Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.mft
File:                     tp2yeJuox_8Yi3nd5ChqpuHwN-4.mft (raw, json)
Hash identifier:          V/FxMHs7A/zaUZ972CZ4e7ETVNrutnjwzKvA2bmPUsQ=
Subject key identifier:   4A:4F:CD:1D:E0:AE:77:05:4D:0C:20:71:72:C9:2D:7B:A2:C0:FB:E0
Authority key identifier: B6:9D:B2:78:9B:A8:C7:FF:18:8B:79:DD:E4:28:6A:A6:E1:F0:37:EE
Certificate issuer:       /CN=b69db2789ba8c7ff188b79dde4286aa6e1f037ee
Certificate serial:       019D28F297CB1552D1AE1101080EBF1B4EF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tp2yeJuox_8Yi3nd5ChqpuHwN-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.mft
Manifest number:          1889
Signing time:             Thu 26 Mar 2026 07:01:20 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:20 +0000
Manifest next update:     Fri 27 Mar 2026 07:01:20 +0000
Files and hashes:         1: 9mkH4IzMoq3DwoNvnvYH9-YO79c.roa (hash: 3KE8jl9vgjE4AA+K3LRuupb+vjXe25NtIAJuw2cNEMk=)
                          2: tp2yeJuox_8Yi3nd5ChqpuHwN-4.crl (hash: nLjRZUo2UJdVla7CaVgyPgNimumQHhmDLUBfASMlfZw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tp2yeJuox_8Yi3nd5ChqpuHwN-4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:97:cb:15:52:d1:ae:11:01:08:0e:bf:1b:4e:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b69db2789ba8c7ff188b79dde4286aa6e1f037ee
        Validity
            Not Before: Mar 26 07:01:20 2026 GMT
            Not After : Mar 27 07:01:20 2026 GMT
        Subject: CN=4a4fcd1de0ae77054d0c207172c92d7ba2c0fbe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:93:f0:85:a2:fd:3c:50:19:8e:6d:17:a6:55:
                    ec:ee:d8:29:2b:30:a4:9d:24:57:6a:35:2a:6f:ab:
                    ef:d1:27:1b:9f:2f:34:92:45:d9:f0:d8:31:0d:20:
                    8f:fc:c9:cd:7f:0f:20:7c:34:ad:8d:b2:55:de:ba:
                    dc:d3:4b:6e:9c:1e:00:75:97:a2:f2:2a:b1:0a:e0:
                    20:4a:51:02:20:f9:0a:30:c3:2b:60:fa:be:7a:13:
                    fe:41:25:c2:b5:1f:4e:70:2c:f4:6d:51:c3:60:85:
                    0d:b9:b6:39:82:11:0c:e7:11:90:9b:7a:a3:ee:20:
                    8b:e3:f5:dc:8e:33:8e:74:c9:15:42:9e:96:f9:60:
                    8e:2d:8d:97:65:14:ad:c6:3a:4a:30:f6:32:01:38:
                    96:fe:f5:20:62:2d:08:26:29:fd:37:a3:41:44:fc:
                    5c:d3:b5:61:d8:cf:3e:69:c5:a2:6f:c2:7f:b9:cd:
                    9b:ea:d5:ca:e7:c9:d5:1c:3b:ab:ec:1c:89:93:64:
                    c1:96:63:30:3a:23:02:3e:06:90:be:5f:9c:78:26:
                    03:4c:3a:0a:9d:3b:74:3d:81:52:a2:19:60:b9:7d:
                    70:58:96:64:38:11:a7:ee:d4:ea:3a:1f:88:fc:33:
                    2f:96:b7:52:88:69:ee:69:76:ef:dc:31:21:64:e3:
                    9d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:4F:CD:1D:E0:AE:77:05:4D:0C:20:71:72:C9:2D:7B:A2:C0:FB:E0
            X509v3 Authority Key Identifier:
                keyid:B6:9D:B2:78:9B:A8:C7:FF:18:8B:79:DD:E4:28:6A:A6:E1:F0:37:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tp2yeJuox_8Yi3nd5ChqpuHwN-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:49:41:ef:d9:e2:9b:ab:e0:f3:04:09:86:26:47:92:46:9d:
         d7:4b:d1:aa:2b:f9:6e:e8:5f:68:f1:65:76:3c:ad:56:2a:17:
         aa:47:f7:be:5d:e5:b0:b8:33:d0:da:51:0d:6f:f9:49:2c:bb:
         41:4a:fd:2d:47:55:ca:73:e7:94:04:c9:e4:7d:a7:f7:7a:3d:
         9f:65:93:14:97:6c:d3:7a:b2:1a:d8:68:10:06:d3:d7:ce:5b:
         3c:3e:aa:83:1f:18:f0:04:bc:5e:5b:19:58:bc:2a:b0:40:eb:
         6e:e6:24:5d:53:0e:a2:8f:5c:70:63:2a:11:c1:3e:35:1c:47:
         3c:cd:48:0e:3f:20:c9:46:47:b9:7f:8f:fc:72:dd:94:13:20:
         a8:92:65:ff:cc:b5:52:00:83:e4:d8:49:dd:3c:ed:90:8b:19:
         b8:f6:6e:f2:36:77:a8:cc:95:7e:5f:82:19:74:9c:00:73:16:
         a7:bf:ae:64:46:58:b6:ad:15:e4:0f:8e:cd:13:ec:c2:b6:bc:
         71:f4:a8:03:18:49:ec:33:5a:41:78:2c:90:9a:c8:5e:a6:a0:
         c8:17:8e:d5:d4:81:fd:93:bc:6f:4a:94:3a:8b:80:04:b9:0f:
         96:5f:e1:05:70:12:ac:44:04:f8:4c:ab:47:f4:a9:45:03:67:
         31:4d:b7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:22:43 2026 by rpki-client