Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft
File:                     TlqjjuoyTivXq2Qn51lqn6QdsOM.mft (raw, json)
Hash identifier:          HPvbO0lQhbGNe5ERQBFlUWnqImwEwGOA+eOpNt3x4TA=
Subject key identifier:   CC:E6:E5:44:72:80:69:71:43:92:EC:5E:75:91:E6:35:76:15:19:EB
Authority key identifier: 4E:5A:A3:8E:EA:32:4E:2B:D7:AB:64:27:E7:59:6A:9F:A4:1D:B0:E3
Certificate issuer:       /CN=4e5aa38eea324e2bd7ab6427e7596a9fa41db0e3
Certificate serial:       019D37C1200CAAE61F05C438E050430A6393
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TlqjjuoyTivXq2Qn51lqn6QdsOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft
Manifest number:          1893
Signing time:             Sun 29 Mar 2026 04:01:36 +0000
Manifest this update:     Sun 29 Mar 2026 04:01:36 +0000
Manifest next update:     Mon 30 Mar 2026 04:01:36 +0000
Files and hashes:         1: TlqjjuoyTivXq2Qn51lqn6QdsOM.crl (hash: ETyRgfln+auibgjg/L2HmHYpw/V4ZmpRmG2ybOD1P8k=)
                          2: pFIm_tXx1_Q7aLzLZyGzh6liU0E.roa (hash: 167B7I1VfPre9EHJG3x87zKw2fq6pm8HbBnX2xQN/R0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TlqjjuoyTivXq2Qn51lqn6QdsOM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c1:20:0c:aa:e6:1f:05:c4:38:e0:50:43:0a:63:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e5aa38eea324e2bd7ab6427e7596a9fa41db0e3
        Validity
            Not Before: Mar 29 04:01:36 2026 GMT
            Not After : Mar 30 04:01:36 2026 GMT
        Subject: CN=cce6e544728069714392ec5e7591e635761519eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c7:75:82:0e:c0:0e:c3:52:9f:bb:0d:46:ce:
                    a0:00:1c:b2:cc:b2:1a:cf:ca:c6:70:56:6d:2a:f9:
                    ff:e9:72:86:65:e7:76:4d:f8:82:66:e7:24:63:26:
                    1c:d2:cc:d9:71:30:9f:54:53:45:3b:d2:cd:fe:cf:
                    69:6b:32:08:35:e0:bb:f1:5b:15:fd:7e:c5:d5:bb:
                    b7:40:4a:ab:89:39:0a:ea:8c:a1:de:1e:ba:1c:4d:
                    7c:ad:92:69:f6:af:d4:07:83:9a:6d:6b:5e:6c:6d:
                    a5:42:06:c8:14:a6:16:7d:ec:89:b4:9b:6c:06:7b:
                    c0:f6:af:15:c5:d4:e4:fe:3a:7e:b1:26:70:05:6c:
                    f3:1c:e0:39:56:14:09:33:75:c4:64:56:87:47:f5:
                    0a:de:b7:d2:56:4f:7d:b7:ed:8e:3e:44:5c:77:e1:
                    ac:b0:46:96:59:52:14:18:ad:2b:a0:d4:56:27:0c:
                    c0:fd:db:56:39:f9:77:bd:6b:dd:3d:68:6c:47:03:
                    30:ae:e9:39:e1:1c:f0:03:ea:6a:c6:f0:81:f7:24:
                    81:51:a0:82:b6:64:7c:2a:c7:4e:03:d7:74:76:cf:
                    58:61:9e:3e:c7:17:62:a2:d4:ff:d1:4c:79:ea:b9:
                    f2:85:05:4f:1d:c8:e5:b7:d0:b5:11:a9:43:c6:28:
                    b2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E6:E5:44:72:80:69:71:43:92:EC:5E:75:91:E6:35:76:15:19:EB
            X509v3 Authority Key Identifier:
                keyid:4E:5A:A3:8E:EA:32:4E:2B:D7:AB:64:27:E7:59:6A:9F:A4:1D:B0:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlqjjuoyTivXq2Qn51lqn6QdsOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:dc:d3:5d:d3:3b:64:30:01:12:20:2f:2c:09:ad:a4:9c:13:
         4a:d8:a8:4f:3d:99:fe:23:e5:e6:bc:58:d8:b2:52:c2:fe:84:
         aa:c1:de:23:3a:c4:ba:3e:18:a9:d4:2f:27:91:fb:bd:0e:2a:
         82:94:ac:98:de:01:47:d1:c1:e8:bc:e2:28:7f:73:81:08:96:
         43:0f:a6:c6:28:db:2d:dc:ae:c5:3d:6e:b3:2d:ff:d4:b9:3b:
         d3:ed:53:fc:7e:b1:01:62:4c:01:17:04:a1:86:3c:29:10:a1:
         be:4f:f8:9b:71:5b:20:df:3d:c6:07:28:b6:ce:23:3b:d4:9e:
         a7:a0:9a:d5:1a:b0:e6:68:27:bd:a2:1a:c0:56:c4:7b:d2:72:
         a5:90:bf:f0:0a:92:d8:e5:cc:18:4a:81:4f:a0:63:23:d7:79:
         00:ba:b0:ac:5b:4b:6c:d4:1c:fc:1a:93:69:d5:54:bf:52:c6:
         8d:4c:7e:0a:f3:b1:7c:95:10:8d:e5:20:3e:ad:d7:0a:e5:9a:
         2c:21:86:72:c5:90:8d:67:d4:2e:cc:14:da:ca:d4:0b:61:bd:
         05:64:0c:e0:83:ae:8f:52:79:f8:be:b5:32:0d:c7:85:ac:74:
         5b:19:3a:09:00:45:c9:2b:04:46:d3:55:32:99:9c:70:bd:a4:
         4d:f6:5a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:35 2026 by rpki-client