Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
File:                     TaTWGZrsgo9pieLoTOwXdlusXNU.mft (raw, json)
Hash identifier:          0hOMDQ1a8U8qFyHfaVXbcyVcHtU5N0DWja0FMLLKQEs=
Subject key identifier:   06:13:A0:F2:07:B3:EC:9A:C5:B8:6A:59:A8:71:BE:B0:FF:75:47:89
Authority key identifier: 4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
Certificate issuer:       /CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Certificate serial:       019D9850122FCA7742686C4F4240D47947BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
Manifest number:          18C8
Signing time:             Thu 16 Apr 2026 22:01:17 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:17 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:17 +0000
Files and hashes:         1: TaTWGZrsgo9pieLoTOwXdlusXNU.crl (hash: iPgnBWZW7fwhPLZoQQz1lvEXEPK17r3aJHKh1LbMIxs=)
                          2: TgOSFEfASWDSpD8EkyKS9nujPiY.roa (hash: 0PwFXdbWv8R/ss2S++46JT4vsGX/tK0Xl7tQX+Eh9g0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:12:2f:ca:77:42:68:6c:4f:42:40:d4:79:47:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
        Validity
            Not Before: Apr 16 22:01:17 2026 GMT
            Not After : Apr 17 22:01:17 2026 GMT
        Subject: CN=0613a0f207b3ec9ac5b86a59a871beb0ff754789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:90:07:38:13:ca:ae:c8:07:71:da:b7:87:de:
                    4c:94:c4:67:a0:63:1b:f0:d2:4a:07:7a:18:cd:58:
                    83:28:6b:a7:c1:d8:7e:a0:b9:db:7f:f5:28:0d:76:
                    b6:e2:83:81:cc:a9:42:c5:a1:d2:4c:10:94:db:c2:
                    77:28:90:de:07:01:cf:ce:61:f3:c1:42:60:9f:6e:
                    b2:98:3a:97:00:c5:bc:34:be:c2:3b:35:16:4b:ce:
                    51:44:40:93:26:27:b5:8c:ae:4f:bf:06:63:11:af:
                    9f:53:3f:0a:eb:e4:8f:eb:01:8d:64:8b:a2:0a:f3:
                    5e:6c:6a:a6:6b:54:01:1a:d9:74:97:2c:52:3d:f8:
                    95:68:8e:c4:ac:d9:41:4b:ec:1c:42:ff:15:aa:b6:
                    7a:28:80:01:e7:d4:24:38:54:4c:88:7c:c9:89:56:
                    98:f8:ce:fa:ed:2e:cf:cc:03:d1:4e:8d:6a:bb:ca:
                    7c:a4:25:70:22:7f:90:4d:a3:dc:97:93:cd:0e:e6:
                    36:54:d8:d5:a3:b8:00:88:fe:b6:d4:f4:26:76:90:
                    6a:43:9d:6d:ac:e5:0e:b6:f2:00:18:e8:9c:a5:76:
                    82:27:fd:c8:96:ef:53:1f:31:53:07:c8:1b:52:d4:
                    fb:0e:3e:8f:3e:25:76:58:f8:7a:53:46:62:e5:44:
                    72:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:13:A0:F2:07:B3:EC:9A:C5:B8:6A:59:A8:71:BE:B0:FF:75:47:89
            X509v3 Authority Key Identifier:
                keyid:4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:58:22:f4:4b:ee:90:b2:dc:db:e8:00:5a:24:dc:01:a0:56:
         cd:79:48:20:f6:a4:34:82:fc:2f:97:f4:50:a8:bc:4e:25:a0:
         90:3f:93:7a:27:f4:5c:a6:d3:71:78:e9:a2:76:fb:97:ae:b2:
         1e:31:96:c0:01:c6:2a:08:02:87:e4:3a:52:83:ca:21:6b:ca:
         fb:c8:6e:15:2f:3f:70:d4:8e:a2:d7:48:bd:82:14:7b:08:fd:
         d8:39:87:83:41:aa:34:db:6a:84:0c:35:36:13:d7:23:5b:4d:
         ff:d8:de:ad:18:1e:69:97:23:03:a5:b5:0d:36:79:9c:b7:52:
         cf:21:1e:a2:42:9c:e8:2f:d3:93:97:c6:2b:0b:da:f9:ad:aa:
         59:c9:ce:4c:f8:ca:1e:44:37:fd:2e:54:50:7e:8e:67:1a:58:
         af:6c:3f:81:b3:73:44:24:8b:54:49:ad:7f:c7:70:e1:72:2a:
         5b:0e:03:46:9c:9e:65:55:b6:57:e1:77:ca:33:2b:82:0b:5f:
         fd:3d:59:fd:20:0d:81:6f:ab:6b:31:fa:18:93:c9:08:0b:62:
         b8:96:6c:1b:2b:51:22:29:f0:df:3b:0c:85:28:5c:12:e5:be:
         79:62:57:42:1e:0d:58:2e:78:1d:81:aa:27:3b:1f:36:db:6a:
         a6:79:fa:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:40:36 2026 by rpki-client