Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
File:                     TJETJOhpvEyl7IutDT3f9oVEGXk.mft (raw, json)
Hash identifier:          xnHz5sjQvYFePVHG/5IOsA2YyTAUalkHPNYLuAgnMuw=
Subject key identifier:   EE:DB:CD:47:2C:02:A8:65:9E:F8:8A:C9:2B:D3:C5:BE:8C:32:8A:85
Authority key identifier: 4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
Certificate issuer:       /CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
Certificate serial:       019CB7DDC964D8EB78400495706C59DEF049
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
Manifest number:          1853
Signing time:             Wed 04 Mar 2026 08:01:31 +0000
Manifest this update:     Wed 04 Mar 2026 08:01:31 +0000
Manifest next update:     Thu 05 Mar 2026 08:01:31 +0000
Files and hashes:         1: DfRI4dovSnMSIcVz_GFD0L7vBIw.roa (hash: kG8QsSLcBHIkntfvUqxfKD4RZMhBctOildhkIA33eIw=)
                          2: TJETJOhpvEyl7IutDT3f9oVEGXk.crl (hash: u7uWIUI1e71dpW0inV6ToIPM83pY9o2/vBxpHHahRmc=)
                          3: hG7korJHdX3J-VQRQpsautEAs5k.roa (hash: Iemgb9cSM4wP9xZ65kMEtq49P3Moq93S8ieRnN38Nu4=)
                          4: oE6QS3Q6uaxGz3Cm7YOOUEm6M9s.roa (hash: gHUoKUVYSCToS8vVN5V7q87OQVYzxsOvUwmEfqESOxI=)
                          5: qSNYJ-9hvnj2oMFvdiXLbxjhOwk.roa (hash: bfBTAvujo01mv5S6EOQahz4Gss8vRe5ZhsQN9X0Csy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Mar 2026 08:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b7:dd:c9:64:d8:eb:78:40:04:95:70:6c:59:de:f0:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
        Validity
            Not Before: Mar  4 08:01:31 2026 GMT
            Not After : Mar  5 08:01:31 2026 GMT
        Subject: CN=eedbcd472c02a8659ef88ac92bd3c5be8c328a85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9a:08:29:cd:53:e4:49:d0:0a:68:e7:ed:c7:
                    e0:16:d6:ab:00:3f:f3:47:74:96:e5:a3:94:72:83:
                    ec:b6:2a:7d:6f:2b:6f:9e:65:68:01:75:99:19:fb:
                    6b:35:7e:22:96:6d:c9:f1:69:6a:7c:2b:d3:50:69:
                    90:66:ef:fe:e4:63:fb:d9:70:c3:74:4d:64:58:1c:
                    a2:35:4e:5c:15:fd:9a:a5:4a:fd:c6:b4:42:aa:62:
                    03:f0:42:ae:5d:9f:fc:71:d3:a0:eb:0d:6e:4c:34:
                    6e:79:46:5a:2a:bc:d3:30:64:b2:7a:e5:f7:a5:e6:
                    a4:3f:2e:b9:21:3f:eb:a4:d4:63:90:d1:20:0c:dc:
                    6c:c6:ee:fd:7d:97:0d:8a:d8:12:ce:0d:66:e5:0b:
                    0b:8a:f8:87:70:1f:1c:bc:58:bd:41:22:51:83:53:
                    65:70:ef:31:77:4a:df:c2:51:17:e0:03:d8:a3:2f:
                    88:e3:63:55:01:3c:f9:e2:4f:3f:dc:5c:0a:39:83:
                    57:5e:a6:01:13:4a:b1:70:33:8d:87:ea:51:d8:e1:
                    aa:03:20:c9:e1:7d:b9:c7:96:ff:fe:11:a4:36:a4:
                    37:35:f7:07:fd:2e:7f:1d:da:54:b1:0b:18:32:63:
                    ae:18:08:98:90:da:d8:6c:8a:51:a7:5b:06:dd:b6:
                    f9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:DB:CD:47:2C:02:A8:65:9E:F8:8A:C9:2B:D3:C5:BE:8C:32:8A:85
            X509v3 Authority Key Identifier:
                keyid:4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:92:ff:08:ce:c5:b5:14:9a:9b:75:8b:ef:48:90:50:09:34:
         29:5f:93:1d:2f:ca:87:52:f2:13:81:aa:f4:2a:c3:6c:77:b5:
         4c:12:83:2a:0f:f2:52:d4:c8:0f:d1:8e:1a:f6:2c:0b:ba:72:
         66:36:42:25:b3:46:9c:2c:78:d5:45:92:2e:1c:36:57:70:d8:
         42:d1:1e:a0:de:92:b4:ce:f2:86:2a:c3:03:d6:b3:ba:91:67:
         d2:d7:f9:8b:c2:8c:6c:da:8c:d9:d1:d1:0b:44:16:a3:c9:97:
         f4:3d:51:84:dd:55:62:01:da:93:f2:98:d5:cd:ef:e3:cb:59:
         e9:fa:1b:cd:76:5c:52:4b:c3:e3:b9:4e:b0:af:bd:e6:60:16:
         bc:f6:9b:8a:6a:0b:52:8b:4c:e6:23:37:00:9b:96:1d:e9:bc:
         a8:04:e7:f7:9e:8e:f4:6a:bd:e4:5f:d0:7a:52:3c:cf:4d:fd:
         a1:b9:59:49:3b:6f:eb:71:8a:98:93:c8:f0:24:72:80:ae:db:
         4f:6c:3d:6b:ca:77:e6:44:83:05:66:da:b9:bd:92:26:b0:2e:
         ab:6e:36:ef:8b:33:9a:ff:ae:ea:df:30:5b:37:c0:8a:ef:a0:
         da:eb:e7:ca:16:d8:31:e1:ba:6b:a8:47:0a:0b:c6:d5:52:fc:
         aa:56:66:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 16:05:44 2026 by rpki-client