Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
File:                     Tchxtd3wdAsxfR4042smgQu5gCY.mft (raw, json)
Hash identifier:          jQ6vnv53mV6mA4rJzIi8m6fw04ADKbYcLS2smDCTHmc=
Subject key identifier:   D7:44:C3:26:99:7E:E8:54:3E:60:BA:5C:93:7D:F4:9B:2F:9A:F1:06
Authority key identifier: 4D:C8:71:B5:DD:F0:74:0B:31:7D:1E:34:E3:6B:26:81:0B:B9:80:26
Certificate issuer:       /CN=4dc871b5ddf0740b317d1e34e36b26810bb98026
Certificate serial:       019D2771E2D4311C960321D332B84EF8D450
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
Manifest number:          0B58
Signing time:             Thu 26 Mar 2026 00:01:07 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:07 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:07 +0000
Files and hashes:         1: Tchxtd3wdAsxfR4042smgQu5gCY.crl (hash: kXt3it3ZyRkfsGHD8hlcPJ45LMu7wUt8/L0ZiTT89uM=)
                          2: jXwSEoxbq6KdrBrzSTnO_RMriMk.roa (hash: BbP0L4fPspJ9Y6QO7cR0z5Mqnlzrld3QNlzO8Lk3/gU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:71:e2:d4:31:1c:96:03:21:d3:32:b8:4e:f8:d4:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dc871b5ddf0740b317d1e34e36b26810bb98026
        Validity
            Not Before: Mar 26 00:01:07 2026 GMT
            Not After : Mar 27 00:01:07 2026 GMT
        Subject: CN=d744c326997ee8543e60ba5c937df49b2f9af106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f1:42:0d:8f:b8:4a:aa:b5:9d:32:09:b8:b5:
                    b2:78:de:2d:d7:bc:1d:8a:05:c6:ff:0f:f8:c9:30:
                    de:9f:bf:a6:b3:ee:ab:f2:f8:4e:76:d7:10:84:68:
                    2c:b6:e5:ba:c3:d7:ad:92:06:31:5c:42:5d:7f:29:
                    c4:73:82:36:3b:22:72:fc:d6:db:99:e4:dd:82:54:
                    8c:0c:ea:fc:6d:e2:fd:f1:22:25:6f:d7:6b:92:2a:
                    ae:42:2f:94:a4:72:c3:d3:74:bf:d3:2b:01:33:ce:
                    8e:b7:18:4e:14:8a:f6:e6:3b:10:77:67:a5:26:07:
                    e5:9a:78:17:b2:f5:9b:ae:9c:b9:9c:4d:47:34:a3:
                    b1:17:cd:7b:bf:9d:69:d6:b3:12:6d:48:f5:aa:96:
                    aa:34:b2:15:24:80:fb:8b:13:80:b7:61:f0:4a:a2:
                    f9:1b:1e:11:0b:f8:55:3c:0e:d5:f5:c0:27:91:1b:
                    dd:5e:fa:ce:5e:b7:1a:55:ba:28:32:5e:3a:fb:7f:
                    64:fe:fe:05:51:95:30:30:d8:0f:25:b1:e9:df:17:
                    cb:26:18:a5:02:48:c2:bb:24:49:10:d4:e2:85:38:
                    9a:ce:6e:ba:ac:f8:38:13:e2:3a:ef:5a:91:ac:ae:
                    8e:f4:6e:6d:88:c4:ff:7c:cb:f3:f1:c6:13:5a:76:
                    75:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:44:C3:26:99:7E:E8:54:3E:60:BA:5C:93:7D:F4:9B:2F:9A:F1:06
            X509v3 Authority Key Identifier:
                keyid:4D:C8:71:B5:DD:F0:74:0B:31:7D:1E:34:E3:6B:26:81:0B:B9:80:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:63:67:d8:43:7b:69:98:00:24:e0:bc:68:b6:77:fe:64:12:
         93:3a:d5:7f:00:76:16:85:7f:c9:be:1d:97:dc:63:7d:04:91:
         55:9c:a0:1b:92:d8:be:3b:f0:2d:32:bb:b5:ed:8e:98:fe:25:
         d2:1b:5c:d8:73:3f:27:0d:81:5e:68:6d:6a:dd:5a:ca:1f:02:
         7d:e1:13:ac:44:25:62:a9:f1:77:a1:21:21:bb:a7:db:6a:d3:
         6d:1b:68:00:d6:3c:f1:a7:3b:0b:a3:53:8e:66:f9:04:d5:2d:
         dd:0f:c6:24:6d:58:a3:f9:8a:52:4d:53:e2:f1:b5:45:09:10:
         8b:35:6e:c4:2e:a5:0e:b2:05:e0:11:bf:6b:a9:cf:44:cb:65:
         26:2a:80:2f:57:a9:55:ae:31:37:da:27:f5:72:0a:1a:8e:02:
         6c:0a:e1:aa:23:80:bd:db:51:9a:4d:14:3a:33:24:f6:61:14:
         30:ab:fd:41:8b:5d:1e:ef:30:9a:49:c3:f7:48:5d:ec:e1:8a:
         d6:e6:07:a1:04:56:33:d0:b2:8d:44:65:76:a0:ec:22:6c:72:
         25:25:63:db:e5:00:b8:8d:93:7c:a8:a0:9b:cb:c8:48:3c:78:
         37:eb:1f:41:c0:c6:b6:a6:f4:b2:c8:7f:a5:52:99:4b:62:f4:
         46:05:7a:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nceLUMRyWAyHTMrhO+NRQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYzg3MWI1ZGRmMDc0MGIzMTdkMWUzNGUzNmIyNjgxMGJi
OTgwMjYwHhcNMjYwMzI2MDAwMTA3WhcNMjYwMzI3MDAwMTA3WjAzMTEwLwYDVQQD
EyhkNzQ0YzMyNjk5N2VlODU0M2U2MGJhNWM5MzdkZjQ5YjJmOWFmMTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvFCDY+4Sqq1nTIJuLWyeN4t17wd
igXG/w/4yTDen7+ms+6r8vhOdtcQhGgstuW6w9etkgYxXEJdfynEc4I2OyJy/Nbb
meTdglSMDOr8beL98SIlb9drkiquQi+UpHLD03S/0ysBM86OtxhOFIr25jsQd2el
JgflmngXsvWbrpy5nE1HNKOxF817v51p1rMSbUj1qpaqNLIVJID7ixOAt2HwSqL5
Gx4RC/hVPA7V9cAnkRvdXvrOXrcaVbooMl46+39k/v4FUZUwMNgPJbHp3xfLJhil
AkjCuyRJENTihTiazm66rPg4E+I671qRrK6O9G5tiMT/fMvz8cYTWnZ1vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdEwyaZfuhUPmC6XJN99JsvmvEGMB8GA1UdIwQY
MBaAFE3IcbXd8HQLMX0eNONrJoELuYAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGNoeHRkM3dkQXN4ZlI0MDQyc21nUXU1Z0NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8zNTVlZmItMjZiMC00MTEyLWI0YjUt
OTNjMjk2NDBiYmZlLzEvVGNoeHRkM3dkQXN4ZlI0MDQyc21nUXU1Z0NZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8zNTVlZmItMjZiMC00MTEyLWI0YjUtOTNjMjk2NDBiYmZl
LzEvVGNoeHRkM3dkQXN4ZlI0MDQyc21nUXU1Z0NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaWNn2EN7
aZgAJOC8aLZ3/mQSkzrVfwB2FoV/yb4dl9xjfQSRVZygG5LYvjvwLTK7te2OmP4l
0htc2HM/Jw2BXmhtat1ayh8CfeETrEQlYqnxd6EhIbun22rTbRtoANY88ac7C6NT
jmb5BNUt3Q/GJG1Yo/mKUk1T4vG1RQkQizVuxC6lDrIF4BG/a6nPRMtlJiqAL1ep
Va4xN9on9XIKGo4CbArhqiOAvdtRmk0UOjMk9mEUMKv9QYtdHu8wmknD90hd7OGK
1uYHoQRWM9CyjURldqDsImxyJSVj2+UAuI2TfKigm8vISDx4N+sfQcDGtqb0ssh/
pVKZS2L0RgV6FQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:12 2026 by rpki-client