Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
File:                     tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft (raw, json)
Hash identifier:          NShlsJl9u5PnsqylBzxQyUNVemXNMUg2bKjOTpdUP+o=
Subject key identifier:   47:F0:87:50:43:64:69:CC:9F:7C:33:87:4C:3B:D4:A1:F3:5E:87:DD
Authority key identifier: B6:09:5C:9F:74:7B:1C:9E:9B:DC:57:17:A7:25:E8:05:98:74:CB:EF
Certificate issuer:       /CN=b6095c9f747b1c9e9bdc5717a725e8059874cbef
Certificate serial:       019D38657EE9B93C27A27F9E27253B0E1C18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
Manifest number:          144E
Signing time:             Sun 29 Mar 2026 07:01:08 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:08 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:08 +0000
Files and hashes:         1: tglcn3R7HJ6b3FcXpyXoBZh0y-8.crl (hash: LKNF+MAR7B/wyUdTqIysuEzdE7BmSSQyL+zbhWFmZrA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:7e:e9:b9:3c:27:a2:7f:9e:27:25:3b:0e:1c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6095c9f747b1c9e9bdc5717a725e8059874cbef
        Validity
            Not Before: Mar 29 07:01:08 2026 GMT
            Not After : Mar 30 07:01:08 2026 GMT
        Subject: CN=47f08750436469cc9f7c33874c3bd4a1f35e87dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:82:27:ce:21:43:db:5d:f6:51:97:75:74:69:
                    d9:92:15:da:f7:df:46:2d:a0:f8:d7:a4:4e:1b:7e:
                    a4:ec:9d:07:ce:7a:01:d7:7a:36:a3:cc:cd:b9:cd:
                    6e:77:ea:fb:26:d6:d9:a3:fe:2d:3b:c4:79:01:76:
                    13:c5:ce:d8:de:1e:fb:ee:85:ca:ff:97:77:a9:2f:
                    82:99:d9:9a:d3:43:05:47:3b:4e:32:b5:2e:1f:08:
                    90:03:b3:22:1b:60:5c:9c:42:f1:4e:49:83:ff:0f:
                    a7:e8:53:ff:7c:54:2b:5b:7b:7c:a2:d9:88:bb:8c:
                    b8:43:6c:0a:b5:4c:8f:cd:8d:ff:e7:85:0e:47:62:
                    da:0b:dd:0a:5e:97:54:1b:dd:f6:6c:ca:85:77:56:
                    8f:09:89:a4:eb:e6:3d:3c:9f:9b:85:5e:0f:24:84:
                    e1:80:04:86:2c:a6:14:b4:2c:a2:38:0a:37:50:31:
                    2a:e7:24:73:57:98:21:0b:e8:d8:c5:c2:2c:fd:09:
                    b6:73:7f:8f:42:d7:c9:48:3c:6d:dd:1a:d0:00:74:
                    43:64:b0:ef:6a:1f:22:7b:ff:a8:c7:b2:06:af:ae:
                    7e:f8:b6:82:68:3c:d9:66:ac:42:86:db:91:7b:2a:
                    5a:24:c6:1e:c9:90:cf:b6:b2:e4:d2:68:9f:37:ef:
                    02:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F0:87:50:43:64:69:CC:9F:7C:33:87:4C:3B:D4:A1:F3:5E:87:DD
            X509v3 Authority Key Identifier:
                keyid:B6:09:5C:9F:74:7B:1C:9E:9B:DC:57:17:A7:25:E8:05:98:74:CB:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:c4:18:69:e7:64:70:16:cb:82:81:f3:4c:7c:cc:66:c5:e7:
         f3:ed:b5:c5:1f:03:77:99:e0:95:95:40:09:6e:28:f3:17:35:
         8d:0c:cd:91:33:23:88:29:cb:89:70:ce:1d:e2:03:2c:6f:78:
         f1:3f:71:83:fa:80:40:31:0b:a3:90:96:2b:85:44:df:f2:af:
         9b:97:1f:d4:35:f4:49:6a:18:64:57:9d:2d:4c:de:03:53:9b:
         10:f1:eb:d2:ce:2f:01:57:37:e3:47:16:97:94:2a:4e:1a:93:
         5a:7b:b5:27:d4:5e:c5:29:c5:09:43:3b:58:b6:f1:85:df:05:
         e3:f5:9f:03:33:cc:02:db:c4:70:a5:2d:73:e1:e8:62:65:cf:
         b6:b6:ab:1f:29:4f:17:ac:58:1d:db:fa:31:ea:22:ed:41:19:
         12:57:fb:f5:6e:ad:7d:b5:7d:43:bd:db:71:2d:b1:69:84:87:
         4d:22:f3:bb:36:9a:0b:8e:32:32:db:bf:ea:5d:23:16:ba:3f:
         90:fe:84:cd:19:57:81:23:ab:ba:ca:f6:3e:83:30:48:e0:93:
         2c:cc:77:5b:b5:c4:8f:1e:05:86:cf:44:40:43:d3:1f:0d:f5:
         7f:cc:fc:87:9e:4d:0a:b8:7d:80:75:c4:13:96:2b:f8:46:13:
         29:ad:05:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:34 2026 by rpki-client