Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
File:                     tcR4e4CrSAGrYrG9v7KOBtMM32o.mft (raw, json)
Hash identifier:          v9ZJKMDualm44YSZAFhe9PhdL1zifYcqh5wU1MNxUag=
Subject key identifier:   F8:C9:3F:78:1F:48:C7:AC:78:9A:69:A3:6E:EA:57:BF:12:CF:26:A9
Authority key identifier: B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A
Certificate issuer:       /CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a
Certificate serial:       019FC55A8FC6574519EA11DA281AC4C48D66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
Manifest number:          083D
Signing time:             Mon 03 Aug 2026 02:01:14 +0000
Manifest this update:     Mon 03 Aug 2026 02:01:14 +0000
Manifest next update:     Tue 04 Aug 2026 02:01:14 +0000
Files and hashes:         1: q-r2zDjO2sGmoc9QswQFQyhASW8.roa (hash: RdehwxnZtuAfNN5Ll+yv9MNFac3Y26/8VjA+iUeTNWw=)
                          2: tcR4e4CrSAGrYrG9v7KOBtMM32o.crl (hash: 7lMbwNG1YIwoEP/qWSNfZqa3PmbcGst6uk3FbMffTgc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Aug 2026 22:36:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:c5:5a:8f:c6:57:45:19:ea:11:da:28:1a:c4:c4:8d:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a
        Validity
            Not Before: Aug  3 02:01:14 2026 GMT
            Not After : Aug  4 02:01:14 2026 GMT
        Subject: CN=f8c93f781f48c7ac789a69a36eea57bf12cf26a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ab:2b:5d:b7:d9:39:44:4e:d7:7c:1c:ee:77:
                    d8:b5:d4:64:f5:22:98:1e:c7:80:71:b9:a7:e7:0d:
                    eb:80:34:b8:ab:f4:fa:98:63:fa:8f:15:d8:5c:b5:
                    93:24:0b:28:93:7a:87:e9:d2:5c:91:f4:45:64:05:
                    de:da:16:fc:01:df:ab:95:fa:c3:d1:db:6b:8f:e2:
                    2a:38:c3:d5:8e:5c:fa:e7:99:9e:dd:86:e7:6c:f2:
                    56:30:ee:42:03:eb:bc:7b:51:25:b1:27:b0:05:81:
                    48:6b:08:7e:d9:44:d6:be:b3:e7:fd:02:39:61:98:
                    80:32:1d:d6:38:aa:59:78:a7:67:ab:95:c5:e0:1a:
                    fa:95:25:74:d8:2b:75:b7:bd:bb:78:10:32:6c:23:
                    90:6f:5d:ce:b4:12:b5:60:17:c5:65:59:6d:8e:64:
                    a3:66:39:39:e6:8a:2b:6e:bc:fe:38:f4:8d:8a:b3:
                    9b:31:67:49:3c:39:3b:17:f2:27:e9:ec:b8:7e:c5:
                    60:5c:39:67:5a:24:02:67:3f:14:92:b3:5d:e3:75:
                    2f:c2:1b:42:92:ae:66:34:73:f3:8e:ca:7f:c1:5c:
                    9f:fc:22:85:06:33:9a:fd:c2:ea:f9:49:13:56:b7:
                    ca:de:d7:56:d7:70:c2:fd:9d:d8:bd:b6:0f:a8:84:
                    bd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:C9:3F:78:1F:48:C7:AC:78:9A:69:A3:6E:EA:57:BF:12:CF:26:A9
            X509v3 Authority Key Identifier:
                keyid:B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:19:f6:ad:66:f5:9d:3b:45:99:e4:03:2b:97:57:09:5a:08:
         6c:22:c7:d1:1f:54:70:d0:67:02:7d:7b:e5:79:9a:49:ba:c3:
         98:a9:05:d3:8c:17:0e:45:59:eb:8a:08:59:f1:80:b0:64:69:
         57:a8:40:9a:47:3b:d1:03:be:5b:a9:b4:35:ad:b0:2e:54:2e:
         14:29:a9:4d:ec:fb:a2:33:86:92:ce:7e:84:99:cc:8a:0c:1d:
         ae:cd:0c:79:5e:f8:7b:e8:d5:1b:89:1b:e7:14:70:61:b8:2f:
         b1:ce:19:28:cd:38:ee:fc:30:9b:7b:2a:ad:2f:73:4f:fd:18:
         6c:4a:bb:c7:c8:2a:5e:00:ce:f4:20:ff:1b:15:f6:7a:a4:8c:
         29:1c:96:f1:a7:0e:9d:5e:be:65:d9:44:da:d7:0d:e2:49:95:
         1c:11:85:2b:ce:bb:06:f7:0b:11:0b:3d:e0:13:a5:32:2f:31:
         97:c5:b0:f2:d0:de:36:d4:48:98:a6:ca:8d:b7:fe:2b:60:05:
         c3:ed:38:dd:60:b5:45:d6:24:bf:5a:cb:5e:8d:c7:4d:25:2a:
         bd:06:fa:d4:e9:36:48:52:f6:83:99:42:81:26:15:d3:e1:01:
         03:ca:40:35:93:66:dc:0f:94:b5:b0:57:93:1b:53:57:3c:95:
         87:a6:c9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 04:22:51 2026 by rpki-client