Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
File:                     TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft (raw, json)
Hash identifier:          uNx3XAWFn7H0xPT4ICiTNtBg4Q8gTKzO5qcMN+G94bo=
Subject key identifier:   03:7F:72:D8:81:F8:BF:0E:03:1E:EB:23:96:AA:09:BD:6B:B7:68:27
Authority key identifier: 4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
Certificate issuer:       /CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Certificate serial:       019CAC4759D1E02C0932D354ECD954BCF1C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
Manifest number:          184A
Signing time:             Mon 02 Mar 2026 02:01:23 +0000
Manifest this update:     Mon 02 Mar 2026 02:01:23 +0000
Manifest next update:     Tue 03 Mar 2026 02:01:23 +0000
Files and hashes:         1: AwY5mgjpthmtObHXqwAVAnajhhs.roa (hash: Ynq5lonnqADLu0ss1thtGFYZaU4FINs+79TFKUmEVMc=)
                          2: HBpn81d4cG4_UILVsdO8exzlDsY.roa (hash: kRgmgXZK5yKUe+saBJuegm6bkvNmijxbzes8bqH8BJE=)
                          3: Kpj-186fjuAYRRYnilKKfHVGN8E.roa (hash: W4eIu6BlkL603t8W8JuwGE33q4DgMOfHpuuHjrT/r2s=)
                          4: NueqQvkP6OwbYq3KeGusJiI5nB4.roa (hash: Iwo1uDTct62657OX8teLFspmVyOSx/FLeOTjd7KJmFk=)
                          5: TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl (hash: zklycJ0rmOrsMXVSzKjhKWEXxPJL0hnb9mSNcayzF9Y=)
                          6: XhbfkmgppgGaa0jwxEEK1QpmG_o.roa (hash: RblW9p63Q8/3oZMyKn6Kq61NaEzW9XB/T1oxdZPwAPk=)
                          7: hFJA5_fA_Gp7BCxbMO_bes9nk40.roa (hash: s64nTqpmoBBkk6Hywj8GwfB0MNxG8qecnHtsYCweNdk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:47:59:d1:e0:2c:09:32:d3:54:ec:d9:54:bc:f1:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
        Validity
            Not Before: Mar  2 02:01:23 2026 GMT
            Not After : Mar  3 02:01:23 2026 GMT
        Subject: CN=037f72d881f8bf0e031eeb2396aa09bd6bb76827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:a6:cc:37:44:5a:69:cb:3f:cb:1a:7e:0d:b3:
                    8d:00:e5:d9:10:36:79:79:52:de:f5:ae:31:88:93:
                    55:a7:bc:0e:6a:02:f1:cf:75:75:9c:4a:a1:bf:f6:
                    65:ca:12:15:8a:1f:ee:69:7d:85:f3:1f:2a:60:c7:
                    dd:8d:b3:bf:4e:f9:92:d6:3e:60:cb:6c:32:1b:b0:
                    b8:ee:93:1b:9d:2d:56:6b:90:78:5b:b2:f0:8e:14:
                    15:07:96:ff:82:b5:c8:dc:cb:d8:0a:6b:27:1b:88:
                    cc:d8:b9:8d:1c:c1:7d:92:3d:70:99:1f:52:98:06:
                    17:16:c6:62:54:9c:13:1f:2a:9c:b3:04:36:23:ce:
                    bc:9c:df:10:6c:e1:a2:36:08:1b:1a:b3:ea:26:df:
                    1c:72:58:4b:dc:69:0e:a3:58:52:29:8f:bb:76:d3:
                    1a:ec:73:6b:0f:e0:18:1b:62:f8:68:cd:d0:f4:98:
                    2e:bf:15:3a:30:1b:e4:2e:1e:42:cd:93:7d:81:9e:
                    cf:ba:d1:9f:47:e2:3a:12:35:0c:d5:bf:93:31:a3:
                    34:a1:6c:d0:3c:30:38:d5:6c:74:45:30:f1:79:15:
                    48:52:e2:76:28:01:b9:3a:fa:c4:9b:cf:a9:e9:4c:
                    d6:58:8a:61:3d:84:c7:64:c2:1d:74:4c:85:e0:fe:
                    86:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:7F:72:D8:81:F8:BF:0E:03:1E:EB:23:96:AA:09:BD:6B:B7:68:27
            X509v3 Authority Key Identifier:
                keyid:4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:e4:9f:b6:cf:04:cd:90:80:eb:06:4d:ae:6f:ba:8e:89:1e:
         71:11:2d:01:d8:4e:04:76:b6:d4:0d:c3:6a:64:28:4c:69:f5:
         23:e7:f6:96:36:f0:21:5a:19:7b:b0:87:a2:d6:5e:77:ea:f8:
         27:79:83:db:e3:64:68:c3:09:a0:f2:64:6a:99:c6:17:4d:a0:
         40:d2:ec:8e:96:2e:ac:6d:ac:6f:7d:0c:d8:57:56:6a:2f:99:
         b8:cb:4b:eb:19:09:c8:5d:d3:55:98:d4:b6:fa:46:c3:0e:90:
         68:1a:80:32:2c:08:a6:1a:02:e3:c8:9b:f4:7b:e3:8a:1e:0e:
         a0:9b:2a:61:63:cc:91:35:1f:31:9c:87:c1:af:50:6a:cc:45:
         39:b1:91:f2:47:54:b2:81:bf:71:49:d5:07:b3:1e:3b:d6:77:
         1d:f2:c1:ff:16:24:07:3b:c2:08:8e:52:04:71:e7:37:3a:3a:
         8f:d0:54:23:83:99:87:d8:56:97:6a:8a:3f:bd:da:56:45:04:
         c6:e6:25:b8:3c:1e:75:4a:55:1e:b1:58:6b:05:fa:b8:be:6a:
         04:b6:0d:66:8c:cd:52:0a:38:e2:44:bc:a3:1f:fc:36:ef:95:
         ca:a8:4d:f2:a0:73:7f:d8:81:4b:cf:c8:d3:40:ff:25:83:0d:
         b8:24:f0:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysR1nR4CwJMtNU7NlUvPHHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlY2ExMDVjZTRhZjZjMjFjZDQyOWU5OTJkMDZlYTdkMDZk
OGE1NmQwHhcNMjYwMzAyMDIwMTIzWhcNMjYwMzAzMDIwMTIzWjAzMTEwLwYDVQQD
EygwMzdmNzJkODgxZjhiZjBlMDMxZWViMjM5NmFhMDliZDZiYjc2ODI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+qbMN0Raacs/yxp+DbONAOXZEDZ5
eVLe9a4xiJNVp7wOagLxz3V1nEqhv/ZlyhIVih/uaX2F8x8qYMfdjbO/TvmS1j5g
y2wyG7C47pMbnS1Wa5B4W7LwjhQVB5b/grXI3MvYCmsnG4jM2LmNHMF9kj1wmR9S
mAYXFsZiVJwTHyqcswQ2I868nN8QbOGiNggbGrPqJt8cclhL3GkOo1hSKY+7dtMa
7HNrD+AYG2L4aM3Q9JguvxU6MBvkLh5CzZN9gZ7PutGfR+I6EjUM1b+TMaM0oWzQ
PDA41Wx0RTDxeRVIUuJ2KAG5OvrEm8+p6UzWWIphPYTHZMIddEyF4P6GOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAN/ctiB+L8OAx7rI5aqCb1rt2gnMB8GA1UdIwQY
MBaAFE7KEFzkr2whzUKemS0G6n0G2KVtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHNvUVhPU3ZiQ0hOUXA2WkxRYnFmUWJZcFcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jM2E4NWQtOWQwYi00NTYyLTkyMzgt
NDZlZTBjZDdmY2JhLzEvVHNvUVhPU3ZiQ0hOUXA2WkxRYnFmUWJZcFcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9jM2E4NWQtOWQwYi00NTYyLTkyMzgtNDZlZTBjZDdmY2Jh
LzEvVHNvUVhPU3ZiQ0hOUXA2WkxRYnFmUWJZcFcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP+Sfts8E
zZCA6wZNrm+6jokecREtAdhOBHa21A3DamQoTGn1I+f2ljbwIVoZe7CHotZed+r4
J3mD2+NkaMMJoPJkapnGF02gQNLsjpYurG2sb30M2FdWai+ZuMtL6xkJyF3TVZjU
tvpGww6QaBqAMiwIphoC48ib9Hvjih4OoJsqYWPMkTUfMZyHwa9QasxFObGR8kdU
soG/cUnVB7MeO9Z3HfLB/xYkBzvCCI5SBHHnNzo6j9BUI4OZh9hWl2qKP73aVkUE
xuYluDwedUpVHrFYawX6uL5qBLYNZozNUgo44kS8ox/8Nu+VyqhN8qBzf9iBS8/I
00D/JYMNuCTwRw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:57:50 2026 by rpki-client