Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
File:                     tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft (raw, json)
Hash identifier:          SP83OskE9Kt9TnuszU4Vec2Wqq8XesX0gTHVukoln5c=
Subject key identifier:   09:C6:5D:64:4A:01:62:32:13:2B:5C:1F:CC:3B:88:63:0A:6D:7D:8C
Authority key identifier: B4:81:84:54:9E:12:E9:93:4B:FF:B7:61:5B:CA:3D:0C:25:68:13:60
Certificate issuer:       /CN=b48184549e12e9934bffb7615bca3d0c25681360
Certificate serial:       01A0021393ECC068201A7F2C924A9275C8C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
Manifest number:          1A02
Signing time:             Fri 14 Aug 2026 21:00:32 +0000
Manifest this update:     Fri 14 Aug 2026 21:00:32 +0000
Manifest next update:     Sat 15 Aug 2026 21:00:32 +0000
Files and hashes:         1: tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl (hash: 0uAC3RxPDtfYzMecEChpB7MH6zCA8/pzJVvBIPNiTUk=)
                          2: tuDCv4lvmfDzJRQ3OOYakiJXpLk.roa (hash: B9WwSI4TdVDoQmekvK0lWtI32JXbnkCFS/fzwW4JyBM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:13:93:ec:c0:68:20:1a:7f:2c:92:4a:92:75:c8:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b48184549e12e9934bffb7615bca3d0c25681360
        Validity
            Not Before: Aug 14 21:00:32 2026 GMT
            Not After : Aug 15 21:00:32 2026 GMT
        Subject: CN=09c65d644a016232132b5c1fcc3b88630a6d7d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:72:d2:6f:8b:de:fa:ff:ec:5c:f9:5b:b3:37:
                    bc:4a:07:9f:cd:71:be:46:d3:0c:07:1b:23:88:60:
                    89:be:67:ee:48:e2:f9:a5:81:d2:69:37:a7:65:90:
                    02:79:7f:4c:4f:2b:53:3f:c1:c9:53:3e:43:ca:22:
                    02:ba:13:4b:d4:4f:20:5a:97:f8:12:f3:de:39:8a:
                    57:74:ee:7e:45:38:a0:c0:03:86:46:8d:cd:96:39:
                    05:39:42:d7:42:68:b8:e8:a1:9a:55:f3:33:95:fd:
                    3c:9f:33:91:c5:b9:83:0f:66:af:6d:fb:58:eb:b4:
                    8c:c6:ab:e1:a1:bc:7f:56:94:dc:31:3c:55:e1:77:
                    fe:6c:b8:c1:62:70:95:6a:20:ca:24:f8:6c:e9:09:
                    ca:87:14:b9:75:01:d9:c2:83:e8:44:98:51:c9:e4:
                    5e:b0:7e:3c:34:41:fa:c4:44:1e:18:9c:82:a1:0f:
                    66:a2:5b:a3:8f:bd:39:40:1d:1f:e2:ce:09:4e:ca:
                    5e:06:06:5a:97:27:38:22:88:cd:81:85:1e:a5:43:
                    a2:40:07:24:f6:f2:82:a7:25:37:24:c5:51:53:50:
                    c1:97:c6:c3:6a:04:41:6a:39:57:82:76:07:bb:d4:
                    49:a0:97:86:1a:77:1c:10:77:2d:e7:2f:62:5d:82:
                    70:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C6:5D:64:4A:01:62:32:13:2B:5C:1F:CC:3B:88:63:0A:6D:7D:8C
            X509v3 Authority Key Identifier:
                keyid:B4:81:84:54:9E:12:E9:93:4B:FF:B7:61:5B:CA:3D:0C:25:68:13:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:ce:10:69:54:7c:c0:73:b5:44:8e:20:0e:fd:ec:82:12:4b:
         ba:7e:03:3e:30:47:a9:74:bc:d2:3b:7a:5a:76:9b:3b:ca:05:
         a6:96:ae:69:98:d7:fb:ce:f7:7a:23:d0:a6:5e:b0:57:c1:63:
         0c:80:f7:0e:14:69:55:71:b6:6c:36:3f:41:20:8d:1f:bf:7c:
         17:6c:83:f9:f8:19:16:3f:10:1d:a2:84:b7:70:ea:fa:bd:9a:
         57:1e:d9:28:43:d5:5f:7a:a2:d4:bb:9e:41:f9:67:16:fd:85:
         5c:bd:e2:a8:7b:d0:8b:56:73:0d:06:a1:8d:20:ce:e4:78:0e:
         f7:40:39:68:b4:7f:c7:65:90:b4:0e:7e:a3:12:d6:5d:8d:06:
         78:7d:c5:ac:77:df:f9:d6:02:6d:a7:56:a3:82:82:b7:36:15:
         50:ac:1b:34:20:a2:74:61:41:8a:8a:e2:fa:5e:b5:54:ef:30:
         13:99:ba:ce:5c:0f:a0:38:6e:e4:d1:2a:39:4c:70:42:ce:f1:
         8f:d4:c9:c6:06:ba:09:93:5b:2b:a4:d5:fa:00:c1:d3:77:5b:
         7c:c7:fd:aa:f4:1c:09:64:d9:46:34:f1:2f:cf:19:da:ee:18:
         60:e5:53:8b:d8:0d:c1:40:0e:0b:c0:7d:4e:61:7f:ed:cc:fc:
         46:da:4b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:16:30 2026 by rpki-client