Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft
File:                     TEaPGBJltNlsooNaPlcMJnkDXf8.mft (raw, json)
Hash identifier:          kB+emHAQlzEIslyjT7rULgRQtynZnfoYdPzitgbR2tM=
Subject key identifier:   00:41:BD:63:9C:DF:F7:A9:D3:2D:EE:A7:36:41:8E:5F:EF:2C:28:05
Authority key identifier: 4C:46:8F:18:12:65:B4:D9:6C:A2:83:5A:3E:57:0C:26:79:03:5D:FF
Certificate issuer:       /CN=4c468f181265b4d96ca2835a3e570c2679035dff
Certificate serial:       019D2A72D3EB53CFBF792B08A206E5919B83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft
Manifest number:          17BA
Signing time:             Thu 26 Mar 2026 14:01:01 +0000
Manifest this update:     Thu 26 Mar 2026 14:01:01 +0000
Manifest next update:     Fri 27 Mar 2026 14:01:01 +0000
Files and hashes:         1: G5xYweczugT7y9iKv0C3tFH_n0s.roa (hash: mJ6ZUqGAfQj432UWOlXl+ZROquxNC18uSJrAS/I3FwY=)
                          2: TEaPGBJltNlsooNaPlcMJnkDXf8.crl (hash: u7cN+DwvEAk4mHtDGKjStiirBnfQLTs+MbNNQX7zN2w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:72:d3:eb:53:cf:bf:79:2b:08:a2:06:e5:91:9b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c468f181265b4d96ca2835a3e570c2679035dff
        Validity
            Not Before: Mar 26 14:01:01 2026 GMT
            Not After : Mar 27 14:01:01 2026 GMT
        Subject: CN=0041bd639cdff7a9d32deea736418e5fef2c2805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:93:80:51:59:4e:9e:51:40:d6:3d:1b:66:86:
                    14:8b:00:9c:c5:6d:44:e0:ac:21:81:6b:ca:99:44:
                    8c:5c:9c:dd:03:11:b9:6d:e4:38:26:bc:40:04:98:
                    fb:b6:5a:5d:9d:20:91:aa:b7:a7:bc:b6:a1:63:ff:
                    8e:bd:1e:73:77:cf:c4:46:5e:02:a3:e2:43:14:f2:
                    db:0b:f2:f9:62:08:ae:8e:36:20:9c:5c:1a:c3:5e:
                    13:01:40:f3:d4:df:fb:ea:a9:63:67:17:f7:84:12:
                    fc:71:a5:d0:2c:1f:d5:a4:f6:6e:80:b9:5a:36:5f:
                    df:07:7b:0b:31:cc:e6:e4:eb:38:6a:72:79:95:6e:
                    2e:5d:bc:ea:54:59:32:63:3c:72:28:84:80:89:a6:
                    53:d8:fd:58:4c:16:c4:5a:e1:7b:af:a8:93:1c:ad:
                    10:f4:85:06:fa:cc:81:4c:59:fc:b7:7c:d6:f7:67:
                    05:69:84:40:b4:d2:ed:ac:8e:9f:5f:d2:40:52:76:
                    89:83:5e:06:54:48:c0:81:0a:bf:1f:66:9e:18:2e:
                    67:9c:5a:00:8c:04:69:8a:0d:6c:82:e3:ae:ce:81:
                    14:3f:e8:f1:80:ae:0c:0c:59:09:d8:15:ca:44:93:
                    65:96:1e:db:31:99:51:b1:f7:9c:5f:4d:a8:36:a3:
                    05:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:41:BD:63:9C:DF:F7:A9:D3:2D:EE:A7:36:41:8E:5F:EF:2C:28:05
            X509v3 Authority Key Identifier:
                keyid:4C:46:8F:18:12:65:B4:D9:6C:A2:83:5A:3E:57:0C:26:79:03:5D:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:9d:f3:72:0d:78:b8:d0:6e:31:0a:6e:6c:63:fd:01:74:2c:
         9e:f0:c3:b6:4b:b1:fc:16:63:8b:5f:ad:e0:2e:c6:9b:35:4c:
         7f:a2:c9:28:b8:3d:92:a0:e4:1d:0c:dd:9b:c1:b3:9d:0e:a0:
         6a:9d:8e:ec:13:81:0a:ff:ef:36:05:6b:08:b9:2f:67:6e:94:
         af:49:d7:fc:42:5c:f2:4d:5e:1c:80:70:82:b5:e0:1a:89:b3:
         bb:2d:bb:61:41:f3:43:a5:e9:04:62:88:ef:75:d4:1f:cc:27:
         61:53:65:db:dd:a8:9c:ab:74:e2:6e:eb:b0:1d:0d:4f:2f:93:
         d6:72:91:61:d0:4e:9f:f7:a4:40:6f:8f:db:f4:da:7b:6f:c7:
         fb:67:7b:49:f6:88:c5:8c:b1:3d:35:61:7f:c3:47:3f:9b:11:
         a3:39:0f:65:53:28:b6:bb:40:15:45:6c:86:b8:a7:51:13:3b:
         e5:d2:c7:5c:5a:f8:d9:6e:93:eb:d4:e6:44:4f:f9:cf:6a:45:
         a2:8b:ac:92:7a:01:44:d3:79:1f:d9:b0:35:88:41:b7:b3:e9:
         0d:ea:02:cc:2d:ca:58:f7:8f:5c:d9:fe:1a:59:b8:e0:96:34:
         41:8c:4a:33:ae:3e:92:63:5d:ff:6d:23:d0:6f:85:c7:6a:a4:
         38:a5:21:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:22:27 2026 by rpki-client