Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
File:                     TsVuJbACVuJM2jJN6yGqnRMBX2U.mft (raw, json)
Hash identifier:          19b1pxoGwoVNNXs+ld2dXppaEUkqg4oy/3VwscrTp8U=
Subject key identifier:   A5:00:2C:C3:BE:FD:47:07:92:EB:B7:3D:DE:23:26:A5:5B:69:2B:1C
Authority key identifier: 4E:C5:6E:25:B0:02:56:E2:4C:DA:32:4D:EB:21:AA:9D:13:01:5F:65
Certificate issuer:       /CN=4ec56e25b00256e24cda324deb21aa9d13015f65
Certificate serial:       01A0E09872AF94EAA72F9C2BD25B64232890
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
Manifest number:          042F
Signing time:             Sun 27 Sep 2026 02:01:22 +0000
Manifest this update:     Sun 27 Sep 2026 02:01:22 +0000
Manifest next update:     Mon 28 Sep 2026 02:01:22 +0000
Files and hashes:         1: TsVuJbACVuJM2jJN6yGqnRMBX2U.crl (hash: ZKWTp2KarNXBMU1HDhZV2hHSlXQ20wKdL53e1b7PaZk=)
                          2: wHDlfBopH7fz7jDzeFXZD4ZkpZo.roa (hash: cPAx2SbQ0v1kqx0TCQ2lzpiQRVAwNSEcLw8CDwp9CuE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e0:98:72:af:94:ea:a7:2f:9c:2b:d2:5b:64:23:28:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ec56e25b00256e24cda324deb21aa9d13015f65
        Validity
            Not Before: Sep 27 02:01:22 2026 GMT
            Not After : Sep 28 02:01:22 2026 GMT
        Subject: CN=a5002cc3befd470792ebb73dde2326a55b692b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:fe:27:b0:56:2f:00:cc:a6:dd:82:1a:75:a2:
                    ca:70:d6:ea:58:92:50:ef:50:77:37:16:25:53:3a:
                    c8:91:7d:76:36:94:ee:55:2f:9b:3a:42:46:a1:e6:
                    c0:fb:20:7c:44:a6:fa:4a:2d:88:7d:80:69:9d:21:
                    a4:d3:87:a8:2d:af:2e:1b:05:c4:40:e1:1b:7c:73:
                    1d:01:19:e6:02:bb:77:ec:ed:a5:54:88:8b:a0:40:
                    ee:bb:34:d6:f9:bc:79:b9:58:c6:6c:b9:93:d0:bd:
                    8f:55:f7:a3:96:02:5c:79:d4:bd:cf:91:2f:63:c0:
                    42:fb:58:10:7b:b0:30:33:d7:c3:d2:f3:03:bd:76:
                    5f:25:43:5c:c7:55:08:6a:7e:b1:2a:9d:6d:2d:3e:
                    4b:72:83:82:b1:7c:8b:2a:1c:b6:5c:ef:c8:00:73:
                    15:e9:b2:ca:8c:a7:fc:26:db:0d:3d:a5:4d:7f:3f:
                    f5:36:91:11:f7:0f:01:43:73:46:43:b0:d6:f6:b9:
                    95:32:42:42:89:a8:44:9e:d3:77:1c:15:57:6f:d8:
                    a8:ae:53:b2:5e:cd:59:3a:9e:f2:45:bb:88:96:3b:
                    ed:a7:5c:e6:b1:23:19:23:96:15:7d:39:68:87:82:
                    57:16:c0:db:8d:4a:40:6c:70:31:fd:48:b4:4c:34:
                    91:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:00:2C:C3:BE:FD:47:07:92:EB:B7:3D:DE:23:26:A5:5B:69:2B:1C
            X509v3 Authority Key Identifier:
                keyid:4E:C5:6E:25:B0:02:56:E2:4C:DA:32:4D:EB:21:AA:9D:13:01:5F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsVuJbACVuJM2jJN6yGqnRMBX2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/66e6ba-0177-42f3-aa90-09a2c9ca7155/1/TsVuJbACVuJM2jJN6yGqnRMBX2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:ec:cc:86:94:42:e5:fa:8c:2d:da:ad:0f:68:96:ed:70:84:
         d2:42:fc:ca:ad:86:45:6f:ab:3f:60:f3:1e:a6:e6:68:70:f8:
         d7:49:8b:9b:1c:c7:b9:90:a1:f9:02:d5:c1:c8:3c:35:b8:74:
         8c:20:ec:3e:72:c9:1f:24:11:a2:55:79:20:14:98:9b:bf:1d:
         ec:99:44:38:c1:1d:a1:76:95:96:ff:62:58:1a:d0:df:55:d5:
         c9:29:52:e0:70:ba:fc:1c:15:1e:df:3e:f2:96:0e:5c:68:04:
         aa:09:7e:c8:80:ce:6e:62:3d:73:a1:76:11:3e:a1:4e:d7:01:
         44:83:72:ad:d0:20:ef:fb:a0:a0:41:53:01:46:3e:50:0c:39:
         9a:53:26:a7:f4:ac:fe:c8:89:02:a5:c6:8b:c8:82:e3:c0:c3:
         fc:39:d0:a3:c9:22:f7:62:27:53:f3:4d:01:cb:24:5a:34:42:
         64:f9:00:96:12:f8:8c:48:3c:76:7b:c4:08:ef:3f:1a:59:1d:
         fe:4a:50:66:d5:f6:8e:22:59:fc:35:3f:7c:66:57:b0:9e:37:
         47:f9:11:a3:8a:b3:27:4d:ea:e2:85:46:95:e6:ee:9a:30:22:
         8d:39:cc:70:e2:78:6b:f4:27:fe:ec:3c:c3:46:fb:c4:d4:b1:
         e6:63:64:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:09:18 2026 by rpki-client