Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft
File:                     Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft (raw, json)
Hash identifier:          fGQhaT7Mq5/3DGmKfC463c/6bgtb3FRShTC9POCVwfQ=
Subject key identifier:   E1:78:C5:CF:42:64:4D:2E:06:D7:82:BC:00:C7:41:B9:D0:F8:97:2E
Authority key identifier: 4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92
Certificate issuer:       /CN=4eaf14b67e051cfbd5e1b1d51693d44682392792
Certificate serial:       019D258314EFC770629730853BFB7176494C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft
Manifest number:          189F
Signing time:             Wed 25 Mar 2026 15:00:40 +0000
Manifest this update:     Wed 25 Mar 2026 15:00:40 +0000
Manifest next update:     Thu 26 Mar 2026 15:00:40 +0000
Files and hashes:         1: 3h4uNQ-eHV25TPT3_E5l_yB3jcs.asa (hash: +n8cfnczvffDxczQzCZSc5S0iS+H58G3zef9yb8kOjI=)
                          2: Dpgo4cDU1mscMX_CBOiypw89lis.roa (hash: 8mfwVN6lhdlH9CLh9R1lsuHG76iz8iY1mnvSJDuNBqo=)
                          3: HXJJgvqsZ_zuOCSOXmDb4ksjDdE.asa (hash: J/SZ7v4ORRwzQFSAo2RYDZOeTgDF1x9+l2aHPSTrs0U=)
                          4: Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl (hash: QaX58qCedzcSs6ecrjb+wKYKaRq7pBnAwm7cNKujDkw=)
                          5: Zd7eWqpO82rj4tMVM1FiOzZTNwI.roa (hash: GTjYTfCCVp1Wx0hphN/N2xZgmhKU/cU0xSNlx/oabus=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:83:14:ef:c7:70:62:97:30:85:3b:fb:71:76:49:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eaf14b67e051cfbd5e1b1d51693d44682392792
        Validity
            Not Before: Mar 25 15:00:40 2026 GMT
            Not After : Mar 26 15:00:40 2026 GMT
        Subject: CN=e178c5cf42644d2e06d782bc00c741b9d0f8972e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f0:38:0f:65:2e:09:aa:06:80:50:4d:ad:e2:
                    a3:c4:7f:7b:10:c5:2f:24:60:2b:dc:06:7c:32:a3:
                    d0:ba:ee:e8:43:4e:7e:66:c9:93:4f:4b:fb:00:42:
                    d8:de:e9:9d:87:aa:c6:0f:76:85:9c:fd:ba:43:96:
                    ae:9f:33:e0:14:70:6e:4f:01:6d:3f:13:80:51:26:
                    b9:d9:bf:3f:55:30:95:69:c9:d9:ee:8b:66:42:d1:
                    01:3d:60:56:41:28:79:dc:50:73:c1:fc:f6:c3:ab:
                    20:9a:53:d6:87:08:9d:7e:97:78:c6:1c:79:93:88:
                    dc:48:0b:2e:9f:28:e3:c0:f7:d5:4b:18:d2:88:86:
                    0a:fc:4a:c7:20:09:c3:27:ef:f5:49:d7:db:00:7f:
                    f1:35:f0:9a:65:b9:bb:cd:84:e9:c3:88:33:eb:b3:
                    c7:36:60:d9:cc:84:a1:70:3d:b7:33:87:bf:45:17:
                    42:9f:1a:e0:2d:89:b7:cd:05:9a:49:c2:92:35:9c:
                    19:b8:65:1e:05:dd:a9:89:90:ec:6a:67:96:eb:82:
                    1b:16:40:89:f3:de:c2:2c:ed:34:fb:2d:09:85:f1:
                    bd:ef:f1:90:45:04:7d:87:65:5f:82:26:54:c0:21:
                    76:dc:be:8e:c5:99:cf:df:0b:da:f3:d0:34:64:ef:
                    40:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:78:C5:CF:42:64:4D:2E:06:D7:82:BC:00:C7:41:B9:D0:F8:97:2E
            X509v3 Authority Key Identifier:
                keyid:4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:f0:68:05:fb:30:a2:d9:37:88:46:77:d8:10:17:8f:49:d5:
         c6:6b:7c:5f:ac:38:d0:22:4c:df:75:2c:c9:eb:39:96:75:b8:
         01:f5:8d:53:75:5a:23:47:81:b1:73:93:71:66:82:0c:1d:0a:
         b0:11:3c:cd:aa:74:90:74:2b:69:0b:af:c5:18:b3:eb:76:aa:
         d3:bc:15:80:99:63:de:1a:8f:eb:b1:d0:cc:72:6e:8c:4f:7e:
         f3:40:fc:67:2b:86:3f:d0:e5:de:65:e9:90:bc:c0:23:3e:d0:
         87:40:f8:05:31:28:00:dc:1c:ac:0c:e6:83:af:08:e3:c2:27:
         a0:de:51:06:cf:30:c7:0c:b2:fe:49:fe:aa:73:2a:19:b3:28:
         74:3a:0e:dc:13:42:6f:9e:96:ac:31:c2:75:76:1f:40:9c:66:
         1c:b7:db:9a:1e:a3:b6:53:7c:c6:56:60:92:a7:24:38:4e:b8:
         ae:2a:db:e3:77:d3:07:48:ef:71:f9:b8:f3:80:e9:d0:c4:60:
         6e:44:e2:ea:38:1d:60:74:dc:be:bc:c5:37:ad:3a:25:1c:36:
         20:9f:2d:80:ab:4b:33:8f:d0:50:53:e1:c0:4c:27:86:68:81:
         05:b5:c8:9f:d6:8f:45:68:f0:84:15:13:47:64:ba:59:c2:6f:
         6d:6c:71:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:19:28 2026 by rpki-client