Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft
File:                     tUMb1z4KfwN965fYLRqV_NZxBRw.mft (raw, json)
Hash identifier:          ytuXH/XynSIxORdryR2o5mbE58Fbgck4QfovH58HwK4=
Subject key identifier:   8C:7E:E9:8F:78:B6:23:45:97:F1:04:82:7B:B1:B7:51:34:4B:39:F8
Authority key identifier: B5:43:1B:D7:3E:0A:7F:03:7D:EB:97:D8:2D:1A:95:FC:D6:71:05:1C
Certificate issuer:       /CN=b5431bd73e0a7f037deb97d82d1a95fcd671051c
Certificate serial:       019D3789776B71BC2FFFC057942CB2B492EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tUMb1z4KfwN965fYLRqV_NZxBRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft
Manifest number:          0162
Signing time:             Sun 29 Mar 2026 03:00:49 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:49 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:49 +0000
Files and hashes:         1: ptIvn2G44nmjMz4OoTPMvDGmQ4g.roa (hash: mVPD346A3srmdFGJdgacd5EA7ZXTURNtKW04Yxreb0M=)
                          2: tUMb1z4KfwN965fYLRqV_NZxBRw.crl (hash: vC59gf26f1TNAlyMkst1dnrtwFz56HtSq61SA3wU/WY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tUMb1z4KfwN965fYLRqV_NZxBRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:77:6b:71:bc:2f:ff:c0:57:94:2c:b2:b4:92:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5431bd73e0a7f037deb97d82d1a95fcd671051c
        Validity
            Not Before: Mar 29 03:00:49 2026 GMT
            Not After : Mar 30 03:00:49 2026 GMT
        Subject: CN=8c7ee98f78b6234597f104827bb1b751344b39f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:20:89:f1:b7:d7:9c:f3:d1:8d:bb:67:50:87:
                    89:f6:c5:d3:97:85:c7:42:4e:b9:b7:ac:45:2b:c7:
                    00:80:30:f3:5a:8f:c6:03:e5:78:5b:f2:ea:01:b2:
                    38:fd:df:ec:79:f9:69:b8:e8:bc:a4:3c:7c:8f:17:
                    3c:dd:3d:ef:e3:75:08:42:24:20:9b:0b:17:af:db:
                    0b:cd:3b:7e:7c:86:0f:97:a9:b8:43:6b:02:6d:2a:
                    45:52:ad:cf:19:89:89:b8:80:37:da:97:7f:b2:b6:
                    63:35:88:2d:5d:f6:4e:9d:45:59:53:09:ca:24:a1:
                    f4:b6:5f:b4:f0:56:76:1c:70:f5:e4:9e:df:a9:a5:
                    03:4a:e5:6b:e0:06:94:8b:2b:fa:e5:b0:6e:d5:c6:
                    8c:fd:ec:fd:a0:dc:80:67:a6:69:08:cb:1d:bc:d2:
                    49:c9:4b:a9:06:75:29:70:d4:d0:83:1b:0a:0a:6d:
                    b3:ab:d1:61:e0:46:d5:fc:51:63:0c:c8:c8:c7:92:
                    05:9c:19:76:7e:40:b8:f0:2e:05:af:1b:64:be:1d:
                    1c:6a:59:94:f8:81:c5:cd:e3:a8:64:a6:d7:cd:b1:
                    b2:49:44:af:d0:43:2b:5b:2e:63:c1:92:c7:08:86:
                    b9:eb:50:c7:0a:e4:31:f0:5a:e0:a6:94:c6:88:96:
                    4b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:7E:E9:8F:78:B6:23:45:97:F1:04:82:7B:B1:B7:51:34:4B:39:F8
            X509v3 Authority Key Identifier:
                keyid:B5:43:1B:D7:3E:0A:7F:03:7D:EB:97:D8:2D:1A:95:FC:D6:71:05:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUMb1z4KfwN965fYLRqV_NZxBRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:66:80:20:d5:72:c8:5c:5e:ec:2f:0a:55:bd:d1:14:4b:9e:
         48:4c:ac:e5:ff:95:08:67:56:aa:d3:81:07:ec:08:af:ae:b0:
         69:05:1d:94:fd:15:3d:67:eb:ad:aa:dc:c3:53:f8:44:96:76:
         0e:13:dc:4c:30:ac:c1:47:77:01:e7:03:e2:6b:7a:93:52:a5:
         bc:c2:ba:67:ff:59:e8:73:8b:53:9a:54:96:fc:f8:23:6d:bd:
         4a:bc:fc:c0:7c:ca:ea:4d:4c:9a:b1:ba:66:58:55:23:94:d1:
         08:c2:de:3d:64:30:d9:c2:4f:b9:b2:01:c0:85:a0:2a:dd:b6:
         3d:95:5b:0c:d1:6f:68:bb:cb:84:55:16:f3:14:13:68:2f:3a:
         2b:4a:9c:93:d8:fd:f6:3c:19:ea:64:f6:13:38:87:5a:8c:2e:
         ea:bb:a8:b6:7a:83:a2:aa:da:a0:b0:85:1c:ee:24:cf:66:76:
         33:16:84:20:4e:8a:4c:16:e8:bf:36:a4:5e:b5:b0:ca:f9:a3:
         45:8c:43:32:d2:a0:ed:da:52:da:0d:d5:e1:7a:0c:cc:c0:90:
         64:10:05:82:12:ea:d1:9e:0d:56:74:d5:af:2c:ac:c5:90:f6:
         c5:31:a0:f6:2f:e3:cb:f3:1a:03:27:b5:a2:31:53:64:7b:79:
         3c:67:31:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:06 2026 by rpki-client