Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
File:                     TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft (raw, json)
Hash identifier:          xfLa7hFisn3fQ2fe5T7NRSXC7XuLzdC0E9bdkcwoh4o=
Subject key identifier:   E6:68:71:7D:97:50:12:52:7D:93:80:E0:C7:C1:DB:5C:B0:50:64:06
Authority key identifier: 4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19
Certificate issuer:       /CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19
Certificate serial:       01A13C3858BE0754A428ECF1D2AB0B4A08B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
Manifest number:          1131
Signing time:             Wed 14 Oct 2026 21:01:28 +0000
Manifest this update:     Wed 14 Oct 2026 21:01:28 +0000
Manifest next update:     Thu 15 Oct 2026 21:01:28 +0000
Files and hashes:         1: TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl (hash: 2Cdqx72TCn6482iYg3XXQ5HmYxeIdinHV3OO4tLFqJo=)
                          2: mYEf7RuSo0e-j7rjPL7Q9zNgxFc.roa (hash: cGf42p5lM09FOWIL9NbqXkxRKlJYCNacEJNXdW+oi2c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 21:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3c:38:58:be:07:54:a4:28:ec:f1:d2:ab:0b:4a:08:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19
        Validity
            Not Before: Oct 14 21:01:28 2026 GMT
            Not After : Oct 15 21:01:28 2026 GMT
        Subject: CN=e668717d975012527d9380e0c7c1db5cb0506406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:37:a2:84:a8:49:13:b0:ee:9d:20:8b:ae:77:
                    f5:98:74:a2:6a:3a:87:81:0d:0b:d2:05:97:cd:68:
                    2b:73:71:ad:11:14:19:c3:6c:54:9c:f0:6c:cf:49:
                    19:cb:cc:35:7f:83:2e:da:70:57:d0:4b:82:cc:bc:
                    64:3d:9a:63:8f:f1:ce:4d:f9:a7:a3:8c:3d:cc:0b:
                    b1:2a:c6:5d:e5:07:cf:12:26:6c:eb:e8:ab:9e:fd:
                    32:d9:f1:d8:9e:c7:b4:98:fd:5c:1f:aa:37:6b:09:
                    ba:dc:cb:44:a2:65:8f:9b:86:a7:e7:9e:04:02:86:
                    17:a4:30:c9:d0:a6:da:ca:bf:76:6c:ae:9f:79:95:
                    35:e0:d2:8d:22:6f:41:af:f5:06:45:94:ee:59:71:
                    7c:4e:c8:9a:be:10:3d:dd:eb:b3:44:a2:41:87:c7:
                    f5:92:41:b4:79:c8:4a:ef:1a:37:11:a5:f2:3f:ec:
                    7b:4d:a8:a2:08:4b:1b:f9:4f:a5:c4:10:c9:0b:3e:
                    b4:4b:6c:d1:bb:e1:6e:05:9a:90:27:a3:3a:ed:08:
                    bd:19:2a:58:ba:a8:c0:9e:ad:57:63:16:e8:c8:3b:
                    7a:05:af:a3:eb:6e:50:e4:4d:9d:75:97:3c:b0:4f:
                    c6:7e:f1:b8:93:8e:e6:86:27:61:4f:c1:8b:8d:53:
                    dd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:68:71:7D:97:50:12:52:7D:93:80:E0:C7:C1:DB:5C:B0:50:64:06
            X509v3 Authority Key Identifier:
                keyid:4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:25:7b:ed:fe:e4:f4:13:bf:9d:21:41:58:ef:ea:5c:7d:f7:
         ee:40:4a:36:ce:9f:ff:b9:ae:af:3a:af:9e:e7:63:f0:29:73:
         49:f8:52:b4:c0:6a:19:f9:38:38:e8:d5:d5:af:f5:f3:84:d1:
         2d:e4:af:1a:36:ea:2a:ec:91:4c:d2:6f:02:19:39:f8:a0:04:
         fb:98:dc:b8:7b:07:12:86:b6:d7:d2:91:dc:cb:74:3c:c1:3d:
         f0:50:cf:54:11:d7:96:14:5b:56:19:60:19:5d:8e:ef:2c:af:
         24:3c:88:2b:71:fa:f9:b6:3e:6c:7c:26:52:a7:38:10:43:fb:
         b4:99:1f:ef:97:bd:a4:0c:24:10:a8:e0:9a:28:a9:82:9c:88:
         d7:87:a0:a4:80:a5:d0:40:a0:52:d9:c8:2e:f5:3f:cc:a3:0f:
         cf:74:b7:6d:05:e0:86:49:a8:85:6c:4e:ab:c8:12:fc:03:68:
         3c:70:d2:95:48:33:ce:35:e6:9f:75:c4:22:4e:cc:28:d4:19:
         70:5c:6a:39:43:33:da:8f:bc:17:bd:18:73:35:93:30:e7:6a:
         3e:d7:ed:a0:63:d5:2c:8d:6c:37:51:7d:d1:a8:65:9c:be:33:
         5a:1c:f9:a1:52:66:73:cf:79:4a:db:74:6d:ce:e6:61:9a:4b:
         01:30:d8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 08:20:16 2026 by rpki-client