Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft
File:                     TC9Y05SvcD-57w_FN77Q6X23Wo8.mft (raw, json)
Hash identifier:          RwTeA+8JH8xQ/7OKBoaWXM+ncajngnZpOGGTniUT0A4=
Subject key identifier:   CE:08:0D:10:21:7E:2B:9C:3C:F4:52:CA:25:88:02:3B:FD:0B:31:6E
Authority key identifier: 4C:2F:58:D3:94:AF:70:3F:B9:EF:0F:C5:37:BE:D0:E9:7D:B7:5A:8F
Certificate issuer:       /CN=4c2f58d394af703fb9ef0fc537bed0e97db75a8f
Certificate serial:       01A17FCFEFFE69401749D22D1158260917C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TC9Y05SvcD-57w_FN77Q6X23Wo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft
Manifest number:          1A5B
Signing time:             Wed 28 Oct 2026 00:01:35 +0000
Manifest this update:     Wed 28 Oct 2026 00:01:35 +0000
Manifest next update:     Thu 29 Oct 2026 00:01:35 +0000
Files and hashes:         1: TC9Y05SvcD-57w_FN77Q6X23Wo8.crl (hash: 5tgL6ssr74TQRfzJfM1nB2CLvmFhKGo5CjItYDrhYMo=)
                          2: f1_YlMHXkfEcxm8CmCBrCLxkGqk.roa (hash: nGiLxaL0gxMQlJ8QNtQpsASY+2PMktxV9lPqNFVspg0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TC9Y05SvcD-57w_FN77Q6X23Wo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7f:cf:ef:fe:69:40:17:49:d2:2d:11:58:26:09:17:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c2f58d394af703fb9ef0fc537bed0e97db75a8f
        Validity
            Not Before: Oct 28 00:01:35 2026 GMT
            Not After : Oct 29 00:01:35 2026 GMT
        Subject: CN=ce080d10217e2b9c3cf452ca2588023bfd0b316e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:8a:f3:47:13:2b:59:a9:dc:fa:90:cc:64:ea:
                    93:96:d3:17:17:56:7f:49:ee:bc:c7:88:17:ba:79:
                    b7:bb:48:6b:39:68:07:21:05:04:e8:ca:ff:c6:e9:
                    aa:79:c1:fb:79:92:4c:a9:f6:b2:30:85:f2:9f:e5:
                    8d:6e:30:09:3f:5c:3f:68:0c:5b:37:b0:49:6c:ed:
                    d6:c6:d7:6d:33:f1:4a:99:1a:33:fc:d9:79:aa:e1:
                    52:f9:72:ef:cf:e4:19:f0:40:99:71:c2:35:2c:de:
                    b4:be:da:e8:67:ef:37:78:a3:c7:1b:01:0e:4f:d4:
                    64:ff:69:39:fe:17:7a:6e:37:ff:df:93:29:90:ce:
                    c3:ae:26:24:a8:1f:c8:78:fb:4c:a7:1f:dc:03:0b:
                    51:14:bf:5f:b7:2e:e8:b2:94:00:d2:de:48:13:83:
                    bd:79:11:05:89:9f:12:7b:66:90:c7:fd:e9:2a:9a:
                    63:d1:57:e1:e7:0c:91:a0:d6:70:64:3d:89:15:91:
                    9f:d4:ac:b2:1b:2e:4a:ab:b4:32:25:b5:62:1b:ef:
                    33:cc:8f:7b:71:aa:00:83:d8:ef:ce:dc:07:6d:75:
                    84:21:16:9f:40:c6:29:19:74:7a:d1:a6:5d:37:4b:
                    5e:7f:89:29:6e:94:7c:5f:41:f3:6c:34:89:bb:44:
                    20:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:08:0D:10:21:7E:2B:9C:3C:F4:52:CA:25:88:02:3B:FD:0B:31:6E
            X509v3 Authority Key Identifier:
                keyid:4C:2F:58:D3:94:AF:70:3F:B9:EF:0F:C5:37:BE:D0:E9:7D:B7:5A:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TC9Y05SvcD-57w_FN77Q6X23Wo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:11:a3:3b:0d:c7:3c:f4:91:ec:1f:b7:3f:bb:1d:cb:0a:85:
         a2:86:43:38:35:7e:ab:aa:ae:ea:29:fc:dc:43:a7:64:b6:90:
         c4:aa:79:2a:da:a8:a1:79:75:f8:55:5b:d9:46:60:7e:e2:b2:
         8d:31:84:ba:63:36:5f:92:6e:67:7c:68:15:07:a4:e8:de:4e:
         b1:af:b7:e8:20:df:5f:29:f7:70:25:19:32:0a:79:1a:75:98:
         38:fa:77:12:76:6f:da:71:98:b6:e8:06:b5:fb:3b:f9:0f:1b:
         07:79:9d:d7:80:6f:08:9a:1e:62:6b:ab:ec:a4:e4:8c:0f:9e:
         ed:c4:c2:d9:a9:90:10:58:2f:b2:4b:10:eb:22:ab:55:3f:28:
         5e:a5:bd:49:72:7a:49:9d:b6:e1:03:c7:c8:fc:18:69:30:b9:
         76:c7:b7:15:34:73:e6:2e:b8:6f:21:65:05:8c:ca:3f:70:1d:
         ce:fb:da:82:3f:bf:cd:52:c6:0c:b6:b1:bb:d9:a2:a4:66:3f:
         a9:1c:7e:18:35:16:1e:eb:aa:4c:8b:ec:f3:51:d7:c4:44:3a:
         e4:35:64:b8:0c:ff:27:26:a8:4a:ff:35:03:ef:86:b4:b5:50:
         55:36:bf:45:a9:fe:81:6f:fc:45:4e:3e:86:e0:07:75:69:fe:
         93:8a:57:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:40:39 2026 by rpki-client