Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.mft
File:                     Tni20AYU9VZdnYr4JHzHLqm4gz0.mft (raw, json)
Hash identifier:          C8CyiM94skI6kk+aJ60BCtmWaWT9tXU8p/dCZ1NXmWg=
Subject key identifier:   9E:7C:E1:47:6D:F3:BF:4C:CE:8C:27:B4:76:3B:FE:D5:FA:17:09:22
Authority key identifier: 4E:78:B6:D0:06:14:F5:56:5D:9D:8A:F8:24:7C:C7:2E:A9:B8:83:3D
Certificate issuer:       /CN=4e78b6d00614f5565d9d8af8247cc72ea9b8833d
Certificate serial:       019D29CE0CD16780B4ED62F665F0CAD12D41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.mft
Manifest number:          15F6
Signing time:             Thu 26 Mar 2026 11:01:02 +0000
Manifest this update:     Thu 26 Mar 2026 11:01:02 +0000
Manifest next update:     Fri 27 Mar 2026 11:01:02 +0000
Files and hashes:         1: 1-SHXJ_9DyyLTiVml8FNZqLUqf4c.roa (hash: FC5kQ4eFUsIw6UyiwGZplBvHk2DJiPcZkZfYFEyA+1E=)
                          2: Tni20AYU9VZdnYr4JHzHLqm4gz0.crl (hash: 8V1xUa2cMdxK3NQNrdiJhiBFsGg6vdPcCMJsJIS9RbA=)
                          3: cmhQu2Y8Xwpht0Kjbz9MmCetMFs.roa (hash: pcJNDwdU6KGUma0lCWCQ0yEE/DOjtWZEWz1DbRzVYOU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:ce:0c:d1:67:80:b4:ed:62:f6:65:f0:ca:d1:2d:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e78b6d00614f5565d9d8af8247cc72ea9b8833d
        Validity
            Not Before: Mar 26 11:01:02 2026 GMT
            Not After : Mar 27 11:01:02 2026 GMT
        Subject: CN=9e7ce1476df3bf4cce8c27b4763bfed5fa170922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:78:2f:7e:53:11:78:c0:7a:ff:8e:58:87:c8:
                    00:90:53:ed:14:99:80:0f:1b:95:c1:ac:7f:dd:ec:
                    2c:c0:47:e3:9f:30:5f:f8:9a:73:9f:41:8b:32:f8:
                    ee:02:f8:4e:e6:25:6e:d6:78:3a:74:a6:1a:f5:45:
                    a3:28:5c:dd:f8:61:4e:a3:a0:d5:4f:66:42:af:53:
                    df:7e:a7:be:30:86:bf:dc:6b:29:ae:d5:77:29:21:
                    d4:d6:ae:3d:90:e6:70:2f:03:c2:cb:44:1d:1d:8f:
                    e4:3d:e3:2a:03:ed:82:7d:c0:89:9e:88:7e:1f:f4:
                    62:b1:3f:a6:d0:3c:03:a2:4c:71:e5:59:24:27:65:
                    6b:46:6f:72:f8:6b:9f:6b:f8:e0:ce:62:03:7a:8d:
                    c6:58:2f:54:83:2a:6e:a0:a8:8b:98:42:01:a9:8f:
                    55:f8:6b:26:38:04:36:8d:f1:69:67:c6:16:97:e0:
                    a2:73:0b:c4:41:ec:30:a5:c3:b0:7e:e1:d8:6c:81:
                    ec:9a:1c:98:c8:90:4e:29:fe:db:21:bc:87:8b:f9:
                    3b:ab:12:67:2d:b6:dc:79:2e:cb:c8:cc:a3:20:14:
                    09:4c:42:00:ad:a3:cc:92:70:5c:c0:db:52:d0:1a:
                    eb:97:3a:c5:2c:3a:b0:84:41:dc:61:82:7e:c7:18:
                    fe:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7C:E1:47:6D:F3:BF:4C:CE:8C:27:B4:76:3B:FE:D5:FA:17:09:22
            X509v3 Authority Key Identifier:
                keyid:4E:78:B6:D0:06:14:F5:56:5D:9D:8A:F8:24:7C:C7:2E:A9:B8:83:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:f3:4b:ef:e0:fd:1f:04:07:e9:e0:c9:f1:c8:db:d2:e0:f8:
         5a:cd:fc:7c:b1:53:f4:5b:28:90:8c:d1:8f:8c:6f:0e:d0:68:
         d9:91:a0:30:57:64:55:cb:f9:a3:5a:eb:a6:d7:a4:82:77:9b:
         71:ad:56:1b:47:d4:1d:dc:a8:17:0c:53:9a:3f:32:5a:69:41:
         96:45:41:6f:2e:51:25:74:9f:cb:00:c7:97:fe:ba:47:5d:5e:
         c4:ba:44:56:7d:8d:dd:d4:d0:49:b4:c9:48:55:d3:07:63:91:
         44:74:0e:ec:3e:be:01:be:d6:6f:b5:c6:ba:02:16:31:79:a0:
         29:fc:f0:72:d4:11:26:68:68:78:5d:83:dc:63:df:d3:65:07:
         e2:3f:59:68:01:4a:f5:4e:47:87:83:31:4e:c7:40:c7:e1:b3:
         63:cf:26:d5:24:2c:bd:c3:a6:ce:63:62:94:f9:22:7b:8d:e4:
         86:cb:0f:41:18:fb:30:62:2e:d7:15:a2:65:38:52:03:39:b8:
         1a:c6:e0:a0:36:7a:e9:8c:2b:c1:41:d0:6b:85:9c:cc:ff:25:
         24:77:56:ce:e1:27:22:c1:f8:ad:57:d0:f5:cd:93:f1:4d:09:
         55:1b:85:8d:55:6e:d7:b9:aa:d4:e1:2b:7b:4c:d9:23:91:f4:
         4a:52:59:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:54:17 2026 by rpki-client