Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
File:                     TPgIAsZXmk1KEGCNz5LprOmQWxY.mft (raw, json)
Hash identifier:          Q2Jw8D87cudePIeUxuIJuQ1wzheKnvJLd5LiXrgKFSA=
Subject key identifier:   45:A7:E0:76:38:73:BB:DE:4B:F8:DC:36:C5:D0:FD:0E:01:AC:BD:BB
Authority key identifier: 4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
Certificate issuer:       /CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Certificate serial:       019E1CEB9F13EE2ACDF11DF684262C2810AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
Manifest number:          07CC
Signing time:             Tue 12 May 2026 16:01:04 +0000
Manifest this update:     Tue 12 May 2026 16:01:04 +0000
Manifest next update:     Wed 13 May 2026 16:01:04 +0000
Files and hashes:         1: 1hvapnheKHo-eVRIH1DmtzXmEZM.asa (hash: Xz8NSvZp2YTF8udd9hEmlddzzMXPsmyWt36tK6/QqHk=)
                          2: 1tOYrSpYNVkxU-5bIyIEu7aU1zs.roa (hash: a84a4LVOwGrGH70VCtlwWX3dE8O9MW5+ohqcbnAW2ag=)
                          3: TPgIAsZXmk1KEGCNz5LprOmQWxY.crl (hash: lTZDmT0bgwctIjdNUDOnh4QBusUu2LMP15DKZVu06M4=)
                          4: gKnl6zVoIeKgo92UVGQsPpHqtzE.roa (hash: 56ktfiqABwMNzwOBBq7mQNUi4gG3qwUkwZC4BiFM9Oc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 16:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:9f:13:ee:2a:cd:f1:1d:f6:84:26:2c:28:10:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
        Validity
            Not Before: May 12 16:01:04 2026 GMT
            Not After : May 13 16:01:04 2026 GMT
        Subject: CN=45a7e0763873bbde4bf8dc36c5d0fd0e01acbdbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:21:a7:57:3f:6b:34:bc:0b:5b:94:3a:d2:02:
                    99:71:61:af:d3:2a:ce:ca:25:dc:ee:f5:35:18:2e:
                    bc:8d:b3:4d:9e:31:58:dd:af:11:08:4d:fe:2a:49:
                    a6:3c:c7:1f:62:20:c8:1d:f6:c0:76:93:2c:83:ab:
                    9b:8d:45:20:14:92:f5:4a:b4:43:47:ce:d8:d8:38:
                    ed:1f:82:27:3e:b9:6a:33:ca:ba:e2:a6:c5:50:f4:
                    9c:df:31:ac:08:83:c4:63:85:9f:0a:d5:68:c8:1f:
                    e0:b8:7f:46:0b:ed:8c:23:1f:7b:e4:85:ce:1b:3b:
                    3d:6c:73:22:8f:4d:51:d1:07:c6:0d:91:9b:3b:0f:
                    5c:7a:57:21:48:de:7a:05:bf:83:c9:d0:db:e3:ba:
                    d9:e9:45:5e:a2:e9:23:29:2c:f4:73:e5:3f:ef:d1:
                    7d:b0:61:c9:03:ba:95:4e:4e:77:ed:44:b3:2b:8e:
                    e0:8f:aa:e4:2a:50:44:87:94:70:e3:37:31:74:15:
                    c3:48:33:f6:40:1e:f6:ea:7a:c7:a4:ed:ba:08:6d:
                    b1:f6:47:df:44:50:41:53:e6:eb:5c:ff:b4:3c:1c:
                    0d:4f:0d:70:5b:92:ff:f1:d2:a7:01:00:5a:31:1a:
                    3c:47:ba:a7:bd:a6:c3:3a:ab:8a:63:99:87:7b:af:
                    25:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A7:E0:76:38:73:BB:DE:4B:F8:DC:36:C5:D0:FD:0E:01:AC:BD:BB
            X509v3 Authority Key Identifier:
                keyid:4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:7d:58:34:64:54:5a:82:3d:20:8d:b9:95:50:96:ba:1b:c7:
         12:3b:e5:46:e0:b6:f4:26:3c:23:dd:3c:0e:f4:cc:dc:19:b4:
         25:27:4a:16:57:48:9c:55:72:64:ca:9c:af:61:59:47:94:2b:
         1d:60:1f:4b:7d:61:bd:19:16:d0:a9:5a:62:51:ea:84:ac:51:
         da:1f:ad:26:90:ee:d4:50:ae:75:a0:f4:b2:83:78:1d:28:c4:
         69:34:49:e0:6e:43:54:20:d3:a5:48:db:85:fa:3e:11:78:c2:
         bf:0e:a7:8e:83:ad:ee:ef:59:43:0a:de:62:69:5f:0b:34:47:
         20:99:4f:ec:c6:eb:ac:04:86:21:f6:91:e9:d2:73:1e:84:24:
         a6:c0:72:59:c2:a4:d7:7c:35:a9:53:da:4c:da:e1:fc:08:bb:
         53:c1:10:b3:23:5d:34:71:62:a3:6c:c4:83:34:7e:71:f8:da:
         c7:32:71:e8:c3:63:6e:58:1a:76:95:81:b0:ca:ea:9c:10:1e:
         9b:9c:a2:1b:e3:82:d9:04:4e:bb:b8:28:08:7d:4a:55:8c:af:
         7b:b0:06:88:e2:aa:57:96:91:27:e1:ce:18:80:e5:bc:d8:6f:
         f7:d9:5c:74:eb:70:2b:1d:9c:e7:b3:b9:2a:42:63:fe:06:44:
         cd:12:27:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:07:00 2026 by rpki-client