Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
File:                     ta_Rv-OIQKaf9WcdWb89siuY3eI.mft (raw, json)
Hash identifier:          9p2Cj/FUaNgh0oqYTWsyFzBhyn00p6q5ba+8ZDGr2VU=
Subject key identifier:   AD:FC:E4:39:17:85:9E:16:4C:89:98:FD:92:DF:B6:F8:DF:6E:A8:98
Authority key identifier: B5:AF:D1:BF:E3:88:40:A6:9F:F5:67:1D:59:BF:3D:B2:2B:98:DD:E2
Certificate issuer:       /CN=b5afd1bfe38840a69ff5671d59bf3db22b98dde2
Certificate serial:       019F85D76ED84DB1C25F87EF5B1290D3AFC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
Manifest number:          0705
Signing time:             Tue 21 Jul 2026 18:01:55 +0000
Manifest this update:     Tue 21 Jul 2026 18:01:55 +0000
Manifest next update:     Wed 22 Jul 2026 18:01:55 +0000
Files and hashes:         1: 7vpwKA_xkK2KFRVK-1Bl0paJeQo.roa (hash: VRkqBPN/9BIZfGsddu7EhNguv5Ir9sO9OazfQFdIK6s=)
                          2: ta_Rv-OIQKaf9WcdWb89siuY3eI.crl (hash: k+vqvTuTgHPALrGUm1ehrcEY/aLG9Sxbyi5fgajE6C4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 18:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:d7:6e:d8:4d:b1:c2:5f:87:ef:5b:12:90:d3:af:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5afd1bfe38840a69ff5671d59bf3db22b98dde2
        Validity
            Not Before: Jul 21 18:01:55 2026 GMT
            Not After : Jul 22 18:01:55 2026 GMT
        Subject: CN=adfce43917859e164c8998fd92dfb6f8df6ea898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:50:26:88:85:1f:83:63:8e:c5:c3:a4:8a:d0:
                    f8:1c:ea:d2:bd:2d:80:e8:44:67:92:f1:5e:cc:a2:
                    be:43:1a:18:a2:19:e9:6d:e0:e0:9e:81:5b:a4:94:
                    66:d4:62:87:51:23:45:19:f4:70:45:13:41:11:61:
                    5b:ca:34:38:26:3e:d0:b1:53:53:9e:5d:f3:9b:96:
                    64:ec:f4:db:24:5b:d7:7c:37:d4:b1:28:34:4d:36:
                    a8:21:31:77:47:82:52:1e:7d:b2:fb:1b:71:01:ee:
                    5f:3f:17:dd:c3:4c:29:29:92:30:76:e8:9f:be:9c:
                    f2:ba:19:ee:dc:8e:e4:ef:5a:30:7c:20:d2:b5:34:
                    87:f8:d1:8b:fa:98:2c:b6:77:cb:3c:a3:ce:08:de:
                    f3:2d:45:64:d6:7d:8d:fe:73:ac:a9:dc:cc:08:78:
                    d3:14:ae:e5:19:bd:42:f1:5c:89:4d:40:72:ff:8f:
                    61:17:06:b8:78:41:51:66:d0:1f:71:fb:ae:b3:c4:
                    ae:98:59:40:59:3b:10:fc:13:42:0a:06:22:9a:a2:
                    b5:c1:2a:4f:96:4e:f5:0a:d0:66:6f:f9:5b:4e:a2:
                    cf:61:16:c4:4b:ae:5c:7f:80:3d:f7:94:f3:02:16:
                    ce:8d:22:38:28:b3:93:b7:24:b9:16:8d:6a:7a:31:
                    c4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:FC:E4:39:17:85:9E:16:4C:89:98:FD:92:DF:B6:F8:DF:6E:A8:98
            X509v3 Authority Key Identifier:
                keyid:B5:AF:D1:BF:E3:88:40:A6:9F:F5:67:1D:59:BF:3D:B2:2B:98:DD:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:9a:85:cb:bb:42:fc:bb:2b:cc:ef:bb:9b:52:63:71:d4:4b:
         2f:78:17:7f:33:dc:09:c7:e0:cc:02:35:62:22:59:4d:e8:54:
         df:d5:5e:56:97:d2:78:ea:c6:f2:b1:f8:a1:f9:68:c0:13:c1:
         86:56:81:3c:a3:28:03:6f:d1:17:a0:36:99:ef:c8:03:cf:35:
         2e:ee:97:a9:51:c3:b6:ab:50:df:38:74:8c:bf:9f:48:b9:e4:
         db:5d:a1:d3:3e:c3:e5:e2:6c:63:97:f2:12:b3:16:35:59:4a:
         ab:68:ec:40:82:ef:04:65:1f:0a:be:eb:10:ba:06:7b:f2:05:
         f0:95:26:00:ed:7b:6c:4a:0d:45:df:be:eb:4f:80:89:69:f4:
         9d:3c:18:ac:c4:cb:8c:e3:8f:31:33:e2:46:6d:01:a4:15:5c:
         e1:88:03:4d:da:91:09:ea:9a:2f:f6:b9:c3:0d:2f:46:be:d4:
         9c:af:8e:8b:c5:97:cd:8b:81:1d:48:f3:d8:f9:72:be:0d:fa:
         4b:31:b8:0e:28:11:d8:4d:7c:d7:b2:e3:f6:a3:17:d1:2e:d7:
         08:7b:f5:91:a7:c0:99:93:49:ba:c8:43:61:43:20:f0:00:68:
         45:9b:f6:19:cd:3a:c6:60:33:41:52:39:fd:c1:14:16:49:34:
         5d:fa:9e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:47:24 2026 by rpki-client