Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
File:                     TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft (raw, json)
Hash identifier:          Lif6N3Fq0ldgnq4QEsMyqEa+7gR6lF1mLD0ii79yBz0=
Subject key identifier:   8D:40:C3:7A:8C:58:D0:FF:27:B5:3B:37:30:60:66:BD:EE:C0:40:FB
Authority key identifier: 4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
Certificate issuer:       /CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Certificate serial:       01A08979E7BA2CBEE03CBF9092DA2345087C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
Manifest number:          1A4C
Signing time:             Thu 10 Sep 2026 04:01:02 +0000
Manifest this update:     Thu 10 Sep 2026 04:01:02 +0000
Manifest next update:     Fri 11 Sep 2026 04:01:02 +0000
Files and hashes:         1: AwY5mgjpthmtObHXqwAVAnajhhs.roa (hash: Ynq5lonnqADLu0ss1thtGFYZaU4FINs+79TFKUmEVMc=)
                          2: FEE0W1FvUWZY1yNTAUusq7fzBQA.roa (hash: Hd0jbgNDlWlFVrZYfQAqVLAGgeJbu+X/gxILT2NBZwY=)
                          3: HBpn81d4cG4_UILVsdO8exzlDsY.roa (hash: kRgmgXZK5yKUe+saBJuegm6bkvNmijxbzes8bqH8BJE=)
                          4: Kpj-186fjuAYRRYnilKKfHVGN8E.roa (hash: W4eIu6BlkL603t8W8JuwGE33q4DgMOfHpuuHjrT/r2s=)
                          5: NueqQvkP6OwbYq3KeGusJiI5nB4.roa (hash: Iwo1uDTct62657OX8teLFspmVyOSx/FLeOTjd7KJmFk=)
                          6: TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl (hash: Cv7Wwj/YK1ND8oy3/3Y06OaBZbkj+gI+t9ZaKAEOmuo=)
                          7: XhbfkmgppgGaa0jwxEEK1QpmG_o.roa (hash: RblW9p63Q8/3oZMyKn6Kq61NaEzW9XB/T1oxdZPwAPk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 04:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:79:e7:ba:2c:be:e0:3c:bf:90:92:da:23:45:08:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
        Validity
            Not Before: Sep 10 04:01:02 2026 GMT
            Not After : Sep 11 04:01:02 2026 GMT
        Subject: CN=8d40c37a8c58d0ff27b53b37306066bdeec040fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e0:f1:7b:8e:97:09:3d:81:40:d1:90:e1:f7:
                    c6:4c:e9:f7:7a:ab:12:c4:16:3d:62:12:53:8a:e1:
                    62:7d:ea:d3:c3:a4:2d:75:c3:54:8b:f2:06:b4:7d:
                    7c:1f:37:97:32:d8:f5:10:a9:3e:de:0c:01:a6:0c:
                    66:ad:78:76:99:76:1f:90:08:b9:e8:b7:c0:d9:28:
                    0a:62:32:bc:46:a3:26:2a:6a:dd:8a:77:98:f3:d6:
                    c4:0e:7e:8c:dc:57:2a:01:d8:95:5e:8e:5f:dc:2a:
                    13:3e:a3:25:e1:78:c9:93:80:86:e9:5c:24:14:e9:
                    6a:83:56:66:bc:62:e0:e6:da:ac:48:46:a2:54:7e:
                    14:61:03:4d:38:e2:55:f1:05:89:c1:2c:63:d0:7e:
                    2b:99:bf:67:43:d8:30:b5:09:c7:e7:5c:9a:66:0e:
                    6e:8e:12:e0:b6:a8:28:4d:aa:4b:01:20:bc:79:d4:
                    d8:71:0f:ec:d4:13:19:18:f4:51:7c:aa:f5:5f:2d:
                    cd:6f:06:31:28:4c:49:5d:e0:5c:2e:75:3b:05:78:
                    b6:f7:59:e9:db:fb:58:0b:72:19:d9:a0:d4:b1:5d:
                    ea:be:97:0f:45:ba:30:78:ba:a9:be:72:e4:3b:ab:
                    b8:70:9c:ca:5a:34:ae:f1:72:a0:2d:5e:ea:48:54:
                    28:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:40:C3:7A:8C:58:D0:FF:27:B5:3B:37:30:60:66:BD:EE:C0:40:FB
            X509v3 Authority Key Identifier:
                keyid:4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:f6:5f:b2:1e:d4:f8:1f:d4:9a:ff:d2:ff:f9:61:88:c8:fc:
         cc:68:b2:44:ad:be:5f:54:13:0f:1e:ab:61:07:20:67:7a:92:
         a7:21:7f:86:0e:bf:d7:d3:a7:5e:d9:b5:30:33:3d:82:ef:5c:
         29:6c:b1:1b:79:de:f6:19:18:3d:28:96:02:05:d9:ce:31:d4:
         1b:86:9b:4f:e0:3e:bb:e4:90:f4:3d:66:46:a8:ff:37:06:61:
         75:54:14:86:e1:30:ab:bf:09:e5:e6:d0:39:cd:40:5e:82:e2:
         cf:e9:49:83:9a:43:7f:7d:49:7f:c9:96:20:d5:ab:84:20:95:
         75:20:8d:f1:7f:78:e5:89:74:48:15:c5:ff:4b:91:c5:48:8d:
         90:60:a1:f4:9d:5b:d8:27:40:cf:6d:2e:1c:c7:3e:33:44:ae:
         72:3f:e2:82:7c:52:c4:f9:80:a7:42:ee:c5:a7:4b:d7:8b:76:
         0e:5d:92:c6:c2:a2:88:5d:56:ad:c8:7c:55:8a:8b:a0:b9:d8:
         93:7e:8e:ce:7b:11:9f:63:29:f4:57:5c:5a:ea:2d:2d:86:85:
         1e:10:cf:32:4f:02:89:bf:81:97:7b:97:09:a6:66:20:8c:be:
         fa:96:11:47:25:c1:dc:10:24:34:40:9e:c3:7c:6e:4b:f4:ed:
         7c:c2:e4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:44:29 2026 by rpki-client