Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft
File:                     Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft (raw, json)
Hash identifier:          /iGCRz6MKM3rI/d/hno2xHb/jghCtvmDgdjpVWsM8H0=
Subject key identifier:   16:6F:BE:46:B3:FC:69:A4:53:DE:EE:50:8C:2A:20:D8:2F:49:26:80
Authority key identifier: 4E:0F:31:C6:EF:DB:9A:44:5B:8F:17:2F:0B:E0:DF:D5:14:2B:E0:00
Certificate issuer:       /CN=4e0f31c6efdb9a445b8f172f0be0dfd5142be000
Certificate serial:       019D2B4E38DAB91D5EEC5869440550D7C85C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft
Manifest number:          02A4
Signing time:             Thu 26 Mar 2026 18:00:39 +0000
Manifest this update:     Thu 26 Mar 2026 18:00:39 +0000
Manifest next update:     Fri 27 Mar 2026 18:00:39 +0000
Files and hashes:         1: Tg8xxu_bmkRbjxcvC-Df1RQr4AA.crl (hash: NY4FXq/cQ0IXKLRoQgJurEeHGQcCybxUNfi+cQRtWGw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:4e:38:da:b9:1d:5e:ec:58:69:44:05:50:d7:c8:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e0f31c6efdb9a445b8f172f0be0dfd5142be000
        Validity
            Not Before: Mar 26 18:00:39 2026 GMT
            Not After : Mar 27 18:00:39 2026 GMT
        Subject: CN=166fbe46b3fc69a453deee508c2a20d82f492680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ed:c0:3a:83:aa:c3:e7:b6:84:fc:dc:5f:ea:
                    00:46:1a:3e:85:78:a4:8d:26:85:59:f8:64:b8:0e:
                    b3:05:a7:6a:1c:8d:3c:73:fa:62:52:42:47:f0:40:
                    35:4c:37:ee:3d:f0:30:10:68:f0:fd:17:14:72:cd:
                    02:0e:19:22:41:78:2f:14:85:e0:6e:6a:09:b7:04:
                    c5:cc:c9:c2:20:42:05:27:86:19:07:e3:62:53:60:
                    7b:f3:c6:5a:a7:21:c4:55:d7:93:ef:2d:a5:ea:cc:
                    c3:48:8e:5f:15:98:1b:a2:58:9d:c0:83:2e:44:5e:
                    93:ab:ff:55:b2:7d:1d:66:ae:b4:0c:d8:c2:23:80:
                    8a:48:e2:d3:ae:d2:67:d5:25:f3:77:4b:fd:69:bc:
                    6f:3f:29:dd:02:d7:94:83:7d:26:56:67:9e:bd:a9:
                    be:c9:bc:37:75:b7:36:b0:40:05:5d:97:ca:d7:6d:
                    58:93:8f:a7:4e:bd:4d:18:97:87:86:f8:64:4d:ce:
                    ad:9e:18:6b:87:da:e4:d6:a4:8b:1e:95:aa:82:f6:
                    07:cc:6f:67:84:97:46:5d:4e:58:7c:14:83:80:ba:
                    91:8e:fa:64:fe:fa:de:e5:e6:a4:61:11:88:7b:c2:
                    1b:46:8c:70:cd:7c:fa:97:65:8c:82:d1:92:b1:e3:
                    d0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:6F:BE:46:B3:FC:69:A4:53:DE:EE:50:8C:2A:20:D8:2F:49:26:80
            X509v3 Authority Key Identifier:
                keyid:4E:0F:31:C6:EF:DB:9A:44:5B:8F:17:2F:0B:E0:DF:D5:14:2B:E0:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:87:e1:5e:b9:e6:97:b6:5b:a9:b4:28:b6:39:85:4b:2a:9e:
         02:89:c7:9e:5f:c8:46:c8:6b:7e:a6:52:8a:7b:d4:4c:27:4d:
         bd:07:8e:f0:26:07:68:f1:54:da:18:f9:23:26:90:20:5b:ab:
         3b:d4:e6:bb:1d:15:80:40:24:30:54:ab:69:fe:74:61:8e:67:
         e2:6f:32:4e:60:45:0e:51:05:f9:3e:69:1f:cd:dc:e0:7f:4b:
         55:3d:44:dc:ec:2c:1d:5e:a8:fc:1a:d4:a6:43:90:a2:cd:2c:
         93:dc:27:bf:0f:11:e1:11:16:82:84:8a:62:0e:3f:e1:72:94:
         66:fe:8b:18:8c:cd:9e:76:e9:23:48:39:78:e9:de:f5:61:ed:
         d4:68:b4:82:d2:24:65:0b:23:79:70:9e:60:0b:71:c2:e5:f4:
         02:b3:aa:dc:4a:23:0a:c5:ae:53:4e:43:6a:7b:a1:7a:fa:6f:
         1f:14:3f:9d:cd:01:f6:fc:17:09:88:72:74:08:8b:d6:17:1d:
         83:f2:6d:fb:0d:24:1c:22:82:9f:9d:48:86:c7:f4:55:a5:42:
         2c:35:3e:e8:3c:f2:bf:1a:31:52:38:4e:54:8b:74:bd:75:a2:
         69:bd:ec:eb:22:0d:4f:c5:36:02:a6:a0:67:92:d1:e9:a2:09:
         08:0d:92:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----