Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
File:                     TSkoLUc3P5QvCti5HtlAk7Zuo68.mft (raw, json)
Hash identifier:          x6E9EjSS9powQ85GOERQtaxAN0+jC/okzzOOWtpqKFY=
Subject key identifier:   4E:A8:10:67:A8:A0:C4:28:56:77:20:D2:DF:EF:0E:26:09:2A:34:A0
Authority key identifier: 4D:29:28:2D:47:37:3F:94:2F:0A:D8:B9:1E:D9:40:93:B6:6E:A3:AF
Certificate issuer:       /CN=4d29282d47373f942f0ad8b91ed94093b66ea3af
Certificate serial:       019D273AF2B77834C3C900D5107AAA0D5D1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
Manifest number:          180F
Signing time:             Wed 25 Mar 2026 23:01:07 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:07 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:07 +0000
Files and hashes:         1: PNfIBENqPn1C2ky1c3Y7NiG7Ymw.roa (hash: DgC7dqgRapp52CiQQUrzN9ZAbunqBU0/xi2SXO7kKV0=)
                          2: TSkoLUc3P5QvCti5HtlAk7Zuo68.crl (hash: xjrXhu/Eanw7aVKbVCDV8b0wQO6oN6MRLltVePwcc6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:f2:b7:78:34:c3:c9:00:d5:10:7a:aa:0d:5d:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d29282d47373f942f0ad8b91ed94093b66ea3af
        Validity
            Not Before: Mar 25 23:01:07 2026 GMT
            Not After : Mar 26 23:01:07 2026 GMT
        Subject: CN=4ea81067a8a0c428567720d2dfef0e26092a34a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2d:17:c9:b8:d0:e2:85:d8:9e:cf:39:b6:aa:
                    bd:e5:bf:65:25:5f:a0:b9:f6:89:19:f9:bd:01:6c:
                    49:42:c1:14:a2:da:a7:9f:03:8d:ec:67:36:ef:fc:
                    4d:5e:3f:19:4a:75:ce:1c:04:b6:36:23:bc:c5:b3:
                    f9:00:44:9d:48:e1:ac:2d:8d:d5:4f:be:20:60:c8:
                    32:ac:0f:85:7c:11:76:3e:88:ac:19:11:5f:14:7b:
                    3b:4f:ab:06:21:e0:de:be:2b:b9:d1:b8:e7:8e:60:
                    f6:56:2a:9b:8b:13:b0:7d:18:0c:c5:c3:63:31:e3:
                    cd:fe:23:35:63:16:2c:17:54:cf:f5:24:f6:8d:db:
                    3d:93:e9:27:11:25:df:9d:5c:20:f0:bb:2d:dd:e6:
                    85:89:10:ea:21:57:12:7f:c4:65:c5:63:0c:a3:49:
                    01:f3:43:ae:89:b8:7e:cf:ca:c3:01:fd:78:a5:be:
                    53:a9:a2:dd:62:23:dd:40:58:31:c0:16:88:18:9a:
                    ae:71:17:07:d0:fd:3e:76:35:0c:88:35:06:d6:59:
                    cd:fe:e7:b5:8e:9e:e9:67:a7:96:f1:73:84:20:49:
                    bf:97:94:2d:28:83:fb:7a:7e:6c:ff:7c:4c:c5:1c:
                    5a:97:9f:a8:81:8d:2d:69:9d:e8:d2:20:cf:2a:01:
                    17:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A8:10:67:A8:A0:C4:28:56:77:20:D2:DF:EF:0E:26:09:2A:34:A0
            X509v3 Authority Key Identifier:
                keyid:4D:29:28:2D:47:37:3F:94:2F:0A:D8:B9:1E:D9:40:93:B6:6E:A3:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:6f:75:39:bc:d4:16:1a:a4:27:0e:a1:37:94:2a:31:5a:99:
         6c:3b:64:0a:0f:8f:6b:96:c6:ce:04:63:1f:8c:0b:39:58:d1:
         1d:72:a6:e1:c9:49:8e:52:93:11:2f:84:16:5a:dc:d9:10:9a:
         a2:c5:63:b0:a0:2d:63:4f:d2:e5:34:e5:9a:05:0d:7a:9b:92:
         4e:f6:e0:16:8c:de:a4:36:f4:d3:56:12:f9:9e:62:ef:44:c8:
         8e:b9:63:6c:39:d5:f7:4d:93:9a:90:85:2f:3b:70:f9:11:e1:
         0d:dc:6e:f5:a5:c3:32:44:35:40:4b:86:a3:9c:d4:ba:18:c2:
         9f:61:41:4e:e3:3c:01:b2:72:6f:44:3d:bd:07:09:39:f2:f3:
         c0:2c:02:e2:bb:95:1e:cc:61:98:d5:83:02:b5:f0:53:4c:09:
         61:eb:d4:37:bf:f3:95:80:19:a6:cc:50:1a:f7:e3:aa:ed:54:
         dd:88:50:bd:a7:29:71:31:b7:d1:81:b0:49:dd:5a:b1:43:00:
         0c:35:ae:78:d6:87:74:e1:b9:a6:8f:9f:7f:0b:fe:7a:a3:d0:
         0a:df:4a:74:da:95:7f:c4:39:64:be:2b:b2:68:04:7e:0d:06:
         c1:b9:62:46:d5:8b:6d:d6:98:0e:60:ac:df:10:58:33:62:01:
         1a:59:ec:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:37 2026 by rpki-client