Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c58d4-7a73-4d62-af86-26f0666590ed/1/Txf-YMOq5IFd21vYFp7wiLD_iAA.mft
File:                     Txf-YMOq5IFd21vYFp7wiLD_iAA.mft (raw, json)
Hash identifier:          VordxUdjJT60Mv/cD238a/mo+V5sWGHs5KeSOZGLiqo=
Subject key identifier:   BE:60:C7:92:AE:C4:D5:94:39:F0:DA:AE:E0:89:AA:50:19:CD:AF:2E
Authority key identifier: 4F:17:FE:60:C3:AA:E4:81:5D:DB:5B:D8:16:9E:F0:88:B0:FF:88:00
Certificate issuer:       /CN=4f17fe60c3aae4815ddb5bd8169ef088b0ff8800
Certificate serial:       019E284B3EBA86FCBF4B5CC494B9C26DE850
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Txf-YMOq5IFd21vYFp7wiLD_iAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/2c58d4-7a73-4d62-af86-26f0666590ed/1/Txf-YMOq5IFd21vYFp7wiLD_iAA.mft
Manifest number:          0C
Signing time:             Thu 14 May 2026 21:01:20 +0000
Manifest this update:     Thu 14 May 2026 21:01:20 +0000
Manifest next update:     Fri 15 May 2026 21:01:20 +0000
Files and hashes:         1: 8QmLJNa-_EnzDtcCcd2zqbb73Z8.asa (hash: E1mQECWPw1tiHBtWESa7EJB6He3X4+7LGeXYc5u2GM4=)
                          2: Txf-YMOq5IFd21vYFp7wiLD_iAA.crl (hash: 2VUYMg8+MQWV2lRub+OSZ7CT4E8Zcc4dO334SwyT3RU=)
                          3: sfOsjn-CrEsbuGZfo_GU02Seuc0.roa (hash: QuCtUcV2rfjyf/avZCog8Qa9or52pG6qZ7ZDsQCk2sE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/2c58d4-7a73-4d62-af86-26f0666590ed/1/Txf-YMOq5IFd21vYFp7wiLD_iAA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/2c58d4-7a73-4d62-af86-26f0666590ed/1/Txf-YMOq5IFd21vYFp7wiLD_iAA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Txf-YMOq5IFd21vYFp7wiLD_iAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 21:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:4b:3e:ba:86:fc:bf:4b:5c:c4:94:b9:c2:6d:e8:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f17fe60c3aae4815ddb5bd8169ef088b0ff8800
        Validity
            Not Before: May 14 21:01:20 2026 GMT
            Not After : May 15 21:01:20 2026 GMT
        Subject: CN=be60c792aec4d59439f0daaee089aa5019cdaf2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:78:11:d4:34:23:e7:b8:98:b9:f8:8a:28:e1:
                    e0:59:c2:d6:f4:66:3b:c6:d6:ef:58:de:f3:04:3e:
                    af:80:d7:32:49:13:c2:a8:2c:04:48:cf:7b:d5:3e:
                    ab:01:85:fb:69:42:79:92:91:cd:cc:88:cd:b7:f2:
                    f4:d1:3a:ef:4e:52:9f:42:1b:a6:e4:68:ae:c5:32:
                    df:1a:79:d3:44:0f:b7:d9:bc:71:2e:73:d7:63:8d:
                    01:37:b6:fc:e8:3a:31:57:7b:2b:6e:a1:e9:08:a2:
                    25:4c:ee:af:7f:c1:1e:58:7a:6f:e3:e9:ea:e0:0f:
                    09:20:ef:bd:56:12:1c:75:ec:9d:0b:d7:5b:4e:6a:
                    14:e1:e2:44:39:c1:47:dc:a3:49:fb:b7:03:03:54:
                    e3:8d:27:96:17:4b:a1:1f:cd:7c:53:cc:87:85:98:
                    05:50:b9:6c:f8:6c:9c:77:26:46:d2:1e:96:3a:9f:
                    0e:8a:80:76:14:5a:76:ff:29:3c:f9:bd:b0:d4:3d:
                    4c:fe:34:9a:03:c0:c7:38:81:b6:e0:b0:77:e3:64:
                    37:d7:55:63:0a:8e:ee:d8:d3:0e:37:a2:9a:10:1d:
                    c9:0e:a3:79:8c:38:a7:b4:15:a3:d9:67:f5:f8:4a:
                    d0:9b:9a:74:5b:46:b5:cd:41:81:70:6b:71:86:38:
                    e4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:60:C7:92:AE:C4:D5:94:39:F0:DA:AE:E0:89:AA:50:19:CD:AF:2E
            X509v3 Authority Key Identifier:
                keyid:4F:17:FE:60:C3:AA:E4:81:5D:DB:5B:D8:16:9E:F0:88:B0:FF:88:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Txf-YMOq5IFd21vYFp7wiLD_iAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c58d4-7a73-4d62-af86-26f0666590ed/1/Txf-YMOq5IFd21vYFp7wiLD_iAA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c58d4-7a73-4d62-af86-26f0666590ed/1/Txf-YMOq5IFd21vYFp7wiLD_iAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:be:a3:ec:81:ab:49:44:9a:bf:16:b5:cd:23:7a:7e:63:cd:
         e2:32:76:ac:09:8a:e6:94:73:3d:7b:22:cf:a0:05:f0:9c:67:
         a4:1c:97:2e:0e:4a:ed:26:ea:14:bd:76:f7:cf:e0:45:ea:6a:
         68:45:e8:ae:45:e8:59:4e:28:bf:5e:2c:a7:eb:a8:9c:61:21:
         2b:d4:48:4e:d2:d5:e2:7f:d8:95:80:f5:bd:b1:7f:19:87:3e:
         65:f1:12:91:18:ed:2f:0d:a9:27:68:d9:d2:2f:34:75:17:34:
         f4:b7:4d:e3:cb:c3:f8:0c:ec:50:05:94:01:94:61:da:d6:44:
         c2:aa:c7:ab:6b:6d:68:29:38:e1:a6:61:f0:8b:4f:e8:11:9b:
         e9:b9:18:86:e6:af:b0:d6:97:e3:9c:e5:59:72:b0:bc:d3:b1:
         2f:f2:a0:47:2b:7a:da:7c:9c:a4:a7:9b:c8:b9:77:19:9d:7c:
         73:4f:9a:77:28:32:4e:3b:a6:98:1b:44:36:94:96:dc:14:63:
         82:4f:42:84:cd:0f:bf:11:ef:c6:b4:00:85:da:27:0c:6f:8a:
         c8:c6:ac:cd:56:f8:55:46:40:9b:31:7d:82:72:e2:85:5b:fc:
         43:ef:b2:89:39:53:b5:31:f2:f9:d8:99:8e:ac:47:9e:d6:66:
         5a:44:eb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:14:36 2026 by rpki-client