Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/TaktycvByBxzpp8xWlMbR_ROPFQ.mft
File:                     TaktycvByBxzpp8xWlMbR_ROPFQ.mft (raw, json)
Hash identifier:          /GjFhHMmoVdg2KWx10deMkF931Xc1NYdhWWJND5cezo=
Subject key identifier:   C5:AC:A8:57:E6:F9:EF:03:81:39:4B:0B:00:04:E7:C0:B1:32:06:64
Authority key identifier: 4D:A9:2D:C9:CB:C1:C8:1C:73:A6:9F:31:5A:53:1B:47:F4:4E:3C:54
Certificate issuer:       /CN=4da92dc9cbc1c81c73a69f315a531b47f44e3c54
Certificate serial:       019D26283ED1EF5E785F21024AF3F1ED60F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TaktycvByBxzpp8xWlMbR_ROPFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/TaktycvByBxzpp8xWlMbR_ROPFQ.mft
Manifest number:          099E
Signing time:             Wed 25 Mar 2026 18:01:04 +0000
Manifest this update:     Wed 25 Mar 2026 18:01:04 +0000
Manifest next update:     Thu 26 Mar 2026 18:01:04 +0000
Files and hashes:         1: J6MDysEdSDqpfEKGzsYRb5JJurM.roa (hash: UOMYa9Ddu00FwSsUCK8E9aTAp2SOrOcZP7FkvyKmDVg=)
                          2: TaktycvByBxzpp8xWlMbR_ROPFQ.crl (hash: jCgxCeaLP9ws2nrV77qCa447FkstFysli50DZU/qZMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/TaktycvByBxzpp8xWlMbR_ROPFQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/TaktycvByBxzpp8xWlMbR_ROPFQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TaktycvByBxzpp8xWlMbR_ROPFQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:3e:d1:ef:5e:78:5f:21:02:4a:f3:f1:ed:60:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4da92dc9cbc1c81c73a69f315a531b47f44e3c54
        Validity
            Not Before: Mar 25 18:01:04 2026 GMT
            Not After : Mar 26 18:01:04 2026 GMT
        Subject: CN=c5aca857e6f9ef0381394b0b0004e7c0b1320664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:20:b0:cf:67:94:f1:ae:b9:b8:93:d9:85:1a:
                    66:69:a3:8a:f7:5d:21:34:d4:da:9f:87:26:5f:6a:
                    d1:62:f8:fc:85:56:52:82:c6:31:eb:89:1f:9a:9b:
                    6d:9b:40:96:55:dc:16:48:b1:79:f3:2d:1b:01:71:
                    96:90:aa:70:9b:e0:be:b8:4f:76:60:fa:81:8f:11:
                    6d:40:99:53:63:9e:31:31:d3:6e:e5:2e:a6:a4:85:
                    a8:aa:7b:60:c6:0a:84:67:2b:0d:2a:f9:fe:e2:ec:
                    f4:f7:bb:da:d6:db:0b:34:6e:e5:f1:f7:1a:d4:14:
                    34:ca:77:f1:2f:0a:27:ff:b1:d6:e3:54:91:f9:05:
                    4b:4a:9a:03:92:83:fd:5c:00:1b:88:19:c8:d2:41:
                    82:c0:50:98:33:4d:f4:e6:9c:81:9d:c5:40:dd:39:
                    49:fa:62:1f:ae:f4:9f:8f:60:74:17:f7:85:85:e6:
                    76:3f:c1:c2:a8:bc:26:15:3b:45:71:a6:d2:eb:e7:
                    59:af:50:0e:75:f1:27:35:88:7d:1e:42:28:63:49:
                    16:da:b8:09:37:07:48:26:21:95:80:fd:5f:04:5b:
                    26:45:e3:34:04:22:e5:16:ff:61:a1:c8:8e:a8:1a:
                    a5:d2:df:43:f5:a8:56:04:25:c8:93:8c:8a:43:eb:
                    5b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:AC:A8:57:E6:F9:EF:03:81:39:4B:0B:00:04:E7:C0:B1:32:06:64
            X509v3 Authority Key Identifier:
                keyid:4D:A9:2D:C9:CB:C1:C8:1C:73:A6:9F:31:5A:53:1B:47:F4:4E:3C:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaktycvByBxzpp8xWlMbR_ROPFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/TaktycvByBxzpp8xWlMbR_ROPFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/TaktycvByBxzpp8xWlMbR_ROPFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:dc:dc:6d:d7:23:4c:b7:f4:af:3d:04:fd:b4:cd:62:16:fd:
         05:8f:d7:97:e2:10:45:23:e2:75:86:53:8b:8f:16:53:9b:5e:
         fa:11:23:f0:c2:aa:62:9d:2e:19:4a:de:28:39:67:53:a2:83:
         09:fe:a2:47:51:19:ab:46:7c:a8:a4:81:17:4d:08:ad:6c:78:
         95:ff:51:7d:a3:fc:1f:fb:f4:fc:10:7e:a1:fb:1d:ea:55:08:
         55:14:e4:55:a6:1a:20:3a:8c:ca:be:75:d9:db:49:42:f8:96:
         f8:47:a4:e6:46:16:0d:57:a9:34:81:b9:57:70:8c:38:a8:19:
         30:6c:ab:42:85:aa:9e:19:96:f0:87:24:50:c7:1b:13:da:20:
         0a:9b:8a:a4:a8:e8:56:1b:c2:85:b5:af:21:10:4e:4f:84:f4:
         74:42:55:c3:94:5c:21:3b:6f:b0:9c:1f:4f:5a:f1:46:88:1a:
         72:71:ec:ad:38:54:59:8b:16:48:ce:36:49:fb:a2:6f:bb:2e:
         8f:bb:28:4f:0b:11:f4:6a:57:c5:7a:fe:34:0d:df:1d:26:fa:
         c6:f5:89:f4:09:f0:92:53:73:9f:20:67:2f:a2:9e:d0:71:aa:
         53:81:3a:cb:db:29:d1:c7:42:13:85:da:99:93:66:91:b9:7f:
         6a:76:27:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:55 2026 by rpki-client