Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
File:                     tjC3O1HLxTgN1K2z1ar_TXozTF4.mft (raw, json)
Hash identifier:          hvHTeZ4u3fRQ1w8Cq7GeM7u1BZ5fiQahyGBr66DuYng=
Subject key identifier:   7C:40:A0:84:2D:1D:5B:33:65:BD:AB:56:A9:80:77:F2:B6:B3:00:9F
Authority key identifier: B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E
Certificate issuer:       /CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
Certificate serial:       019CC93ED94AF77B0354EEB8C679C7DF03C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
Manifest number:          1864
Signing time:             Sat 07 Mar 2026 17:01:04 +0000
Manifest this update:     Sat 07 Mar 2026 17:01:04 +0000
Manifest next update:     Sun 08 Mar 2026 17:01:04 +0000
Files and hashes:         1: tjC3O1HLxTgN1K2z1ar_TXozTF4.crl (hash: lTw4upbnm8Ay+gz7AvwLRI3DuMZtIGURhSkMP1QyWWk=)
                          2: xE2y3RI3nuzZANWmX6fxwf9bkMg.roa (hash: SegO1prKKRLU/fQqPq9kWO/VrlLtICljHXGoFYxWh5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 17:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c9:3e:d9:4a:f7:7b:03:54:ee:b8:c6:79:c7:df:03:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
        Validity
            Not Before: Mar  7 17:01:04 2026 GMT
            Not After : Mar  8 17:01:04 2026 GMT
        Subject: CN=7c40a0842d1d5b3365bdab56a98077f2b6b3009f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a4:dd:1f:d7:de:99:ba:c7:76:ba:54:26:1c:
                    f1:cd:54:d5:d0:84:d1:c4:a0:97:89:7c:ac:11:96:
                    5a:a3:40:8a:5e:21:1d:31:a6:6b:b1:0e:fe:82:c2:
                    24:66:1d:2c:45:f6:33:72:9b:a6:fa:8e:c3:88:08:
                    82:1c:3c:b4:d7:ff:8d:12:d9:58:29:a6:46:10:c5:
                    e7:0a:28:21:3a:ef:19:a7:56:42:cb:85:95:88:26:
                    74:a3:19:1d:e5:5b:e6:f5:26:fb:9e:16:95:5f:64:
                    1f:cb:ae:60:c0:05:54:bf:5c:b1:31:d9:ed:c3:6c:
                    6e:75:26:15:83:50:ff:cd:13:5c:8d:4d:05:2b:b9:
                    00:c7:4e:a1:df:5a:d7:57:4b:43:46:04:56:2e:93:
                    79:ff:64:65:4f:63:c4:3d:f0:74:de:2b:ac:28:d1:
                    13:0d:1f:cf:48:06:68:9f:9d:3e:1b:6f:31:43:4a:
                    7d:29:39:66:4d:cf:b7:12:1a:23:8b:9a:bd:a5:ec:
                    1e:5e:d6:16:c2:15:8d:61:93:fc:7e:a4:a7:6d:33:
                    8e:60:98:80:94:f7:be:49:c8:78:07:59:47:53:55:
                    b9:79:22:13:d2:74:eb:2d:d0:ad:b7:41:6c:5e:fc:
                    dd:f4:51:5d:1a:9c:6b:8e:94:6f:7b:fa:9a:3f:a7:
                    f7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:40:A0:84:2D:1D:5B:33:65:BD:AB:56:A9:80:77:F2:B6:B3:00:9F
            X509v3 Authority Key Identifier:
                keyid:B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:33:c1:51:b5:9e:14:da:06:60:48:94:b1:cf:50:01:dc:ef:
         59:4e:3f:52:74:17:a4:48:52:56:2c:bd:43:82:4f:8d:fc:5a:
         8f:ac:09:1c:2c:51:ce:eb:d3:fa:52:75:65:a0:e3:6d:88:a3:
         92:8b:6d:bd:01:3a:0b:07:80:35:65:b8:02:7e:0c:ab:95:fc:
         4c:64:4f:6c:7e:3b:56:2a:bf:01:58:45:3a:04:13:8a:84:c1:
         20:e1:32:2b:7d:4b:7f:c6:dc:24:f6:8c:6f:98:c8:1a:e4:a9:
         cd:5e:bc:b6:d2:6c:d8:35:5a:30:94:23:26:48:d7:34:3f:a3:
         45:b7:73:d4:9b:c1:4c:53:f7:8b:ed:18:eb:35:e6:8a:7b:5a:
         be:f2:1b:86:69:78:bf:07:f1:29:4b:d2:34:1b:28:70:cc:6f:
         33:bc:dc:46:54:8e:2f:fc:09:30:a2:6a:c0:aa:39:cf:3e:b0:
         a1:fe:cb:bc:f8:79:7c:b5:0f:19:3d:90:c7:86:e7:6e:c2:e5:
         7b:e2:0d:35:7b:5c:a5:42:b7:dd:54:27:cb:45:bd:46:6b:66:
         15:02:e9:2d:ea:24:2d:7a:f6:9f:71:ea:66:bf:dd:6f:01:f4:
         00:bb:31:f4:62:12:c7:20:3b:56:15:f7:14:af:21:89:12:63:
         ef:fa:6d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 01:37:18 2026 by rpki-client