Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
File:                     Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft (raw, json)
Hash identifier:          TmFCMho+bgbm3Qh4fNEzBWAMc8K2GGaSUhd8AiHIfkM=
Subject key identifier:   59:FD:BE:66:A0:5B:4B:C1:53:37:E1:1E:FF:7F:D5:C4:78:AD:FC:D5
Authority key identifier: 4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA
Certificate issuer:       /CN=4e69b402b67d75936f45dc8bc54b86814e0636ba
Certificate serial:       01A0D9177FB90E8CCA915669D28472D9CF2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
Manifest number:          1651
Signing time:             Fri 25 Sep 2026 15:03:10 +0000
Manifest this update:     Fri 25 Sep 2026 15:03:10 +0000
Manifest next update:     Sat 26 Sep 2026 15:03:10 +0000
Files and hashes:         1: LwJo-ZOAga1XsMB6kJmoJhsDKi4.roa (hash: 4U3Q5m4w5gDb99Fndaz4s602DhJvC8d4654L2Zwbqhc=)
                          2: Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl (hash: 533iVVSCJCjfvYF8oq/pvhFHXaP9yHvHGIi1LdWEkhQ=)
                          3: mazgd2rK4HfvX3Omu_5x4KeE4q0.roa (hash: VMQzYJR5enDZAjPyu/iICQfNBSPELGmMcOQZHSHcGJw=)
                          4: vMIHGFPf0heT2WpdAxKEA8H1uqY.roa (hash: Y7aS0+OiMr6KF+wJQp4D98bim2LplH1VyBIQ6kJaS6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:03:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:17:7f:b9:0e:8c:ca:91:56:69:d2:84:72:d9:cf:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e69b402b67d75936f45dc8bc54b86814e0636ba
        Validity
            Not Before: Sep 25 15:03:10 2026 GMT
            Not After : Sep 26 15:03:10 2026 GMT
        Subject: CN=59fdbe66a05b4bc15337e11eff7fd5c478adfcd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4e:3c:f0:c8:cb:86:80:1c:b7:d0:3d:3d:a8:
                    92:63:bf:d5:f3:7a:5f:d7:7d:9d:e2:61:60:e8:99:
                    16:7b:03:1c:6f:b2:5a:39:ad:ed:c4:eb:05:5a:c6:
                    50:7e:5e:51:15:1d:22:9f:ce:cf:5a:68:14:a3:e0:
                    36:c8:fa:f4:f6:29:02:60:82:2f:9a:64:eb:fb:53:
                    68:5f:65:5e:df:17:2f:76:a0:ed:4f:53:1d:6b:b2:
                    ed:61:db:f9:49:90:d2:85:88:73:4c:29:48:68:9b:
                    ca:24:71:90:29:3d:73:6e:a8:ee:18:d1:6c:0e:38:
                    0a:cb:38:d8:a0:b4:94:bc:38:58:25:2c:f4:46:66:
                    ff:8d:8f:13:db:01:0d:fb:82:6a:1f:1e:95:7a:59:
                    ed:a9:84:52:65:ef:41:05:bf:66:6f:3a:6e:59:f6:
                    4c:85:85:b8:f3:18:ac:20:eb:de:50:fa:bf:1c:e9:
                    2b:48:49:a2:37:b3:e5:35:d6:a6:8c:cc:40:64:2c:
                    ff:cc:ba:f4:c6:90:d3:af:20:3e:9c:2f:e5:be:31:
                    e3:e5:ae:54:5d:9f:e9:9e:c2:05:68:ab:c6:e8:8e:
                    f7:a9:12:4f:a3:89:eb:be:91:9c:d8:2d:04:66:80:
                    82:3b:9d:32:a0:db:9d:23:a9:ca:c9:34:19:de:d6:
                    f1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FD:BE:66:A0:5B:4B:C1:53:37:E1:1E:FF:7F:D5:C4:78:AD:FC:D5
            X509v3 Authority Key Identifier:
                keyid:4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:23:c8:6e:8a:e7:0c:b4:c7:3c:c7:88:e8:6f:e8:30:9e:7b:
         e5:2e:ab:4e:54:23:dc:e9:e7:bb:6e:cf:71:f4:47:1a:cb:eb:
         72:c1:c6:1f:d2:a7:61:5c:cc:be:dd:9e:80:96:cc:07:92:31:
         76:eb:54:69:18:b1:16:ce:e4:c4:9b:8b:b0:c4:69:d8:e3:3e:
         5b:75:c0:27:63:95:b4:38:1f:56:44:95:36:02:f5:22:72:6e:
         ce:e5:0a:a1:74:5e:ea:da:00:46:8c:99:cc:63:ef:5a:d9:89:
         1c:a9:93:b6:64:6b:af:02:d5:e9:21:de:95:00:76:1e:a2:8f:
         80:19:db:ee:ac:d2:3a:7c:5c:f8:a2:dc:b3:07:b5:55:ce:30:
         66:44:3f:82:2a:26:12:38:70:38:66:36:25:93:dc:ee:5e:38:
         80:14:71:f7:88:44:1c:e5:12:29:f1:d6:03:e7:40:95:91:31:
         5b:ce:9c:f4:57:3d:7b:2a:8c:ac:c9:1a:7e:70:b6:9b:2a:77:
         bf:9d:2f:00:e8:a4:4d:96:a7:dd:83:f2:22:be:10:1d:39:81:
         45:d8:8c:04:17:e1:df:41:b5:ce:a8:65:1f:3f:7c:8c:b0:2c:
         a1:7f:62:92:a3:d1:71:1d:82:2e:cf:7c:8a:c7:31:ee:22:ce:
         fc:77:ed:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:56:10 2026 by rpki-client