Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
File:                     TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft (raw, json)
Hash identifier:          FOiRNRoPBs9wz5hwtOlMvyHwinwD3rQvmGvMU1rBgl8=
Subject key identifier:   5E:2F:8A:4F:9E:51:EF:F0:B7:ED:A6:F5:4B:3E:9A:59:98:16:78:15
Authority key identifier: 4C:24:C3:08:B0:24:1C:3B:CC:14:CF:67:77:59:1D:27:23:7F:FA:F1
Certificate issuer:       /CN=4c24c308b0241c3bcc14cf6777591d27237ffaf1
Certificate serial:       019D273B1FD6EA0B16649E909EB79FD902CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
Manifest number:          056A
Signing time:             Wed 25 Mar 2026 23:01:19 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:19 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:19 +0000
Files and hashes:         1: TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl (hash: a4/jYowQMwpUxH+nAXxrxsWQ2DaoMVpi6cZqbXEwhPU=)
                          2: i3fwIWYHmrbZ4Q0LfBJoI0pL4eM.roa (hash: lzJAIL587sZVQf8sujo44Gz8CEXrbl2KlNzyp7ldRQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3b:1f:d6:ea:0b:16:64:9e:90:9e:b7:9f:d9:02:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c24c308b0241c3bcc14cf6777591d27237ffaf1
        Validity
            Not Before: Mar 25 23:01:19 2026 GMT
            Not After : Mar 26 23:01:19 2026 GMT
        Subject: CN=5e2f8a4f9e51eff0b7eda6f54b3e9a5998167815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c9:a2:4e:ce:60:33:04:cb:dd:7c:89:bf:fe:
                    ca:ab:6a:b0:bb:2c:11:3c:ab:2f:5e:21:2e:06:54:
                    e0:f7:32:c6:e2:a8:ef:ce:73:cd:73:84:e7:7b:c1:
                    e7:55:94:aa:8f:9e:16:66:40:11:93:d3:1a:85:b5:
                    fe:ee:cc:2c:50:8c:b4:c3:7d:51:3d:b9:30:f7:5c:
                    6e:56:d2:10:66:77:16:3b:f0:c6:ac:29:b2:3a:a3:
                    60:68:58:62:48:92:11:33:68:83:be:09:82:1a:88:
                    65:4d:fe:0f:3d:27:b6:3d:49:14:1e:59:bb:22:f2:
                    2f:2f:26:cd:20:80:3a:6c:c0:59:01:d9:23:5d:84:
                    78:c3:ff:d8:dc:b5:12:49:64:d5:43:b9:7f:32:d5:
                    58:20:93:f6:53:03:f4:58:e6:b4:8b:6e:34:09:e3:
                    d6:a8:c7:2d:91:9b:d8:00:b3:ea:63:5c:20:17:06:
                    88:db:00:5f:9b:50:fb:d1:94:4b:cd:fe:ab:60:66:
                    5b:06:2f:fb:0f:bc:81:f9:67:67:4c:76:d1:17:da:
                    56:e4:b8:cb:42:2b:cb:50:97:57:48:f3:12:d4:e0:
                    e4:3f:aa:95:87:74:d9:7e:7f:9d:cd:e3:4f:29:c8:
                    6f:fd:94:81:12:b9:3a:bc:f0:dc:a0:32:c0:4b:bd:
                    5a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:2F:8A:4F:9E:51:EF:F0:B7:ED:A6:F5:4B:3E:9A:59:98:16:78:15
            X509v3 Authority Key Identifier:
                keyid:4C:24:C3:08:B0:24:1C:3B:CC:14:CF:67:77:59:1D:27:23:7F:FA:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:36:b6:22:3b:89:73:ed:26:27:17:5e:c1:2c:6d:c0:da:d0:
         5e:c8:f9:4c:37:8c:58:6b:55:ad:4c:6e:37:2f:2b:66:c3:4d:
         fb:f3:f1:c6:e9:0b:6b:9c:42:b8:b4:e0:3f:08:c0:27:a6:58:
         91:dd:af:b0:74:b8:8b:df:6d:bf:15:a3:e2:82:9f:5c:7f:b3:
         5b:98:d4:60:e4:35:cb:af:53:6b:3e:5e:34:29:77:e4:6c:f7:
         77:21:da:20:77:2a:a0:37:68:56:3b:c9:de:22:11:cc:f1:dd:
         05:c5:65:82:ff:d8:c7:01:58:1d:4a:c2:0d:51:5d:90:a1:a8:
         27:85:e0:bd:14:eb:f0:81:65:0f:4f:17:93:63:e9:04:d2:26:
         9d:2d:51:4f:48:45:5e:d0:cd:94:83:39:72:3d:71:a9:f3:c7:
         c0:dc:ef:11:0d:0c:b6:aa:27:1b:c5:4c:f0:f3:fb:b2:13:f3:
         7a:3f:46:6a:0a:d6:36:60:12:77:cc:e9:4a:02:49:ed:0d:c7:
         80:10:50:46:47:17:94:c7:c9:81:bb:f5:52:da:a0:55:fb:25:
         ea:eb:0b:e7:36:cd:8c:e3:b3:df:5b:b9:63:e7:6c:5f:ed:7a:
         65:86:91:a6:86:30:51:cc:04:78:66:d8:6b:fe:3a:5c:d3:58:
         8b:30:1c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:19 2026 by rpki-client