Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft
File:                     TTuCKQwugJCSSp79nFF8oUpcNwQ.mft (raw, json)
Hash identifier:          4ekcpG/NjKHjrohOeIXaIKMh/SAFzP683l6Nx3OVwxw=
Subject key identifier:   B3:5D:9E:41:83:CF:26:E1:56:CC:DD:20:EF:4F:E0:3D:2F:FA:A6:EB
Authority key identifier: 4D:3B:82:29:0C:2E:80:90:92:4A:9E:FD:9C:51:7C:A1:4A:5C:37:04
Certificate issuer:       /CN=4d3b82290c2e8090924a9efd9c517ca14a5c3704
Certificate serial:       019D39AE6AB22B576C9084DDAE81846049F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TTuCKQwugJCSSp79nFF8oUpcNwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft
Manifest number:          1891
Signing time:             Sun 29 Mar 2026 13:00:24 +0000
Manifest this update:     Sun 29 Mar 2026 13:00:24 +0000
Manifest next update:     Mon 30 Mar 2026 13:00:24 +0000
Files and hashes:         1: QwYt5JGoziBuUynxaO7UwUNh6UU.roa (hash: 0qGrapZb7+jKIAgr/PeajOHIyrqRSG/2Cq6ydp/6ysU=)
                          2: TTuCKQwugJCSSp79nFF8oUpcNwQ.crl (hash: gj9n1i2An+YFlTf1PBgLQYRzAYP5xcI7qGzss4rd6do=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TTuCKQwugJCSSp79nFF8oUpcNwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:ae:6a:b2:2b:57:6c:90:84:dd:ae:81:84:60:49:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d3b82290c2e8090924a9efd9c517ca14a5c3704
        Validity
            Not Before: Mar 29 13:00:24 2026 GMT
            Not After : Mar 30 13:00:24 2026 GMT
        Subject: CN=b35d9e4183cf26e156ccdd20ef4fe03d2ffaa6eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:32:02:08:2c:6e:15:34:91:6c:04:25:7a:b1:
                    c6:85:a1:88:57:11:89:21:93:83:af:5a:ed:bf:d2:
                    c3:30:c8:fb:6e:67:9c:20:ce:9a:5c:db:f3:56:37:
                    82:8f:e0:8a:0f:c6:a6:1a:f8:93:7f:ac:97:92:2f:
                    19:dc:27:e9:51:0e:0f:88:85:ac:02:f2:05:7e:9e:
                    eb:ec:7e:e8:c2:8b:62:f6:c8:d9:12:c2:c7:e6:a0:
                    eb:22:e7:90:50:1d:76:e1:22:fa:3e:b5:08:79:74:
                    99:2d:29:b1:16:9a:d0:06:25:e2:c8:49:c7:9e:b8:
                    24:c7:df:a7:7a:7b:9c:8d:f5:21:b4:16:0c:a4:8f:
                    2b:ca:30:36:78:d4:63:c4:46:db:1b:0e:8f:86:41:
                    6c:b6:1c:93:0c:f2:ee:d5:5e:21:e1:32:74:08:dd:
                    64:c6:8f:5c:eb:da:d4:08:15:63:40:f6:80:36:cc:
                    06:ec:4d:b4:c1:4d:df:8d:01:e6:ec:2e:67:6c:42:
                    71:03:81:cf:0d:74:d2:e2:25:ad:fe:3b:94:4e:e5:
                    ea:59:e5:e5:b7:ec:0c:fd:1c:33:c2:36:db:a5:0a:
                    c5:08:52:50:17:3f:eb:eb:44:ce:e9:d7:35:fb:fe:
                    4e:59:b1:d6:7c:c6:f0:a4:5c:9b:20:b6:53:84:44:
                    4b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5D:9E:41:83:CF:26:E1:56:CC:DD:20:EF:4F:E0:3D:2F:FA:A6:EB
            X509v3 Authority Key Identifier:
                keyid:4D:3B:82:29:0C:2E:80:90:92:4A:9E:FD:9C:51:7C:A1:4A:5C:37:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTuCKQwugJCSSp79nFF8oUpcNwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:42:3d:ac:81:5b:52:8a:5b:e6:41:d2:48:9e:b2:8b:e8:e4:
         c8:ea:89:f8:8e:9e:33:10:f4:66:ff:32:3b:c6:e2:de:1c:c8:
         41:f9:d4:39:b4:e8:a5:10:30:21:fb:92:b4:e8:49:c6:a7:11:
         61:4d:7c:4c:e3:9b:b5:9a:8a:13:77:31:00:7b:a2:b4:3f:b7:
         4f:45:a6:e2:c0:a4:f4:86:fb:04:b6:27:2a:ba:d6:6b:13:a6:
         d8:f7:87:a3:69:ff:eb:6f:9c:da:74:e1:21:57:a2:d8:97:54:
         45:1b:61:5a:ef:86:bd:28:25:e1:45:e3:42:c4:1c:c7:2d:4e:
         33:24:13:63:35:77:14:28:f7:ea:75:b6:8f:a7:4c:93:36:f1:
         18:c1:ad:be:13:05:78:54:ce:1b:a5:73:5e:47:25:e6:83:42:
         69:7d:15:01:91:a4:fc:c7:42:36:41:36:48:3b:9b:b1:c4:40:
         d7:7a:89:ab:6b:9c:73:f0:5e:d0:09:c9:41:78:6b:10:3a:ea:
         5e:6d:04:dd:d1:3c:81:a0:9c:71:20:06:05:f8:4e:4d:23:72:
         15:a3:f0:61:66:0e:18:a7:bc:fb:aa:1d:69:64:aa:c4:ec:6c:
         57:fb:e0:31:7c:e5:1c:3e:d3:9c:52:4e:c4:32:92:31:58:1e:
         c5:bd:c8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:59 2026 by rpki-client