Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
File:                     TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft (raw, json)
Hash identifier:          Xy96XuBMyJt7ceVc7GX1t/CmG8caXjUFahBc8wj0+2Y=
Subject key identifier:   42:96:63:6E:B0:86:1A:5F:98:52:D6:04:91:F5:2B:21:68:F6:88:1A
Authority key identifier: 4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
Certificate issuer:       /CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Certificate serial:       01A1DF4C417C4F509ECE11D94725CD680371
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
Manifest number:          1AFD
Signing time:             Sun 15 Nov 2026 13:01:18 +0000
Manifest this update:     Sun 15 Nov 2026 13:01:18 +0000
Manifest next update:     Mon 16 Nov 2026 13:01:18 +0000
Files and hashes:         1: AwY5mgjpthmtObHXqwAVAnajhhs.roa (hash: Ynq5lonnqADLu0ss1thtGFYZaU4FINs+79TFKUmEVMc=)
                          2: FEE0W1FvUWZY1yNTAUusq7fzBQA.roa (hash: Hd0jbgNDlWlFVrZYfQAqVLAGgeJbu+X/gxILT2NBZwY=)
                          3: HBpn81d4cG4_UILVsdO8exzlDsY.roa (hash: kRgmgXZK5yKUe+saBJuegm6bkvNmijxbzes8bqH8BJE=)
                          4: Kpj-186fjuAYRRYnilKKfHVGN8E.roa (hash: W4eIu6BlkL603t8W8JuwGE33q4DgMOfHpuuHjrT/r2s=)
                          5: NueqQvkP6OwbYq3KeGusJiI5nB4.roa (hash: Iwo1uDTct62657OX8teLFspmVyOSx/FLeOTjd7KJmFk=)
                          6: TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl (hash: BxEwwHfk8eSeqOFNOe5S/rzyYXdNFMWnCvptC3R1qDQ=)
                          7: XhbfkmgppgGaa0jwxEEK1QpmG_o.roa (hash: RblW9p63Q8/3oZMyKn6Kq61NaEzW9XB/T1oxdZPwAPk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:4c:41:7c:4f:50:9e:ce:11:d9:47:25:cd:68:03:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
        Validity
            Not Before: Nov 15 13:01:18 2026 GMT
            Not After : Nov 16 13:01:18 2026 GMT
        Subject: CN=4296636eb0861a5f9852d60491f52b2168f6881a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6e:62:57:3c:f6:9b:6b:d4:db:99:51:e3:2c:
                    cb:a1:c6:3c:c3:78:9a:69:62:98:2a:54:db:7d:b7:
                    60:2a:90:fb:21:07:ca:f3:64:86:ac:c5:16:9a:20:
                    e5:3d:c8:73:c1:ce:e4:3d:91:88:d6:aa:3d:ca:59:
                    c0:4e:1b:2e:b7:6b:fe:9c:29:37:8e:1b:11:b8:6a:
                    1f:3b:8e:b2:00:b0:9b:e6:d9:11:a1:61:4e:e7:4d:
                    ae:cf:9c:40:73:60:2a:9a:bb:f0:66:04:0e:09:e3:
                    b0:62:d7:25:48:dc:d3:e7:f6:3a:62:f7:f4:27:8e:
                    1f:2b:02:cd:de:5b:1f:f4:03:bf:0a:bc:76:e7:60:
                    e0:80:25:9e:75:10:34:f2:67:c5:12:aa:01:89:df:
                    39:4b:26:e6:1a:77:c5:09:4b:ac:0e:48:9e:6e:cb:
                    8e:f2:0f:b9:57:4c:b3:52:b4:a9:97:d0:31:64:61:
                    da:8a:56:42:bd:eb:7a:d0:2f:a4:fe:f0:b4:2a:68:
                    12:64:4b:c3:45:c9:7a:74:f0:6c:02:af:e1:41:bd:
                    b0:5d:7e:39:22:b3:4f:d4:10:6d:f5:62:fd:7e:ed:
                    92:18:23:fe:20:a2:dd:47:d1:41:0e:77:d4:26:db:
                    91:a4:98:ec:bd:ff:61:64:d7:bf:49:44:32:0b:28:
                    8d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:96:63:6E:B0:86:1A:5F:98:52:D6:04:91:F5:2B:21:68:F6:88:1A
            X509v3 Authority Key Identifier:
                keyid:4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:81:d1:61:09:14:98:10:f5:84:40:cf:fe:30:d7:c0:ed:f2:
         07:8a:38:ab:07:c5:03:a4:7e:31:60:13:63:73:df:9b:87:60:
         59:7c:cf:b2:a5:7a:c3:d0:7c:42:d8:ae:6e:49:20:42:95:9a:
         fc:f0:8c:34:6a:96:fd:f9:e3:04:e7:ad:51:01:85:27:ac:77:
         f7:61:e9:f4:56:e1:ef:53:eb:e5:1e:85:d3:ee:b0:dd:41:2b:
         b6:d6:ae:09:61:aa:45:45:69:35:c5:c3:f5:d3:52:e8:90:c1:
         06:e9:f5:15:40:55:ca:1a:53:79:43:e6:90:42:9c:0e:a8:53:
         bd:70:cb:a8:e8:27:2c:9c:4c:15:b4:4e:8e:ac:c7:45:79:e3:
         39:0d:ec:fd:dc:67:6e:ff:15:2a:d2:04:9f:7e:15:b2:64:d7:
         e2:95:7e:d0:6a:ae:1e:ce:ca:09:83:be:91:09:9d:c5:87:16:
         89:ab:40:95:6a:9c:41:5d:87:d0:52:ab:71:c3:e3:70:d1:20:
         1f:a2:f9:4f:12:31:70:4a:8d:27:5f:10:0a:ff:cf:82:23:d0:
         db:25:46:64:71:66:10:af:9d:d1:48:1d:f5:63:1c:01:0e:fb:
         47:ec:59:29:c4:e3:1e:d0:d7:92:cb:9a:d7:d2:e0:21:c6:1a:
         e4:3b:8e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:51:03 2026 by rpki-client