Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft
File:                     TTxfCqFBARzi2_GMzOqsjSOoAlM.mft (raw, json)
Hash identifier:          DVY6BBB/ya3qdV1ZkisrD0hG1gEYWBiArfTopFjAUQg=
Subject key identifier:   C3:39:87:31:56:51:0A:AC:1F:96:2D:4D:EC:24:26:EE:A2:D6:FD:86
Authority key identifier: 4D:3C:5F:0A:A1:41:01:1C:E2:DB:F1:8C:CC:EA:AC:8D:23:A8:02:53
Certificate issuer:       /CN=4d3c5f0aa141011ce2dbf18ccceaac8d23a80253
Certificate serial:       019D27A910ADD502F097C83C9CCAED71A671
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TTxfCqFBARzi2_GMzOqsjSOoAlM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft
Manifest number:          05B3
Signing time:             Thu 26 Mar 2026 01:01:24 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:24 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:24 +0000
Files and hashes:         1: 25Z4VEtMdr8mirSyT68RGYIDnRA.roa (hash: lvnbo3XhmGJZhSdH7jyEy3U5ULLTyPw51UAj+VCuEeY=)
                          2: TTxfCqFBARzi2_GMzOqsjSOoAlM.crl (hash: j1mRHcCOxltJ0KRVROrawu19W9MsvCc8cjmdYn6jxt0=)
                          3: dqMlRayS2Zk8T9yw4HnObXcfkFs.roa (hash: ZflJfUfYgkfuQwoF8VaNgzB/zsaQQoupZA9LCKNCHvw=)
                          4: n8CSKoRLuT4x4jI0qfGa0BhbHd8.roa (hash: n2uonuz5ZghRs61kAlvv99Bmctae2IN7sgoaLTAtaIw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TTxfCqFBARzi2_GMzOqsjSOoAlM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a9:10:ad:d5:02:f0:97:c8:3c:9c:ca:ed:71:a6:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d3c5f0aa141011ce2dbf18ccceaac8d23a80253
        Validity
            Not Before: Mar 26 01:01:24 2026 GMT
            Not After : Mar 27 01:01:24 2026 GMT
        Subject: CN=c339873156510aac1f962d4dec2426eea2d6fd86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b8:cd:6c:bf:e7:c4:85:2e:ce:33:34:1a:c9:
                    af:44:bc:9f:48:e9:f7:c5:53:b0:9b:67:c0:d7:4e:
                    db:61:d2:ec:a9:42:f4:24:6c:c4:2c:cc:84:78:b0:
                    08:9b:ab:ba:c4:47:a3:fa:f7:24:39:e6:c2:27:ca:
                    e7:76:7b:f2:e4:50:57:6f:d3:5e:56:23:31:43:ae:
                    87:36:fd:07:4f:be:72:4a:d3:51:9e:78:d4:53:f9:
                    1c:60:2d:98:c5:5a:da:f0:49:41:1d:2b:c6:d5:cf:
                    b6:a2:04:f3:22:26:04:d5:1f:eb:68:1d:2e:a2:5d:
                    d6:43:b2:b1:99:c0:a7:1d:fc:23:a8:4b:ab:a5:d3:
                    14:0a:42:29:df:3e:63:00:66:d6:7a:5f:95:66:ba:
                    de:fb:3b:fe:da:35:3e:55:3b:d2:5e:c0:95:c0:ee:
                    02:58:46:d3:63:30:7a:8a:99:54:58:8f:45:a0:17:
                    0e:f8:b3:e7:5e:bf:fb:be:e8:ca:71:75:1d:0d:e1:
                    a2:80:7d:94:86:85:03:d0:54:6e:2e:54:c3:c9:b7:
                    79:23:af:45:01:b3:12:b7:d1:76:e2:3e:f7:55:16:
                    b0:1e:93:76:21:1d:03:76:4b:bb:d8:ec:75:bb:e4:
                    c0:18:c1:e3:29:39:18:f3:33:ce:80:df:c0:d3:c6:
                    7c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:39:87:31:56:51:0A:AC:1F:96:2D:4D:EC:24:26:EE:A2:D6:FD:86
            X509v3 Authority Key Identifier:
                keyid:4D:3C:5F:0A:A1:41:01:1C:E2:DB:F1:8C:CC:EA:AC:8D:23:A8:02:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTxfCqFBARzi2_GMzOqsjSOoAlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:27:23:3b:f7:f7:a6:7a:2d:ef:58:19:e5:c0:27:f7:e4:86:
         1d:c5:b1:95:9e:ce:67:73:28:7c:34:94:40:93:4f:0f:7d:f9:
         b7:e9:6a:8f:54:3a:53:f1:89:02:84:16:7e:a4:67:1a:78:99:
         bd:6c:e3:52:b8:2b:4a:a2:71:f7:e7:7a:7b:d1:e9:81:6a:d0:
         76:43:6e:3f:cf:28:4b:ce:85:f1:ce:71:a9:ce:49:e7:8e:9a:
         c4:f7:eb:a5:06:8d:a0:72:a1:d5:2b:db:ca:13:e0:fb:72:f0:
         5c:f1:06:fa:4c:43:d0:7d:9f:14:b2:50:de:2b:87:19:dc:3b:
         17:c6:6a:34:ec:9b:68:73:72:bf:a7:1b:75:ef:7e:90:6b:1b:
         5b:06:6e:25:5a:4d:7c:83:04:03:38:e1:1c:cd:25:f2:7b:fc:
         e2:23:14:bf:93:28:07:c3:7b:29:01:e5:fb:b4:a5:51:cc:04:
         dc:f9:7d:c6:04:77:65:52:72:c1:10:9f:a7:8a:91:ca:30:0f:
         97:a8:50:64:92:9a:7d:3d:62:1f:41:3b:2f:11:70:1a:84:0e:
         2c:c8:82:48:32:83:47:db:ad:b3:4c:c5:4e:ef:64:3e:6b:eb:
         d5:76:5a:40:83:25:18:24:cf:42:8d:a5:4a:aa:85:52:c0:df:
         52:c4:b1:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqRCt1QLwl8g8nMrtcaZxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkM2M1ZjBhYTE0MTAxMWNlMmRiZjE4Y2NjZWFhYzhkMjNh
ODAyNTMwHhcNMjYwMzI2MDEwMTI0WhcNMjYwMzI3MDEwMTI0WjAzMTEwLwYDVQQD
EyhjMzM5ODczMTU2NTEwYWFjMWY5NjJkNGRlYzI0MjZlZWEyZDZmZDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LjNbL/nxIUuzjM0GsmvRLyfSOn3
xVOwm2fA107bYdLsqUL0JGzELMyEeLAIm6u6xEej+vckOebCJ8rndnvy5FBXb9Ne
ViMxQ66HNv0HT75yStNRnnjUU/kcYC2YxVra8ElBHSvG1c+2ogTzIiYE1R/raB0u
ol3WQ7KxmcCnHfwjqEurpdMUCkIp3z5jAGbWel+VZrre+zv+2jU+VTvSXsCVwO4C
WEbTYzB6iplUWI9FoBcO+LPnXr/7vujKcXUdDeGigH2UhoUD0FRuLlTDybd5I69F
AbMSt9F24j73VRawHpN2IR0Ddku72Ox1u+TAGMHjKTkY8zPOgN/A08Z8qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMM5hzFWUQqsH5YtTewkJu6i1v2GMB8GA1UdIwQY
MBaAFE08XwqhQQEc4tvxjMzqrI0jqAJTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFR4ZkNxRkJBUnppMl9HTXpPcXNqU09vQWxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8yZDA2N2MtZGY3Mi00MDQwLWJjNDMt
MTkzOTdmYzc2ZmVjLzEvVFR4ZkNxRkJBUnppMl9HTXpPcXNqU09vQWxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8yZDA2N2MtZGY3Mi00MDQwLWJjNDMtMTkzOTdmYzc2ZmVj
LzEvVFR4ZkNxRkJBUnppMl9HTXpPcXNqU09vQWxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzycjO/f3
pnot71gZ5cAn9+SGHcWxlZ7OZ3MofDSUQJNPD335t+lqj1Q6U/GJAoQWfqRnGniZ
vWzjUrgrSqJx9+d6e9HpgWrQdkNuP88oS86F8c5xqc5J546axPfrpQaNoHKh1Svb
yhPg+3LwXPEG+kxD0H2fFLJQ3iuHGdw7F8ZqNOybaHNyv6cbde9+kGsbWwZuJVpN
fIMEAzjhHM0l8nv84iMUv5MoB8N7KQHl+7SlUcwE3Pl9xgR3ZVJywRCfp4qRyjAP
l6hQZJKafT1iH0E7LxFwGoQOLMiCSDKDR9uts0zFTu9kPmvr1XZaQIMlGCTPQo2l
SqqFUsDfUsSxAA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:16:22 2026 by rpki-client