Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
File:                     TtaClltaFeoMReqF7z20vnFnlpY.mft (raw, json)
Hash identifier:          9Z8NsFqP3fx5gciswkutQijwmzUOfhSdBDzh382sNaU=
Subject key identifier:   3F:BF:DD:ED:C1:33:94:5C:8D:89:70:A9:55:E2:B2:E3:A9:D0:11:CE
Authority key identifier: 4E:D6:82:96:5B:5A:15:EA:0C:45:EA:85:EF:3D:B4:BE:71:67:96:96
Certificate issuer:       /CN=4ed682965b5a15ea0c45ea85ef3db4be71679696
Certificate serial:       019D3977A32E2F17039738B802E6E7E08A12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
Manifest number:          06B7
Signing time:             Sun 29 Mar 2026 12:00:34 +0000
Manifest this update:     Sun 29 Mar 2026 12:00:34 +0000
Manifest next update:     Mon 30 Mar 2026 12:00:34 +0000
Files and hashes:         1: TtaClltaFeoMReqF7z20vnFnlpY.crl (hash: XiyBSqLRRhAAJeHRgLdPF7WNGsyt/kHtL5v0nKdO3dg=)
                          2: ccAwFuFoEVY4ZVDtB4ez7EOrJHw.roa (hash: fjcffrvIzn+8rVbXn0+XNf1+negR6a3bRf3n/jGpSFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 12:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:77:a3:2e:2f:17:03:97:38:b8:02:e6:e7:e0:8a:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ed682965b5a15ea0c45ea85ef3db4be71679696
        Validity
            Not Before: Mar 29 12:00:34 2026 GMT
            Not After : Mar 30 12:00:34 2026 GMT
        Subject: CN=3fbfddedc133945c8d8970a955e2b2e3a9d011ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d2:c3:86:9f:f4:7a:c3:2d:fb:6d:da:3a:e7:
                    a6:2d:6c:4a:cb:e3:a6:1a:9e:69:b5:1c:46:44:50:
                    e0:ad:cc:f9:41:9e:cd:4a:4f:9c:09:94:d7:f3:ed:
                    04:1b:22:76:65:26:ad:d8:87:14:6c:7b:33:8e:06:
                    6c:ef:8a:f5:27:d4:e1:5d:dc:c1:af:cf:34:8f:e6:
                    a2:9f:66:2a:00:a9:eb:d3:a4:d8:29:61:a3:1a:f1:
                    9d:21:ac:6c:69:b3:f4:ab:fc:9a:08:84:e6:1e:27:
                    51:60:79:07:4c:d4:ee:05:fe:b7:40:d3:a5:6d:18:
                    27:12:db:02:43:18:a5:2e:4c:ed:30:c0:44:83:36:
                    47:3e:e6:e4:79:51:4f:a1:38:6c:1e:2d:91:a5:03:
                    ef:74:04:ec:92:c3:8c:23:b0:92:77:df:25:75:26:
                    f2:34:e0:0a:4c:77:1b:4d:da:2f:58:9c:2d:f9:ca:
                    0c:4c:8a:cb:6f:2d:0e:5d:2c:30:da:95:ca:56:c8:
                    1d:e3:3c:8f:47:d6:46:c5:27:11:9b:64:54:09:57:
                    da:12:d9:15:27:6b:4a:2c:ce:fe:49:19:bc:9f:11:
                    0d:88:51:87:6e:4d:4c:90:f1:33:50:dd:b7:66:cc:
                    ab:c4:85:f4:a9:4b:3c:c7:7b:40:bb:2f:e9:bf:f0:
                    e1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:BF:DD:ED:C1:33:94:5C:8D:89:70:A9:55:E2:B2:E3:A9:D0:11:CE
            X509v3 Authority Key Identifier:
                keyid:4E:D6:82:96:5B:5A:15:EA:0C:45:EA:85:EF:3D:B4:BE:71:67:96:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:29:62:5c:17:e7:31:35:53:48:ca:d4:70:57:71:51:7a:0b:
         76:6a:a8:57:be:09:ba:69:ec:71:9e:5f:74:7a:6b:53:98:36:
         a6:ef:25:f6:f1:53:93:90:a8:e7:24:ca:3a:47:2e:fc:2e:00:
         e3:a6:19:d7:44:0a:cd:44:3e:b9:ef:40:59:8e:27:ac:be:57:
         86:49:40:64:ef:62:d3:e8:99:6b:10:7a:f8:c0:0b:a6:ee:63:
         95:f9:6a:53:d3:7f:22:67:51:37:ca:91:8a:78:82:e6:b9:9e:
         3e:68:25:c4:75:9d:6e:dd:c1:ea:b0:7e:0a:a6:1c:50:b9:73:
         a4:0e:a9:87:ed:d3:ce:8e:25:0f:43:72:d4:f3:e5:23:5e:37:
         d2:b7:03:76:10:26:06:b3:93:72:13:c6:39:38:17:8d:24:14:
         53:47:35:3e:65:94:06:65:7b:d7:9c:f8:a9:5b:c8:bb:44:bb:
         37:bf:47:1d:da:58:79:dc:48:05:33:d5:b1:58:66:ee:16:66:
         5d:ab:16:b1:7e:ba:80:64:9a:3b:41:79:45:36:1c:b6:16:fc:
         63:f0:fb:11:7f:90:d1:fe:fe:ba:d5:f4:7f:7d:39:62:20:a2:
         04:f7:f2:e1:6c:cd:80:5a:51:4b:2d:ba:da:9d:e4:ea:61:c3:
         22:b9:b4:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d6MuLxcDlzi4Aubn4IoSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZDY4Mjk2NWI1YTE1ZWEwYzQ1ZWE4NWVmM2RiNGJlNzE2
Nzk2OTYwHhcNMjYwMzI5MTIwMDM0WhcNMjYwMzMwMTIwMDM0WjAzMTEwLwYDVQQD
EygzZmJmZGRlZGMxMzM5NDVjOGQ4OTcwYTk1NWUyYjJlM2E5ZDAxMWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tLDhp/0esMt+23aOuemLWxKy+Om
Gp5ptRxGRFDgrcz5QZ7NSk+cCZTX8+0EGyJ2ZSat2IcUbHszjgZs74r1J9ThXdzB
r880j+ain2YqAKnr06TYKWGjGvGdIaxsabP0q/yaCITmHidRYHkHTNTuBf63QNOl
bRgnEtsCQxilLkztMMBEgzZHPubkeVFPoThsHi2RpQPvdATsksOMI7CSd98ldSby
NOAKTHcbTdovWJwt+coMTIrLby0OXSww2pXKVsgd4zyPR9ZGxScRm2RUCVfaEtkV
J2tKLM7+SRm8nxENiFGHbk1MkPEzUN23ZsyrxIX0qUs8x3tAuy/pv/DhawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+/3e3BM5RcjYlwqVXisuOp0BHOMB8GA1UdIwQY
MBaAFE7WgpZbWhXqDEXqhe89tL5xZ5aWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHRhQ2xsdGFGZW9NUmVxRjd6MjB2bkZubHBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zZTQwMWItNjRjMS00MWFhLTk4ZGYt
MTMzZTdlNmY2MDY5LzEvVHRhQ2xsdGFGZW9NUmVxRjd6MjB2bkZubHBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8zZTQwMWItNjRjMS00MWFhLTk4ZGYtMTMzZTdlNmY2MDY5
LzEvVHRhQ2xsdGFGZW9NUmVxRjd6MjB2bkZubHBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoiliXBfn
MTVTSMrUcFdxUXoLdmqoV74JumnscZ5fdHprU5g2pu8l9vFTk5Co5yTKOkcu/C4A
46YZ10QKzUQ+ue9AWY4nrL5XhklAZO9i0+iZaxB6+MALpu5jlflqU9N/ImdRN8qR
iniC5rmePmglxHWdbt3B6rB+CqYcULlzpA6ph+3Tzo4lD0Ny1PPlI1430rcDdhAm
BrOTchPGOTgXjSQUU0c1PmWUBmV715z4qVvIu0S7N79HHdpYedxIBTPVsVhm7hZm
XasWsX66gGSaO0F5RTYcthb8Y/D7EX+Q0f7+utX0f305YiCiBPfy4WzNgFpRSy26
2p3k6mHDIrm0SQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:45:16 2026 by rpki-client