Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
File:                     trJJosVixe29t1BY4mvXcBI-la4.mft (raw, json)
Hash identifier:          tHtu3nCnz+TUM9tvy8qjtQHCFpgtAktZXCQk1HWFfjQ=
Subject key identifier:   85:DE:21:7F:CA:B0:12:E6:E8:F7:81:6B:7D:D6:FE:FE:F2:05:A6:11
Authority key identifier: B6:B2:49:A2:C5:62:C5:ED:BD:B7:50:58:E2:6B:D7:70:12:3E:95:AE
Certificate issuer:       /CN=b6b249a2c562c5edbdb75058e26bd770123e95ae
Certificate serial:       01A06DCB7AFD2FA8F0F03DF677A64C34A104
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
Manifest number:          16CB
Signing time:             Fri 04 Sep 2026 19:00:46 +0000
Manifest this update:     Fri 04 Sep 2026 19:00:46 +0000
Manifest next update:     Sat 05 Sep 2026 19:00:46 +0000
Files and hashes:         1: 6RygQ5X9m4wR38_i9WAiO4if2HM.roa (hash: kUWQpysYJq9PoXLRmw04AY/W59nDN80L6l7bNKqqxYU=)
                          2: trJJosVixe29t1BY4mvXcBI-la4.crl (hash: 1kKGyMb0u1Jz7SsCC7VMhXtCziK6cCcuyBZAs9QmQ6c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:cb:7a:fd:2f:a8:f0:f0:3d:f6:77:a6:4c:34:a1:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6b249a2c562c5edbdb75058e26bd770123e95ae
        Validity
            Not Before: Sep  4 19:00:46 2026 GMT
            Not After : Sep  5 19:00:46 2026 GMT
        Subject: CN=85de217fcab012e6e8f7816b7dd6fefef205a611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:82:04:f4:c2:73:ba:02:cb:ee:28:c6:27:43:
                    10:15:bf:7a:6f:9f:7e:73:30:a8:2f:3b:8c:16:c3:
                    90:1b:0e:fd:35:70:54:d6:9c:53:13:26:f3:ab:d7:
                    d0:1b:07:89:ab:5d:f2:6d:2a:70:87:5b:d1:4d:b4:
                    f2:fe:7c:0e:8c:0d:fe:23:b1:bd:e3:ea:94:e3:98:
                    92:d1:9a:10:41:cf:c3:9d:ad:be:ca:58:4b:ce:58:
                    1c:d1:15:c6:ac:5e:fd:c1:33:c4:73:e5:1c:39:f6:
                    b8:f8:79:78:97:51:a4:b0:03:53:9b:09:14:40:28:
                    d5:64:b7:36:75:0b:0d:af:51:43:eb:f1:f9:db:73:
                    c9:16:56:20:db:00:a7:c8:8f:af:99:6b:a0:ee:be:
                    59:b2:40:dc:cf:ef:f8:3e:f4:7f:35:ac:4f:f1:56:
                    22:0e:87:1f:01:5c:52:69:8f:aa:27:1f:bb:1f:f2:
                    ad:b9:86:17:dc:b9:40:5f:05:d1:b3:3f:65:c8:73:
                    80:93:66:c7:54:37:54:d0:2e:aa:28:37:92:aa:46:
                    66:ea:86:0b:6d:68:bf:2d:11:ec:e2:03:06:13:d9:
                    06:d1:70:8e:90:80:80:a1:0c:26:f0:8a:05:4f:1e:
                    e8:e8:2d:ab:a3:7d:ec:1a:5c:e4:ec:0e:e7:f7:ce:
                    1f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:DE:21:7F:CA:B0:12:E6:E8:F7:81:6B:7D:D6:FE:FE:F2:05:A6:11
            X509v3 Authority Key Identifier:
                keyid:B6:B2:49:A2:C5:62:C5:ED:BD:B7:50:58:E2:6B:D7:70:12:3E:95:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:20:71:f0:8e:4f:04:2f:ef:e5:2b:de:4a:5f:7a:d3:d7:a3:
         fb:d2:87:fa:47:7a:34:8e:ef:b9:08:b7:d8:14:d0:99:cc:a4:
         59:ee:64:18:4c:8c:e6:2f:ac:c4:b0:75:ae:f7:93:fd:2c:19:
         6a:bc:92:47:8c:1e:22:a9:d9:6f:87:08:e3:56:e7:cb:48:00:
         85:3d:80:9c:18:41:d8:95:34:06:5f:c4:01:0a:99:b4:10:60:
         c1:d8:e9:a0:88:04:5a:a3:b3:6b:87:75:1f:59:01:9b:2d:cd:
         3e:94:28:01:8d:df:3b:6e:60:c8:13:22:02:9a:91:d0:3e:c6:
         c2:1a:d5:ae:3a:66:25:74:39:e2:fc:db:07:39:79:e1:d8:4f:
         9f:30:8f:9c:2e:7e:61:5f:e3:92:b5:19:0f:c0:eb:29:d8:cc:
         bf:9d:5d:f4:b3:4b:c0:a9:f7:3c:52:c7:dd:31:e9:cb:16:4b:
         79:5a:e3:45:35:d3:75:a5:54:0f:01:ff:b6:70:f0:9a:2d:a4:
         f3:44:28:b2:0d:96:e8:9f:21:04:f8:1a:d2:61:b5:85:a0:62:
         0c:b3:80:0f:59:a3:52:3d:a3:41:83:34:39:de:ff:89:12:81:
         51:01:95:41:78:9f:8d:81:17:d9:4f:c7:bb:54:79:cc:c4:8c:
         b8:19:11:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:05:58 2026 by rpki-client