Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
File:                     tTAFYZaI77r_0G4QikO98gZD4NY.mft (raw, json)
Hash identifier:          +w8CjtanZ6swbDzx9okIRpv77ITbmryUzWvuBbcAT88=
Subject key identifier:   6C:7B:07:89:8F:7A:A4:BE:F7:7A:A6:BA:00:D3:3B:2A:E6:5F:77:82
Authority key identifier: B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
Certificate issuer:       /CN=b53005619688efbaffd06e108a43bdf20643e0d6
Certificate serial:       019D28166268593761DD966A69041839CFD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
Manifest number:          188D
Signing time:             Thu 26 Mar 2026 03:00:48 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:48 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:48 +0000
Files and hashes:         1: ExGpRunqaEGx1C87iYbOQskR5uw.roa (hash: RiaEfvnW4XKOfGx9ToOnBoSA9Vrw+toQDu46/ctYlAQ=)
                          2: SH-0mJS__xq0Nrwordyx2eNpy6E.roa (hash: MFyq3HcX0V4paZzyvO44VehUzFoDp8T3DaYSoMIBwAg=)
                          3: eUXXUdsIFWgmK4QDPBj079S1krA.roa (hash: tLqc3PNhBtm/slptj0WlzHoHZqeLEYUFaZxJp22uQOY=)
                          4: tTAFYZaI77r_0G4QikO98gZD4NY.crl (hash: ZKjpfm2eEqlj2w6hiVtJmRxIGCVI5kf6CL9niB6XLjE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:62:68:59:37:61:dd:96:6a:69:04:18:39:cf:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b53005619688efbaffd06e108a43bdf20643e0d6
        Validity
            Not Before: Mar 26 03:00:48 2026 GMT
            Not After : Mar 27 03:00:48 2026 GMT
        Subject: CN=6c7b07898f7aa4bef77aa6ba00d33b2ae65f7782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d8:42:69:a7:dd:dc:09:47:3f:c9:b2:76:1f:
                    89:86:06:9f:76:4d:16:d9:f7:65:f7:68:4e:56:d0:
                    82:03:1f:8f:72:00:a4:a9:4d:e9:fa:07:6a:ef:15:
                    8a:cb:74:c7:c6:39:8f:40:a7:63:4d:cd:b2:2c:4c:
                    dc:93:0b:c3:5d:7e:1a:a4:04:10:25:b2:4c:10:d7:
                    47:1a:c0:84:1b:79:c5:5b:7f:b6:04:29:71:ad:6c:
                    81:31:e4:d2:54:b8:36:89:4c:41:d5:19:4d:0c:0d:
                    27:b4:4a:47:6a:4c:69:ab:5f:a1:b3:fd:8b:06:b0:
                    a8:92:c1:8a:57:2c:be:84:fe:e5:ff:96:91:03:fc:
                    3c:f1:1f:5d:7f:5a:0f:3a:97:c3:ef:3c:af:ae:db:
                    16:08:34:4c:78:20:c9:bc:fe:cb:44:51:16:27:a3:
                    6d:d5:e1:f2:ea:8d:d4:33:73:84:08:03:dc:6a:eb:
                    92:f9:a1:9f:0e:1f:e9:04:44:b6:45:14:a5:5d:c4:
                    82:d5:02:9c:4d:ab:9f:f2:db:ad:e7:cd:e6:c6:ac:
                    e4:83:33:e0:88:79:eb:55:3f:de:81:1b:ae:f3:27:
                    39:80:f6:8c:d9:39:53:75:1c:c1:45:24:25:e9:1d:
                    13:23:37:6d:8b:39:de:ea:56:8a:47:4a:e4:8f:36:
                    35:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:7B:07:89:8F:7A:A4:BE:F7:7A:A6:BA:00:D3:3B:2A:E6:5F:77:82
            X509v3 Authority Key Identifier:
                keyid:B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:15:97:59:ae:7a:66:d7:01:ad:30:44:b1:f1:41:d1:26:f9:
         d3:6a:a3:a1:a0:59:a9:b8:7e:b1:7d:ad:fc:45:3e:cc:47:7b:
         63:10:c6:b9:28:30:e0:47:3b:19:8d:87:2a:0d:f5:1f:6b:b2:
         c9:aa:fd:96:92:c8:a6:b4:95:eb:89:7c:2d:24:c6:e6:16:1e:
         55:56:3f:65:51:4f:fe:bc:b8:30:42:7f:0e:2f:35:50:c5:9b:
         36:67:3a:96:7d:53:9d:02:f1:2f:51:6a:4e:6c:10:67:e8:fa:
         51:0d:a8:b0:e2:a4:ea:da:54:03:17:76:a3:2c:bd:84:9c:6a:
         a5:c0:e7:68:ed:90:e5:59:f1:b1:73:1b:4a:17:9b:34:61:3b:
         01:a2:37:9d:65:5c:e8:48:bf:48:b8:25:5d:a4:63:91:d1:6e:
         6a:aa:45:45:05:ff:84:f2:2e:eb:c6:6e:c2:45:3a:14:9c:e5:
         65:10:27:75:48:ab:b7:81:c1:a7:e3:36:27:20:5b:00:74:5f:
         26:68:9c:d4:9f:cc:7e:36:9e:d0:bf:00:b6:61:d8:0c:c7:aa:
         f7:27:74:6d:6e:f1:f9:5b:7d:64:fb:4c:94:50:1a:5a:18:42:
         c6:e2:c8:b7:97:89:30:7e:14:ee:8d:d9:e4:1d:71:f6:58:16:
         c6:7b:0b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:58:27 2026 by rpki-client