Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
File:                     TblS7RzXo4A89Nv9NA6nSWMmi6A.mft (raw, json)
Hash identifier:          XEJo9NAr0jbZaYtFPu/6sowvyQDQeteXpVryykbLyno=
Subject key identifier:   DA:6B:11:74:76:2A:8C:06:C8:E1:EA:AB:1E:46:13:82:8D:FD:3D:9F
Authority key identifier: 4D:B9:52:ED:1C:D7:A3:80:3C:F4:DB:FD:34:0E:A7:49:63:26:8B:A0
Certificate issuer:       /CN=4db952ed1cd7a3803cf4dbfd340ea74963268ba0
Certificate serial:       019CACB532864CA5111F45B3915455F9D34B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
Manifest number:          1592
Signing time:             Mon 02 Mar 2026 04:01:21 +0000
Manifest this update:     Mon 02 Mar 2026 04:01:21 +0000
Manifest next update:     Tue 03 Mar 2026 04:01:21 +0000
Files and hashes:         1: TblS7RzXo4A89Nv9NA6nSWMmi6A.crl (hash: ZH96mshJRRZ1o+dKx3E29aKG/iBHfUSiHwrOdajSNN4=)
                          2: VrOdFAUKX1ouwmCsQ9_XlNyNq1s.roa (hash: n2RF1UdtGKXTdxJvkP7iUrdA4Ve98kwr+cqIiG+JbSg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 04:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b5:32:86:4c:a5:11:1f:45:b3:91:54:55:f9:d3:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4db952ed1cd7a3803cf4dbfd340ea74963268ba0
        Validity
            Not Before: Mar  2 04:01:21 2026 GMT
            Not After : Mar  3 04:01:21 2026 GMT
        Subject: CN=da6b1174762a8c06c8e1eaab1e4613828dfd3d9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a7:70:e6:85:57:d7:e2:34:11:30:62:99:a2:
                    b4:51:b7:37:f5:83:56:9d:46:e9:0f:16:54:e6:9b:
                    ac:ce:b3:81:e9:aa:f6:d0:19:c5:dd:0c:bc:68:29:
                    b2:9e:c2:52:de:de:cc:78:55:35:13:ca:cc:85:ce:
                    1a:c7:5b:18:da:f5:ce:7b:c7:31:de:06:eb:a5:a3:
                    df:f4:eb:0b:33:61:0f:51:dc:b8:3c:c1:3c:cf:9a:
                    e3:85:b1:7c:b7:94:b8:69:67:70:83:cc:6b:ca:85:
                    ed:87:5a:7f:65:c8:0b:8f:26:ec:34:d9:5c:3d:35:
                    55:b8:1a:5b:c2:96:fa:54:f4:f2:91:23:07:0d:df:
                    54:ae:27:3c:a3:5b:89:93:79:c7:25:0e:62:43:fd:
                    1b:60:29:ed:6b:50:bd:f6:79:de:65:d9:23:ce:69:
                    f2:f8:69:bd:0d:b9:ce:29:51:f4:ef:bc:2f:14:79:
                    5a:41:27:c4:44:c5:b1:34:65:48:ce:ca:e2:47:2c:
                    dd:80:e4:78:49:8a:3d:2b:24:3e:89:ec:f9:12:cd:
                    7a:d9:f2:e3:cc:88:af:f7:e9:64:11:1c:7e:c6:10:
                    b6:18:dd:8e:b1:56:ab:26:3d:00:65:5f:db:98:1c:
                    f9:33:e0:3b:51:ed:15:44:ae:83:0a:11:9b:f6:24:
                    56:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6B:11:74:76:2A:8C:06:C8:E1:EA:AB:1E:46:13:82:8D:FD:3D:9F
            X509v3 Authority Key Identifier:
                keyid:4D:B9:52:ED:1C:D7:A3:80:3C:F4:DB:FD:34:0E:A7:49:63:26:8B:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TblS7RzXo4A89Nv9NA6nSWMmi6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c4f2e2-0188-4a43-8503-d2601cc12377/1/TblS7RzXo4A89Nv9NA6nSWMmi6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:7c:d8:36:ae:fb:72:e6:fb:b1:a1:0d:da:e6:f2:8e:d9:4b:
         c6:f1:97:f2:de:a0:47:05:c6:b2:75:80:73:b0:f9:44:cc:91:
         48:9f:d2:11:1a:23:53:cb:c1:ff:bb:fc:4d:32:e9:68:ee:45:
         0b:58:6f:93:ab:49:10:ec:5e:75:8b:ec:7c:46:09:0a:67:3e:
         97:21:c7:c6:9d:dd:f0:df:65:3a:ab:0f:8b:37:83:af:87:c2:
         15:6f:99:73:2b:a0:0c:38:69:37:11:77:1a:72:47:76:e9:2b:
         30:52:12:ee:0f:e6:ff:65:b0:35:52:46:59:36:b8:e7:e4:0e:
         ac:0b:b1:77:05:f5:9f:a6:bf:16:fd:2e:65:35:3e:89:3b:90:
         52:7e:79:42:43:54:9f:85:7e:d4:c2:47:89:a5:6a:40:03:9c:
         2f:73:49:3e:50:ba:10:30:ea:7e:eb:80:86:51:f5:94:f6:2c:
         24:38:1e:29:38:c3:e7:a6:24:c2:85:c0:c1:10:42:a4:a9:d8:
         9b:17:41:63:70:98:fe:a2:88:19:50:01:b5:86:d5:1c:b3:05:
         13:3c:85:f9:10:6e:a2:2c:f8:30:a6:6d:e2:bf:87:96:f0:9f:
         52:e5:2a:45:0d:bb:99:6b:88:17:5b:31:30:ad:4b:ad:08:97:
         1f:41:75:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:20:10 2026 by rpki-client