Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
File:                     tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft (raw, json)
Hash identifier:          9jEQAmCZUqkvzBcXs5wf+lxhIDXGNoMGxAuYnAlSpIk=
Subject key identifier:   18:C4:EB:60:8B:2B:17:DE:71:C2:F4:01:7C:07:D1:F7:62:DB:E4:71
Authority key identifier: B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90
Certificate issuer:       /CN=b467367967dc763349fd0b50e31f75b823028590
Certificate serial:       019CE4483E17A5FCCBBA8837AF9AD92CBB73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
Manifest number:          1875
Signing time:             Thu 12 Mar 2026 23:01:05 +0000
Manifest this update:     Thu 12 Mar 2026 23:01:05 +0000
Manifest next update:     Fri 13 Mar 2026 23:01:05 +0000
Files and hashes:         1: 2ZaoqGM6aCKm2bNlZEaeL94Fv10.roa (hash: S0GcAEqKxfe6Q+R2X0UdUocPpyMaBe0EXrwdyrx4AUA=)
                          2: CANUIzLfJR4qYVodzcMnNDXdUDE.roa (hash: w932Ollir53g5y+ieb37C38JTybDNf6UCpclagO7ofc=)
                          3: j5nMyhDkND_N1Ut4UNIil32kLZ0.roa (hash: UBj4OSufFBsr7TYpnQq+Obve4nAQx39q2B1z153K9mU=)
                          4: tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl (hash: Rhx2mdoIacsm9cdHorO+nKuIZ8GBjXUvfO3S0C5zP3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:48:3e:17:a5:fc:cb:ba:88:37:af:9a:d9:2c:bb:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b467367967dc763349fd0b50e31f75b823028590
        Validity
            Not Before: Mar 12 23:01:05 2026 GMT
            Not After : Mar 13 23:01:05 2026 GMT
        Subject: CN=18c4eb608b2b17de71c2f4017c07d1f762dbe471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f3:c3:51:2e:5a:d3:06:a3:12:2f:e2:13:85:
                    ad:cd:b6:2f:eb:e9:34:af:88:63:99:4d:fd:e8:1c:
                    22:8a:1f:d5:9a:1e:a2:76:32:82:53:53:bd:50:0c:
                    7a:32:72:79:93:fc:77:53:55:fd:0b:19:d5:ce:57:
                    9e:4f:08:67:dd:db:f2:e6:f2:a7:c4:07:f2:2d:36:
                    ea:95:d3:fd:84:75:c4:3f:0d:e6:f5:a1:7e:2a:39:
                    4f:38:cf:56:4d:28:af:5b:7e:38:37:4d:ef:5b:42:
                    1b:1a:d8:af:7a:03:77:5f:7e:27:fa:62:a7:1b:80:
                    6d:c2:28:89:48:5e:d7:9a:36:2a:48:ad:82:9d:17:
                    0a:87:98:50:98:45:3f:8e:88:1a:95:ed:b2:82:08:
                    21:94:e2:35:d1:c4:e8:37:10:72:40:8e:b7:23:86:
                    bb:69:9e:56:0a:52:68:16:37:2c:2f:08:11:5b:50:
                    9c:30:b1:8d:17:94:0c:7f:7f:69:43:c1:ba:cf:08:
                    dd:f5:10:e3:1f:cc:0d:ee:c8:3b:8b:fd:f2:be:8b:
                    f8:e5:26:07:b9:23:e2:dd:01:b7:5b:5f:a8:4b:e7:
                    e7:6d:bd:e7:2f:e0:a1:af:db:42:77:fe:79:8b:46:
                    74:f1:07:48:bf:e9:52:e2:25:59:92:c4:90:25:e2:
                    86:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C4:EB:60:8B:2B:17:DE:71:C2:F4:01:7C:07:D1:F7:62:DB:E4:71
            X509v3 Authority Key Identifier:
                keyid:B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:75:a6:98:9c:3f:d8:f7:88:26:bb:42:4e:6e:db:c2:05:02:
         1a:59:13:a2:e2:ee:d7:b7:df:7a:8d:85:80:6f:97:0a:23:e4:
         38:a3:82:c4:50:6b:c1:76:05:15:e9:ff:92:fa:42:8d:2f:9d:
         24:c0:7a:a5:e4:6d:86:d2:08:15:ad:96:d4:a0:4b:a2:87:b2:
         97:38:5c:42:a9:0f:09:1e:dc:b0:a0:09:d3:64:dd:df:98:df:
         90:6c:3f:74:0d:9e:d0:21:ee:00:6b:04:1a:88:83:03:e2:30:
         42:9e:74:11:12:93:6f:c0:99:d4:34:6a:46:22:2e:64:2c:8e:
         6a:2a:a3:3b:ff:3c:f1:59:36:c1:39:f8:69:3d:71:f9:66:a2:
         db:34:77:59:3c:cf:dc:db:33:19:a2:f9:82:63:18:e8:64:c5:
         58:8a:4d:47:18:fa:19:e8:50:29:67:19:4b:de:8d:20:39:85:
         f7:57:90:3b:2d:9f:97:0e:cf:72:dd:7b:83:61:f1:4d:da:c1:
         ed:1f:e5:5b:c4:a2:87:d8:44:8b:2c:4a:12:9c:72:66:b2:7f:
         15:2b:a6:6d:33:89:ae:16:39:0f:cf:8f:8b:fe:e2:14:db:62:
         55:d1:f1:98:b1:58:64:c7:48:67:05:64:a7:99:63:81:e6:d9:
         9c:92:91:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 06:33:21 2026 by rpki-client