Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
File:                     TMxgSVsqNNiSEcwceVJOq2G6FlY.mft (raw, json)
Hash identifier:          mO52OkfSR6R0VpPC/cqCDbtacuaBJ8uIq3QFw+NY9wg=
Subject key identifier:   D2:55:C5:8B:09:DA:AE:AC:1B:E4:AC:65:66:C0:18:A2:D1:9A:8F:AB
Authority key identifier: 4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
Certificate issuer:       /CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Certificate serial:       019CE780643F5A8107822E4B5A4FB4EA279F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
Manifest number:          1865
Signing time:             Fri 13 Mar 2026 14:01:17 +0000
Manifest this update:     Fri 13 Mar 2026 14:01:17 +0000
Manifest next update:     Sat 14 Mar 2026 14:01:17 +0000
Files and hashes:         1: HKK9g6Hqt_cBY1AbSvefDUFZRlo.roa (hash: MqB9AcT2/OThR4+/4lhCs0wiEEPqRX8xFMsmjXA2ijw=)
                          2: OBx05QEiDP1Vr5e_268J9tar1QE.roa (hash: TIpDQvAlekr1QcZvuTryLbf0wSjkmsau0xJ8uS3rJTc=)
                          3: TMxgSVsqNNiSEcwceVJOq2G6FlY.crl (hash: RQMUd53EgqzAo9Fp5KlpNe3FlSTDdHsiklsjCLOo+kU=)
                          4: bq_R2KuxT4atP4GNyi-WGk7ZHgI.roa (hash: ukHJbM0cPkDakME1wOGsLKMQaAIR4oQCPsvSvUhBbpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e7:80:64:3f:5a:81:07:82:2e:4b:5a:4f:b4:ea:27:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
        Validity
            Not Before: Mar 13 14:01:17 2026 GMT
            Not After : Mar 14 14:01:17 2026 GMT
        Subject: CN=d255c58b09daaeac1be4ac6566c018a2d19a8fab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:42:ad:5d:1c:de:8e:39:b8:fc:43:0a:77:ca:
                    79:b6:26:69:12:1f:0d:42:f9:76:de:94:0e:58:f8:
                    6f:f4:34:33:74:ea:8f:ad:3a:6a:72:65:0c:1c:c9:
                    26:a5:90:b4:67:9c:82:7d:7e:d6:74:14:71:8e:69:
                    00:05:0e:c6:f1:79:32:a9:89:c7:6b:5c:02:11:6b:
                    2b:12:36:cc:07:4a:64:66:8e:bd:1a:70:b5:28:8d:
                    de:5a:eb:2a:24:9e:6c:9c:92:0f:ba:ff:a3:c6:33:
                    29:77:26:8d:8c:9e:4e:03:04:95:c8:f9:54:c4:be:
                    81:47:98:72:5b:8f:d3:04:f6:f9:a7:09:ec:c7:58:
                    9b:f9:60:f9:ae:f1:db:2b:22:5e:11:6e:82:12:b6:
                    5e:c5:de:be:5c:3b:ac:46:0a:ad:28:b2:80:21:54:
                    7a:9c:e1:94:5e:d3:c1:7f:55:f7:ce:15:2f:ad:b4:
                    40:74:75:b5:fc:57:fc:5b:7f:68:f5:cc:55:2b:99:
                    6a:e3:b8:bf:e5:20:58:6a:38:9a:2f:ee:26:ed:4b:
                    e0:68:90:0d:ec:19:41:23:7a:52:26:71:69:fd:47:
                    20:a0:08:3f:01:67:56:31:3b:d7:7f:87:da:13:3e:
                    4e:69:a3:71:df:72:2e:ed:e3:55:74:db:80:e0:ed:
                    8b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:55:C5:8B:09:DA:AE:AC:1B:E4:AC:65:66:C0:18:A2:D1:9A:8F:AB
            X509v3 Authority Key Identifier:
                keyid:4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:62:df:4f:2f:63:4f:96:d8:22:49:0f:4d:97:40:5a:a3:ac:
         ce:41:7e:f9:59:cd:c4:5e:9c:72:de:73:fc:bb:d2:e1:6a:21:
         d9:a7:3e:01:18:b2:25:e3:79:41:dc:db:de:59:79:3a:82:bd:
         d5:04:2e:55:61:ad:fe:4a:46:16:22:9a:58:d5:60:08:89:a4:
         0c:70:c8:3b:69:cb:1c:6e:3a:03:a4:c6:41:01:6b:bb:c8:9d:
         7d:8d:06:ad:f9:f7:88:df:cf:0a:f2:47:30:fb:46:18:a9:3e:
         5f:bb:b6:06:2a:53:cf:eb:91:0a:63:fc:e0:61:b3:ba:f1:bf:
         77:4c:f3:9b:05:e0:bc:9d:80:4b:d9:fc:db:e9:98:79:46:74:
         56:14:7f:96:e6:1f:ba:b7:78:51:4c:40:d3:ca:10:4a:40:5b:
         f5:be:3d:bd:8c:48:b9:e1:7a:b7:18:dc:f9:64:df:04:6d:7c:
         25:e1:df:b5:7b:6e:b2:d5:ba:c4:6e:32:29:09:4d:86:2f:6c:
         2b:75:8b:a9:1b:df:0b:c7:e0:f5:0f:2e:bd:10:e2:b7:88:50:
         21:5f:bb:e2:ae:ad:30:6c:6b:c9:9d:ad:ff:a3:5f:c0:21:40:
         87:10:ef:b4:5d:60:0b:83:96:dd:bb:24:1a:60:65:48:4b:bc:
         48:04:b5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 22:46:02 2026 by rpki-client