Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
File:                     TAcbrZKeNisGK4nIf6QbXe2k_8A.mft (raw, json)
Hash identifier:          2lVdui3hlsvBbQyQxoib2NObIks/dd5UMSrgVthTRhg=
Subject key identifier:   DA:57:4A:77:FA:AD:A2:F0:58:30:76:9E:79:71:19:BB:80:0F:02:BC
Authority key identifier: 4C:07:1B:AD:92:9E:36:2B:06:2B:89:C8:7F:A4:1B:5D:ED:A4:FF:C0
Certificate issuer:       /CN=4c071bad929e362b062b89c87fa41b5deda4ffc0
Certificate serial:       019D37C0E77B82C15B28E3D1603B87ADCE60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
Manifest number:          15D2
Signing time:             Sun 29 Mar 2026 04:01:22 +0000
Manifest this update:     Sun 29 Mar 2026 04:01:22 +0000
Manifest next update:     Mon 30 Mar 2026 04:01:22 +0000
Files and hashes:         1: TAcbrZKeNisGK4nIf6QbXe2k_8A.crl (hash: 3Dmua5KVN7OC2auCqE5Dx41z29JW1JbPA3TdXP/p4jg=)
                          2: wI4CV9wqV9I3LALXOqlVHKrIMXM.roa (hash: 5x3vho9MO9rEu47x9Xp5hwwnApRM8GMHw6gST5UuYX8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:e7:7b:82:c1:5b:28:e3:d1:60:3b:87:ad:ce:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c071bad929e362b062b89c87fa41b5deda4ffc0
        Validity
            Not Before: Mar 29 04:01:22 2026 GMT
            Not After : Mar 30 04:01:22 2026 GMT
        Subject: CN=da574a77faada2f05830769e797119bb800f02bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:47:da:3b:97:00:ab:51:83:87:d9:21:33:f0:
                    c0:36:9f:b5:00:a3:77:48:66:37:3a:aa:34:ad:25:
                    cd:ef:59:c7:44:3e:f3:5a:f4:6c:46:4e:88:e0:10:
                    43:88:2b:f9:a1:81:0f:ac:98:de:f2:e0:ca:85:8b:
                    56:e1:51:a1:d0:f6:2b:a3:f0:e6:ad:23:fc:b0:7a:
                    63:d8:88:84:dc:1b:74:31:f3:2c:59:11:bd:ce:b2:
                    94:6b:88:c6:6c:7d:6a:1f:c8:60:dc:19:d7:35:cb:
                    80:0d:ff:9b:ea:63:81:e8:99:78:f2:42:11:4d:a1:
                    e5:cf:90:f8:60:d1:56:29:9d:19:5e:c7:db:cb:4e:
                    52:85:99:03:ab:86:2c:a3:0a:c9:c5:b7:3e:27:54:
                    d5:75:3d:6f:1a:74:ec:66:54:07:bb:0c:66:ab:2f:
                    49:84:3d:7e:c5:d2:57:93:00:9a:38:78:04:21:69:
                    9b:07:12:03:26:30:81:96:c7:0c:e9:8a:cd:f3:d9:
                    20:29:9f:c4:c6:28:23:ec:44:74:e3:e0:5c:0a:4f:
                    a1:ea:07:d5:1f:61:d8:6a:a1:62:73:a1:e3:93:8d:
                    29:c4:0a:71:d4:35:8b:9a:e0:ed:26:e9:24:52:eb:
                    61:ed:ea:01:8e:6d:8a:82:ba:e1:42:fd:31:19:17:
                    db:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:57:4A:77:FA:AD:A2:F0:58:30:76:9E:79:71:19:BB:80:0F:02:BC
            X509v3 Authority Key Identifier:
                keyid:4C:07:1B:AD:92:9E:36:2B:06:2B:89:C8:7F:A4:1B:5D:ED:A4:FF:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:be:29:33:b7:59:96:f2:85:cc:78:03:74:77:be:be:56:7f:
         f5:75:99:41:ab:ae:e2:e4:9a:05:bc:78:bb:f7:5a:c1:a8:9e:
         4e:23:78:4c:e1:4b:08:ae:9e:9e:4a:36:bd:7a:50:16:a9:6d:
         85:cf:80:c1:45:50:f8:56:b4:c8:3a:25:db:3f:2c:f9:e2:35:
         07:ea:fb:37:ee:59:2c:ea:8f:af:03:a7:5f:a0:ef:2a:a4:11:
         ed:28:c5:c9:cf:a5:81:98:72:72:ab:5f:99:89:cd:5f:f2:b3:
         ec:2c:99:ec:ed:14:e5:46:d2:a7:6e:a1:b3:93:de:54:74:c5:
         0f:49:9e:21:d3:53:b3:5a:dd:00:d6:ce:8b:cd:bb:bf:39:a5:
         bd:61:8d:8f:bc:ce:20:e5:c1:92:51:80:62:a5:62:62:aa:6e:
         3e:6b:e7:7d:ba:4c:75:26:a9:95:e0:e4:9f:bf:f1:46:a5:77:
         e0:df:23:0c:61:fd:51:13:38:60:65:f2:32:9e:40:06:5f:fe:
         c7:f1:ac:db:53:f0:55:25:33:7e:ba:19:f4:f5:0f:60:7d:93:
         f3:5a:03:fa:78:0b:5b:9a:1b:d6:27:d6:fb:21:c2:1a:ba:05:
         27:69:55:8e:4a:f5:fc:51:a0:91:b2:74:11:f9:cc:cf:e3:a1:
         cc:11:73:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:59 2026 by rpki-client