Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/TNP05Wf9VB5a8MnojRGpDT4h1Gc.mft
File:                     TNP05Wf9VB5a8MnojRGpDT4h1Gc.mft (raw, json)
Hash identifier:          TtEcWhBouB/4XUV6NEq0U6XlwTyGnjO1WZFnclu92gQ=
Subject key identifier:   F3:67:DE:C1:BB:4F:90:FF:CB:15:68:30:F9:62:04:C9:49:D2:25:93
Authority key identifier: 4C:D3:F4:E5:67:FD:54:1E:5A:F0:C9:E8:8D:11:A9:0D:3E:21:D4:67
Certificate issuer:       /CN=4cd3f4e567fd541e5af0c9e88d11a90d3e21d467
Certificate serial:       019D2D3CAE9B42172BACCC27647322A823C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TNP05Wf9VB5a8MnojRGpDT4h1Gc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/TNP05Wf9VB5a8MnojRGpDT4h1Gc.mft
Manifest number:          76
Signing time:             Fri 27 Mar 2026 03:00:44 +0000
Manifest this update:     Fri 27 Mar 2026 03:00:44 +0000
Manifest next update:     Sat 28 Mar 2026 03:00:44 +0000
Files and hashes:         1: TNP05Wf9VB5a8MnojRGpDT4h1Gc.crl (hash: UBPfurzyO7SV1lkbwi4CYSbpYrlTT591qGpq6j8XoJ4=)
                          2: nTO_7v382DQXa1KT96uc5_krM68.roa (hash: lvxYvuFUrUzZ06gSOq8z2zV5Teg8Jnnl+h1rg47zK30=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/TNP05Wf9VB5a8MnojRGpDT4h1Gc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/TNP05Wf9VB5a8MnojRGpDT4h1Gc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TNP05Wf9VB5a8MnojRGpDT4h1Gc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2d:3c:ae:9b:42:17:2b:ac:cc:27:64:73:22:a8:23:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cd3f4e567fd541e5af0c9e88d11a90d3e21d467
        Validity
            Not Before: Mar 27 03:00:44 2026 GMT
            Not After : Mar 28 03:00:44 2026 GMT
        Subject: CN=f367dec1bb4f90ffcb156830f96204c949d22593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:67:0e:2f:8c:8a:89:8f:a0:d9:da:a6:e0:93:
                    40:93:bd:3e:69:06:6a:e0:93:c4:fd:05:56:06:46:
                    9d:16:b8:84:4e:d6:3e:aa:53:26:e6:19:85:7a:3b:
                    fd:56:1d:ca:3b:65:11:df:eb:f0:d6:11:0c:ed:bd:
                    28:c2:7c:94:8c:3e:5d:f5:55:9d:8a:fe:b4:52:6b:
                    f0:33:c3:0e:d8:38:b0:81:a2:ad:de:af:96:1e:dc:
                    3e:de:39:79:6d:cb:c9:34:ad:75:8f:16:9a:b4:49:
                    66:ad:02:e9:bd:91:7d:3f:3b:5c:29:71:0c:40:bd:
                    74:d5:eb:27:22:12:e9:3e:6a:ee:23:56:3a:fa:25:
                    99:23:c0:b0:df:5e:a0:80:19:57:4e:47:dd:e2:b8:
                    50:67:e0:a8:aa:da:bf:93:ff:a8:f0:d6:cf:88:07:
                    34:e8:27:64:f7:de:97:33:58:b0:14:88:6b:e4:dd:
                    97:68:4b:7b:c9:5b:6a:a2:40:14:bd:e7:f9:be:65:
                    79:5d:91:3e:d6:c8:8d:e1:5f:9e:a3:ca:8a:98:47:
                    b2:e4:1f:6f:38:c8:30:bc:a6:8a:8f:a1:31:13:b2:
                    67:d1:13:94:99:21:4c:d3:8b:fc:a2:f1:1f:5a:1a:
                    1e:79:db:5c:75:e6:bf:54:35:a2:67:91:98:5f:f1:
                    99:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:67:DE:C1:BB:4F:90:FF:CB:15:68:30:F9:62:04:C9:49:D2:25:93
            X509v3 Authority Key Identifier:
                keyid:4C:D3:F4:E5:67:FD:54:1E:5A:F0:C9:E8:8D:11:A9:0D:3E:21:D4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNP05Wf9VB5a8MnojRGpDT4h1Gc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/TNP05Wf9VB5a8MnojRGpDT4h1Gc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/TNP05Wf9VB5a8MnojRGpDT4h1Gc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:e8:9e:ce:50:89:dd:19:50:83:e0:45:d5:64:93:fb:0d:d1:
         45:12:ac:b9:3d:64:22:98:c0:6c:ac:77:48:5d:58:5c:a1:de:
         eb:09:6b:26:33:3e:ed:b6:2e:89:e3:fb:f6:d4:42:29:45:1e:
         d7:2e:0a:1a:e6:91:95:2a:a9:08:80:29:71:09:98:8a:e8:0a:
         27:29:3c:7b:9a:d7:eb:44:17:91:f3:90:d8:53:f9:66:b8:f9:
         f3:03:e5:6d:91:da:a6:b5:54:41:cc:26:29:a5:3e:91:16:4b:
         c8:06:55:53:0e:2e:91:c9:78:fe:10:aa:4f:4c:93:50:e6:3f:
         c5:7f:fc:2d:66:e4:3e:6f:03:89:0a:7d:7a:80:c7:5f:e4:22:
         6d:f9:e2:15:a9:06:f4:7c:8e:c9:39:dd:71:4f:d5:0f:47:5a:
         6e:31:c2:b0:5a:ee:b8:7d:54:1b:f8:ca:5e:30:74:58:8c:c3:
         98:06:94:51:9d:71:49:47:8b:9b:6b:9c:0d:21:3f:0f:96:f7:
         bb:48:8c:aa:6b:43:39:69:29:8d:39:6c:17:3d:1f:8e:fa:71:
         3a:e3:84:e0:3b:f6:9e:6e:54:26:3d:b5:6d:85:ff:ac:1e:d8:
         6f:18:89:56:42:6c:2b:5f:bd:4b:14:9f:83:bf:f2:f2:5b:06:
         c1:12:33:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0tPK6bQhcrrMwnZHMiqCPJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZDNmNGU1NjdmZDU0MWU1YWYwYzllODhkMTFhOTBkM2Uy
MWQ0NjcwHhcNMjYwMzI3MDMwMDQ0WhcNMjYwMzI4MDMwMDQ0WjAzMTEwLwYDVQQD
EyhmMzY3ZGVjMWJiNGY5MGZmY2IxNTY4MzBmOTYyMDRjOTQ5ZDIyNTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mcOL4yKiY+g2dqm4JNAk70+aQZq
4JPE/QVWBkadFriETtY+qlMm5hmFejv9Vh3KO2UR3+vw1hEM7b0ownyUjD5d9VWd
iv60UmvwM8MO2DiwgaKt3q+WHtw+3jl5bcvJNK11jxaatElmrQLpvZF9PztcKXEM
QL101esnIhLpPmruI1Y6+iWZI8Cw316ggBlXTkfd4rhQZ+Coqtq/k/+o8NbPiAc0
6Cdk996XM1iwFIhr5N2XaEt7yVtqokAUvef5vmV5XZE+1siN4V+eo8qKmEey5B9v
OMgwvKaKj6ExE7Jn0ROUmSFM04v8ovEfWhoeedtcdea/VDWiZ5GYX/GZMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPNn3sG7T5D/yxVoMPliBMlJ0iWTMB8GA1UdIwQY
MBaAFEzT9OVn/VQeWvDJ6I0RqQ0+IdRnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE5QMDVXZjlWQjVhOE1ub2pSR3BEVDRoMUdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS83MjJjY2QtNDdjMi00YjQ4LWI5NTct
YmM1ZDNjOTE2NzNiLzEvVE5QMDVXZjlWQjVhOE1ub2pSR3BEVDRoMUdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS83MjJjY2QtNDdjMi00YjQ4LWI5NTctYmM1ZDNjOTE2NzNi
LzEvVE5QMDVXZjlWQjVhOE1ub2pSR3BEVDRoMUdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqeiezlCJ
3RlQg+BF1WST+w3RRRKsuT1kIpjAbKx3SF1YXKHe6wlrJjM+7bYuieP79tRCKUUe
1y4KGuaRlSqpCIApcQmYiugKJyk8e5rX60QXkfOQ2FP5Zrj58wPlbZHaprVUQcwm
KaU+kRZLyAZVUw4ukcl4/hCqT0yTUOY/xX/8LWbkPm8DiQp9eoDHX+QibfniFakG
9HyOyTndcU/VD0dabjHCsFruuH1UG/jKXjB0WIzDmAaUUZ1xSUeLm2ucDSE/D5b3
u0iMqmtDOWkpjTlsFz0fjvpxOuOE4Dv2nm5UJj21bYX/rB7YbxiJVkJsK1+9SxSf
g7/y8lsGwRIz0w==
-----END CERTIFICATE-----
Generated at Fri Mar 27 06:39:05 2026 by rpki-client