Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
File:                     TIEnPcsDw0V7eSUL4Qnhml508P0.mft (raw, json)
Hash identifier:          UYlGMKRYCUUXHliutQrmO5Bp8u/KqNvjF+H4xy8RQfQ=
Subject key identifier:   B4:5C:FB:2E:DF:69:84:29:A8:81:1A:E5:BE:07:3C:3A:35:E9:4D:0A
Authority key identifier: 4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
Certificate issuer:       /CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Certificate serial:       019DECDBA7F70334F4E1C35A6C41EF2644D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
Manifest number:          0AE7
Signing time:             Sun 03 May 2026 08:01:51 +0000
Manifest this update:     Sun 03 May 2026 08:01:51 +0000
Manifest next update:     Mon 04 May 2026 08:01:51 +0000
Files and hashes:         1: 1-07ZjHZQ4JAS_TNnMMIuiuGHUu0.roa (hash: Wh4hYAahHN1SwbCKEhKPBAVeToja3QYblB0SUbJdjis=)
                          2: DnIOOoGWRavp5IqwW9ySIPh79lk.roa (hash: rq7BHpoO+/BSPP6hcjEqbUgUHas+lRS8Sfpjq0LOIgU=)
                          3: G2MOc8TWFDIMMJqGe6NYQzJGJRc.roa (hash: 6e+/w4+tJC0z0SxMPZdExM5pB9/UDFdAttq+Dk7OWZs=)
                          4: TIEnPcsDw0V7eSUL4Qnhml508P0.crl (hash: PLpleqjtenFfz+3QzqNWqHqnyQoZ7lkRHWKXi5Z/ttc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 May 2026 05:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ec:db:a7:f7:03:34:f4:e1:c3:5a:6c:41:ef:26:44:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
        Validity
            Not Before: May  3 08:01:51 2026 GMT
            Not After : May  4 08:01:51 2026 GMT
        Subject: CN=b45cfb2edf698429a8811ae5be073c3a35e94d0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b7:66:f2:ea:19:b0:9b:73:56:e6:03:1e:b4:
                    07:48:bd:76:25:c6:d0:58:03:f4:b1:1a:1d:9e:46:
                    be:5a:8a:bc:f0:84:5d:19:8e:54:0e:1c:90:c0:d9:
                    82:d8:7c:af:2f:70:b1:49:fd:7f:67:56:49:00:6a:
                    77:66:4a:41:13:34:55:9f:a5:c3:8b:df:20:9d:54:
                    9a:c4:f9:2d:b3:2d:b9:30:22:cc:e0:d7:35:a0:69:
                    33:44:a3:ba:da:6b:7e:e9:1f:41:d2:86:d5:23:73:
                    ee:4e:f9:44:d9:c8:5f:39:3b:2e:f9:c8:04:a0:43:
                    6c:41:3d:64:1a:ad:23:cd:4c:b7:c4:c1:77:6f:6c:
                    a6:47:df:41:ed:dd:3a:37:dc:6e:db:c9:34:d6:ec:
                    1d:ef:69:57:4b:81:0e:24:46:48:e8:ec:f7:24:2c:
                    c8:47:3b:47:94:11:bd:02:54:3d:6e:bf:22:a9:4d:
                    47:61:55:8b:e1:e8:c6:bc:27:2a:6d:86:0b:af:5f:
                    f3:25:c6:2a:8f:16:f2:2c:a7:77:70:9b:cc:07:40:
                    64:5a:2d:b7:40:98:9c:96:2b:0a:2c:70:e7:82:f5:
                    e4:03:f3:09:27:ed:29:19:3a:fd:ce:2e:71:16:5b:
                    c2:87:51:ef:e0:88:30:d8:b8:11:19:c8:f8:9a:ce:
                    2c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:5C:FB:2E:DF:69:84:29:A8:81:1A:E5:BE:07:3C:3A:35:E9:4D:0A
            X509v3 Authority Key Identifier:
                keyid:4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:55:d6:6d:ec:3b:6b:1a:f5:22:2d:b4:9a:8f:0b:7e:eb:ce:
         e9:8f:8d:25:48:60:0c:32:d5:bb:25:86:05:12:6a:65:ff:3b:
         a3:30:e4:d3:ae:08:dc:0a:05:a3:bd:8e:2f:cb:40:5d:75:c9:
         22:6d:08:7d:f3:25:bd:14:1a:af:1a:c5:d6:37:f6:8f:d7:58:
         a6:91:a8:94:4a:a8:cf:cc:40:88:de:7c:c5:96:12:e9:99:b2:
         b7:7e:f4:cc:2b:ef:e5:17:56:fb:9f:cd:d7:c6:74:77:f3:1d:
         15:fc:cc:33:45:4c:2b:24:d2:92:9c:d9:57:ae:c6:88:5f:05:
         4b:12:df:b7:9b:5c:d1:07:61:f9:5c:cb:1b:6a:50:21:87:bf:
         ee:09:24:ac:04:f4:bb:51:4d:10:bc:90:51:fb:f8:9b:8f:58:
         29:ab:2c:ef:13:0d:b7:57:38:2b:02:55:49:f2:ed:eb:1a:00:
         ef:b0:ac:00:8c:25:71:34:f0:e5:fe:ab:cf:7e:b5:6d:9d:21:
         08:37:e8:c8:a9:05:e2:c9:dc:34:78:c9:33:c0:e8:ba:f6:9a:
         d4:39:41:c3:37:44:b2:6a:c9:08:79:8a:65:74:4d:dc:d6:c4:
         a3:ed:1e:30:93:de:5b:67:4a:fc:ac:0b:8d:29:f6:ae:28:12:
         24:13:d5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 16:13:09 2026 by rpki-client