Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft
File:                     tyC-m1eyWx7aP4EJLgC0U4vosp0.mft (raw, json)
Hash identifier:          zKHBMmH1Tho+A8c5+K2Vw0GZu0bYOrKtShyYYAQqWDI=
Subject key identifier:   03:77:78:19:27:71:BD:70:58:5F:94:6E:5B:A4:91:72:70:2B:52:CB
Authority key identifier: B7:20:BE:9B:57:B2:5B:1E:DA:3F:81:09:2E:00:B4:53:8B:E8:B2:9D
Certificate issuer:       /CN=b720be9b57b25b1eda3f81092e00b4538be8b29d
Certificate serial:       019D265F87406A4265C29D39E5F1FB15493E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tyC-m1eyWx7aP4EJLgC0U4vosp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft
Manifest number:          1812
Signing time:             Wed 25 Mar 2026 19:01:27 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:27 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:27 +0000
Files and hashes:         1: 2bQPYE6C1xPKacn71h7uNUfwW5k.asa (hash: S/35bcKz6xhuKu6KdcMaM7TFCVzuh91pCLHJRPyRwag=)
                          2: tyC-m1eyWx7aP4EJLgC0U4vosp0.crl (hash: 9UT7UPSebNYzWvRS4BZennHCCKra/dD3huJZ2JIepJk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tyC-m1eyWx7aP4EJLgC0U4vosp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:87:40:6a:42:65:c2:9d:39:e5:f1:fb:15:49:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b720be9b57b25b1eda3f81092e00b4538be8b29d
        Validity
            Not Before: Mar 25 19:01:27 2026 GMT
            Not After : Mar 26 19:01:27 2026 GMT
        Subject: CN=037778192771bd70585f946e5ba49172702b52cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b5:f0:03:3d:9c:84:02:4c:6d:25:e6:d0:4a:
                    20:5d:7c:86:4d:ed:cf:a4:9b:a9:77:c9:00:00:62:
                    b0:ab:ab:ea:e8:bf:19:df:56:0f:ff:aa:62:ef:2e:
                    95:ee:93:db:ca:66:17:d6:9d:0e:f4:94:fb:3c:a7:
                    eb:43:79:ee:7a:9e:29:02:60:4d:b0:36:43:0b:d2:
                    a3:f0:75:37:28:23:4c:e7:79:e2:1d:e8:a9:6d:99:
                    7b:2b:9d:18:c7:ff:1a:23:8a:90:df:f4:ae:30:1c:
                    2d:3d:78:b3:b5:c5:6c:29:77:a7:9d:40:0b:70:ef:
                    2e:76:71:0d:93:01:bd:e3:da:ec:0a:aa:36:e5:0a:
                    45:d1:f8:40:cc:0d:06:02:6d:e6:b1:11:5b:ba:d9:
                    a0:95:1d:e1:b2:ff:08:a5:23:e0:ad:95:77:eb:ff:
                    c9:02:2b:a8:eb:9e:9b:f1:03:d2:ce:38:d3:91:ca:
                    11:aa:49:23:d2:e9:bd:44:ed:f6:f4:dd:96:3a:28:
                    7a:20:79:ed:b4:77:ec:54:17:d6:91:51:43:39:98:
                    8a:b4:4c:49:82:a5:3f:81:5e:a0:bb:32:85:0a:be:
                    6c:e6:56:a7:e8:4e:00:bf:44:f8:b8:ca:ed:30:f6:
                    1a:a3:75:93:ca:38:21:d8:c7:0a:72:b7:bc:89:af:
                    fb:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:77:78:19:27:71:BD:70:58:5F:94:6E:5B:A4:91:72:70:2B:52:CB
            X509v3 Authority Key Identifier:
                keyid:B7:20:BE:9B:57:B2:5B:1E:DA:3F:81:09:2E:00:B4:53:8B:E8:B2:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyC-m1eyWx7aP4EJLgC0U4vosp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:06:18:88:e4:bc:da:a5:90:42:4a:da:b6:95:b4:25:e8:e3:
         22:8b:af:f0:31:1b:f9:0e:f0:de:68:41:2b:3d:3d:78:1d:31:
         0f:f5:d2:06:b0:80:b7:cc:8c:25:02:ad:51:51:ed:09:ef:1a:
         07:d1:b4:0b:dd:0e:e5:c7:30:7a:ae:d5:aa:96:b6:ec:aa:9b:
         16:cf:7b:25:a8:f6:91:8a:7f:43:aa:5e:78:42:b8:7a:98:79:
         a8:b7:65:df:13:f7:a2:c7:e4:f0:35:28:89:23:fa:c2:b9:98:
         63:5e:47:13:be:29:2f:40:30:e9:a4:78:0c:fe:0d:08:f3:ff:
         bc:61:63:6f:fe:42:79:1a:76:4a:00:a1:af:ee:1f:42:6b:58:
         8b:2f:45:78:08:87:be:3a:34:9f:19:8e:67:4d:32:75:04:bf:
         98:dc:21:61:b7:91:7c:99:40:96:b7:fc:45:6d:f7:71:58:77:
         10:b5:c0:16:eb:61:0e:73:3a:41:28:1a:03:66:1e:77:42:40:
         eb:a9:32:d9:2e:19:4a:b3:f9:81:f5:ea:9b:93:2f:a0:13:3a:
         86:49:09:6d:b4:2a:29:9e:77:f8:b4:0c:0a:eb:55:94:d5:06:
         ec:97:e6:bd:de:2c:48:79:88:4e:b7:17:1f:c4:71:3b:3b:bc:
         31:18:b0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:56 2026 by rpki-client