Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
File:                     TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft (raw, json)
Hash identifier:          wm6UbB9+cMBreM5sFBnjWGV0tvMpnWCgSNgAoH3JCuM=
Subject key identifier:   FC:2B:07:6C:D5:4B:43:3D:10:BD:DA:35:21:DA:41:E9:42:52:CE:E8
Authority key identifier: 4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
Certificate issuer:       /CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Certificate serial:       019F9FCCB19B19D77F2FE8774FF9385479B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
Manifest number:          19D3
Signing time:             Sun 26 Jul 2026 19:00:19 +0000
Manifest this update:     Sun 26 Jul 2026 19:00:19 +0000
Manifest next update:     Mon 27 Jul 2026 19:00:19 +0000
Files and hashes:         1: AwY5mgjpthmtObHXqwAVAnajhhs.roa (hash: Ynq5lonnqADLu0ss1thtGFYZaU4FINs+79TFKUmEVMc=)
                          2: FEE0W1FvUWZY1yNTAUusq7fzBQA.roa (hash: Hd0jbgNDlWlFVrZYfQAqVLAGgeJbu+X/gxILT2NBZwY=)
                          3: HBpn81d4cG4_UILVsdO8exzlDsY.roa (hash: kRgmgXZK5yKUe+saBJuegm6bkvNmijxbzes8bqH8BJE=)
                          4: Kpj-186fjuAYRRYnilKKfHVGN8E.roa (hash: W4eIu6BlkL603t8W8JuwGE33q4DgMOfHpuuHjrT/r2s=)
                          5: NueqQvkP6OwbYq3KeGusJiI5nB4.roa (hash: Iwo1uDTct62657OX8teLFspmVyOSx/FLeOTjd7KJmFk=)
                          6: TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl (hash: g/pARuq1Hudq+CvYwE/XM2jEdyhj4RLmvDQuGYF9iYQ=)
                          7: XhbfkmgppgGaa0jwxEEK1QpmG_o.roa (hash: RblW9p63Q8/3oZMyKn6Kq61NaEzW9XB/T1oxdZPwAPk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 19:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:cc:b1:9b:19:d7:7f:2f:e8:77:4f:f9:38:54:79:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
        Validity
            Not Before: Jul 26 19:00:19 2026 GMT
            Not After : Jul 27 19:00:19 2026 GMT
        Subject: CN=fc2b076cd54b433d10bdda3521da41e94252cee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:ce:3c:29:94:99:c6:0a:82:c9:df:35:c9:c0:
                    89:21:95:f8:6e:c1:45:5a:bf:42:15:9c:cd:9f:5e:
                    81:a8:f0:27:ed:2c:06:27:2b:54:d5:a1:a4:31:ef:
                    26:a8:1a:f4:f1:12:8b:1f:6e:7e:cf:c0:66:d5:9a:
                    1e:df:17:78:78:38:eb:1a:ee:9d:bf:ea:db:ea:e7:
                    8f:57:a4:cc:de:92:0c:9f:5b:91:66:e1:dd:d0:95:
                    c5:e4:92:25:d6:e7:9f:30:23:d2:c6:d2:09:d8:d6:
                    76:8f:79:0e:7c:d4:f8:1b:56:a2:1a:44:ad:59:93:
                    fd:1d:3c:06:a1:10:4c:ca:c8:d3:b0:ea:14:7b:f8:
                    94:7b:75:1d:97:89:0a:10:e1:67:2f:81:b6:a1:9a:
                    72:e4:8c:a2:73:0d:b1:48:58:a7:09:9b:57:59:30:
                    83:4f:10:e6:da:27:7d:0f:e4:e1:26:f0:28:61:dd:
                    1c:92:30:c2:e0:ca:b5:1b:a6:f5:ec:db:7c:a7:e6:
                    d7:44:c5:ac:3c:1b:c3:46:46:d5:de:a2:28:f9:af:
                    42:6f:35:b7:96:31:75:89:c1:e1:b6:64:67:4c:24:
                    b4:06:e8:80:2c:21:d0:f5:90:8c:94:c7:5e:04:f3:
                    bf:28:d0:29:e7:27:87:5b:05:9c:7d:68:c3:fe:68:
                    39:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:2B:07:6C:D5:4B:43:3D:10:BD:DA:35:21:DA:41:E9:42:52:CE:E8
            X509v3 Authority Key Identifier:
                keyid:4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:95:0b:6d:b3:81:db:57:8d:f6:a8:13:ff:9c:26:af:50:2a:
         be:47:bf:35:db:83:c3:13:7a:53:a0:ec:85:22:0e:fe:6b:d3:
         a9:31:d6:62:a9:81:df:fd:a0:c1:27:ec:b1:1a:0e:23:eb:7b:
         08:71:5b:31:c7:3d:80:27:f6:92:f1:15:ba:f7:73:d0:dd:f3:
         e5:0e:3b:e5:c7:bd:de:65:2c:b3:85:66:20:51:28:1d:b2:8f:
         9d:15:69:b1:a5:93:41:00:ae:be:30:70:7d:39:bd:31:0d:3b:
         f1:9c:d4:be:90:45:bf:d5:50:e8:2e:e2:9b:f2:86:4d:70:dc:
         4e:fa:15:df:90:a8:f7:87:21:7e:62:72:7f:bf:dd:c4:ae:76:
         78:ea:46:a9:df:98:bd:e1:fe:63:15:5b:c5:b2:7c:06:41:77:
         f7:eb:e5:50:c0:9b:1f:c9:cc:97:e1:1e:bd:dd:0f:05:34:df:
         6e:ab:bd:a4:81:61:40:02:d8:73:03:7a:13:f0:50:02:88:94:
         40:83:b2:89:61:0f:95:3f:8e:dd:fb:5e:73:b8:50:8a:24:51:
         90:b6:e2:df:d1:df:92:bc:29:f9:64:f9:13:3e:b5:a9:0a:fe:
         17:ad:3f:30:58:ba:b7:b7:23:a7:9f:1d:27:2b:ba:98:3c:f0:
         b9:7e:ad:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:24:50 2026 by rpki-client