Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
File:                     TecEA8nS15Ys8RPZPEYvlJPYc2I.mft (raw, json)
Hash identifier:          X7k7QGnOUQmJpCw6RO0th8t/Fl5pikO9kuUu6UqqKHU=
Subject key identifier:   31:90:5B:D7:BF:77:F3:9E:80:62:B6:3F:6B:BC:99:16:BE:9A:E6:1C
Authority key identifier: 4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62
Certificate issuer:       /CN=4de70403c9d2d7962cf113d93c462f9493d87362
Certificate serial:       019D2772440DA940E6A4DE13EFB0BFE2F462
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
Manifest number:          1886
Signing time:             Thu 26 Mar 2026 00:01:32 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:32 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:32 +0000
Files and hashes:         1: TecEA8nS15Ys8RPZPEYvlJPYc2I.crl (hash: N5D9qbQ3BV2qXILvlM0ghSXg7xtbJtpvmb8+lzc/D0g=)
                          2: uhDIc0uEZUElVgS-_EocXKCrnM4.roa (hash: Q1EY9r/YhBigZO4RXwGxgcBbj+7/3SMubwYfDCdrIGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:44:0d:a9:40:e6:a4:de:13:ef:b0:bf:e2:f4:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4de70403c9d2d7962cf113d93c462f9493d87362
        Validity
            Not Before: Mar 26 00:01:32 2026 GMT
            Not After : Mar 27 00:01:32 2026 GMT
        Subject: CN=31905bd7bf77f39e8062b63f6bbc9916be9ae61c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0b:7d:37:fd:9c:92:fa:60:76:57:b6:ee:54:
                    ff:70:19:3c:ea:05:b4:79:1a:63:6f:9b:1a:a2:8e:
                    52:b2:54:a1:76:33:27:c1:4e:8c:9b:12:81:b7:80:
                    8d:05:eb:9e:1f:e0:5f:5e:c9:45:8d:fc:dd:29:06:
                    af:86:c2:42:65:18:2a:bf:79:d6:c8:3d:81:12:21:
                    92:79:b2:e9:fe:36:c2:11:05:a5:0a:71:79:cb:d5:
                    50:47:9c:b2:22:9e:c0:ca:ad:43:2d:43:47:ce:5a:
                    f1:a5:16:09:e9:9d:b7:45:01:4f:94:5b:75:42:59:
                    95:1a:99:8e:9f:a4:5f:ff:e3:3e:0b:42:e6:e9:bb:
                    b3:85:7a:40:27:21:3d:62:5c:ba:fb:0b:f9:a4:01:
                    10:4d:98:9f:a8:e3:6d:19:b3:ff:57:d7:fc:ec:c6:
                    00:31:65:b4:4a:1d:2f:17:9d:2a:58:37:d4:da:e9:
                    dc:c1:03:ec:9b:45:31:14:1e:71:4a:d1:f2:d3:3d:
                    91:c9:33:40:d8:47:8d:53:53:7f:3b:2c:c6:0c:cf:
                    12:57:e7:cf:59:92:25:33:ae:8e:48:17:a5:7d:a7:
                    23:41:03:c0:5a:ea:75:3a:05:66:9e:e2:4a:b5:e7:
                    88:90:45:fb:16:ad:50:6a:90:e9:7a:14:5b:3e:b5:
                    d6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:90:5B:D7:BF:77:F3:9E:80:62:B6:3F:6B:BC:99:16:BE:9A:E6:1C
            X509v3 Authority Key Identifier:
                keyid:4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:da:a5:ec:54:7c:55:65:69:7e:ea:e5:94:8f:14:9b:6a:e0:
         dd:d0:15:33:85:61:50:68:5d:1d:7c:59:e9:e7:a4:08:a5:5d:
         ec:ce:8d:29:9e:17:be:5b:be:a7:1f:c9:32:78:4e:4f:de:47:
         80:0e:91:cc:5c:ca:b0:09:94:55:b6:f8:95:58:b8:82:57:9f:
         89:70:54:b7:52:1f:40:e1:b1:d0:87:f6:b3:ed:ab:71:3c:bf:
         4a:82:df:d3:fd:31:b1:06:43:fa:ec:75:d7:0e:09:e6:cd:56:
         2e:ef:8a:54:46:0c:be:4e:8d:7c:63:88:7a:3f:23:6d:d0:5d:
         f1:a2:2a:de:d2:13:b9:a5:b3:ed:0c:e6:b2:2f:5e:fb:e4:bd:
         39:ec:5c:a0:24:99:ff:ee:50:7f:e6:73:23:1f:51:d3:25:dc:
         30:cd:c5:3f:25:b8:34:be:ff:31:43:b9:9d:e7:20:62:cb:b6:
         54:b9:92:5b:43:d3:80:34:f3:13:62:82:6b:a8:b7:7b:c2:ca:
         61:54:57:da:64:65:76:d7:94:85:88:48:c7:bb:d7:f3:6b:e9:
         e4:1a:d2:68:4e:46:6a:6b:fe:aa:69:ba:4c:74:e6:97:3f:64:
         ea:ea:f9:54:e9:37:32:68:0c:d5:12:d1:4b:6b:02:b4:b4:cb:
         72:5b:f2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:22 2026 by rpki-client