Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft
File:                     TO94CCwHKSqq4kD27P06_bp4uMo.mft (raw, json)
Hash identifier:          Mw/7d40CFIH6hsBLs7eFSlRXygwhQmJWs0HuJSA3gY4=
Subject key identifier:   2C:15:D4:6C:8D:F9:A8:12:A9:AE:65:F3:77:97:58:DC:3A:D6:A6:FF
Authority key identifier: 4C:EF:78:08:2C:07:29:2A:AA:E2:40:F6:EC:FD:3A:FD:BA:78:B8:CA
Certificate issuer:       /CN=4cef78082c07292aaae240f6ecfd3afdba78b8ca
Certificate serial:       019CA8D7A3A80CC70FF5C0ACC35F9D43D0BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TO94CCwHKSqq4kD27P06_bp4uMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft
Manifest number:          05EF
Signing time:             Sun 01 Mar 2026 10:00:30 +0000
Manifest this update:     Sun 01 Mar 2026 10:00:30 +0000
Manifest next update:     Mon 02 Mar 2026 10:00:30 +0000
Files and hashes:         1: DzOZLqQUulch0tfN19TPMP7l7NI.asa (hash: A7v4BAlqHExbGP1jRQY/Od094IwgACqCwokxSz1iOtQ=)
                          2: TO94CCwHKSqq4kD27P06_bp4uMo.crl (hash: 142bzAppqMRu0aP6FWwm3P9aLHfI0JZEV+xwz2yAIqs=)
                          3: vRz02q2XpG2yKdoejA6Edmj_d8k.roa (hash: jskIJxCVtupvjYcRL2UIAykBXf+yZJ8QG3OwF/ylsUg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TO94CCwHKSqq4kD27P06_bp4uMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 09:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a8:d7:a3:a8:0c:c7:0f:f5:c0:ac:c3:5f:9d:43:d0:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cef78082c07292aaae240f6ecfd3afdba78b8ca
        Validity
            Not Before: Mar  1 10:00:30 2026 GMT
            Not After : Mar  2 10:00:30 2026 GMT
        Subject: CN=2c15d46c8df9a812a9ae65f3779758dc3ad6a6ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f5:95:58:e4:c7:7d:5b:77:32:0f:e1:27:f4:
                    02:3d:28:97:9b:f8:90:86:5a:a4:0a:bf:ff:f0:75:
                    2b:46:61:2c:46:65:7c:39:71:82:bb:01:c6:33:47:
                    7d:6a:ec:9e:b9:36:9d:02:a9:e8:74:27:fc:0e:24:
                    59:c2:45:dd:bc:30:75:3d:93:ea:61:95:a9:62:d1:
                    66:f7:06:36:0c:4c:8a:5a:2b:cc:ba:39:1d:1f:10:
                    e8:e0:d2:e2:24:0d:aa:e8:ad:44:24:56:10:6f:08:
                    fa:b0:98:70:2f:c8:7e:c7:31:ba:81:b1:d3:74:71:
                    d9:c1:5c:5d:7a:04:1a:cb:5e:9b:81:9b:84:a0:55:
                    09:97:7e:94:00:50:be:0a:4f:75:dd:d3:cd:75:5a:
                    5c:71:01:56:31:bd:78:91:8b:fd:3d:17:85:d3:9e:
                    02:a5:12:60:05:7f:0f:b8:23:4f:9a:80:26:ea:c9:
                    44:e7:e0:a0:8a:82:27:b9:41:66:08:ab:49:e8:2d:
                    32:e3:40:74:66:93:00:f5:01:91:c2:9b:2e:46:d6:
                    d7:d2:83:e7:be:ae:df:b9:b2:be:5e:8a:e9:c4:7f:
                    c2:cc:15:02:ca:e7:6d:b8:24:08:fc:38:5e:36:30:
                    3c:cc:54:97:12:c5:92:83:92:50:3e:b2:0d:9b:5f:
                    db:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:15:D4:6C:8D:F9:A8:12:A9:AE:65:F3:77:97:58:DC:3A:D6:A6:FF
            X509v3 Authority Key Identifier:
                keyid:4C:EF:78:08:2C:07:29:2A:AA:E2:40:F6:EC:FD:3A:FD:BA:78:B8:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TO94CCwHKSqq4kD27P06_bp4uMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:41:43:9c:15:fa:fc:37:4c:bd:01:bd:f6:db:bf:8c:52:40:
         41:01:37:e7:8f:cc:ce:5f:5d:a7:3e:5d:28:13:fe:60:5b:5d:
         3c:5a:67:8f:5d:47:08:04:fa:f8:f0:91:c9:e3:62:77:55:dc:
         16:24:d1:cc:00:0c:3c:f6:a3:6d:73:63:d3:84:fb:22:b3:4f:
         67:83:df:3d:1c:81:90:33:77:2d:ba:12:f0:d4:14:00:7b:b2:
         46:d3:5f:c4:aa:76:9f:8c:4b:cd:7f:9b:06:1a:33:c6:ed:33:
         b9:44:4d:a4:14:f0:f4:e0:2d:89:6f:74:b6:d0:4d:bc:12:01:
         9f:7c:15:e8:b9:a5:47:32:e8:f9:06:0d:82:17:10:7a:20:8d:
         85:11:32:f7:d6:2e:3f:40:3d:14:3b:be:c7:41:8d:68:19:de:
         95:14:10:c8:0d:bd:1d:0d:5e:ff:ad:5e:17:51:c5:12:19:31:
         14:ab:a8:e5:6d:5d:c2:e6:7b:0e:a9:1d:a5:5d:7d:1a:c3:b8:
         fc:39:c5:7c:0e:99:72:29:c6:87:a6:22:36:ff:38:40:2a:e1:
         5c:b2:a3:31:21:59:71:c7:26:a4:41:7a:0a:74:56:1d:a5:b2:
         33:cb:ab:8e:b7:79:05:32:9e:f0:cb:99:59:49:e7:cb:72:47:
         00:83:54:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:25:01 2026 by rpki-client