Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft
File:                     TitqaUPTM40AdQNtlp7AHD3O_Kk.mft (raw, json)
Hash identifier:          +/iq2kP1p/U+i5ygj7u+YflmSiFvkH3p38UcqKLpb1M=
Subject key identifier:   7E:96:77:79:42:C7:8A:E9:2E:C6:74:FD:DC:76:E3:92:12:DB:7F:FC
Authority key identifier: 4E:2B:6A:69:43:D3:33:8D:00:75:03:6D:96:9E:C0:1C:3D:CE:FC:A9
Certificate issuer:       /CN=4e2b6a6943d3338d0075036d969ec01c3dcefca9
Certificate serial:       019D28168C269E9BA0E96A61622E93EF5923
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft
Manifest number:          17CA
Signing time:             Thu 26 Mar 2026 03:00:59 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:59 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:59 +0000
Files and hashes:         1: TitqaUPTM40AdQNtlp7AHD3O_Kk.crl (hash: nWlWsuW5Pee0e5o1HlY2FWp6H+Kt9y09YXSd+T0OvlI=)
                          2: ttKN1YCGnceJaCqd8VrVa2V0glc.roa (hash: zV7RvPb6zQACx1fxP6QGuTXEuZbel1F9mgNOA4+EP6k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:8c:26:9e:9b:a0:e9:6a:61:62:2e:93:ef:59:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e2b6a6943d3338d0075036d969ec01c3dcefca9
        Validity
            Not Before: Mar 26 03:00:59 2026 GMT
            Not After : Mar 27 03:00:59 2026 GMT
        Subject: CN=7e96777942c78ae92ec674fddc76e39212db7ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:50:cf:f9:92:ae:25:8a:67:2e:8d:3d:f6:c1:
                    10:39:41:57:af:37:ee:ea:69:ef:f0:60:a7:80:7c:
                    56:e9:d1:9d:12:4f:3f:7d:59:53:ca:95:de:c1:cf:
                    da:ca:01:7e:72:1f:b6:8f:8c:35:36:4a:9d:88:6a:
                    d8:7e:01:86:2d:8a:ca:9e:ea:17:72:1e:5a:76:97:
                    ac:a2:56:ee:ac:a8:a8:a6:b1:ae:41:c7:14:07:fa:
                    cf:24:b0:cb:ca:16:ab:d3:82:41:db:ed:e1:74:75:
                    86:29:65:ae:8d:a8:eb:f5:ec:5c:d7:76:e1:66:4e:
                    b5:f4:e8:03:b5:4a:09:e2:1d:28:09:43:4e:87:44:
                    e0:fc:e3:bc:85:97:1d:c2:29:19:4b:11:ea:a0:16:
                    ba:57:dd:3a:70:c9:cc:a0:3c:dd:18:86:7b:66:13:
                    6f:f4:80:2a:2e:ba:8b:6c:85:1e:c1:29:e1:dc:de:
                    65:79:4c:6c:24:d4:8f:3e:58:69:d9:26:97:b5:79:
                    85:d2:0d:1f:9c:57:d1:b4:4e:72:bb:36:ae:f5:dd:
                    12:e0:59:94:74:df:04:2e:ac:3f:c9:cf:54:c9:eb:
                    be:92:f3:d9:59:be:40:b7:31:bc:5c:41:d1:6f:9e:
                    26:da:d2:71:b6:2b:9a:37:67:c9:78:42:79:0c:04:
                    19:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:96:77:79:42:C7:8A:E9:2E:C6:74:FD:DC:76:E3:92:12:DB:7F:FC
            X509v3 Authority Key Identifier:
                keyid:4E:2B:6A:69:43:D3:33:8D:00:75:03:6D:96:9E:C0:1C:3D:CE:FC:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:2a:3e:d4:8d:99:5b:9b:e4:6b:87:09:dc:17:60:04:56:20:
         6b:e7:35:5a:08:f9:28:5a:98:9a:31:11:58:15:6f:eb:56:b8:
         ce:3a:de:c8:8f:8b:ad:1a:f6:68:d5:70:dc:a2:ce:32:ad:df:
         2b:39:33:2b:f0:a4:13:8c:f5:68:77:99:0c:dd:84:fe:94:96:
         d7:bb:0e:87:fe:59:44:32:99:a4:c8:37:1f:35:85:e5:ab:b3:
         5b:10:c2:c9:48:ed:8a:fe:ea:82:fe:8d:e4:58:9d:38:dc:4b:
         69:53:b3:7f:e6:99:6d:81:f5:10:79:af:33:2a:1f:c9:28:5b:
         e2:51:fc:ff:62:47:0c:99:ef:cf:d1:ba:68:ee:56:68:b1:4d:
         dd:94:ef:4b:63:0d:7a:be:4e:0b:14:9f:c7:bd:b3:d1:bf:41:
         3f:e6:f7:48:ed:b3:84:51:e1:db:60:e3:8e:74:29:f9:51:cc:
         3e:a1:70:67:ee:d0:89:d1:94:12:de:52:91:8b:4a:b4:c1:df:
         e7:a3:b7:43:9a:dd:bd:70:70:1a:be:98:e8:a9:c4:89:1d:8b:
         96:db:45:41:38:0d:73:bb:f7:8c:c0:68:a2:cb:2a:85:a3:aa:
         30:50:f1:bd:7a:3c:f6:25:4c:c8:60:77:dc:c3:74:70:65:96:
         0f:3a:1b:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFowmnpug6WphYi6T71kjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMmI2YTY5NDNkMzMzOGQwMDc1MDM2ZDk2OWVjMDFjM2Rj
ZWZjYTkwHhcNMjYwMzI2MDMwMDU5WhcNMjYwMzI3MDMwMDU5WjAzMTEwLwYDVQQD
Eyg3ZTk2Nzc3OTQyYzc4YWU5MmVjNjc0ZmRkYzc2ZTM5MjEyZGI3ZmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVDP+ZKuJYpnLo099sEQOUFXrzfu
6mnv8GCngHxW6dGdEk8/fVlTypXewc/aygF+ch+2j4w1NkqdiGrYfgGGLYrKnuoX
ch5adpesolburKioprGuQccUB/rPJLDLyhar04JB2+3hdHWGKWWujajr9exc13bh
Zk619OgDtUoJ4h0oCUNOh0Tg/OO8hZcdwikZSxHqoBa6V906cMnMoDzdGIZ7ZhNv
9IAqLrqLbIUewSnh3N5leUxsJNSPPlhp2SaXtXmF0g0fnFfRtE5yuzau9d0S4FmU
dN8ELqw/yc9Uyeu+kvPZWb5AtzG8XEHRb54m2tJxtiuaN2fJeEJ5DAQZuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6Wd3lCx4rpLsZ0/dx245IS23/8MB8GA1UdIwQY
MBaAFE4ramlD0zONAHUDbZaewBw9zvypMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGl0cWFVUFRNNDBBZFFOdGxwN0FIRDNPX0trLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84ODk2MDgtMGY0MC00YTY0LWI1MjYt
MWEyNmI5ZDhmZWRlLzEvVGl0cWFVUFRNNDBBZFFOdGxwN0FIRDNPX0trLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy84ODk2MDgtMGY0MC00YTY0LWI1MjYtMWEyNmI5ZDhmZWRl
LzEvVGl0cWFVUFRNNDBBZFFOdGxwN0FIRDNPX0trLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbSo+1I2Z
W5vka4cJ3BdgBFYga+c1Wgj5KFqYmjERWBVv61a4zjreyI+LrRr2aNVw3KLOMq3f
KzkzK/CkE4z1aHeZDN2E/pSW17sOh/5ZRDKZpMg3HzWF5auzWxDCyUjtiv7qgv6N
5FidONxLaVOzf+aZbYH1EHmvMyofyShb4lH8/2JHDJnvz9G6aO5WaLFN3ZTvS2MN
er5OCxSfx72z0b9BP+b3SO2zhFHh22DjjnQp+VHMPqFwZ+7QidGUEt5SkYtKtMHf
56O3Q5rdvXBwGr6Y6KnEiR2LlttFQTgNc7v3jMBoossqhaOqMFDxvXo89iVMyGB3
3MN0cGWWDzobnw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:49 2026 by rpki-client