Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
File:                     TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft (raw, json)
Hash identifier:          UIjs9ErHOJ8P67+Xjj8datESnhT62DWO/i9IJYJMWdA=
Subject key identifier:   93:E9:D8:45:4F:73:E6:54:85:41:4A:CC:2A:53:82:0D:4C:C9:52:03
Authority key identifier: 4C:24:C3:08:B0:24:1C:3B:CC:14:CF:67:77:59:1D:27:23:7F:FA:F1
Certificate issuer:       /CN=4c24c308b0241c3bcc14cf6777591d27237ffaf1
Certificate serial:       019CE5910BD6B64D98BE71680AFE10A00205
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
Manifest number:          0548
Signing time:             Fri 13 Mar 2026 05:00:14 +0000
Manifest this update:     Fri 13 Mar 2026 05:00:14 +0000
Manifest next update:     Sat 14 Mar 2026 05:00:14 +0000
Files and hashes:         1: TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl (hash: YBRTqb3BFDjfskvBEONEi/yphhuy5JjSdbg2l0Z3vfI=)
                          2: i3fwIWYHmrbZ4Q0LfBJoI0pL4eM.roa (hash: lzJAIL587sZVQf8sujo44Gz8CEXrbl2KlNzyp7ldRQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:91:0b:d6:b6:4d:98:be:71:68:0a:fe:10:a0:02:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c24c308b0241c3bcc14cf6777591d27237ffaf1
        Validity
            Not Before: Mar 13 05:00:14 2026 GMT
            Not After : Mar 14 05:00:14 2026 GMT
        Subject: CN=93e9d8454f73e65485414acc2a53820d4cc95203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:09:ba:75:c4:8c:a1:82:af:d8:09:50:91:d2:
                    c3:89:d2:5f:8f:c9:00:0f:b1:a3:aa:2f:55:db:1e:
                    05:24:b4:93:9e:59:1b:57:70:1d:f5:47:7a:a9:7f:
                    d6:1f:45:a8:17:be:fd:09:cb:ea:6e:25:dc:c1:4c:
                    b6:db:af:09:5a:2f:f1:49:7f:c1:d2:df:da:a4:00:
                    10:98:9d:ca:73:44:c9:d3:52:83:b7:fc:f8:5c:3d:
                    9c:09:5b:ca:8e:36:af:51:92:d8:7b:04:95:95:18:
                    df:81:27:27:d9:21:a3:0b:43:aa:35:1b:12:4e:15:
                    96:33:8e:45:a1:c1:86:8c:7a:ec:d9:77:3f:71:f6:
                    23:3d:e8:1d:a1:f5:c1:b7:6d:a7:f8:cf:a0:23:9e:
                    3f:eb:22:c6:84:43:31:eb:65:af:51:a7:68:6c:43:
                    f4:ed:0a:06:ec:54:62:ee:b9:23:bd:fe:d2:58:54:
                    b5:81:65:34:cb:b5:a5:a5:58:a0:64:43:a0:4a:77:
                    2f:8d:3b:cb:dd:84:ad:c4:ac:f2:3d:82:b4:fc:6a:
                    9b:8a:26:ca:c9:fa:53:1e:69:40:dc:b9:89:a4:a5:
                    f5:c0:0c:f3:51:a1:b8:5e:d7:35:eb:a2:e3:ec:51:
                    d9:68:74:c2:85:a8:af:89:94:a0:ea:ce:36:ee:19:
                    75:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E9:D8:45:4F:73:E6:54:85:41:4A:CC:2A:53:82:0D:4C:C9:52:03
            X509v3 Authority Key Identifier:
                keyid:4C:24:C3:08:B0:24:1C:3B:CC:14:CF:67:77:59:1D:27:23:7F:FA:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:bf:50:32:14:c3:09:b1:42:7f:1f:a0:eb:21:45:ff:90:a8:
         da:b3:31:2f:28:c2:29:4e:26:cf:5f:34:fe:3f:bf:a4:6d:2c:
         61:b0:96:dd:aa:2d:94:f9:20:05:ed:20:fa:cc:7b:e0:4e:d9:
         bf:ff:59:a5:bf:12:fb:c9:4b:b1:f4:7a:ee:d0:95:6e:a0:c3:
         a1:60:14:10:61:c3:44:74:81:35:52:fa:9b:5d:52:34:ae:bd:
         22:ff:26:a3:5e:b0:ca:12:81:44:f4:35:f7:27:d3:28:94:b5:
         4b:fc:f8:48:5c:e2:a6:77:10:87:a7:fa:2f:07:70:1a:f1:29:
         a1:a0:51:35:cf:cd:6f:c4:46:3b:57:b9:25:06:94:49:f1:cb:
         1a:8c:5f:aa:84:3f:71:c6:c3:6d:5b:97:9b:02:ab:00:ba:8b:
         ed:d3:e9:e7:04:d8:e4:8b:28:99:10:80:94:28:b5:84:ed:95:
         49:3c:e6:44:3d:33:76:26:ba:b7:d6:c8:3b:9c:9b:b1:5a:e5:
         ad:5a:d7:21:61:86:0a:56:3d:c9:f4:8b:31:2b:71:89:80:4b:
         0a:ad:4b:78:a3:c7:ab:a3:a2:62:32:c5:4b:ac:48:95:00:9f:
         d3:6c:d9:64:cb:2e:8a:7a:7e:8f:11:3a:69:b2:38:39:c6:e5:
         9a:8d:49:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:05:22 2026 by rpki-client