files and hashes:         1: 0tktadOdx4n8mac4w9y4uxxnQb4.roa (hash: n46RKOzZ9/eSRXSwMZil9zlLwS3ZgBVtTMxO4eNCf08=)
                          2: AzQxJhJ4Z1TEqxs8ToOa3faLKx8.roa (hash: aCSm8m0t4y+fvwbcBrYNhHamTehxOv4Ukp4HETVoDPE=)
                          3: IZQtORr-3U05VM82NLGSac5kUKo.roa (hash: vKvrHvX6TuHXpl6ZvCaEsWmF+MUfHlyXbUCXrMpEZ9U=)
                          4: TXCvGpmIbJEB0TX1S9K97zWLJm4.crl (hash: WGdZWueAn38g+nn+uEHtNGPWEfzFN680Ur4MDKsPJ5U=)
                          5: rd1TYdEXPHhLUYvq912Q58Dh15E.roa (hash: ged8RYg6t00YYbjATYOf0qeEgk1jUhkA3s1XP4KCL6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 05:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6c:b6:0b:d1:8c:4f:4b:ad:5c:c4:87:5a:d7:8e:9c:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d70af1a99886c9101d135f54bd2bdef358b266e
        Validity
            Not Before: Oct 24 07:00:32 2026 GMT
            Not After : Oct 25 07:00:32 2026 GMT
        Subject: CN=c195c617109eb46d06480099c77fd95e9dcfb928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e4:5c:62:c7:d7:a9:cd:ff:aa:12:e3:55:10:
                    de:df:b6:c9:48:88:fb:d4:c5:a3:2d:36:73:24:53:
                    cd:33:ce:07:00:1f:44:a7:c5:91:27:56:3f:b5:b7:
                    cb:bb:a3:8d:2c:28:83:5b:bd:07:fa:4e:04:7d:e4:
                    68:36:60:0f:75:50:84:77:50:26:ce:51:9c:57:30:
                    d0:8b:b8:64:d8:cc:42:b5:de:79:25:ef:90:00:02:
                    d9:00:22:d9:a7:10:c0:99:87:78:61:db:62:23:8f:
                    98:9c:fc:9e:c9:3d:0a:1f:61:b8:e9:7b:43:32:bf:
                    0a:d0:c1:23:21:ad:16:ee:9a:99:84:b0:c6:39:15:
                    cf:49:25:d8:ca:ba:ad:fc:70:40:83:16:77:64:42:
                    5a:fd:83:ff:31:84:13:be:2f:43:d3:3c:88:b7:2b:
                    78:ee:13:6c:c8:2e:56:9d:70:91:f5:97:d9:0a:78:
                    a3:2a:ed:6e:f8:0c:d2:00:d6:85:a1:6e:6f:32:03:
                    7c:8b:0e:cc:0e:3a:e5:6d:82:ec:f5:c2:2e:a9:98:
                    eb:61:39:fe:e0:e1:99:c7:48:be:5d:bb:79:ad:b2:
                    3b:04:58:1d:c9:d4:ff:f6:96:c3:c9:76:17:ee:39:
                    54:11:d1:fe:3b:9d:f0:12:b4:a4:3d:e5:aa:66:61:
                    20:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:95:C6:17:10:9E:B4:6D:06:48:00:99:C7:7F:D9:5E:9D:CF:B9:28
            X509v3 Authority Key Identifier:
                keyid:4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:64:e4:ba:09:9f:8e:90:ae:93:17:db:e2:3a:77:76:63:73:
         a1:f7:2e:b5:14:e3:c1:68:77:dd:f5:ac:08:13:d6:ee:91:b7:
         0a:95:ed:8c:81:6c:f9:ba:69:7a:b4:48:6e:f9:73:26:44:35:
         91:29:cd:03:a1:5d:61:76:68:b5:95:3c:48:d2:59:cc:5f:ab:
         8e:1a:23:cb:28:c1:e6:64:2a:c9:c5:7d:76:ac:4c:ce:19:8a:
         f1:8d:a2:35:03:d2:ae:59:06:a5:5b:cf:ea:ba:d2:a0:dd:d5:
         43:82:f7:58:86:fe:91:1a:5c:4e:01:8e:48:84:ad:62:9e:09:
         e9:9a:8f:79:d1:b7:f3:c1:9b:db:d4:18:c3:cb:2e:f6:1b:b2:
         f5:8e:be:10:d6:d8:60:51:26:00:02:0a:52:e5:b3:63:c9:20:
         0a:c1:c8:b1:62:87:2a:ef:dd:8e:30:e4:e4:d6:3c:18:4c:c5:
         4c:cf:78:51:72:71:5a:96:a6:ff:d2:8a:62:98:cf:c0:96:e7:
         ad:4a:f0:09:96:0f:6f:de:92:8c:2a:30:44:05:17:fa:36:4a:
         d6:ac:d6:e7:a9:ce:b8:f8:1f:11:47:f8:cf:95:4b:d7:c1:2c:
         04:37:0e:ec:92:5a:57:eb:8a:9b:8e:b2:41:af:73:da:76:ed:
         c1:b3:76:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFstgvRjE9LrVzEh1rXjpx/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNzBhZjFhOTk4ODZjOTEwMWQxMzVmNTRiZDJiZGVmMzU4
YjI2NmUwHhcNMjYxMDI0MDcwMDMyWhcNMjYxMDI1MDcwMDMyWjAzMTEwLwYDVQQD
EyhjMTk1YzYxNzEwOWViNDZkMDY0ODAwOTljNzdmZDk1ZTlkY2ZiOTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5uRcYsfXqc3/qhLjVRDe37bJSIj7
1MWjLTZzJFPNM84HAB9Ep8WRJ1Y/tbfLu6ONLCiDW70H+k4EfeRoNmAPdVCEd1Am
zlGcVzDQi7hk2MxCtd55Je+QAALZACLZpxDAmYd4YdtiI4+YnPyeyT0KH2G46XtD
Mr8K0MEjIa0W7pqZhLDGORXPSSXYyrqt/HBAgxZ3ZEJa/YP/MYQTvi9D0zyItyt4
7hNsyC5WnXCR9ZfZCnijKu1u+AzSANaFoW5vMgN8iw7MDjrlbYLs9cIuqZjrYTn+
4OGZx0i+Xbt5rbI7BFgdydT/9pbDyXYX7jlUEdH+O53wErSkPeWqZmEguwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGVxhcQnrRtBkgAmcd/2V6dz7koMB8GA1UdIwQY
MBaAFE1wrxqZiGyRAdE19UvSve81iyZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFhDdkdwbUliSkVCMFRYMVM5Szk3eldMSm00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hOThmYzctNzkzNS00ZWFlLTk2MmEt
NDYxYWIwZWNlZTAxLzEvVFhDdkdwbUliSkVCMFRYMVM5Szk3eldMSm00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9hOThmYzctNzkzNS00ZWFlLTk2MmEtNDYxYWIwZWNlZTAx
LzEvVFhDdkdwbUliSkVCMFRYMVM5Szk3eldMSm00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATmTkugmf
jpCukxfb4jp3dmNzofcutRTjwWh33fWsCBPW7pG3CpXtjIFs+bpperRIbvlzJkQ1
kSnNA6FdYXZotZU8SNJZzF+rjhojyyjB5mQqycV9dqxMzhmK8Y2iNQPSrlkGpVvP
6rrSoN3VQ4L3WIb+kRpcTgGOSIStYp4J6ZqPedG388Gb29QYw8su9huy9Y6+ENbY
YFEmAAIKUuWzY8kgCsHIsWKHKu/djjDk5NY8GEzFTM94UXJxWpam/9KKYpjPwJbn
rUrwCZYPb96SjCowRAUX+jZK1qzW56nOuPgfEUf4z5VL18EsBDcO7JJaV+uKm46y
Qa9z2nbtwbN2vw==
-----END CERTIFICATE-----
Generated at Sat Oct 24 14:28:07 2026 by rpki-client