Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
File:                     TdGyWHSQrQYcsgcXa97sgaUxWIw.mft (raw, json)
Hash identifier:          e72b6NAdbc5dOn1kfoih1AVljlEk3l1QT6q0EA7qOoM=
Subject key identifier:   33:9E:BF:D8:26:29:9B:19:F7:81:65:53:7A:F7:A3:AA:26:27:65:1A
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Certificate issuer:       /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial:       019CEFA7892A6226EB1E7A58C24D3141C1B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
Manifest number:          1880
Signing time:             Sun 15 Mar 2026 04:01:00 +0000
Manifest this update:     Sun 15 Mar 2026 04:01:00 +0000
Manifest next update:     Mon 16 Mar 2026 04:01:00 +0000
Files and hashes:         1: 02kOZkpvmw6H06A_7TJUg4SFXaQ.roa (hash: TpRuYePLiA4791T1EEAGr2x5CqL+fTtzRjsvGFbZMFE=)
                          2: 2uonQk8lw16FeBIvKKSSmhsYIS0.roa (hash: 2dNCmgQW6KMhs3bZJLn40BJuFp8E7ETzKi/EDLa0p5s=)
                          3: 5ziyZMsm-eF8rQKEiPIRLUjKrJc.roa (hash: ST0tOCj/lVMKy70YCsjUG8APQaOubaCeSEbJbdk4mkA=)
                          4: 8EjBwuh_9in2Z1YECnIBdQ9VNrg.roa (hash: PZyLvuJ766MtPxGWe7ycqZ9uJ2ybPMELzypr1ODKQyU=)
                          5: 8iq73EY8SNEMLGjWaX4ccQq1LKw.roa (hash: JmTLodfb4oaon3Tv2+zOKzJurk+8nq1oEroEJejbuII=)
                          6: FwWBUFukI5sYaoIJXPQl_VpBKGw.roa (hash: 1A5Wlz49N8I7V2ONwfh6sYJRe2syIOSrNYZlIXmZWdY=)
                          7: Gy-LFbASJWTVYACt4LtWc2cmLuw.roa (hash: ujJsb5LhZ8X8O1ISoHR/MP5k+2QVAPis3/2ApXdZZ3g=)
                          8: MO6J3ImYDWqYVzymL0l4FvP1thU.roa (hash: e0dvPY/H6He44W+ZncCzFUHFzRAKvhD4nFOOCJSgnhw=)
                          9: NjCxVetchGZ0XWn7taqHcdtexeY.roa (hash: luZWHi8jfVZ+lGh40HXz9Aj5QcdjwpUbYNovF4whMXA=)
                          10: TdGyWHSQrQYcsgcXa97sgaUxWIw.crl (hash: A0o+8J9fL312p+wGTHneKD/SYaSFBhLDREuA/16DHJA=)
                          11: YtD0hgbunNZVqmVM-mTLvyyQEfg.roa (hash: bXNfm9p7iVN39qRXUc3z+rEBdxvoCN2D2p6tjPh77Uk=)
                          12: aXSOc-PVHMUBKt_487iYToOm7qo.roa (hash: TgcrpfHL47vgaiMhXn3iuqbilgXgoWpFYf29PAeU7PQ=)
                          13: esYBbdHlmzNrFPaZHG9t4u-VPHc.roa (hash: lkNqbXeTq7xSvC4HTyeLweRSSMj+JVz2/1P8Io014A8=)
                          14: gH8loGqHuQUgS7s-27j8UFtooRI.roa (hash: 3c/uPZsoFkC/+vu1WnVFt+9jcD0vxFLrQc/tSOZVhig=)
                          15: irMc3rrBTtXnxu6Y6x7SlrREl3k.roa (hash: odarHoY4Wy3X+9/gV/9gi100gxxZ4b3sXjkX8UmBWCw=)
                          16: jSXCL2nU6ig_-VGukqzzbg83BZk.roa (hash: Az+cF5wKpW/d6F9stZPF4IUccQjeYz6jWseSjP0L2T0=)
                          17: kYEWFQU5-czKs7zv1vGT343BJ-g.roa (hash: xWtvvMN7qcqpohmug6+MXQLfldtO5B6k2u+O9bf+VTA=)
                          18: oitUYkAPeYiroXJK68BhqiN_Xek.roa (hash: zYA61o9aLXKLXeSg2vp84zehihqtVq61hd+jWJCYfGg=)
                          19: rbrxUA36Uj_W2cv5ysZhTVIwxp4.roa (hash: OT7C6O/C6TgYrrzLBRPYDZUiybzraaRPGIJN5wW++Ak=)
                          20: u0RIuGfpHnx-Tn2Xp-wlaIQU95A.roa (hash: VuT5SalQp4yYIzm6lgKxTmu1Rlv5TD85uBnxUVTY7eo=)
                          21: yLMV5lCxmugxTcjR0kvs8qTvDQs.roa (hash: VAFUfjT6/8ZbId3UHCjjJDfpK2X5rUeLGtPsXPOBDAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 04:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ef:a7:89:2a:62:26:eb:1e:7a:58:c2:4d:31:41:c1:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
        Validity
            Not Before: Mar 15 04:01:00 2026 GMT
            Not After : Mar 16 04:01:00 2026 GMT
        Subject: CN=339ebfd826299b19f78165537af7a3aa2627651a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a3:48:db:50:d2:29:ba:8f:8c:9f:93:07:34:
                    c7:82:f9:9b:b3:d3:0c:b4:f9:24:b3:95:00:a1:be:
                    bf:2e:4e:2e:20:47:48:83:6f:0a:88:71:9d:9f:c1:
                    8c:5c:37:38:3d:e7:c5:d6:b4:66:ba:c1:40:15:4f:
                    1e:72:11:bf:83:4a:e2:43:c4:46:28:9c:a0:7a:c3:
                    4f:fc:61:99:ff:33:d3:af:81:42:c5:fe:9d:8a:33:
                    4a:3c:8c:60:cd:92:92:02:ce:4b:fd:3f:85:f1:04:
                    20:a2:2f:f5:6a:33:32:4f:ae:cf:96:03:95:e3:bc:
                    1e:47:37:d6:a7:53:a1:66:cf:3f:33:33:d4:66:19:
                    ed:a1:d4:b1:2c:dc:16:0e:c6:d8:e3:fa:92:14:fe:
                    88:b1:50:1f:a5:a0:7f:5d:62:48:36:ef:ff:92:25:
                    ae:e8:fa:13:a8:3b:ac:7d:ab:42:9f:2d:07:36:8f:
                    9a:ac:a8:b8:a6:14:4e:92:ca:fc:6d:b7:25:d9:2e:
                    e4:2e:7d:6d:22:bc:35:7a:51:d7:ce:2f:b4:8a:c7:
                    58:8e:82:1d:24:fc:b8:4b:ae:b6:1b:30:9c:c8:f5:
                    a5:18:07:59:07:01:a4:7a:3d:76:ff:89:8f:bd:34:
                    fd:e9:aa:a6:18:bc:67:5b:e2:af:27:20:dc:9c:81:
                    84:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:9E:BF:D8:26:29:9B:19:F7:81:65:53:7A:F7:A3:AA:26:27:65:1A
            X509v3 Authority Key Identifier:
                keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:f7:13:c3:a9:24:e9:d0:ce:87:25:ab:a0:e3:26:a2:80:2a:
         ac:a8:04:3f:f2:81:52:aa:8d:92:4a:95:ba:49:a6:71:22:cb:
         90:d2:49:16:64:92:32:6b:62:3a:56:72:6d:4c:9e:7e:8e:e0:
         02:d0:3e:cc:83:1c:40:e0:b4:e7:ff:61:d8:ce:f8:b6:7a:77:
         d4:d9:75:61:dc:90:7d:0a:0e:c3:0a:d0:dd:5f:58:c0:a3:28:
         b8:38:a5:f3:6c:d1:e2:93:94:98:2d:d0:8e:3d:1e:c4:27:5f:
         e8:3b:22:c2:c6:54:ad:6b:72:0f:96:64:44:2a:e0:3f:83:e9:
         71:02:1a:5f:4e:3d:c2:91:fa:b6:a9:d4:4e:59:d1:07:00:88:
         3a:ab:00:3d:2a:71:1b:d1:e6:f4:5c:e6:bb:88:cd:3b:06:c2:
         65:fc:b0:bf:ac:b0:8c:2a:df:43:89:0a:39:22:26:f2:42:eb:
         7c:aa:ef:9c:01:e2:ed:6b:b1:e6:db:11:3d:03:34:8a:46:87:
         f8:4f:63:84:06:66:69:11:47:52:72:1c:8d:95:cb:a8:b3:5f:
         a6:a7:01:ea:f9:ee:e7:cb:52:b3:8c:ff:e2:ef:39:24:4c:ac:
         55:72:91:f6:31:48:9c:a9:95:f9:11:27:ae:51:d5:d2:1f:10:
         48:5e:84:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 08:28:19 2026 by rpki-client