Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
File:                     TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft (raw, json)
Hash identifier:          0IgjsV8qUdCsdAZgiWnEsweJT0N/K7P/YrZkn68OgvI=
Subject key identifier:   1A:C3:D8:60:74:4C:B7:D6:DE:27:1A:F6:A6:72:4A:9A:D7:C9:90:C0
Authority key identifier: 4C:24:C3:08:B0:24:1C:3B:CC:14:CF:67:77:59:1D:27:23:7F:FA:F1
Certificate issuer:       /CN=4c24c308b0241c3bcc14cf6777591d27237ffaf1
Certificate serial:       01A0DD606F39FD422E3DA116F0DB7B3856AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
Manifest number:          0756
Signing time:             Sat 26 Sep 2026 11:01:19 +0000
Manifest this update:     Sat 26 Sep 2026 11:01:19 +0000
Manifest next update:     Sun 27 Sep 2026 11:01:19 +0000
Files and hashes:         1: TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl (hash: HVtD5zVC3UYOkCeHuegPI6Nl1zXCXov5QDn6CzsZFD4=)
                          2: i3fwIWYHmrbZ4Q0LfBJoI0pL4eM.roa (hash: lzJAIL587sZVQf8sujo44Gz8CEXrbl2KlNzyp7ldRQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 09:18:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dd:60:6f:39:fd:42:2e:3d:a1:16:f0:db:7b:38:56:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c24c308b0241c3bcc14cf6777591d27237ffaf1
        Validity
            Not Before: Sep 26 11:01:19 2026 GMT
            Not After : Sep 27 11:01:19 2026 GMT
        Subject: CN=1ac3d860744cb7d6de271af6a6724a9ad7c990c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:18:34:74:8b:2e:18:68:b7:92:e6:7a:d9:a0:
                    5c:1e:38:c3:e9:3e:20:21:9b:cb:ed:61:5b:f3:64:
                    04:b5:c5:48:d9:ff:27:f7:56:5c:9a:93:f0:20:2d:
                    12:cd:11:4c:7b:a8:0f:fd:7b:b9:45:1b:5c:5b:65:
                    06:95:ad:50:58:7c:f8:90:f1:9d:94:a5:a6:34:d0:
                    b5:5c:12:0a:be:4f:e5:8e:fa:ab:29:b5:c5:6c:7d:
                    be:e1:32:4f:9c:4f:9e:08:c1:16:60:79:3b:52:8d:
                    46:10:9a:2e:21:37:a3:90:b3:c6:8c:49:de:05:98:
                    56:f3:26:de:04:ae:7f:79:0f:7a:6a:3b:d7:1e:94:
                    58:a1:42:0d:c0:7d:c3:cc:53:0a:b1:e7:f9:9e:e4:
                    af:97:c1:99:34:d4:a5:3b:4c:1e:11:28:bd:aa:36:
                    5e:83:8f:6f:bf:90:ae:ba:b7:ae:0b:1f:62:41:e7:
                    9f:53:82:ea:85:1c:d6:90:94:c7:0e:c7:cf:37:a3:
                    59:d9:45:04:3e:2d:b1:2f:a3:33:a0:b2:ae:a1:36:
                    99:23:26:b4:6f:00:7d:e7:67:2f:0a:85:a9:2d:d3:
                    01:9e:90:f5:08:5f:06:4f:9a:74:33:93:23:08:17:
                    0e:23:42:c9:45:21:e3:94:37:e7:cb:81:22:3f:0e:
                    00:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C3:D8:60:74:4C:B7:D6:DE:27:1A:F6:A6:72:4A:9A:D7:C9:90:C0
            X509v3 Authority Key Identifier:
                keyid:4C:24:C3:08:B0:24:1C:3B:CC:14:CF:67:77:59:1D:27:23:7F:FA:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:a9:14:28:c6:2e:4e:88:33:3e:3d:c0:8f:af:45:58:6d:ef:
         87:28:85:13:fe:25:37:dd:ec:32:5f:f9:33:6d:d1:27:6f:cd:
         f9:f6:df:5f:fe:49:fd:92:45:0a:ff:fd:d9:9a:b0:3d:69:7e:
         a7:68:2a:aa:f4:1c:b1:c8:16:31:ec:2d:c6:e7:5f:5b:6d:eb:
         73:cf:3e:5b:76:f0:b8:f3:79:d5:1d:05:59:77:39:d9:29:b9:
         80:bb:fe:5b:79:93:6b:4b:66:62:2f:23:92:df:87:6b:57:e3:
         ae:3f:33:20:34:21:4b:db:9a:71:be:c8:16:61:54:0a:4f:de:
         16:0a:96:cf:ae:cb:5a:0e:66:9e:e8:d8:39:eb:bd:0c:e7:10:
         33:3f:21:f9:89:ac:2f:11:41:ae:f8:ba:21:70:5a:b3:fb:c4:
         2a:28:ba:49:88:b9:7b:fc:96:a1:26:2b:a1:6a:fb:ff:d7:47:
         ee:de:54:54:1e:cc:5e:7b:b5:5d:45:32:64:6c:ee:c9:92:01:
         85:bd:3a:a7:18:4d:d4:b8:f3:ce:1d:a4:db:3c:53:ad:2d:46:
         19:e1:c0:d0:a0:2d:d5:d1:38:4f:ba:42:89:41:cb:d5:e6:b7:
         87:b0:47:c6:92:a1:85:fa:59:21:e1:13:ed:41:85:cf:59:98:
         99:93:4f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:39:45 2026 by rpki-client