Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft
File:                     TXfM16lEFd_GjMyodOlMLowiIC0.mft (raw, json)
Hash identifier:          Y3Cf7FGnpfo4HF7dty3x8coZJmnVDv50Od9E/GT1gFc=
Subject key identifier:   19:5A:9A:7A:7C:42:2E:BC:A8:07:3B:37:D1:B5:9D:4F:D9:1C:B1:EF
Authority key identifier: 4D:77:CC:D7:A9:44:15:DF:C6:8C:CC:A8:74:E9:4C:2E:8C:22:20:2D
Certificate issuer:       /CN=4d77ccd7a94415dfc68ccca874e94c2e8c22202d
Certificate serial:       019D27E0795701451B450913765AB1B2CBB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft
Manifest number:          1886
Signing time:             Thu 26 Mar 2026 02:01:55 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:55 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:55 +0000
Files and hashes:         1: Na30MdB5zwEKr_r0SUKu8zdQTw4.roa (hash: xfnkXnSAbtguyfEj9MIvTb5o3BtX77AXLc2VZsYQIqg=)
                          2: TXfM16lEFd_GjMyodOlMLowiIC0.crl (hash: O+8VNsoy7xRZcbKmQNkTGnXyLHVmsxgI2Vf1EdOKLh0=)
                          3: gVi39EeTsdnoO7eTwDanhGM1H0I.roa (hash: DtiliU1JGliSpHI+PJT+vAy9Sc5gsRSb35eDO6PM7lY=)
                          4: iCDdGA_7tQsgfDibWuYcU70NfTs.roa (hash: BwHpqgb+51nQjkzwTsIhaODzLjTxX1oHWG2GvyC+9Qw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:79:57:01:45:1b:45:09:13:76:5a:b1:b2:cb:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d77ccd7a94415dfc68ccca874e94c2e8c22202d
        Validity
            Not Before: Mar 26 02:01:55 2026 GMT
            Not After : Mar 27 02:01:55 2026 GMT
        Subject: CN=195a9a7a7c422ebca8073b37d1b59d4fd91cb1ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4a:30:e7:01:e8:52:52:6b:3a:9f:e7:39:92:
                    29:15:3d:db:d1:f3:5f:78:38:de:ef:aa:84:53:86:
                    02:2c:dd:24:9d:cd:52:15:1f:46:94:b6:2e:25:b2:
                    f9:8b:5f:25:2b:bb:52:95:a9:e1:22:09:f0:16:de:
                    27:fc:50:9e:b5:ad:ea:dd:49:99:13:02:9b:a0:f5:
                    77:e3:34:4a:26:11:20:2a:26:ec:8f:68:19:eb:8c:
                    d7:b2:1c:02:b1:a0:66:a4:00:12:ec:1e:df:99:45:
                    c3:32:1e:3f:f0:24:1c:02:b3:5d:c9:73:ed:70:d8:
                    ee:88:44:93:5d:eb:5c:a3:cb:f1:22:ea:53:1d:11:
                    24:cf:c7:d3:52:36:84:13:63:dc:23:6d:b4:66:fb:
                    99:88:21:74:51:d9:d6:6a:bd:9d:b6:95:14:2c:ee:
                    e8:9e:9c:1d:43:ed:53:ed:e5:46:4a:23:93:87:9c:
                    22:73:85:a2:e3:23:bf:25:16:14:a0:0b:49:6c:b7:
                    8d:95:16:21:88:ac:13:16:0e:3f:6e:59:5a:ed:fa:
                    c4:c6:e5:fb:1e:7a:e3:a5:26:b9:9b:7b:63:dd:60:
                    bc:39:98:e6:1d:1c:af:fc:fb:c2:57:29:38:01:82:
                    36:bd:c5:ed:df:16:c5:94:f2:58:38:bb:5a:cc:8c:
                    a6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5A:9A:7A:7C:42:2E:BC:A8:07:3B:37:D1:B5:9D:4F:D9:1C:B1:EF
            X509v3 Authority Key Identifier:
                keyid:4D:77:CC:D7:A9:44:15:DF:C6:8C:CC:A8:74:E9:4C:2E:8C:22:20:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:c0:f8:1a:10:9a:17:1e:98:ec:76:ee:85:63:5b:24:66:2c:
         d9:13:19:54:3a:c0:35:2f:ac:ca:6b:57:18:52:7e:b6:b2:a0:
         03:88:aa:86:13:a9:5b:0d:66:f2:9b:f4:f5:0d:1e:78:97:48:
         ab:f9:58:ca:1e:f0:93:01:96:f7:b5:09:b8:11:03:aa:35:c9:
         6e:6f:c1:d3:c9:50:45:3e:8c:f8:41:ea:4e:cd:9d:3c:e8:e7:
         dd:b4:9c:a7:20:15:5d:7d:59:8d:04:16:48:ad:29:48:36:fd:
         6f:b9:39:c3:36:31:53:bf:42:9c:d6:d8:3a:ec:7f:0f:22:fb:
         d9:fc:3a:11:e1:9a:d7:9b:b3:b8:95:c0:97:b3:99:5c:8f:f1:
         9f:58:6d:ba:5d:a0:3c:a1:f7:ed:f0:03:f4:49:29:46:76:e6:
         5c:f3:1d:3e:6a:e0:9f:a9:fd:d6:eb:e2:70:ba:0e:ea:b4:3d:
         95:71:10:6e:89:e3:f0:28:6a:3d:a2:49:12:5f:7e:37:6b:4b:
         8a:39:c8:d9:94:d7:6e:e4:e2:bc:a7:62:01:e7:74:25:b1:89:
         39:af:6f:47:22:e8:5d:ac:a9:10:fd:90:4d:68:96:c7:66:e7:
         3b:61:75:15:87:b2:66:a5:25:b9:2b:f7:37:74:cf:9d:ca:1e:
         e0:f7:dc:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:55:45 2026 by rpki-client