Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
File:                     TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft (raw, json)
Hash identifier:          gfZkwOv4eMP48sCuQyHBm7UvlJfyt6RkSLId6ut+6yE=
Subject key identifier:   74:9C:EA:4D:11:64:94:04:95:99:43:3D:E1:CE:8D:3B:1D:32:1C:32
Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
Certificate issuer:       /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Certificate serial:       019D12D8607714F1B5CCD36D770885366244
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
Manifest number:          1884
Signing time:             Sun 22 Mar 2026 00:01:03 +0000
Manifest this update:     Sun 22 Mar 2026 00:01:03 +0000
Manifest next update:     Mon 23 Mar 2026 00:01:03 +0000
Files and hashes:         1: BMJTX-1VIsJCIAKC_UCdqIb839w.roa (hash: AwaFPfahDvnxUQFxf1zHHxQY3shWXenV5hfHWr+eRSE=)
                          2: Bv2hzFMshraYJZMhKiNAPQW5yzo.roa (hash: mozy1oa9z+5oxHPkAdcnEjtIYIUHTFuELC5cUHnd2ds=)
                          3: GN5fvWr40gdv3JGN6vxjkZjGr-M.roa (hash: opZrG09Q9xFPvDT9n75han8TkL1qCnmykUVsSTdQ9Hw=)
                          4: TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl (hash: YTdeLRihctkxaWiAoEJM37Y7ErC8wy3MxiNU+UO6r/w=)
                          5: l5bd30j_MQRGXqfWahBHTqJdoFc.roa (hash: t0VGEeZo8Fahoj1ko4o+rBeCd1Be3+5NalKn7WyM9tU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 22 Mar 2026 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:12:d8:60:77:14:f1:b5:cc:d3:6d:77:08:85:36:62:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
        Validity
            Not Before: Mar 22 00:01:03 2026 GMT
            Not After : Mar 23 00:01:03 2026 GMT
        Subject: CN=749cea4d116494049599433de1ce8d3b1d321c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1f:d0:d4:37:1a:a2:8b:3a:20:ed:f2:f3:13:
                    47:8c:cb:ac:a1:6f:f7:b9:a0:57:64:45:9c:68:b2:
                    5b:19:e8:bb:f9:1c:e1:af:28:d0:e5:c1:d5:2e:d1:
                    2f:58:a6:c9:15:27:ca:07:23:2a:9a:c9:b6:65:87:
                    a1:a8:1a:2e:fb:4a:12:4b:db:20:8e:18:ad:5e:66:
                    be:e8:04:8f:5d:d7:31:1d:03:59:c6:69:46:74:52:
                    ca:e8:a7:ed:24:99:bf:a4:77:4f:c2:84:fe:00:28:
                    57:b9:49:d7:f8:b3:ab:bb:b3:b5:59:cb:d3:2a:fb:
                    ef:8f:4e:62:c5:fa:46:08:b7:2e:29:b8:00:8e:ef:
                    14:f7:e7:cb:63:7b:4b:de:83:da:65:ff:69:b7:22:
                    0c:32:b5:95:b0:b1:81:83:ec:11:cd:e4:a6:f3:d3:
                    23:9a:35:95:80:22:54:aa:ec:13:79:87:d0:18:3a:
                    d1:86:b8:d6:d9:9b:28:9b:cc:84:b2:d7:72:41:53:
                    71:e2:49:f3:0c:75:33:05:61:ac:a9:0b:3a:9d:3a:
                    63:9a:79:95:c7:dd:9b:35:bf:0f:0e:95:5a:0e:75:
                    da:7e:7f:91:7e:76:eb:54:c0:74:2e:bb:96:5c:23:
                    e0:aa:15:ff:8a:bc:15:12:8d:80:84:40:76:a6:96:
                    96:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:9C:EA:4D:11:64:94:04:95:99:43:3D:E1:CE:8D:3B:1D:32:1C:32
            X509v3 Authority Key Identifier:
                keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:20:53:e2:63:0d:28:5b:cd:82:8c:5b:6a:f8:09:cc:2b:ef:
         b3:90:22:78:54:cf:46:08:84:27:3a:72:5a:4f:97:17:1b:fb:
         74:5c:95:2f:a7:d1:ad:6d:b8:b3:08:d3:9b:0b:26:6d:78:d9:
         2c:f0:55:a8:f2:bf:87:ee:52:d4:35:a5:3e:db:50:ad:b7:0d:
         d3:37:8d:e7:af:20:c4:47:00:dd:e4:a2:73:08:88:d0:2d:a4:
         56:36:c9:bd:d6:ed:13:f3:3c:b2:56:f0:1d:f2:54:79:29:92:
         5f:80:b6:ed:cf:2b:24:41:bd:3b:80:d0:a9:b1:54:89:22:97:
         5b:e7:b2:7e:b6:84:7b:8d:67:4e:54:17:c7:8f:52:99:f8:25:
         a7:f4:00:8d:31:be:27:11:56:33:f1:56:3d:0e:9c:5c:fa:74:
         4c:64:00:bc:39:53:5e:86:7c:86:8c:d8:35:8a:8d:5e:78:92:
         7e:dd:48:16:39:a0:d5:e6:fb:08:7f:35:f0:ce:de:20:de:d6:
         8a:50:5a:96:3d:cf:85:a6:8d:29:c9:c0:d8:9e:7c:7a:8b:ec:
         f3:ea:cb:13:ce:9f:40:cc:52:2e:7d:77:e2:0b:51:ab:20:75:
         b8:f2:c5:2e:ac:c4:f6:a6:ef:43:22:8c:a8:eb:32:a8:aa:56:
         11:e1:7a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 06:56:53 2026 by rpki-client