Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
File:                     TPgIAsZXmk1KEGCNz5LprOmQWxY.mft (raw, json)
Hash identifier:          HIzdMTdLAm6YX4DLjQjS0aTYdOpL/ynm6Yqmh2D9Ak4=
Subject key identifier:   A6:7B:C9:B1:83:6F:B4:24:D7:A6:70:25:F0:74:C8:7B:9E:35:CB:65
Authority key identifier: 4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
Certificate issuer:       /CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Certificate serial:       019D2628886BA1BF151644873DBED2AB681E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
Manifest number:          074B
Signing time:             Wed 25 Mar 2026 18:01:23 +0000
Manifest this update:     Wed 25 Mar 2026 18:01:23 +0000
Manifest next update:     Thu 26 Mar 2026 18:01:23 +0000
Files and hashes:         1: JAiGMFKKZfeARhCIuVLbMeZNXJY.asa (hash: BVYEISvT/4Z21IuD9kN936xR94O9xS00DBa/dc3qsv4=)
                          2: TPgIAsZXmk1KEGCNz5LprOmQWxY.crl (hash: MlOT3a+JO43RWU6lA86W5Yt8DvuLORf00yZ0VOy6wM8=)
                          3: gKnl6zVoIeKgo92UVGQsPpHqtzE.roa (hash: 56ktfiqABwMNzwOBBq7mQNUi4gG3qwUkwZC4BiFM9Oc=)
                          4: lSVqAAvEWKUv1GrOr_KbEfWQpGk.roa (hash: Ugj+m6NNSZeK/sMmtv36B6LB9pkXvcsE/Io4aKNy8r8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:88:6b:a1:bf:15:16:44:87:3d:be:d2:ab:68:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
        Validity
            Not Before: Mar 25 18:01:23 2026 GMT
            Not After : Mar 26 18:01:23 2026 GMT
        Subject: CN=a67bc9b1836fb424d7a67025f074c87b9e35cb65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:68:9c:5d:b5:02:c7:cd:87:e3:be:00:83:91:
                    43:17:1b:c6:fd:2b:a8:ab:38:8c:c1:43:12:34:66:
                    c8:23:30:2d:5c:28:0e:1c:02:36:04:f0:47:0a:b4:
                    29:9c:74:84:65:1c:15:7b:2d:9f:90:e5:11:c7:72:
                    4c:f5:6c:d8:2d:c6:8e:14:48:79:d3:d4:6a:0f:c5:
                    ad:da:ff:9c:fd:43:9e:e5:1a:e2:a6:1a:b9:ee:2c:
                    1a:c7:88:c1:c4:7e:af:5b:fd:26:57:3e:64:49:e4:
                    7e:ae:46:29:dc:c6:72:a0:35:e6:0d:48:23:be:58:
                    e2:ac:95:14:25:ed:0e:4f:21:bb:6e:6a:59:14:84:
                    bf:62:41:0f:d0:5c:4c:fa:31:13:5e:0a:dd:55:79:
                    99:5c:3f:98:b8:00:a2:32:e5:30:ce:39:63:fe:44:
                    2a:5b:19:9d:c8:c5:9d:21:52:95:b8:08:52:78:65:
                    a2:12:85:9d:8c:2d:67:9d:16:d5:33:23:c6:66:1f:
                    e2:3f:83:48:c7:98:f2:22:70:fd:87:cc:86:3f:78:
                    dd:a9:08:35:68:55:be:e8:0d:da:7f:35:9d:cb:4a:
                    b4:5b:62:4e:6e:f7:be:c9:56:5c:e1:d2:e0:c9:05:
                    49:aa:ef:d6:a0:51:39:54:1a:fb:d5:80:2a:90:3b:
                    2a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:7B:C9:B1:83:6F:B4:24:D7:A6:70:25:F0:74:C8:7B:9E:35:CB:65
            X509v3 Authority Key Identifier:
                keyid:4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:33:07:cd:85:4b:1e:28:87:89:35:bb:06:e5:2a:52:7b:6a:
         b5:57:dc:d0:45:6c:b1:cf:32:61:d5:e2:49:7a:1c:56:15:bc:
         e1:12:b0:12:9e:4f:e8:2e:fd:7e:d0:e5:31:76:22:9c:96:c8:
         06:0b:c6:af:d8:f3:5c:47:37:a5:ea:78:64:1a:45:06:bb:9c:
         72:ab:d8:10:3d:d3:39:aa:ad:75:a1:92:0c:94:58:87:0e:a8:
         8c:af:d9:25:07:20:d6:1b:67:0d:29:db:cb:42:25:a5:79:f1:
         da:1b:7a:5b:b4:d3:e1:cc:59:5e:5c:d3:f9:fb:71:32:e3:aa:
         ba:9d:5e:39:a0:c2:d2:d4:70:a2:8b:25:16:3d:41:23:13:ec:
         e6:59:83:94:c9:36:28:e6:c5:78:a5:cc:9f:db:99:c3:7c:09:
         c4:b2:fa:d1:91:01:b6:7f:47:c8:36:c2:06:2e:bf:87:bb:13:
         cf:a6:92:67:a0:56:30:02:b2:c7:57:19:0b:01:39:bb:11:40:
         47:42:9b:9d:ab:a5:62:7f:35:2e:49:ca:8d:0b:a5:b4:02:85:
         ca:e3:c0:68:4c:d7:e3:56:fa:d0:d9:65:22:55:53:67:c1:19:
         1c:40:05:d7:7a:0a:fb:fa:52:fb:6a:56:d8:65:c6:91:b5:fb:
         5c:d0:67:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:20:42 2026 by rpki-client