Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft
File:                     TOCCAEkieEhNbIj1OGuns5aWy5Y.mft (raw, json)
Hash identifier:          twwtaAKGYjMk5pP6/Otns9gRQRtUHXMtLICGdow0LPo=
Subject key identifier:   47:40:40:86:83:AA:A2:4C:63:6F:70:0E:C7:5B:65:92:84:A2:4F:EB
Authority key identifier: 4C:E0:82:00:49:22:78:48:4D:6C:88:F5:38:6B:A7:B3:96:96:CB:96
Certificate issuer:       /CN=4ce08200492278484d6c88f5386ba7b39696cb96
Certificate serial:       019CABD9728156C2CF181817314663DD2529
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TOCCAEkieEhNbIj1OGuns5aWy5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft
Manifest number:          0F19
Signing time:             Mon 02 Mar 2026 00:01:20 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:20 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:20 +0000
Files and hashes:         1: TOCCAEkieEhNbIj1OGuns5aWy5Y.crl (hash: fJL5vkG8XY7sG0ZnqQF9WM5c/X0s5teu1QtWSPnf2Q0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TOCCAEkieEhNbIj1OGuns5aWy5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:72:81:56:c2:cf:18:18:17:31:46:63:dd:25:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ce08200492278484d6c88f5386ba7b39696cb96
        Validity
            Not Before: Mar  2 00:01:20 2026 GMT
            Not After : Mar  3 00:01:20 2026 GMT
        Subject: CN=4740408683aaa24c636f700ec75b659284a24feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:76:27:e3:aa:ca:f5:5b:49:23:fe:4b:25:c6:
                    53:e7:57:a5:3e:4f:a4:52:46:0e:ca:df:a2:c5:d2:
                    44:f6:72:ad:3a:66:a2:eb:0d:81:e2:0e:a9:d7:76:
                    9a:69:29:bd:21:8a:d6:c4:03:d5:03:a3:f4:f6:62:
                    e2:fb:84:7a:5d:09:a3:74:a2:6c:c2:0d:1d:ac:4d:
                    f3:98:63:cb:eb:5e:3c:19:1c:7d:f4:07:70:38:ec:
                    58:27:2d:f9:12:de:53:f0:d2:25:f7:bd:0b:26:da:
                    14:c3:15:30:07:39:47:c1:4d:4d:63:51:e0:b7:bc:
                    eb:20:dd:3f:28:33:72:12:d7:18:6f:78:96:82:cc:
                    de:6e:6b:c9:e0:44:28:90:f5:0e:b1:79:fc:94:31:
                    76:0c:1f:9e:8e:d5:c8:38:fb:c3:79:6c:4a:4b:02:
                    0f:69:9e:24:43:48:bd:93:2c:42:cb:73:ce:77:a2:
                    05:df:61:1c:7c:ed:5f:c8:9d:0a:8c:96:41:26:e2:
                    34:11:7b:54:a8:56:57:b9:06:df:db:e9:32:8d:d8:
                    a4:13:1e:20:71:ff:30:05:03:84:99:f3:06:68:f5:
                    a4:f9:e8:0f:99:25:34:58:a4:74:aa:1a:61:78:54:
                    41:30:3a:72:26:9b:b3:e2:1f:bb:91:bf:eb:6e:8b:
                    08:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:40:40:86:83:AA:A2:4C:63:6F:70:0E:C7:5B:65:92:84:A2:4F:EB
            X509v3 Authority Key Identifier:
                keyid:4C:E0:82:00:49:22:78:48:4D:6C:88:F5:38:6B:A7:B3:96:96:CB:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOCCAEkieEhNbIj1OGuns5aWy5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:db:06:77:9a:78:24:b5:d3:0f:0b:58:15:b7:68:c1:35:4c:
         53:58:92:61:72:a2:53:4e:b1:c1:35:35:8c:24:ac:83:61:05:
         b6:69:ad:bf:f1:92:33:2d:17:31:f6:72:cf:88:60:74:ee:57:
         8e:57:cd:fd:db:92:da:c5:61:b8:91:fd:91:c6:56:71:2b:5d:
         39:4a:51:c7:70:71:cd:00:8f:bf:f9:56:98:c5:7d:0a:41:80:
         33:d8:3b:04:87:6a:64:67:cb:e5:40:be:06:01:60:1a:7b:4d:
         32:e7:fe:f2:b7:7a:08:a9:49:30:78:03:dc:23:b9:b6:0f:dc:
         71:fa:8d:cc:0a:9b:f1:c6:a3:48:a5:d6:2b:12:87:43:7b:2a:
         84:a0:17:5b:5d:22:3b:5c:63:91:10:1b:dd:c2:95:91:05:f4:
         30:20:d7:d8:b5:7d:66:a2:93:c3:7c:03:59:63:12:21:aa:ab:
         a0:39:86:d6:b8:db:19:23:f3:a8:8c:2e:12:26:1f:64:8e:25:
         c1:b7:0c:a1:3a:b7:b7:01:52:fe:06:d1:e0:30:c7:40:be:c3:
         e0:66:e8:bc:6a:64:bd:d9:45:5c:ea:85:ba:6a:4f:0f:7a:30:
         e9:35:a6:44:af:0c:44:dd:58:c6:03:ff:d8:0d:a2:8d:39:1e:
         02:6c:51:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2XKBVsLPGBgXMUZj3SUpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZTA4MjAwNDkyMjc4NDg0ZDZjODhmNTM4NmJhN2IzOTY5
NmNiOTYwHhcNMjYwMzAyMDAwMTIwWhcNMjYwMzAzMDAwMTIwWjAzMTEwLwYDVQQD
Eyg0NzQwNDA4NjgzYWFhMjRjNjM2ZjcwMGVjNzViNjU5Mjg0YTI0ZmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3Yn46rK9VtJI/5LJcZT51elPk+k
UkYOyt+ixdJE9nKtOmai6w2B4g6p13aaaSm9IYrWxAPVA6P09mLi+4R6XQmjdKJs
wg0drE3zmGPL6148GRx99AdwOOxYJy35Et5T8NIl970LJtoUwxUwBzlHwU1NY1Hg
t7zrIN0/KDNyEtcYb3iWgszebmvJ4EQokPUOsXn8lDF2DB+ejtXIOPvDeWxKSwIP
aZ4kQ0i9kyxCy3POd6IF32EcfO1fyJ0KjJZBJuI0EXtUqFZXuQbf2+kyjdikEx4g
cf8wBQOEmfMGaPWk+egPmSU0WKR0qhpheFRBMDpyJpuz4h+7kb/rbosI5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEdAQIaDqqJMY29wDsdbZZKEok/rMB8GA1UdIwQY
MBaAFEzgggBJInhITWyI9Thrp7OWlsuWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE9DQ0FFa2llRWhOYklqMU9HdW5zNWFXeTVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8yZDU0MmQtMWVjNS00OTQzLWI2M2Ut
OTE1MTIwYjYzMDkzLzEvVE9DQ0FFa2llRWhOYklqMU9HdW5zNWFXeTVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8yZDU0MmQtMWVjNS00OTQzLWI2M2UtOTE1MTIwYjYzMDkz
LzEvVE9DQ0FFa2llRWhOYklqMU9HdW5zNWFXeTVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsdsGd5p4
JLXTDwtYFbdowTVMU1iSYXKiU06xwTU1jCSsg2EFtmmtv/GSMy0XMfZyz4hgdO5X
jlfN/duS2sVhuJH9kcZWcStdOUpRx3BxzQCPv/lWmMV9CkGAM9g7BIdqZGfL5UC+
BgFgGntNMuf+8rd6CKlJMHgD3CO5tg/ccfqNzAqb8cajSKXWKxKHQ3sqhKAXW10i
O1xjkRAb3cKVkQX0MCDX2LV9ZqKTw3wDWWMSIaqroDmG1rjbGSPzqIwuEiYfZI4l
wbcMoTq3twFS/gbR4DDHQL7D4GbovGpkvdlFXOqFumpPD3ow6TWmRK8MRN1YxgP/
2A2ijTkeAmxRCg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:01:06 2026 by rpki-client