Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
File:                     TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft (raw, json)
Hash identifier:          BbyGCj8WApv5Zjp2c1Z2OZWLtuIEewnNL4TkoWRHVKs=
Subject key identifier:   77:D5:B8:5C:0E:4F:09:57:6C:5A:D6:68:F5:B3:3D:B3:25:EE:02:10
Authority key identifier: 4D:CB:EF:06:AD:05:FD:6E:6E:7E:7B:10:84:CB:1D:7D:65:E6:42:6F
Certificate issuer:       /CN=4dcbef06ad05fd6e6e7e7b1084cb1d7d65e6426f
Certificate serial:       019D2961A4435B230982156EEA20C03AAB45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
Manifest number:          12A2
Signing time:             Thu 26 Mar 2026 09:02:37 +0000
Manifest this update:     Thu 26 Mar 2026 09:02:37 +0000
Manifest next update:     Fri 27 Mar 2026 09:02:37 +0000
Files and hashes:         1: TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl (hash: e94cFqBZoiu+con/Pcqa59ELzku8JQ0zmOKCDvo/6ko=)
                          2: qdG_Gv-Z2yCeI5FZ0wm9b0l6kSw.roa (hash: qEsauC0Q7PPkI4NMJ7sTsrOSfvgrVIwh8wnzn4v958c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:61:a4:43:5b:23:09:82:15:6e:ea:20:c0:3a:ab:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dcbef06ad05fd6e6e7e7b1084cb1d7d65e6426f
        Validity
            Not Before: Mar 26 09:02:37 2026 GMT
            Not After : Mar 27 09:02:37 2026 GMT
        Subject: CN=77d5b85c0e4f09576c5ad668f5b33db325ee0210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ae:aa:26:e1:ef:ae:0b:af:3f:8a:9b:1d:b7:
                    af:39:4d:a8:11:96:58:aa:ff:c4:f0:c5:20:f5:4b:
                    de:7a:d8:c5:b0:23:2a:99:38:ac:03:98:d7:92:1c:
                    44:fb:3c:aa:ff:98:9e:c5:b7:6f:1b:2a:c0:62:c5:
                    b0:7c:fc:d6:15:4e:88:60:dd:85:6c:03:4b:ab:0e:
                    e1:af:fe:0e:80:17:78:79:0e:69:a1:3d:0f:4f:b4:
                    e6:84:15:27:19:51:ae:33:44:a9:88:81:a0:78:a5:
                    05:9e:2f:01:b0:1e:54:82:75:92:54:fc:2b:0a:c7:
                    ee:de:9f:64:4f:43:db:c5:bf:ee:68:e1:a5:b2:e2:
                    1e:b5:e2:5b:60:5d:55:9b:c0:31:ee:7c:db:e5:08:
                    eb:52:b9:cf:99:28:7f:88:30:05:59:8a:77:b6:30:
                    3a:4e:21:77:ef:24:36:58:f9:f8:4a:0b:76:7e:08:
                    ab:41:7e:25:df:ab:4c:13:4e:36:b9:a7:5f:72:0c:
                    ab:76:a0:db:84:60:bb:0d:68:12:16:15:e4:dc:96:
                    42:f1:0b:a5:dc:a7:03:85:53:17:bf:cd:c3:9d:e3:
                    80:8a:12:10:39:6a:fe:7c:9a:b9:c8:1f:8d:bb:33:
                    7b:10:7b:c0:ca:22:ae:dc:65:61:dc:39:cb:ff:f9:
                    43:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D5:B8:5C:0E:4F:09:57:6C:5A:D6:68:F5:B3:3D:B3:25:EE:02:10
            X509v3 Authority Key Identifier:
                keyid:4D:CB:EF:06:AD:05:FD:6E:6E:7E:7B:10:84:CB:1D:7D:65:E6:42:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:7a:28:8b:e7:22:8f:bd:c3:c3:68:31:4f:01:52:3d:e7:7d:
         e7:ea:8e:00:ce:5c:8a:33:48:f3:16:b7:0b:ca:b5:07:58:7f:
         38:65:3d:ae:ac:32:c7:c9:59:d1:05:81:91:15:af:ae:b3:76:
         56:46:14:21:25:a6:65:3c:93:90:a0:f5:ea:bb:6d:2f:ce:12:
         c7:8b:e9:ca:d9:6c:5f:aa:e0:fc:27:a9:eb:61:41:7a:13:af:
         19:31:c4:cf:3b:f4:eb:bb:b8:bb:db:3c:f0:4f:d4:c2:e9:51:
         e4:ee:69:22:6d:2d:79:5f:ea:e0:41:9d:c3:b9:d1:0b:80:ec:
         89:99:04:0d:97:2a:94:8b:99:b6:a2:9e:f5:ad:d4:ee:aa:2b:
         ad:56:1f:e2:a3:c9:14:bd:33:0b:cf:d1:9b:ef:7e:85:f9:92:
         94:ad:df:be:93:fc:6b:19:e3:7b:58:3d:2a:46:7f:38:89:3d:
         7d:ac:e0:73:92:d2:85:59:1a:ea:75:1f:85:95:c1:ed:0b:c3:
         04:f4:03:74:89:ba:83:a5:27:14:29:a3:ae:ce:14:31:b3:dc:
         9e:89:4b:6d:35:ec:6d:a1:1c:37:41:85:3b:d1:8b:e7:d5:61:
         bd:e5:4f:8d:e6:a0:2a:e3:6c:0f:33:b5:56:35:60:31:5a:7a:
         33:6d:81:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:55 2026 by rpki-client