Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft
File:                     TTuCKQwugJCSSp79nFF8oUpcNwQ.mft (raw, json)
Hash identifier:          4H9rZciuboMFYyDc9Ln0lWa85lozNh89raY6zDVaQb0=
Subject key identifier:   57:90:02:F7:07:C0:13:60:2C:EF:8E:61:DF:87:D8:2A:35:60:60:5B
Authority key identifier: 4D:3B:82:29:0C:2E:80:90:92:4A:9E:FD:9C:51:7C:A1:4A:5C:37:04
Certificate issuer:       /CN=4d3b82290c2e8090924a9efd9c517ca14a5c3704
Certificate serial:       019D31F51E2CD863FB015BF5D259350D143C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TTuCKQwugJCSSp79nFF8oUpcNwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft
Manifest number:          188D
Signing time:             Sat 28 Mar 2026 01:00:40 +0000
Manifest this update:     Sat 28 Mar 2026 01:00:40 +0000
Manifest next update:     Sun 29 Mar 2026 01:00:40 +0000
Files and hashes:         1: QwYt5JGoziBuUynxaO7UwUNh6UU.roa (hash: 0qGrapZb7+jKIAgr/PeajOHIyrqRSG/2Cq6ydp/6ysU=)
                          2: TTuCKQwugJCSSp79nFF8oUpcNwQ.crl (hash: eMBwzNu+dX8drDoET4yvpiMURelFfvtizSYWPs14+8k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TTuCKQwugJCSSp79nFF8oUpcNwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 00:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:31:f5:1e:2c:d8:63:fb:01:5b:f5:d2:59:35:0d:14:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d3b82290c2e8090924a9efd9c517ca14a5c3704
        Validity
            Not Before: Mar 28 01:00:40 2026 GMT
            Not After : Mar 29 01:00:40 2026 GMT
        Subject: CN=579002f707c013602cef8e61df87d82a3560605b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4d:3e:08:92:ad:b3:37:06:49:66:6f:b7:d2:
                    85:11:24:3a:05:74:8a:c9:d7:59:c6:2c:6d:e1:ed:
                    76:c3:d0:01:be:e5:db:ec:8d:8e:1c:bf:7f:b6:49:
                    fc:65:bc:e2:e1:77:76:aa:cd:99:83:ab:74:a4:a4:
                    6e:5a:49:3c:fa:0f:b7:e9:fc:0e:ac:98:53:5c:94:
                    eb:83:df:d1:ad:36:51:5e:ee:1f:3c:cd:23:6f:31:
                    40:86:91:1e:08:4d:cb:1b:0e:2b:36:46:8e:3d:fe:
                    5a:c4:55:74:23:e5:f2:9b:ec:a7:33:7f:4b:95:ab:
                    49:c2:28:95:b9:04:8e:f5:ac:33:0a:11:8d:7b:4a:
                    c8:c6:d5:36:4a:24:04:fc:94:be:76:53:36:1a:01:
                    0f:59:44:25:c5:94:04:3d:89:bd:69:84:35:9b:b6:
                    62:80:c9:0f:c5:1f:45:c4:f8:36:0f:01:3c:32:ae:
                    72:5d:d8:4d:9a:44:b7:9f:32:c4:01:a6:ba:48:e5:
                    18:1c:4e:35:62:19:43:e0:9c:71:7f:62:41:64:fa:
                    a3:29:a5:c7:4d:18:17:e3:c5:ed:48:8f:40:80:9c:
                    12:2a:c6:a8:fc:9f:43:c6:cb:f5:d9:57:8f:1a:62:
                    21:0c:a9:d9:ad:4d:23:a9:93:a1:bf:62:3d:5e:b1:
                    ae:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:90:02:F7:07:C0:13:60:2C:EF:8E:61:DF:87:D8:2A:35:60:60:5B
            X509v3 Authority Key Identifier:
                keyid:4D:3B:82:29:0C:2E:80:90:92:4A:9E:FD:9C:51:7C:A1:4A:5C:37:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTuCKQwugJCSSp79nFF8oUpcNwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:ed:ba:3e:34:6f:00:ce:a8:ea:35:ae:13:30:be:03:70:3a:
         b4:e7:8f:a9:37:77:76:8c:97:52:18:02:f6:24:43:84:60:db:
         85:de:64:d2:2d:77:da:de:16:6f:36:27:bf:f9:f9:d2:b9:3b:
         6a:90:19:08:ad:b2:95:f5:7b:9b:84:a1:ac:1e:ab:21:b8:7d:
         77:27:b0:2b:07:cd:01:bc:06:5f:8c:ed:7e:05:1a:6a:f5:46:
         4d:50:0c:52:06:3c:1a:e6:2d:48:6d:91:79:47:f8:c5:3d:4a:
         39:1a:4e:54:22:5b:d9:0a:e6:ae:cd:09:21:01:3b:e6:4d:bf:
         ac:d4:a4:fb:16:14:02:c7:4e:5f:a6:5b:42:36:e0:b7:a9:90:
         b9:05:75:10:0d:cb:9e:cf:c6:21:8d:d3:bc:51:23:a5:2c:47:
         37:86:e6:26:14:85:63:41:00:5d:c5:66:10:e3:ad:38:42:1d:
         e6:08:91:b3:b5:ff:f1:3c:35:4c:99:cf:e9:df:79:f6:97:a0:
         be:ee:2b:d2:81:ed:52:71:5f:8e:f2:15:c8:b0:96:5f:d8:47:
         25:04:41:d0:1c:bc:71:8c:a4:9c:3e:34:d8:2c:a5:6a:e8:85:
         c4:07:4d:f1:a7:dc:cb:a1:ae:c2:4b:11:4b:cf:1f:8f:86:4d:
         5c:d8:41:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:39:30 2026 by rpki-client