Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
File:                     Tm_7mQbuvrofWxpVju1jcvZTzoY.mft (raw, json)
Hash identifier:          YoxkNfOAPqMZ/UnyFmpTZdhaE0sC3ndFZJG1ry5cdCU=
Subject key identifier:   3F:C4:42:9F:76:90:80:99:01:79:EE:DA:82:21:51:D1:3E:45:4B:C3
Authority key identifier: 4E:6F:FB:99:06:EE:BE:BA:1F:5B:1A:55:8E:ED:63:72:F6:53:CE:86
Certificate issuer:       /CN=4e6ffb9906eebeba1f5b1a558eed6372f653ce86
Certificate serial:       019D2583801E6F1A706BBA7B946EBEA3149B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
Manifest number:          1882
Signing time:             Wed 25 Mar 2026 15:01:08 +0000
Manifest this update:     Wed 25 Mar 2026 15:01:08 +0000
Manifest next update:     Thu 26 Mar 2026 15:01:08 +0000
Files and hashes:         1: Tm_7mQbuvrofWxpVju1jcvZTzoY.crl (hash: 74F6TBmCv2XIZMmadfff00UeLW7T0veiD4ofc011OD4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:83:80:1e:6f:1a:70:6b:ba:7b:94:6e:be:a3:14:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e6ffb9906eebeba1f5b1a558eed6372f653ce86
        Validity
            Not Before: Mar 25 15:01:08 2026 GMT
            Not After : Mar 26 15:01:08 2026 GMT
        Subject: CN=3fc4429f769080990179eeda822151d13e454bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:59:f3:24:90:3f:36:46:a9:bb:d6:de:f1:fe:
                    33:91:00:10:cd:20:61:2e:c0:44:a9:46:22:b2:34:
                    87:0f:0e:f5:53:1c:74:6c:84:41:9f:be:89:1a:9f:
                    0e:16:d2:6f:da:31:d9:ca:2d:c9:91:ab:10:58:a4:
                    81:a8:44:60:5e:2f:96:16:fd:9e:55:e7:ec:d8:24:
                    de:a2:56:28:2d:53:72:1e:b8:7e:27:f3:e6:54:e4:
                    c5:b8:66:e1:62:a8:1e:50:4a:05:f8:39:fb:65:24:
                    bd:19:e1:0c:47:58:b2:a1:9a:f0:f7:12:b8:8c:d6:
                    bb:97:af:b1:87:f1:2b:5f:5f:25:12:a9:c6:b0:32:
                    e5:36:4b:c0:8c:de:fb:3c:08:ff:be:bf:53:87:68:
                    f4:80:ad:c5:0d:66:95:00:9d:54:c5:f2:45:c3:61:
                    d7:3a:53:27:e4:e2:7c:b8:28:aa:44:00:58:0d:62:
                    62:11:77:15:60:b1:e3:ba:f2:d2:7d:c9:ed:34:ee:
                    83:db:bb:6c:be:ef:9e:6d:37:01:9a:d6:51:b0:e8:
                    b0:a1:84:6e:2a:4b:38:fb:2c:67:a1:f8:d2:84:05:
                    cd:80:00:15:98:8f:23:d0:7e:59:0c:1c:cd:c6:2e:
                    4b:24:65:83:a6:08:37:3b:e8:16:a4:14:62:f7:af:
                    9f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C4:42:9F:76:90:80:99:01:79:EE:DA:82:21:51:D1:3E:45:4B:C3
            X509v3 Authority Key Identifier:
                keyid:4E:6F:FB:99:06:EE:BE:BA:1F:5B:1A:55:8E:ED:63:72:F6:53:CE:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tm_7mQbuvrofWxpVju1jcvZTzoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1980bd-0753-4161-b6f5-9c72e157abb3/1/Tm_7mQbuvrofWxpVju1jcvZTzoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:c0:9f:20:19:39:1c:71:f0:da:6d:a6:65:50:24:a1:3d:67:
         2c:ab:60:65:e4:65:fd:5d:a2:14:5c:85:4f:45:76:f8:eb:99:
         c0:0f:87:c9:37:f0:90:8d:6d:5a:8c:4e:09:18:dd:0a:d0:1e:
         f1:1d:c2:33:48:8d:40:42:c7:0a:eb:90:bc:39:05:4d:3f:ac:
         3f:01:64:5a:07:96:38:6c:ba:71:37:4e:24:ae:94:35:e4:31:
         5e:95:9f:22:6a:80:9a:a5:bd:b2:19:a1:69:32:30:dc:1a:89:
         b0:ac:b8:de:a9:7f:6a:b3:90:54:22:56:df:f8:be:36:2d:45:
         f8:a2:25:2b:d9:b9:4d:49:3a:92:47:6f:34:27:d1:a8:5c:77:
         62:73:14:da:e2:5e:e4:01:d6:06:0a:6b:bd:5c:14:4e:8b:0d:
         c8:8e:85:8a:63:6f:ba:f8:93:19:66:ca:44:c6:22:80:e2:30:
         35:9d:db:50:c5:83:26:47:4a:f4:2e:b2:af:34:82:6d:4d:00:
         d1:86:78:02:ce:dc:7d:96:69:3f:23:31:d7:2b:a1:25:a9:58:
         0f:8c:c5:c2:71:e9:f1:37:9a:e2:21:fd:8a:c6:b3:3f:fe:b8:
         6d:47:f6:a7:58:c5:9a:e0:b2:92:40:bb:5e:db:70:4b:2f:a7:
         bb:61:78:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg4Aebxpwa7p7lG6+oxSbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNmZmYjk5MDZlZWJlYmExZjViMWE1NThlZWQ2MzcyZjY1
M2NlODYwHhcNMjYwMzI1MTUwMTA4WhcNMjYwMzI2MTUwMTA4WjAzMTEwLwYDVQQD
EygzZmM0NDI5Zjc2OTA4MDk5MDE3OWVlZGE4MjIxNTFkMTNlNDU0YmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFnzJJA/Nkapu9be8f4zkQAQzSBh
LsBEqUYisjSHDw71Uxx0bIRBn76JGp8OFtJv2jHZyi3JkasQWKSBqERgXi+WFv2e
Vefs2CTeolYoLVNyHrh+J/PmVOTFuGbhYqgeUEoF+Dn7ZSS9GeEMR1iyoZrw9xK4
jNa7l6+xh/ErX18lEqnGsDLlNkvAjN77PAj/vr9Th2j0gK3FDWaVAJ1UxfJFw2HX
OlMn5OJ8uCiqRABYDWJiEXcVYLHjuvLSfcntNO6D27tsvu+ebTcBmtZRsOiwoYRu
Kks4+yxnofjShAXNgAAVmI8j0H5ZDBzNxi5LJGWDpgg3O+gWpBRi96+fEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/EQp92kICZAXnu2oIhUdE+RUvDMB8GA1UdIwQY
MBaAFE5v+5kG7r66H1saVY7tY3L2U86GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG1fN21RYnV2cm9mV3hwVmp1MWpjdlpUem9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8xOTgwYmQtMDc1My00MTYxLWI2ZjUt
OWM3MmUxNTdhYmIzLzEvVG1fN21RYnV2cm9mV3hwVmp1MWpjdlpUem9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8xOTgwYmQtMDc1My00MTYxLWI2ZjUtOWM3MmUxNTdhYmIz
LzEvVG1fN21RYnV2cm9mV3hwVmp1MWpjdlpUem9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvsCfIBk5
HHHw2m2mZVAkoT1nLKtgZeRl/V2iFFyFT0V2+OuZwA+HyTfwkI1tWoxOCRjdCtAe
8R3CM0iNQELHCuuQvDkFTT+sPwFkWgeWOGy6cTdOJK6UNeQxXpWfImqAmqW9shmh
aTIw3BqJsKy43ql/arOQVCJW3/i+Ni1F+KIlK9m5TUk6kkdvNCfRqFx3YnMU2uJe
5AHWBgprvVwUTosNyI6FimNvuviTGWbKRMYigOIwNZ3bUMWDJkdK9C6yrzSCbU0A
0YZ4As7cfZZpPyMx1yuhJalYD4zFwnHp8Tea4iH9isazP/64bUf2p1jFmuCykkC7
XttwSy+nu2F4YA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:44 2026 by rpki-client