Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft
File:                     TC9Y05SvcD-57w_FN77Q6X23Wo8.mft (raw, json)
Hash identifier:          vh3ODbf5YgiJV0fIoCVGsZtAfqBglNKNDpUpfNZ8078=
Subject key identifier:   78:32:D1:9A:1A:1F:32:22:EF:B6:CB:34:08:C9:F0:A1:30:B1:C7:AB
Authority key identifier: 4C:2F:58:D3:94:AF:70:3F:B9:EF:0F:C5:37:BE:D0:E9:7D:B7:5A:8F
Certificate issuer:       /CN=4c2f58d394af703fb9ef0fc537bed0e97db75a8f
Certificate serial:       01A08E699095462ECB26A1B61181A7BD2DEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TC9Y05SvcD-57w_FN77Q6X23Wo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft
Manifest number:          19DE
Signing time:             Fri 11 Sep 2026 03:01:17 +0000
Manifest this update:     Fri 11 Sep 2026 03:01:17 +0000
Manifest next update:     Sat 12 Sep 2026 03:01:17 +0000
Files and hashes:         1: TC9Y05SvcD-57w_FN77Q6X23Wo8.crl (hash: VIhuorgUbcKBJKTsTCNzblAno7WVADQxsg6NphtgZiM=)
                          2: f1_YlMHXkfEcxm8CmCBrCLxkGqk.roa (hash: nGiLxaL0gxMQlJ8QNtQpsASY+2PMktxV9lPqNFVspg0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TC9Y05SvcD-57w_FN77Q6X23Wo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 12 Sep 2026 03:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8e:69:90:95:46:2e:cb:26:a1:b6:11:81:a7:bd:2d:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c2f58d394af703fb9ef0fc537bed0e97db75a8f
        Validity
            Not Before: Sep 11 03:01:17 2026 GMT
            Not After : Sep 12 03:01:17 2026 GMT
        Subject: CN=7832d19a1a1f3222efb6cb3408c9f0a130b1c7ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:98:74:1f:62:14:01:91:1d:0a:61:43:82:dd:
                    13:4b:11:23:ab:07:6c:9c:0a:10:c9:65:bb:8b:12:
                    90:e4:f7:f7:56:d4:20:41:99:8f:00:82:2d:73:ea:
                    cf:25:10:30:bd:a3:f6:60:07:0c:c8:7a:98:0f:5b:
                    a8:65:6b:0d:de:ea:cf:1e:3b:bb:9c:cc:ea:5c:fb:
                    2d:d4:ee:0c:62:10:a6:37:d9:94:23:e8:99:d1:df:
                    9c:20:85:3c:d8:e7:69:46:4b:48:8e:a1:03:b0:b1:
                    74:53:c9:da:a2:a3:55:f1:37:ee:bc:4a:d3:f5:d4:
                    dd:67:53:5d:33:35:cd:f3:ec:de:22:2b:c4:e9:bd:
                    bd:2f:53:20:0f:4e:6b:a7:74:09:2e:30:cc:35:ea:
                    d0:c3:31:18:94:11:5f:a0:8e:5f:63:c7:48:b8:23:
                    21:fc:40:b0:02:c0:ab:d7:da:ff:aa:06:9b:a8:ec:
                    40:54:5d:34:ae:12:41:97:20:3a:0d:31:b2:35:1c:
                    e8:cf:d4:0e:63:2b:55:98:5e:49:2e:c3:15:9e:53:
                    d8:5e:38:2e:5e:45:19:36:fc:07:ef:a0:4d:25:9e:
                    77:37:be:8c:4d:f7:8d:c2:f2:0d:ee:ff:5f:2a:ad:
                    eb:5e:1c:f9:c9:d0:01:3e:ee:36:be:20:74:7b:90:
                    68:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:32:D1:9A:1A:1F:32:22:EF:B6:CB:34:08:C9:F0:A1:30:B1:C7:AB
            X509v3 Authority Key Identifier:
                keyid:4C:2F:58:D3:94:AF:70:3F:B9:EF:0F:C5:37:BE:D0:E9:7D:B7:5A:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TC9Y05SvcD-57w_FN77Q6X23Wo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:d6:c1:a6:7b:86:05:76:45:55:21:57:e9:13:40:66:35:89:
         ac:fb:a1:e1:08:7c:07:80:10:9c:de:95:4e:c6:a5:dd:6b:42:
         92:cb:0b:74:86:35:6a:70:61:1f:cc:9f:45:c9:61:a3:05:c0:
         fb:b4:7f:40:72:e6:0c:c7:a5:e7:46:36:b0:f5:1e:3c:24:02:
         65:4a:69:91:ba:30:fb:48:85:20:df:cb:64:2e:e3:47:a1:e7:
         50:52:b6:50:ed:d2:4d:2d:a8:50:12:2c:66:bd:43:b3:13:14:
         9c:70:89:5d:7e:cd:36:25:1e:db:2b:a4:88:a9:05:d1:33:f2:
         81:07:57:e4:9e:2a:c0:b2:df:f3:be:32:8c:6e:5b:7e:6b:cb:
         5a:74:8b:6f:62:aa:95:5c:94:24:7d:1e:a9:6a:32:da:f4:08:
         88:85:a2:67:8b:ad:08:18:d8:81:48:61:d5:0e:70:51:de:38:
         6d:b5:61:e0:3b:dc:80:7f:8a:54:28:39:74:a2:e6:c1:99:27:
         86:6e:a4:4f:d4:13:72:e8:e8:9e:fd:69:dc:df:ab:12:b4:7c:
         66:97:ac:e4:7b:ff:32:2d:7e:b5:4a:d6:bd:33:0b:d0:48:bf:
         2b:62:9c:1c:7a:f3:fc:72:74:1b:65:8c:9d:13:c8:25:fb:3f:
         43:5c:ce:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 10:37:32 2026 by rpki-client