Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
File:                     TIEnPcsDw0V7eSUL4Qnhml508P0.mft (raw, json)
Hash identifier:          gd6zjTGUMtWIagw4RObEs/q8cAyn4ujLx0R6NvDan8Y=
Subject key identifier:   B6:0B:C1:6E:DD:6D:CE:30:2D:60:D3:22:8C:39:A0:CB:26:04:A5:C0
Authority key identifier: 4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
Certificate issuer:       /CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Certificate serial:       019E1D2312138B0082AA04445486E2ECEAB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
Manifest number:          0B00
Signing time:             Tue 12 May 2026 17:01:38 +0000
Manifest this update:     Tue 12 May 2026 17:01:38 +0000
Manifest next update:     Wed 13 May 2026 17:01:38 +0000
Files and hashes:         1: 1-07ZjHZQ4JAS_TNnMMIuiuGHUu0.roa (hash: Wh4hYAahHN1SwbCKEhKPBAVeToja3QYblB0SUbJdjis=)
                          2: DnIOOoGWRavp5IqwW9ySIPh79lk.roa (hash: rq7BHpoO+/BSPP6hcjEqbUgUHas+lRS8Sfpjq0LOIgU=)
                          3: G2MOc8TWFDIMMJqGe6NYQzJGJRc.roa (hash: 6e+/w4+tJC0z0SxMPZdExM5pB9/UDFdAttq+Dk7OWZs=)
                          4: TIEnPcsDw0V7eSUL4Qnhml508P0.crl (hash: PVQ/DMJjhl2LQfYYqxbDEzuwI05HWKp91nbOTP+Jukg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 17:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:23:12:13:8b:00:82:aa:04:44:54:86:e2:ec:ea:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
        Validity
            Not Before: May 12 17:01:38 2026 GMT
            Not After : May 13 17:01:38 2026 GMT
        Subject: CN=b60bc16edd6dce302d60d3228c39a0cb2604a5c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:86:7c:8e:91:49:c8:58:3a:28:29:ec:a1:ae:
                    e4:09:fe:be:12:3c:65:94:d1:03:89:0f:88:4f:6d:
                    98:38:34:34:3c:1e:c7:67:c7:23:97:b0:29:5b:d1:
                    c6:4e:86:b6:7f:cf:28:b1:3f:5a:1f:3f:0c:18:d8:
                    c3:2e:43:ac:8a:5f:3c:bd:2b:9c:2c:37:88:1d:a1:
                    a6:5c:ea:1f:6d:a3:04:4d:5c:cf:8d:5a:fa:74:a7:
                    cd:dc:ad:8c:a8:58:01:23:10:ba:2f:f1:f1:5e:0c:
                    18:2c:46:7a:29:4d:db:21:41:29:9d:53:d9:23:16:
                    97:35:e5:36:72:a6:d8:fa:23:78:1b:1e:00:55:68:
                    5c:56:58:1d:21:5a:57:65:22:e0:48:2f:81:46:4a:
                    12:cb:20:21:ba:be:81:1a:ce:e0:2b:ad:98:e0:25:
                    1b:04:3f:0b:58:fd:38:28:80:4c:1c:bf:44:b5:a6:
                    46:2c:74:04:eb:a7:b0:9f:1a:74:f1:4e:4a:b9:6a:
                    69:77:65:30:16:05:e4:47:a2:74:f8:28:3b:7a:f9:
                    f8:55:36:30:5e:b0:92:27:d4:07:fd:f8:55:8d:8e:
                    34:5e:b1:c0:7f:d8:7d:55:04:ff:a0:91:5c:0c:ab:
                    d3:30:67:7b:7d:fa:49:41:65:8e:9b:1f:da:e2:94:
                    69:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:0B:C1:6E:DD:6D:CE:30:2D:60:D3:22:8C:39:A0:CB:26:04:A5:C0
            X509v3 Authority Key Identifier:
                keyid:4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:07:94:e6:28:33:ab:6a:2e:aa:c3:a7:ff:26:92:ab:72:c6:
         46:1e:5b:4e:cc:97:e5:30:51:5d:28:a0:bc:d2:a6:45:27:4c:
         7f:b1:56:7f:9a:a4:07:46:49:78:52:1e:50:f1:a2:39:8d:ba:
         d4:19:24:c8:37:ff:a4:6a:ec:bd:4c:60:53:84:81:ee:2e:0b:
         92:31:0f:a8:a1:e8:ca:fb:a0:20:1c:6d:c1:32:cc:51:61:c0:
         ff:3a:9c:ae:b9:3c:27:70:f9:2b:9c:cd:33:88:f9:79:6d:3c:
         ae:fb:10:6b:ad:78:92:14:6c:1b:b2:a1:ae:8b:2d:07:07:72:
         83:9d:cb:a2:e4:49:be:41:03:2a:21:b3:10:56:97:e8:32:6c:
         f3:b2:07:3b:e1:2a:cb:8f:10:9b:8c:ce:8e:2f:e0:39:97:9f:
         9e:9d:d3:63:e0:46:c2:26:83:94:d6:64:8d:bb:91:f2:38:d2:
         75:9b:67:48:54:6c:86:47:ff:f7:4f:fd:61:9d:30:e9:4c:f6:
         a7:63:cc:f9:3e:07:b2:30:e4:1e:1d:83:d5:1a:95:3e:c9:4f:
         16:a0:e7:5e:64:05:c2:d9:13:dc:48:5a:fb:a4:aa:5f:70:c9:
         f9:e2:d4:f0:08:44:f1:16:e4:52:c4:29:44:78:14:f3:dd:a1:
         a9:ab:92:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:44:27 2026 by rpki-client