Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
File:                     TPgIAsZXmk1KEGCNz5LprOmQWxY.mft (raw, json)
Hash identifier:          z3WsSEY/EQtbZp3dl2W3Br4jIBwT5bvVvm2LBaKwyOs=
Subject key identifier:   72:B4:9D:84:49:68:86:28:EA:07:E4:72:3C:A1:0C:FC:30:1C:8F:6B
Authority key identifier: 4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
Certificate issuer:       /CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Certificate serial:       019F8FB562C3B1E26FF7A4489AD06222779F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
Manifest number:          0890
Signing time:             Thu 23 Jul 2026 16:00:56 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:56 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:56 +0000
Files and hashes:         1: MyDBxuxHjE1UjZ06-D4Xls72e2k.roa (hash: ujdPm62GD2JKSu06a5kdzzKz/zzSLFEp1QNe1saBzo4=)
                          2: TPgIAsZXmk1KEGCNz5LprOmQWxY.crl (hash: vboY+Yg02+9/u9ezbwmn2YYeTlhiaFoP6qxGqCIKP9U=)
                          3: nYD17mll_27ZXiDBVbfu9pAFZUI.asa (hash: aqqjluAZqn8ok88nfidc6bqSZjUpiWBj4TFvOPAr5AU=)
                          4: odFrLcZzZa3lGHkplTYFOeTL_lk.roa (hash: WkZkaCnol/FFO1wh5d5UvdfBIOI/M/3rlDA0bdxo8+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:62:c3:b1:e2:6f:f7:a4:48:9a:d0:62:22:77:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
        Validity
            Not Before: Jul 23 16:00:56 2026 GMT
            Not After : Jul 24 16:00:56 2026 GMT
        Subject: CN=72b49d8449688628ea07e4723ca10cfc301c8f6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:02:3f:8f:e9:5d:3b:ae:dd:ba:16:48:39:10:
                    91:a3:86:04:93:3e:2a:3c:7e:c2:fe:ff:96:95:fe:
                    14:4c:8e:b0:40:89:49:1d:43:79:11:be:5b:54:1e:
                    74:33:29:8f:7d:fc:f6:ab:1f:f7:9a:5c:58:d0:ae:
                    fa:47:9d:da:d0:05:73:6f:f6:bb:cf:f8:3f:b6:58:
                    01:18:9b:b3:20:b4:3b:53:30:5e:1f:5b:fe:a1:a5:
                    d7:d2:26:63:1a:e5:55:dd:9b:31:0e:6b:7d:2c:bc:
                    58:5b:c2:cf:41:22:26:a3:a1:3c:47:4d:d6:7b:1e:
                    94:66:c3:dc:71:e4:e7:6b:b9:20:3d:46:25:ef:b0:
                    5c:94:f8:45:e4:99:1e:ba:30:68:1b:ce:a7:d5:0d:
                    6a:40:52:d2:b8:e9:11:47:94:6e:88:22:bc:61:83:
                    d9:b7:bb:4d:a2:68:72:d5:23:ea:39:f1:1e:5a:2d:
                    65:13:0b:73:58:9a:1f:90:24:f7:c7:a4:2f:e4:f2:
                    0b:73:31:fe:4f:07:2d:26:2c:3e:da:d9:0f:9c:a4:
                    c4:7f:15:d8:f1:3c:16:6b:65:0f:dd:f0:fb:2e:2a:
                    38:46:e6:28:bc:02:13:9b:f7:7e:1c:86:c1:6e:59:
                    90:05:50:01:04:50:c7:98:0a:ad:e1:57:8c:bc:3c:
                    10:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B4:9D:84:49:68:86:28:EA:07:E4:72:3C:A1:0C:FC:30:1C:8F:6B
            X509v3 Authority Key Identifier:
                keyid:4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:77:ec:e8:64:4a:5f:e1:9c:36:20:25:77:84:20:9a:8c:a1:
         73:19:67:69:43:1b:9e:a4:91:51:65:bf:d3:4d:1d:4c:af:8e:
         36:5d:da:05:c7:1a:28:2d:9a:a3:ff:2f:83:e3:39:59:7a:a6:
         35:88:c7:93:8a:ff:e0:e3:24:72:ae:26:7e:9b:cf:d9:bc:fe:
         3f:79:73:35:36:2a:58:8e:94:c2:af:bd:01:14:8e:37:96:d0:
         61:55:01:38:44:37:16:a4:21:68:52:2e:47:2c:7b:12:9a:64:
         fd:54:3f:4d:4e:37:a5:25:82:a9:c8:a8:0e:bf:d3:95:c2:eb:
         3c:38:20:07:d4:7e:8c:d5:f3:07:f6:35:53:01:e4:2f:eb:42:
         84:c7:2d:e7:40:17:93:6d:da:42:01:49:fc:3a:dc:6c:5f:21:
         0b:65:15:4c:50:52:61:2b:aa:b7:7a:44:2f:88:82:12:d9:1e:
         54:86:cb:c8:05:d8:84:76:af:0e:28:ff:08:92:b3:24:54:ee:
         d1:38:b7:8d:4b:f0:6b:af:67:fb:ee:ed:7d:c8:9f:49:c6:32:
         2d:02:55:e6:7f:35:1a:ce:2b:33:77:d9:2c:0d:82:e3:b9:d0:
         68:61:32:a1:d8:80:df:ff:ea:3e:d5:c0:f0:fc:b0:ee:e7:3e:
         79:ee:e2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:02:57 2026 by rpki-client