Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft
File:                     TC9Y05SvcD-57w_FN77Q6X23Wo8.mft (raw, json)
Hash identifier:          h4i6g/LmMpwLmzpuDhEQQ7nA/LlLQDUCuq1Zfaqexmo=
Subject key identifier:   9A:59:40:26:6B:06:10:05:18:62:CA:D9:27:89:80:03:54:56:58:45
Authority key identifier: 4C:2F:58:D3:94:AF:70:3F:B9:EF:0F:C5:37:BE:D0:E9:7D:B7:5A:8F
Certificate issuer:       /CN=4c2f58d394af703fb9ef0fc537bed0e97db75a8f
Certificate serial:       019D38D36D181275FEA075192FF8E789A98C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TC9Y05SvcD-57w_FN77Q6X23Wo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft
Manifest number:          1824
Signing time:             Sun 29 Mar 2026 09:01:13 +0000
Manifest this update:     Sun 29 Mar 2026 09:01:13 +0000
Manifest next update:     Mon 30 Mar 2026 09:01:13 +0000
Files and hashes:         1: TC9Y05SvcD-57w_FN77Q6X23Wo8.crl (hash: x0gB3xvpR4jpZyPicZQq3gpffHcDbjQOBJfiy4Tg7qo=)
                          2: f1_YlMHXkfEcxm8CmCBrCLxkGqk.roa (hash: nGiLxaL0gxMQlJ8QNtQpsASY+2PMktxV9lPqNFVspg0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TC9Y05SvcD-57w_FN77Q6X23Wo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 09:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:6d:18:12:75:fe:a0:75:19:2f:f8:e7:89:a9:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c2f58d394af703fb9ef0fc537bed0e97db75a8f
        Validity
            Not Before: Mar 29 09:01:13 2026 GMT
            Not After : Mar 30 09:01:13 2026 GMT
        Subject: CN=9a5940266b0610051862cad92789800354565845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fb:98:f8:56:38:63:74:de:ba:59:92:66:09:
                    23:17:10:41:97:7a:8c:cd:cb:78:b6:2c:ca:87:9c:
                    61:5b:f0:b5:8f:35:e0:dc:25:6d:f5:41:3a:51:9e:
                    11:79:61:ac:12:82:3b:51:c7:41:06:4c:b3:f2:e6:
                    37:80:cb:45:f5:ea:5f:33:e4:76:d4:48:d9:bd:d6:
                    47:a8:8f:3d:ec:7c:57:5b:c9:6f:c8:63:1c:30:39:
                    01:a5:6c:99:de:06:98:27:70:ad:e2:c5:4f:4b:0b:
                    0a:3e:dd:fc:5b:d2:ab:a7:eb:0b:c0:f9:f9:af:5d:
                    8f:a4:37:e4:3d:8f:ee:7e:71:66:64:c8:74:72:b3:
                    07:92:02:7f:a1:56:51:44:e9:83:07:26:92:0f:79:
                    e4:08:b8:3d:c7:ab:8b:e2:3f:51:32:5f:f5:9e:f1:
                    88:dc:4b:99:f1:27:94:e9:a3:e3:93:aa:20:dc:a4:
                    8c:8e:af:dc:8d:99:e6:0d:8c:98:4b:73:f5:47:c1:
                    1e:d9:7d:bd:ed:2b:e8:04:1c:70:1b:cc:fd:de:87:
                    d3:34:cc:0c:a3:8b:e6:18:37:58:70:de:ea:0b:f4:
                    62:f6:94:97:9d:cc:49:98:24:13:5d:fa:96:49:34:
                    ec:a5:5c:e6:bf:0f:5b:3a:04:37:d6:98:1c:22:11:
                    e1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:59:40:26:6B:06:10:05:18:62:CA:D9:27:89:80:03:54:56:58:45
            X509v3 Authority Key Identifier:
                keyid:4C:2F:58:D3:94:AF:70:3F:B9:EF:0F:C5:37:BE:D0:E9:7D:B7:5A:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TC9Y05SvcD-57w_FN77Q6X23Wo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:5b:aa:32:39:a1:12:b3:34:1a:20:93:39:6b:d8:5d:25:86:
         82:18:87:39:32:30:56:8b:3d:3c:69:06:19:4a:c6:5b:79:97:
         2a:3f:dd:3f:6c:7b:9f:34:a8:f4:a3:25:fa:94:b3:ad:10:15:
         eb:9b:44:ba:d6:c6:a1:a3:4b:eb:53:83:68:f9:c6:8a:f8:22:
         18:ec:56:53:30:91:d7:60:3c:34:d1:2b:ad:e6:fc:8c:67:d5:
         90:6b:d8:ec:c9:ca:c9:f1:b0:ad:1a:82:79:03:d6:2f:62:ac:
         60:73:4c:d4:b8:58:9d:02:ed:85:8a:27:0f:f0:ea:66:de:c2:
         12:21:da:63:f8:2e:5f:a4:f7:c8:e7:2f:40:91:f6:3c:22:4d:
         08:97:ee:28:d2:ce:9b:c8:7a:5a:29:bf:bd:ef:f9:61:f0:82:
         37:c6:0d:93:df:0f:89:a5:81:f7:2b:31:4b:a5:84:53:5a:bf:
         8c:4e:af:62:3b:54:16:65:81:08:a7:fe:8f:37:4a:fc:2d:c9:
         d7:cd:71:c6:ba:b2:bf:ac:4f:35:80:c9:7d:c0:b8:e3:e8:50:
         6f:f9:02:65:db:e6:f1:e8:e2:1d:06:aa:f0:60:4b:7f:97:a9:
         fc:2e:72:04:63:44:b1:69:96:69:c8:84:b0:bb:3e:e3:4b:12:
         01:75:2d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:12:02 2026 by rpki-client