Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
File:                     TIEnPcsDw0V7eSUL4Qnhml508P0.mft (raw, json)
Hash identifier:          bGmInml/A1rpcXHSINU+wyeDQ99sT7KVAfWr2R97ZDU=
Subject key identifier:   24:8E:FA:AF:87:76:EB:CE:B7:9D:B8:E7:86:B1:EA:04:06:B8:6D:80
Authority key identifier: 4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
Certificate issuer:       /CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Certificate serial:       019D051D65380A132E5872DF995367BB6B6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
Manifest number:          0A6F
Signing time:             Thu 19 Mar 2026 08:01:45 +0000
Manifest this update:     Thu 19 Mar 2026 08:01:45 +0000
Manifest next update:     Fri 20 Mar 2026 08:01:45 +0000
Files and hashes:         1: 1-07ZjHZQ4JAS_TNnMMIuiuGHUu0.roa (hash: Wh4hYAahHN1SwbCKEhKPBAVeToja3QYblB0SUbJdjis=)
                          2: DnIOOoGWRavp5IqwW9ySIPh79lk.roa (hash: rq7BHpoO+/BSPP6hcjEqbUgUHas+lRS8Sfpjq0LOIgU=)
                          3: G2MOc8TWFDIMMJqGe6NYQzJGJRc.roa (hash: 6e+/w4+tJC0z0SxMPZdExM5pB9/UDFdAttq+Dk7OWZs=)
                          4: TIEnPcsDw0V7eSUL4Qnhml508P0.crl (hash: BnIwvcZ1nE42PZMdeuyXy4ldY010yLzmsBRi5cOK4ps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Mar 2026 08:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:05:1d:65:38:0a:13:2e:58:72:df:99:53:67:bb:6b:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
        Validity
            Not Before: Mar 19 08:01:45 2026 GMT
            Not After : Mar 20 08:01:45 2026 GMT
        Subject: CN=248efaaf8776ebceb79db8e786b1ea0406b86d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9a:65:a2:c6:eb:e7:55:6d:0e:41:d3:99:fd:
                    87:40:a7:e6:70:fb:53:5c:c6:07:44:68:5c:4f:76:
                    e3:bc:52:7a:60:fb:db:0d:fd:de:87:db:da:30:59:
                    cf:92:b5:97:8c:e2:23:3c:e2:23:da:b9:48:b1:94:
                    85:fe:7c:55:ec:d4:ee:56:75:33:55:df:58:7e:08:
                    0b:36:c2:f3:4d:36:c4:af:e3:c8:ea:01:8d:5e:37:
                    9a:30:90:20:c4:8b:8b:f7:28:7f:6e:b2:a3:8b:f2:
                    76:9b:62:c4:a3:6e:36:65:b1:5f:cb:a4:94:a9:f4:
                    0c:54:c5:1e:ed:2a:53:1e:ef:d3:d0:65:46:d8:7d:
                    eb:4d:94:27:39:e4:3a:a0:80:89:f3:2b:dc:c8:fa:
                    a7:4f:8e:b7:4d:4b:96:6f:81:79:07:ef:f2:c8:66:
                    52:6a:c0:94:30:2f:42:7c:46:72:45:0b:4f:13:68:
                    89:2c:35:3a:99:0a:b7:39:96:5b:99:79:3f:3f:e2:
                    80:a3:23:ce:5c:0e:0c:75:9e:6e:9a:10:9e:1f:f9:
                    64:be:b6:fb:fd:42:b2:58:05:2d:c9:94:3d:85:f4:
                    6b:55:69:db:03:3e:f1:b7:08:96:20:a2:f8:97:0c:
                    0c:28:45:06:48:73:57:79:97:ca:ea:0e:3c:76:14:
                    63:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:8E:FA:AF:87:76:EB:CE:B7:9D:B8:E7:86:B1:EA:04:06:B8:6D:80
            X509v3 Authority Key Identifier:
                keyid:4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:f9:a1:67:c5:14:02:1a:c1:da:f6:f3:bd:14:49:82:4d:96:
         fa:d1:8c:33:a0:3e:58:9d:e1:4b:3a:2a:b3:96:e9:9f:8a:94:
         b6:f6:6a:9c:4c:26:51:98:d3:d3:f3:a6:af:e8:36:bc:80:f3:
         f5:45:1d:49:0d:4d:50:05:c9:50:9d:aa:72:dd:77:22:26:b4:
         42:3e:ef:24:a2:1a:e9:9a:f4:f5:59:51:4e:dc:7d:09:4e:ee:
         44:f4:a6:54:85:4c:da:28:4d:90:0b:14:18:2e:a1:fa:24:42:
         9e:7d:2d:dc:f1:7a:bf:84:56:2c:0a:9b:4c:3d:92:22:da:3d:
         f0:40:08:6f:e4:7f:b8:e1:1c:bc:5e:e9:b7:59:c0:8f:71:6d:
         14:f0:05:61:e3:6f:98:97:bf:d9:dc:97:dc:7e:5e:71:57:c6:
         6c:77:20:3a:68:a1:49:c2:17:00:ca:18:f9:d0:09:c5:8f:f8:
         a9:43:28:57:97:55:70:8c:ed:7b:e4:1f:94:1a:b1:30:c5:75:
         fd:7d:35:e6:61:09:6c:a6:dc:fe:d4:3c:4e:db:a8:44:7b:21:
         e6:99:be:78:8c:61:86:9a:0c:ef:73:1b:00:e7:8d:97:c0:4a:
         40:a2:b1:b2:b2:02:97:b5:a4:1a:7a:9a:24:45:0b:ff:a7:d0:
         01:74:15:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 13:44:03 2026 by rpki-client