Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft
File:                     Tl67mwUa1ex6Npifw_zJTByrzHQ.mft (raw, json)
Hash identifier:          1WSqT0tobXkkIHWn2k9smTeri129yPuuBSEmlVCFmCw=
Subject key identifier:   4B:CF:08:4B:EF:81:58:7B:01:88:D8:AD:DE:8E:99:8E:FB:4B:18:D2
Authority key identifier: 4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74
Certificate issuer:       /CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74
Certificate serial:       019D3376256708275C7D16E50155B86BD48E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft
Manifest number:          18A6
Signing time:             Sat 28 Mar 2026 08:01:13 +0000
Manifest this update:     Sat 28 Mar 2026 08:01:13 +0000
Manifest next update:     Sun 29 Mar 2026 08:01:13 +0000
Files and hashes:         1: IC3KBofEraY-o2Xt0fXEgJfzG3A.roa (hash: KnhXw815iFAaQmnUWwTQE6WQ0M3tQmAE0zW0o+PJiU8=)
                          2: L3xiDt_DxrLi4lqDX4KsweyPBfU.roa (hash: mBvswTZSHAsOBHr7dGG73RpsdwizI277vUMRdc8O0TI=)
                          3: Tl67mwUa1ex6Npifw_zJTByrzHQ.crl (hash: qoKkQ2zvDRemQzA/DuyLVHNX8GA5KBcHhIUBsXRrLhY=)
                          4: ynXUxqrdFjV2uDjhRAtcxC3THvU.roa (hash: +COHT3b/rqZFicrkLpp20JO0GYnlMEA+hKZxaCTFAkE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:33:76:25:67:08:27:5c:7d:16:e5:01:55:b8:6b:d4:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74
        Validity
            Not Before: Mar 28 08:01:13 2026 GMT
            Not After : Mar 29 08:01:13 2026 GMT
        Subject: CN=4bcf084bef81587b0188d8adde8e998efb4b18d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f2:d5:89:e1:01:4c:26:78:3a:b1:f7:a3:48:
                    e0:eb:c3:2f:0d:c8:b1:97:cc:32:42:07:56:25:d4:
                    b7:7f:05:f4:f7:98:85:97:74:0a:ee:f9:80:0f:b8:
                    7d:ef:7f:e5:61:20:47:61:72:08:7e:b5:6a:bb:3a:
                    8a:b9:4b:11:52:ef:10:13:b0:5d:22:80:56:03:a9:
                    dd:dc:63:c0:72:64:40:63:dc:9f:6d:00:5c:06:bf:
                    24:22:b5:5b:b9:24:a6:b2:7d:f1:5b:c3:31:6c:df:
                    1d:ac:ed:9e:a3:fb:01:6e:b9:fc:d4:1d:13:93:17:
                    62:70:eb:36:6a:70:0e:ab:1a:ad:ff:11:7b:9b:b7:
                    59:4e:bd:dd:4d:c1:3d:d4:b1:af:e1:09:4d:f1:1d:
                    49:84:cf:05:be:a2:e2:8a:de:25:e5:89:10:1f:08:
                    26:68:0e:5b:b2:cc:f6:95:3c:af:4f:cf:d3:95:8c:
                    e3:0e:ef:5f:85:dd:c6:3d:ce:93:35:04:45:bc:45:
                    1a:65:2b:3d:c9:89:d2:72:ce:3e:de:c7:2a:af:00:
                    41:f1:f1:ce:43:d0:d3:57:c9:b3:5f:0c:51:d8:91:
                    29:c8:b6:ca:cc:d2:86:9e:d3:ef:05:76:1d:a5:5f:
                    c0:22:31:2f:28:f2:2c:bc:4f:3e:13:5d:59:46:05:
                    10:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:CF:08:4B:EF:81:58:7B:01:88:D8:AD:DE:8E:99:8E:FB:4B:18:D2
            X509v3 Authority Key Identifier:
                keyid:4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:01:41:d6:96:a7:4f:07:95:e3:a2:fd:88:15:ed:e9:ba:ca:
         b3:56:b1:fe:d8:37:72:31:ed:11:36:9d:7d:9c:7c:eb:70:71:
         f0:bd:33:c0:96:b4:77:bc:49:e8:88:0f:68:ec:61:f8:70:35:
         30:59:5b:69:77:52:b4:65:d7:4c:a0:fc:51:97:2a:25:b8:00:
         9d:8b:80:6c:66:fe:42:b1:28:6f:71:d4:8b:ac:c7:a2:fa:05:
         c6:5f:b9:be:35:cd:0e:10:81:72:16:6c:70:eb:3b:42:1c:5e:
         9a:d0:3e:a6:23:0d:77:65:a8:fb:d5:08:d9:97:2d:84:19:bc:
         23:d1:80:3f:b5:e5:30:24:c8:60:97:f5:7a:ed:ed:81:9a:3f:
         c5:f7:d4:73:a6:ee:e5:f6:84:ce:54:54:d8:df:6e:88:5a:92:
         6b:90:87:01:77:7e:9c:fb:2e:12:e5:9f:27:43:63:80:65:cd:
         b4:c9:8f:03:63:77:51:bf:fb:0f:6c:98:43:f8:19:00:0f:0e:
         db:1e:80:ad:4a:a0:d0:bc:0b:c2:aa:a8:53:41:9e:c7:e0:41:
         2d:f6:67:d3:6c:60:d1:5e:cc:53:a0:98:93:cd:24:f5:73:9b:
         75:fa:44:fe:c0:a6:65:d0:ec:3a:a1:be:a0:e2:59:53:04:ed:
         40:12:31:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:02:25 2026 by rpki-client