Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
File:                     TMxgSVsqNNiSEcwceVJOq2G6FlY.mft (raw, json)
Hash identifier:          NGJgxL+iWkmCgFtUEvkDv8rMxESzTzuMCyxucLq7frk=
Subject key identifier:   55:8D:A0:6E:9A:C9:1C:82:81:D4:F6:E1:88:41:63:F8:68:FE:83:E7
Authority key identifier: 4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
Certificate issuer:       /CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Certificate serial:       019D254C463D701B162EE2B4EC8816B048DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
Manifest number:          1885
Signing time:             Wed 25 Mar 2026 14:00:48 +0000
Manifest this update:     Wed 25 Mar 2026 14:00:48 +0000
Manifest next update:     Thu 26 Mar 2026 14:00:48 +0000
Files and hashes:         1: HKK9g6Hqt_cBY1AbSvefDUFZRlo.roa (hash: MqB9AcT2/OThR4+/4lhCs0wiEEPqRX8xFMsmjXA2ijw=)
                          2: OBx05QEiDP1Vr5e_268J9tar1QE.roa (hash: TIpDQvAlekr1QcZvuTryLbf0wSjkmsau0xJ8uS3rJTc=)
                          3: TMxgSVsqNNiSEcwceVJOq2G6FlY.crl (hash: TvnBu2z8gxXC8pKGBlQxO2KGOWpAA2gEwE4sTPhUNZI=)
                          4: bq_R2KuxT4atP4GNyi-WGk7ZHgI.roa (hash: ukHJbM0cPkDakME1wOGsLKMQaAIR4oQCPsvSvUhBbpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 14:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:4c:46:3d:70:1b:16:2e:e2:b4:ec:88:16:b0:48:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
        Validity
            Not Before: Mar 25 14:00:48 2026 GMT
            Not After : Mar 26 14:00:48 2026 GMT
        Subject: CN=558da06e9ac91c8281d4f6e1884163f868fe83e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:8a:0f:73:6b:85:a1:35:e1:36:fc:b7:00:7d:
                    29:e4:5e:70:9f:1c:88:22:6b:ed:f1:6c:52:2a:a4:
                    5d:98:97:22:c7:b6:56:82:4e:db:5b:c0:ef:50:be:
                    bc:d1:c1:6b:2c:c2:ec:76:5c:5b:3c:ea:c3:e8:02:
                    d5:6e:dc:7d:21:64:86:72:97:bb:8e:f7:99:15:89:
                    64:1b:19:82:5e:1d:fa:9c:e7:5a:6d:37:b8:01:50:
                    ef:e8:4c:9d:1b:8b:5a:7a:c3:ee:a3:28:44:8a:2c:
                    2b:59:9e:d9:bf:f2:d3:39:f7:28:8d:0a:86:d5:25:
                    06:94:59:a4:15:8d:1e:9f:b1:80:4e:1e:5e:22:77:
                    df:e6:3e:23:77:ec:9d:8f:fd:02:fc:0f:53:65:ca:
                    dd:b4:28:18:c4:a9:35:a5:c5:17:58:63:c7:2a:a0:
                    19:ed:64:1f:bd:f2:d8:ea:f8:72:40:00:f2:11:27:
                    7c:67:71:d2:73:59:6b:8e:65:3b:bd:77:f4:c9:7e:
                    b7:cf:6e:da:89:39:9f:35:98:0a:80:ee:9d:f6:39:
                    26:33:e3:c5:f6:da:5d:89:8b:db:76:a4:8d:40:77:
                    d1:43:87:9c:26:ae:b6:2e:de:73:13:c7:41:98:7e:
                    b0:64:48:a7:1a:7e:ea:67:e7:6c:8f:2f:04:c2:c7:
                    a9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:8D:A0:6E:9A:C9:1C:82:81:D4:F6:E1:88:41:63:F8:68:FE:83:E7
            X509v3 Authority Key Identifier:
                keyid:4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:e1:78:8a:ec:bd:ba:88:19:77:1f:fa:37:b2:ae:35:48:df:
         d2:82:f9:99:ab:e8:55:d5:07:01:62:2a:29:7a:2b:5f:34:68:
         2a:5a:a5:9f:6d:02:27:f9:1a:43:52:c7:f3:65:58:04:1f:84:
         68:9c:0f:7b:31:98:d4:05:2b:a2:61:ce:8f:dc:1f:7f:b5:3c:
         f2:be:ad:54:2a:0c:76:de:44:8d:20:97:dc:e8:87:bf:25:99:
         4c:80:71:73:6d:ec:88:41:9b:cd:85:e1:1f:14:a4:12:b0:d8:
         af:60:e5:b3:1a:22:12:20:b5:dd:56:3d:5e:5c:0e:e0:f1:65:
         8d:b0:d7:e0:7d:8b:b8:fb:7b:1b:39:63:5c:fa:c9:51:76:48:
         de:a5:ce:af:31:65:8d:f8:85:d8:50:ca:f5:8d:ce:a5:3a:ad:
         63:b0:b3:3d:a3:ee:c7:a1:08:cf:25:b5:62:4d:7e:f5:6d:ce:
         7b:4c:94:b6:51:98:cf:15:45:57:61:bf:de:cb:dd:22:34:fb:
         e7:8d:5b:dd:fa:07:2d:18:cc:9e:ac:f4:aa:e4:19:42:35:f7:
         7e:5c:25:48:82:9c:8e:19:18:7f:60:17:b8:64:f0:42:2c:f6:
         0e:24:21:2b:d4:33:1d:25:ca:f9:4f:e6:43:1e:7c:6c:d6:1b:
         61:82:20:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:00 2026 by rpki-client