Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft
File:                     TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft (raw, json)
Hash identifier:          /O54sntyznfjtBwdWDy2N4Po3qNuAS2VD01YK/PoZQ4=
Subject key identifier:   91:5C:8C:06:97:9A:28:C8:D1:D1:1F:9E:9C:8F:88:DD:D0:F8:B4:D6
Authority key identifier: 4C:83:43:ED:C8:43:54:2F:52:9F:BC:3E:65:0C:B6:57:8C:92:06:C3
Certificate issuer:       /CN=4c8343edc843542f529fbc3e650cb6578c9206c3
Certificate serial:       019D27A8F89EFCF543D8113B82FC1C7E5931
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft
Manifest number:          10E2
Signing time:             Thu 26 Mar 2026 01:01:18 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:18 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:18 +0000
Files and hashes:         1: TIND7chDVC9Sn7w-ZQy2V4ySBsM.crl (hash: /8FTKLDfFZ7YWWpFi4cd03abRIEiCyG7CZ2OxJw9wXE=)
                          2: WsrGl1B3tO_3zGDPwgytq9BV2ls.roa (hash: B0lMFZCDA7Fu94HSAjMOJTkk6H8QhRKhpFxC3F7YKps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:f8:9e:fc:f5:43:d8:11:3b:82:fc:1c:7e:59:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c8343edc843542f529fbc3e650cb6578c9206c3
        Validity
            Not Before: Mar 26 01:01:18 2026 GMT
            Not After : Mar 27 01:01:18 2026 GMT
        Subject: CN=915c8c06979a28c8d1d11f9e9c8f88ddd0f8b4d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e1:e4:8a:5f:14:5c:54:75:02:cd:51:bd:ad:
                    64:7e:ad:96:77:57:f6:ab:ed:a0:a0:34:d4:98:39:
                    65:6c:da:bd:ef:0e:35:9b:6c:f5:74:02:13:c4:6c:
                    b0:98:00:4a:45:4d:8b:5e:5d:d2:8e:86:87:67:1d:
                    72:9f:0a:a7:18:b4:bc:3d:f3:b4:cf:30:5e:1a:e9:
                    b5:f6:68:2d:a8:f8:a3:dd:65:bc:90:cb:56:75:62:
                    aa:69:d1:81:26:f7:3a:47:2c:ed:0c:97:ce:1e:05:
                    ce:f9:38:6e:9b:30:01:d5:2a:56:13:b6:1b:63:4f:
                    5d:d7:f0:27:22:ef:bd:de:0e:6e:8a:03:27:e8:e6:
                    ab:86:37:db:9a:4d:48:c6:0e:d0:8f:15:50:0b:e8:
                    16:f2:e0:d9:9a:00:b1:38:82:37:a5:e8:ea:d6:31:
                    d3:02:86:f4:69:f9:1b:ce:21:f9:7f:db:5b:93:bd:
                    88:87:f4:55:2e:19:ad:f5:27:54:57:ad:cc:f9:e1:
                    87:8c:f4:ce:2d:3b:fc:5a:d4:09:c1:ae:6b:1f:95:
                    0b:4d:d1:07:8e:4f:89:1f:d9:dd:cf:cf:51:ee:1f:
                    fd:f6:3b:00:82:d9:1e:6c:53:22:e3:47:3a:75:72:
                    b4:89:fd:9d:ef:3d:7f:ae:cf:95:2d:70:69:b9:ca:
                    2c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:5C:8C:06:97:9A:28:C8:D1:D1:1F:9E:9C:8F:88:DD:D0:F8:B4:D6
            X509v3 Authority Key Identifier:
                keyid:4C:83:43:ED:C8:43:54:2F:52:9F:BC:3E:65:0C:B6:57:8C:92:06:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:df:5a:7a:c1:3e:cd:df:50:50:b0:2b:ae:a4:dd:bd:b8:c7:
         56:0f:44:5b:14:d4:85:bc:93:b0:95:38:fc:42:2b:95:c7:35:
         1c:42:ae:5e:33:aa:ad:de:f5:92:52:3b:34:a3:8b:61:75:00:
         32:67:ee:07:32:bf:58:b5:e0:44:ae:47:7a:5f:60:1d:dc:61:
         2e:18:bc:d4:56:29:df:3f:4a:8b:56:d4:30:34:5a:65:1a:dc:
         95:a7:8c:b2:76:ab:37:4e:c1:61:7e:1a:21:19:68:79:1b:61:
         4b:88:20:a3:a3:d9:1d:d3:34:5e:ad:92:04:26:28:f4:cd:ce:
         a0:06:76:78:47:ae:e9:79:91:da:e7:fa:29:9e:55:48:6a:7f:
         e1:1f:62:4f:30:cc:9a:22:bd:76:dc:03:df:32:e8:21:48:be:
         9f:df:ae:29:ac:b3:c3:ea:95:d1:f1:9d:66:50:6c:35:92:1d:
         ad:ff:77:07:76:42:9f:20:00:6c:c4:d7:f2:7b:1a:70:42:7d:
         f4:a9:ce:d5:fd:db:e2:96:44:26:c7:9c:ab:cc:52:89:14:e2:
         38:3e:a2:0f:01:27:c9:72:21:91:d1:58:f4:c0:f0:9e:b7:0c:
         c8:a9:8d:9c:a0:34:f1:65:ad:58:51:88:3d:88:d0:4c:e2:c9:
         a5:f3:c0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:01:51 2026 by rpki-client