Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft
File:                     tkslytxMSBZvqbvV3oZxwiBBW2c.mft (raw, json)
Hash identifier:          Sz6IXrV4vnGM0ixd4qshIKvpl0rfsollYKb42dc76EQ=
Subject key identifier:   FE:A8:FD:74:DC:77:2E:3A:3E:67:E7:E8:8E:6F:C4:90:41:76:B4:BA
Authority key identifier: B6:4B:25:CA:DC:4C:48:16:6F:A9:BB:D5:DE:86:71:C2:20:41:5B:67
Certificate issuer:       /CN=b64b25cadc4c48166fa9bbd5de8671c220415b67
Certificate serial:       019D273B0028703B2F515548845660325D2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tkslytxMSBZvqbvV3oZxwiBBW2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft
Manifest number:          1887
Signing time:             Wed 25 Mar 2026 23:01:11 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:11 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:11 +0000
Files and hashes:         1: tkslytxMSBZvqbvV3oZxwiBBW2c.crl (hash: ZnH5lh/iQMC6HEyawLDwuI8sxal4e4bsgZxT4QqfxGs=)
                          2: wjfeNIT2f9SQVrYh283P4LAEn3I.roa (hash: xyRve1H3yBDvVaJ3b/2Cr7b0uxIWJOpGM6Hi6WICalY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tkslytxMSBZvqbvV3oZxwiBBW2c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3b:00:28:70:3b:2f:51:55:48:84:56:60:32:5d:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b64b25cadc4c48166fa9bbd5de8671c220415b67
        Validity
            Not Before: Mar 25 23:01:11 2026 GMT
            Not After : Mar 26 23:01:11 2026 GMT
        Subject: CN=fea8fd74dc772e3a3e67e7e88e6fc4904176b4ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d5:25:15:b8:b9:3a:4a:02:9a:e0:6b:03:30:
                    87:b2:ad:df:3a:3f:ea:74:5c:fb:00:d8:d1:27:44:
                    c4:f4:eb:c8:84:f9:8e:36:62:a5:25:18:31:93:1c:
                    07:c0:e0:a5:32:12:1e:af:3e:40:89:44:c8:eb:62:
                    fd:13:f5:31:fd:b2:76:0e:00:7d:36:e6:24:24:b0:
                    f4:00:f8:ef:6b:5e:92:9d:47:c2:ad:dd:bf:0d:b7:
                    90:07:5c:0a:d7:ee:09:2e:85:4d:ec:a6:4e:ba:8a:
                    65:d8:56:be:ce:aa:93:2d:d5:da:75:cd:cd:86:23:
                    ab:57:d8:4f:da:7b:39:6e:c6:64:11:3e:f8:40:39:
                    48:58:f2:e8:25:6c:fd:71:ba:af:e3:79:e6:60:77:
                    ca:c9:81:a2:5b:fa:26:45:bb:49:59:86:67:c3:14:
                    70:07:57:1e:d7:a4:8e:fc:5c:5a:30:c0:1c:e6:e6:
                    68:2c:dd:1a:16:5d:2d:12:e0:04:28:93:3b:de:eb:
                    c9:b4:2a:5e:83:a8:44:1b:cd:97:0d:5b:06:08:cf:
                    ac:ec:9a:78:4f:23:d6:0b:87:2b:c6:44:6e:06:e3:
                    b9:14:75:74:82:ea:fb:49:59:0d:05:9e:05:2c:f8:
                    35:92:e5:74:fe:dc:87:79:72:47:d7:ec:4a:0b:fb:
                    87:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A8:FD:74:DC:77:2E:3A:3E:67:E7:E8:8E:6F:C4:90:41:76:B4:BA
            X509v3 Authority Key Identifier:
                keyid:B6:4B:25:CA:DC:4C:48:16:6F:A9:BB:D5:DE:86:71:C2:20:41:5B:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkslytxMSBZvqbvV3oZxwiBBW2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:d0:8e:3f:70:53:08:41:06:9e:4e:be:9d:22:a0:1a:32:29:
         90:49:34:3b:39:76:79:81:4f:78:3d:6a:c6:36:5e:a7:2d:8e:
         b7:9c:79:84:66:d4:4f:3d:ea:c3:4e:b8:3f:91:a6:91:c7:a7:
         6c:56:e2:b6:9e:79:18:63:be:37:69:69:88:9a:69:f9:49:92:
         bb:df:23:6e:d3:b4:60:59:b6:fe:7a:4f:0b:c3:7a:56:76:fe:
         df:16:14:0f:5d:67:c0:19:d0:1f:8b:19:1f:4f:d2:6d:75:43:
         30:76:50:db:de:d1:90:cb:39:b1:f6:eb:39:d0:4a:7c:29:55:
         5f:af:5a:c8:b3:d2:47:45:a6:08:5b:d7:5d:77:d8:d0:26:51:
         a0:67:f9:44:45:da:7b:03:cf:83:74:fb:5b:9d:4a:db:59:17:
         b9:0f:d9:c7:5b:a3:62:d7:1c:b1:2f:e4:38:81:75:08:fd:95:
         c5:f1:a3:3e:53:92:39:b1:9a:73:b3:2d:8f:de:1d:7c:bc:73:
         1d:4c:78:0f:94:2d:48:e6:29:d0:eb:d0:2b:50:68:4c:f2:e6:
         46:f9:7d:0e:ae:12:2f:f0:32:de:c9:2d:e1:4d:ff:4e:d9:92:
         69:35:43:87:db:cc:33:9b:5c:98:1d:9f:84:51:e2:84:da:63:
         38:f3:cf:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:14 2026 by rpki-client