Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/12ecc7-94a3-4af6-b6d3-cbf1d75cd427/1/TTYgWceTa1QgqzM4uWIzYdrtsM0.mft
File:                     TTYgWceTa1QgqzM4uWIzYdrtsM0.mft (raw, json)
Hash identifier:          Li9l2mhUCSD0RX3sk1PitC+X9S2Z/ft/1ujpHSg4Z4I=
Subject key identifier:   4F:A5:FC:56:06:79:27:07:6F:7E:B2:BC:15:81:22:9F:19:8E:53:77
Authority key identifier: 4D:36:20:59:C7:93:6B:54:20:AB:33:38:B9:62:33:61:DA:ED:B0:CD
Certificate issuer:       /CN=4d362059c7936b5420ab3338b9623361daedb0cd
Certificate serial:       01A1DCB8D787AC20A424397724F75130C4CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TTYgWceTa1QgqzM4uWIzYdrtsM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/12ecc7-94a3-4af6-b6d3-cbf1d75cd427/1/TTYgWceTa1QgqzM4uWIzYdrtsM0.mft
Manifest number:          A6
Signing time:             Sun 15 Nov 2026 01:01:03 +0000
Manifest this update:     Sun 15 Nov 2026 01:01:03 +0000
Manifest next update:     Mon 16 Nov 2026 01:01:03 +0000
Files and hashes:         1: TTYgWceTa1QgqzM4uWIzYdrtsM0.crl (hash: T3lyq48VI01H2cj9rLEGZQIc/2LjL0Yw+S7a3qV8WZE=)
                          2: hipI7kuhHGagLEQaTk386Y4VQzE.roa (hash: toft6Vnd44UVq1KAnZBMB9tIie+P6wNnrRpX3Oq4kG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/12ecc7-94a3-4af6-b6d3-cbf1d75cd427/1/TTYgWceTa1QgqzM4uWIzYdrtsM0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/12ecc7-94a3-4af6-b6d3-cbf1d75cd427/1/TTYgWceTa1QgqzM4uWIzYdrtsM0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TTYgWceTa1QgqzM4uWIzYdrtsM0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 01:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dc:b8:d7:87:ac:20:a4:24:39:77:24:f7:51:30:c4:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d362059c7936b5420ab3338b9623361daedb0cd
        Validity
            Not Before: Nov 15 01:01:03 2026 GMT
            Not After : Nov 16 01:01:03 2026 GMT
        Subject: CN=4fa5fc56067927076f7eb2bc1581229f198e5377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ac:70:53:6d:57:4d:7c:2e:83:29:ef:33:05:
                    9c:a6:bd:25:ef:a4:30:5a:f2:2a:9b:35:75:4b:80:
                    df:c8:fb:5e:45:b8:78:72:5e:3a:80:67:ac:a9:85:
                    c7:3d:96:b3:66:c8:60:65:0c:ad:39:04:90:87:c7:
                    07:ee:0c:aa:9c:f7:00:5b:f2:32:46:e0:83:df:fa:
                    e2:64:8c:57:1b:4b:92:64:90:fd:23:fe:7a:f8:e2:
                    5f:a5:0e:a0:14:b1:5a:b9:e8:18:97:f0:b9:b6:90:
                    ed:25:88:22:a3:d3:70:96:99:8f:3e:cc:2e:40:ca:
                    07:29:ff:c2:f4:dc:9c:95:1e:2a:c9:fc:9c:29:46:
                    73:37:ff:fd:ab:0b:0c:c8:71:a3:c3:93:80:e6:4e:
                    9a:2e:e9:8e:d3:92:b3:b0:f6:6d:3a:c2:0d:66:e5:
                    9b:fc:61:6b:e7:7c:3b:9b:26:1e:ef:7f:1f:d5:10:
                    58:fc:ad:6a:e4:1d:5c:2e:0c:06:f1:b1:23:c8:e1:
                    dc:c6:30:68:ec:9e:c2:22:c5:62:e0:fa:dd:48:27:
                    eb:03:30:50:e5:57:d4:68:e8:4a:0c:63:64:dd:e0:
                    26:45:db:c9:ff:21:ad:26:ad:37:de:c9:db:a1:4c:
                    0f:25:92:01:36:ef:ec:22:d3:d2:dd:17:61:39:09:
                    02:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A5:FC:56:06:79:27:07:6F:7E:B2:BC:15:81:22:9F:19:8E:53:77
            X509v3 Authority Key Identifier:
                keyid:4D:36:20:59:C7:93:6B:54:20:AB:33:38:B9:62:33:61:DA:ED:B0:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTYgWceTa1QgqzM4uWIzYdrtsM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/12ecc7-94a3-4af6-b6d3-cbf1d75cd427/1/TTYgWceTa1QgqzM4uWIzYdrtsM0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/12ecc7-94a3-4af6-b6d3-cbf1d75cd427/1/TTYgWceTa1QgqzM4uWIzYdrtsM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:19:07:69:13:3c:20:c6:e7:1d:c6:48:5d:c4:ad:72:27:cd:
         10:e4:98:c2:31:ef:b6:a5:e3:22:36:3f:23:a4:44:ca:e9:ae:
         ba:87:62:a8:c3:bc:64:5e:ff:71:94:46:c7:31:dd:27:de:64:
         a0:8a:e7:3d:56:ce:b0:50:fb:4a:86:0a:2b:e9:d1:73:07:38:
         b8:0b:9a:a1:20:90:5f:84:a8:8d:8e:5c:62:ee:47:00:9f:86:
         6a:22:df:fd:35:d8:2f:35:73:4e:74:0b:25:fd:99:4f:32:96:
         c1:d4:1f:e5:79:73:d1:31:72:35:1c:1a:f4:7d:23:1e:97:8e:
         8c:06:c7:bc:44:bb:65:51:96:a9:7f:10:15:a7:df:ba:c2:9a:
         1e:eb:5d:9f:a8:77:aa:fe:24:9e:fc:46:3e:dc:60:0a:ab:58:
         b2:07:91:a3:21:2d:4d:d7:2a:52:7c:af:3d:86:50:8c:af:40:
         b4:37:db:46:5d:be:28:69:df:90:d6:85:41:13:85:30:7a:fc:
         8e:a7:d8:f3:51:7b:88:1d:36:5c:ec:8e:1c:67:48:e3:ae:93:
         30:d4:31:d3:9e:f3:70:11:40:29:9c:4a:1b:7f:b7:36:46:df:
         28:db:0f:13:b4:26:a6:d8:4e:a0:55:b6:84:14:95:78:89:f3:
         e6:4a:2c:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHcuNeHrCCkJDl3JPdRMMTLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMzYyMDU5Yzc5MzZiNTQyMGFiMzMzOGI5NjIzMzYxZGFl
ZGIwY2QwHhcNMjYxMTE1MDEwMTAzWhcNMjYxMTE2MDEwMTAzWjAzMTEwLwYDVQQD
Eyg0ZmE1ZmM1NjA2NzkyNzA3NmY3ZWIyYmMxNTgxMjI5ZjE5OGU1Mzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7qxwU21XTXwugynvMwWcpr0l76Qw
WvIqmzV1S4DfyPteRbh4cl46gGesqYXHPZazZshgZQytOQSQh8cH7gyqnPcAW/Iy
RuCD3/riZIxXG0uSZJD9I/56+OJfpQ6gFLFauegYl/C5tpDtJYgio9NwlpmPPswu
QMoHKf/C9NyclR4qyfycKUZzN//9qwsMyHGjw5OA5k6aLumO05KzsPZtOsINZuWb
/GFr53w7myYe738f1RBY/K1q5B1cLgwG8bEjyOHcxjBo7J7CIsVi4PrdSCfrAzBQ
5VfUaOhKDGNk3eAmRdvJ/yGtJq033snboUwPJZIBNu/sItPS3RdhOQkC4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+l/FYGeScHb36yvBWBIp8ZjlN3MB8GA1UdIwQY
MBaAFE02IFnHk2tUIKszOLliM2Ha7bDNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFRZZ1djZVRhMVFncXpNNHVXSXpZZHJ0c00wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8xMmVjYzctOTRhMy00YWY2LWI2ZDMt
Y2JmMWQ3NWNkNDI3LzEvVFRZZ1djZVRhMVFncXpNNHVXSXpZZHJ0c00wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8xMmVjYzctOTRhMy00YWY2LWI2ZDMtY2JmMWQ3NWNkNDI3
LzEvVFRZZ1djZVRhMVFncXpNNHVXSXpZZHJ0c00wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnBkHaRM8
IMbnHcZIXcStcifNEOSYwjHvtqXjIjY/I6REyumuuodiqMO8ZF7/cZRGxzHdJ95k
oIrnPVbOsFD7SoYKK+nRcwc4uAuaoSCQX4SojY5cYu5HAJ+GaiLf/TXYLzVzTnQL
Jf2ZTzKWwdQf5Xlz0TFyNRwa9H0jHpeOjAbHvES7ZVGWqX8QFaffusKaHutdn6h3
qv4knvxGPtxgCqtYsgeRoyEtTdcqUnyvPYZQjK9AtDfbRl2+KGnfkNaFQROFMHr8
jqfY81F7iB02XOyOHGdI466TMNQx057zcBFAKZxKG3+3NkbfKNsPE7QmpthOoFW2
hBSVeInz5kos3g==
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:19:17 2026 by rpki-client