Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft
File:                     tUXkNLukc3BtqDNv2gFrsuaLNiM.mft (raw, json)
Hash identifier:          tN2dq7WBWDyW2Lef1i0yTB64nJGXhVa+L0sgIJwh8G8=
Subject key identifier:   94:71:04:CE:FF:1C:43:4A:64:30:79:A1:71:04:5B:E0:5F:F1:84:F6
Authority key identifier: B5:45:E4:34:BB:A4:73:70:6D:A8:33:6F:DA:01:6B:B2:E6:8B:36:23
Certificate issuer:       /CN=b545e434bba473706da8336fda016bb2e68b3623
Certificate serial:       01A08AC36555C0AEC333B41AAC552BA88489
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tUXkNLukc3BtqDNv2gFrsuaLNiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft
Manifest number:          1A48
Signing time:             Thu 10 Sep 2026 10:00:56 +0000
Manifest this update:     Thu 10 Sep 2026 10:00:56 +0000
Manifest next update:     Fri 11 Sep 2026 10:00:56 +0000
Files and hashes:         1: tUXkNLukc3BtqDNv2gFrsuaLNiM.crl (hash: TMDEBzNgyJgUa2xZUA/ENp4x4BBfuBfNlXMw4dn2rho=)
                          2: wkBVr3VKx8cAN-J4mgwDM9fyDIw.roa (hash: pXEfo0mUUpTRtyfYgZ5QmNahxpHjcAC/DZR0RKo1OaY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tUXkNLukc3BtqDNv2gFrsuaLNiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 10:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:c3:65:55:c0:ae:c3:33:b4:1a:ac:55:2b:a8:84:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b545e434bba473706da8336fda016bb2e68b3623
        Validity
            Not Before: Sep 10 10:00:56 2026 GMT
            Not After : Sep 11 10:00:56 2026 GMT
        Subject: CN=947104ceff1c434a643079a171045be05ff184f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c5:5f:6b:55:4d:11:05:3a:fe:d1:64:37:3b:
                    51:9c:19:c7:96:43:62:84:89:59:42:7f:29:24:55:
                    71:ef:d5:34:97:06:cd:28:e1:a5:36:48:2d:fd:e5:
                    b1:c2:f9:bf:b8:69:02:9e:36:0d:6b:d7:ee:49:d0:
                    50:57:e7:08:fd:56:fe:e0:22:fe:39:a4:6b:59:e8:
                    82:8e:63:22:4b:a7:e4:9b:d6:a9:af:34:34:26:45:
                    f6:64:e3:56:1f:ff:ec:ef:99:4a:9c:1a:37:e6:9e:
                    14:c7:05:b7:35:87:41:11:ce:f4:3c:22:f7:67:61:
                    a4:b4:97:bc:c7:72:16:65:92:0b:1d:69:1c:fa:c4:
                    f5:0c:43:3b:2c:53:c8:8d:ac:7e:dc:66:62:8a:8c:
                    ce:f2:26:2b:be:e7:0d:d8:9f:4d:e6:14:b8:eb:5a:
                    18:7c:16:e1:18:07:36:4e:a9:df:83:31:04:d2:cc:
                    6b:48:b4:0b:b9:45:6d:6d:54:ed:f2:9b:d2:2e:88:
                    87:b9:d3:15:f0:c4:90:75:0d:be:0f:b5:66:76:79:
                    4b:8e:7a:57:f1:85:43:e2:e3:96:63:59:14:02:df:
                    42:f3:c8:c4:a8:61:78:f0:e6:39:38:3a:18:b6:46:
                    f4:71:55:e0:32:fa:ed:04:42:34:d2:0b:aa:cb:9e:
                    1b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:71:04:CE:FF:1C:43:4A:64:30:79:A1:71:04:5B:E0:5F:F1:84:F6
            X509v3 Authority Key Identifier:
                keyid:B5:45:E4:34:BB:A4:73:70:6D:A8:33:6F:DA:01:6B:B2:E6:8B:36:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUXkNLukc3BtqDNv2gFrsuaLNiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:b8:e7:a6:75:02:66:ac:18:80:23:44:66:12:a8:24:b4:d3:
         2d:d5:90:63:32:44:ac:df:80:af:37:6c:e2:7c:ee:ad:11:af:
         16:60:97:cc:5e:1a:25:de:39:26:93:29:aa:58:fb:5e:f5:be:
         4f:bb:55:5d:ac:63:af:8f:b5:c8:50:06:61:6d:a3:75:6b:e4:
         d3:79:35:1d:40:07:4b:bb:05:e5:7c:35:98:c5:25:d8:18:eb:
         e1:8b:6e:ef:f9:e9:e9:bb:b1:7f:7d:b0:4a:d4:ae:63:28:31:
         f4:a5:bb:55:66:ca:34:8a:42:88:33:f0:65:a5:89:19:c3:ae:
         92:b6:5b:b5:03:78:0a:7d:1f:ba:1b:6b:4b:fb:69:b0:64:19:
         fe:67:93:96:4a:0d:84:6f:2f:57:bf:24:76:f3:de:e4:d5:a4:
         5e:f6:1a:13:37:13:49:66:19:c0:76:17:cc:de:0a:bd:4b:73:
         0e:11:c5:5d:07:29:77:86:f5:38:01:c5:05:20:e3:c0:a1:87:
         58:5e:7d:0c:c3:5a:be:16:aa:aa:5d:42:37:0d:e6:d6:d3:99:
         fe:a6:fb:3e:dd:6b:13:ec:d8:f0:d5:8e:ca:0e:81:5a:df:99:
         c9:ad:1f:48:a9:8c:bf:3b:85:03:68:c6:34:23:aa:38:99:b7:
         10:70:e7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:14:28 2026 by rpki-client