Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
File:                     TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft (raw, json)
Hash identifier:          /caxCqfT6IxbkObc2FLusj2Jdw+kc3a1kdqJaHhKCVc=
Subject key identifier:   2C:22:F4:89:D6:62:D8:81:DC:02:A2:1A:60:0A:16:4F:BD:E3:92:E1
Authority key identifier: 4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
Certificate issuer:       /CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Certificate serial:       019D985060269D5C51A1363662B2B43FE436
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
Manifest number:          0810
Signing time:             Thu 16 Apr 2026 22:01:37 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:37 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:37 +0000
Files and hashes:         1: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl (hash: e0Gh7LIH3BdEuAoGZp9euMe0ZAaeK5qI6UC3aBWkcKU=)
                          2: eN5E1N2fbNIwZ9RyYdP9j32arcA.roa (hash: Vg/cG2oIlWZ3XVorMkNOVvWySOFv00wWS3oGrbEzxmU=)
                          3: w9YEoSGGw5FqZxEAWpHoaM4fdnU.roa (hash: +H9ZxdN0LwsnaJ4J/ES/yJYI9G3YZQK2l2602ElBkSM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:60:26:9d:5c:51:a1:36:36:62:b2:b4:3f:e4:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
        Validity
            Not Before: Apr 16 22:01:37 2026 GMT
            Not After : Apr 17 22:01:37 2026 GMT
        Subject: CN=2c22f489d662d881dc02a21a600a164fbde392e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:65:3c:c9:4a:36:cb:95:84:ad:f7:bd:1a:f3:
                    63:90:1b:4a:01:fc:f0:d0:01:04:ec:96:b0:11:95:
                    00:39:6c:50:1d:87:fd:da:1c:02:d9:ab:7f:50:c5:
                    67:cd:77:bc:d8:71:01:18:3e:01:77:2e:14:a4:cf:
                    57:11:e4:c3:0d:a0:c7:92:03:07:75:2a:11:46:10:
                    c1:0e:42:4c:cf:06:31:fc:bc:36:18:2d:54:c1:ae:
                    bd:4b:77:c1:18:e6:b0:99:91:45:a8:d4:fc:e8:59:
                    59:33:38:19:e4:60:82:3d:0f:f5:6a:9c:29:d6:39:
                    34:c8:94:46:92:89:4e:4f:8b:df:28:fd:9e:21:d7:
                    74:7d:05:60:ed:c1:6a:4d:96:f6:7d:fe:1f:12:a0:
                    11:21:51:08:dd:41:39:1d:46:1b:94:0c:5a:56:c7:
                    6d:fe:e6:e0:61:8e:36:d0:f4:fb:17:c1:ac:3d:c5:
                    47:62:5d:59:a9:0d:4c:e8:13:0b:69:ff:72:38:b0:
                    77:c8:89:6b:bb:11:07:df:ef:90:76:2a:d6:9a:c2:
                    a0:a3:c0:c8:fb:75:c8:71:da:d4:7d:e6:3d:4b:7b:
                    b5:6e:e2:f6:65:75:7c:f0:69:b2:c7:7a:c9:d5:b2:
                    96:1e:d8:8e:e4:d0:42:fb:b7:05:80:fa:6f:e7:3b:
                    80:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:22:F4:89:D6:62:D8:81:DC:02:A2:1A:60:0A:16:4F:BD:E3:92:E1
            X509v3 Authority Key Identifier:
                keyid:4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:56:fb:47:5f:b6:84:a9:e1:eb:79:60:2a:dd:7e:12:bb:92:
         43:3a:f1:28:d8:32:4b:f2:e7:38:67:cf:87:c6:f0:b2:c4:92:
         f0:92:a8:b5:0b:dd:0d:69:79:05:d6:1d:72:e1:1c:94:3a:49:
         a2:a2:e5:3b:b9:5c:36:f3:39:aa:f8:b4:45:3c:ba:86:3e:d0:
         4d:e1:5a:b7:31:7a:d1:05:94:6f:03:9d:24:51:8c:ea:fb:c0:
         e8:03:c7:7c:73:c5:14:24:c7:a6:09:67:18:e1:ac:2b:ae:d0:
         de:67:4c:ec:e1:2a:2f:c4:75:7d:fe:55:6b:57:7e:f6:21:6e:
         7d:d7:e2:75:b4:5e:fd:78:fe:72:af:49:62:2f:3f:f2:45:92:
         c7:34:11:18:92:ae:f8:40:9c:af:6a:47:18:a8:50:a1:ad:1e:
         69:c6:07:64:91:a7:b9:d8:d9:f1:ba:a7:5f:cf:ed:c2:5d:ad:
         64:65:26:cf:26:a8:72:7e:61:e9:18:80:40:46:84:b7:a6:30:
         13:cd:f4:af:54:54:83:6e:3b:d6:0a:50:e8:c4:13:f4:be:e5:
         a6:d2:9d:75:c1:08:d6:76:08:56:39:63:92:4c:64:f6:23:c7:
         15:28:2c:14:c2:0d:53:8d:bb:02:af:3a:a9:4a:97:77:df:36:
         9f:1d:b9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:43 2026 by rpki-client