Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
File:                     Tb6Htwra566IC0Zwv6B46QmE1mA.mft (raw, json)
Hash identifier:          wRs7mYuz2nMcpbcFP6+rriwC3R5KkPB8lHKGUqSO2mY=
Subject key identifier:   B1:5D:01:03:B7:5A:C0:41:0F:78:9C:9D:5C:87:FE:8E:A1:00:4C:D4
Authority key identifier: 4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60
Certificate issuer:       /CN=4dbe87b70adae7ae880b4670bfa078e90984d660
Certificate serial:       019D27DF63DA54B787BFBE9D7A62F030D827
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
Manifest number:          12AE
Signing time:             Thu 26 Mar 2026 02:00:44 +0000
Manifest this update:     Thu 26 Mar 2026 02:00:44 +0000
Manifest next update:     Fri 27 Mar 2026 02:00:44 +0000
Files and hashes:         1: 0_1M3WwnEVZKS87X1cA2tjjxW-A.roa (hash: DCfHrS2KuDkhYZyMLPand/Ej/KXNXkFM/sCAdbzOarQ=)
                          2: Tb6Htwra566IC0Zwv6B46QmE1mA.crl (hash: vDPDiPUzPCM5VVRGtSk0kNryRjJT0x4qfdfoylrZDZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:63:da:54:b7:87:bf:be:9d:7a:62:f0:30:d8:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dbe87b70adae7ae880b4670bfa078e90984d660
        Validity
            Not Before: Mar 26 02:00:44 2026 GMT
            Not After : Mar 27 02:00:44 2026 GMT
        Subject: CN=b15d0103b75ac0410f789c9d5c87fe8ea1004cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b3:74:45:8b:3e:85:15:02:f1:8d:f6:66:4f:
                    92:95:1a:d9:3f:8c:0a:a4:35:55:7a:eb:b2:89:60:
                    63:e6:d8:cb:0b:b6:af:11:e3:02:8d:e1:0d:fe:19:
                    9f:4c:ff:b7:aa:b2:d3:df:78:52:f3:01:c9:2c:5a:
                    6a:1e:e1:48:0e:c8:e9:11:64:00:dc:e2:68:fc:e1:
                    13:65:fb:1f:99:2b:3a:cb:2c:91:83:4a:36:15:7a:
                    33:19:5f:29:d4:8e:7a:87:c1:2f:ae:02:0c:ea:59:
                    8e:6a:d3:81:61:d4:49:41:0b:b1:ef:76:cd:85:e2:
                    c6:24:a4:3d:5c:10:79:54:79:f4:03:4c:d3:2a:e5:
                    22:fd:13:bc:b6:42:9c:bd:6b:71:1a:0d:0a:c7:44:
                    a7:b0:2b:74:62:5d:35:08:e6:7f:90:b7:cd:f0:61:
                    95:5f:69:c9:37:1a:92:06:a0:a5:f2:0c:4a:83:6a:
                    2c:ac:10:c2:6c:21:bf:3d:dc:12:9f:09:7c:2e:03:
                    da:11:19:f2:f5:55:be:3e:ab:92:ea:cd:64:f8:9d:
                    d0:40:1d:b9:9e:13:5a:3c:8a:e8:bf:5e:a6:bc:a9:
                    22:9a:9d:70:8e:a5:50:9f:12:ec:c3:05:aa:08:56:
                    e9:ea:46:a3:3b:2b:1f:7f:9d:24:dc:0a:04:d0:f4:
                    73:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:5D:01:03:B7:5A:C0:41:0F:78:9C:9D:5C:87:FE:8E:A1:00:4C:D4
            X509v3 Authority Key Identifier:
                keyid:4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:c7:a6:ec:17:01:f6:ee:7e:1f:84:f4:f1:26:88:d2:75:98:
         31:19:84:c1:84:d4:08:80:d6:f1:fe:cc:c4:e5:34:40:58:de:
         0c:7b:2b:34:1a:cd:f4:cd:b6:5b:1d:57:56:75:07:08:1a:19:
         a7:97:9e:15:0b:22:78:bb:68:36:97:76:4e:a4:32:28:9e:da:
         c8:79:44:b9:cc:72:e1:eb:ae:7b:9f:f2:15:5c:15:ad:f9:e9:
         05:f3:a7:d3:43:f3:71:5a:91:e0:e9:b1:f1:a7:57:91:f6:75:
         7e:be:b2:9e:06:f0:4a:83:d6:9c:dd:4d:4b:db:7c:98:56:c6:
         ea:de:fd:f0:4b:66:0d:75:ba:aa:d9:2f:f8:e6:d0:90:fb:9b:
         ba:fa:bb:07:b5:de:86:4a:47:bb:d8:88:c1:60:b1:09:6f:9d:
         72:8b:a4:2e:24:ca:1d:63:c5:73:55:54:68:b5:22:97:f3:8d:
         36:24:a0:12:9d:5b:7c:5a:24:2f:a8:e6:0a:0f:48:69:5c:35:
         ec:f5:d9:a6:4d:d6:55:48:64:24:ba:7f:44:31:9b:65:23:4c:
         4e:cd:73:7b:7e:d9:44:c0:77:1a:37:54:7c:8d:2f:09:1b:15:
         28:e3:86:44:0a:58:ca:2a:aa:e2:dd:3e:4e:1b:2d:e8:a6:8b:
         69:81:44:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:38:17 2026 by rpki-client