Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.mft
File:                     TTR1C-IXPLmwhqd8bepUtKhGmvM.mft (raw, json)
Hash identifier:          Ugu19Ofh/nqfxnsGk57IE4cec52O0G9/KfJki+g40FU=
Subject key identifier:   B4:D9:09:69:64:D2:4C:BA:DC:65:DE:B0:DA:75:11:64:47:A5:09:16
Authority key identifier: 4D:34:75:0B:E2:17:3C:B9:B0:86:A7:7C:6D:EA:54:B4:A8:46:9A:F3
Certificate issuer:       /CN=4d34750be2173cb9b086a77c6dea54b4a8469af3
Certificate serial:       019D3A53FA6A6DB951C467B60265D288EC81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TTR1C-IXPLmwhqd8bepUtKhGmvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.mft
Manifest number:          0C04
Signing time:             Sun 29 Mar 2026 16:01:15 +0000
Manifest this update:     Sun 29 Mar 2026 16:01:15 +0000
Manifest next update:     Mon 30 Mar 2026 16:01:15 +0000
Files and hashes:         1: TTR1C-IXPLmwhqd8bepUtKhGmvM.crl (hash: JC5mY+RzKaE79RlRfagGQW0f5+PmnuWGYzrr0zwdwBc=)
                          2: uhEEKQpm0Q9TvpFR2U11BjNqxM8.roa (hash: Dq7YREG0s4cS8g2gjkqTRWbO1QsL7h+aN90fU6Kia14=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TTR1C-IXPLmwhqd8bepUtKhGmvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:53:fa:6a:6d:b9:51:c4:67:b6:02:65:d2:88:ec:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d34750be2173cb9b086a77c6dea54b4a8469af3
        Validity
            Not Before: Mar 29 16:01:15 2026 GMT
            Not After : Mar 30 16:01:15 2026 GMT
        Subject: CN=b4d9096964d24cbadc65deb0da75116447a50916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4f:14:09:94:3e:91:b8:0a:9b:a5:41:44:01:
                    b3:24:1f:67:36:9e:49:10:f6:f5:2b:62:b0:6f:38:
                    2f:71:94:d5:8b:6b:d6:60:1f:88:1b:0b:0f:f1:e6:
                    eb:65:fd:e6:56:9c:dc:57:40:d2:4c:8b:d8:b3:f8:
                    7d:7d:b0:73:9a:f5:d7:07:98:c8:8f:20:82:2e:6e:
                    bd:d0:59:f8:37:d9:e7:f7:2c:7e:49:45:3e:75:02:
                    3c:28:e6:56:5c:26:1e:f2:a4:64:74:e3:ab:58:16:
                    a1:27:9e:cb:e7:9e:ae:3d:1e:bd:d7:ae:67:8d:02:
                    51:ab:6b:c0:b0:4b:b7:aa:aa:b0:d3:a8:42:b5:a0:
                    0e:07:35:dd:09:ea:55:1d:1d:43:e4:3e:3d:0d:9c:
                    55:be:a8:d6:e9:26:1d:0f:95:e2:09:60:32:34:88:
                    de:ef:8c:27:4b:45:32:6a:de:6d:57:44:a1:98:fb:
                    2a:9f:34:ef:92:79:38:b9:0b:c3:ca:dd:33:14:1d:
                    19:30:05:8d:47:2c:3b:74:d3:4d:1b:c5:b5:57:06:
                    1d:62:a3:54:0c:f2:2b:41:1d:8c:b6:7f:06:39:41:
                    ef:fc:d6:c5:bf:c9:96:2d:19:46:18:a9:5c:a4:8c:
                    07:1a:0c:0d:f0:87:d0:8e:1f:c0:3a:d5:28:c9:08:
                    41:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D9:09:69:64:D2:4C:BA:DC:65:DE:B0:DA:75:11:64:47:A5:09:16
            X509v3 Authority Key Identifier:
                keyid:4D:34:75:0B:E2:17:3C:B9:B0:86:A7:7C:6D:EA:54:B4:A8:46:9A:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTR1C-IXPLmwhqd8bepUtKhGmvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:6a:b7:87:23:01:d7:94:2d:f0:8f:ff:3c:ab:88:27:84:e4:
         47:24:ba:4e:82:61:cd:25:14:93:f9:e3:8b:dd:b3:03:84:a3:
         02:66:ae:fb:8d:1b:a1:8d:78:3a:fb:fb:8a:5e:2c:fc:40:7f:
         e3:15:cd:a6:d8:c3:7d:4f:8a:7c:4e:7f:04:8c:04:f1:86:72:
         2a:aa:34:6d:ce:da:b2:53:bf:35:d2:27:99:09:40:0e:ce:ae:
         70:72:82:e0:49:af:2b:04:f5:ff:43:b4:95:99:a4:f3:81:56:
         a3:d1:9d:ba:8c:fa:38:27:6b:49:17:fc:1c:df:1a:16:7e:90:
         1a:1e:a5:7e:63:75:b3:14:67:71:75:7b:8f:ee:b4:a6:b3:e6:
         de:a6:f1:4b:f7:3f:7e:d1:89:05:93:27:6c:40:80:0b:0b:e9:
         2c:33:c6:75:db:27:b3:8c:a8:bb:57:99:ad:c9:d9:46:06:30:
         4f:16:62:da:7f:64:a7:44:40:76:d7:92:59:14:30:75:10:d3:
         35:94:05:f2:3f:ae:27:e0:2f:46:c2:e5:1c:7f:e2:49:0a:39:
         28:5b:c1:af:0a:19:08:51:21:39:a7:ff:a0:20:87:ec:a8:a4:
         de:18:eb:61:d7:ac:10:52:15:7b:77:b2:44:ef:3e:4b:d3:38:
         62:07:8a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:23:21 2026 by rpki-client