Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
File:                     TjQBh8D85f_wN87ZplCCQ-QE2nE.mft (raw, json)
Hash identifier:          kS2wpRxhJBqDBpg3vsEj+842lxEnA635ee2K98oA1gg=
Subject key identifier:   8E:06:B5:19:C7:AB:A9:42:FA:54:4E:B9:48:73:C5:9E:31:B8:46:B4
Authority key identifier: 4E:34:01:87:C0:FC:E5:FF:F0:37:CE:D9:A6:50:82:43:E4:04:DA:71
Certificate issuer:       /CN=4e340187c0fce5fff037ced9a6508243e404da71
Certificate serial:       019CABD9CC54369019222EA70355BE8006D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
Manifest number:          0B73
Signing time:             Mon 02 Mar 2026 00:01:43 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:43 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:43 +0000
Files and hashes:         1: TjQBh8D85f_wN87ZplCCQ-QE2nE.crl (hash: G3UFEGjum9DeZii+7uzcR+FIMF2eEFYetrZZroMmJCU=)
                          2: rhOLI0GcmiH-t7VHcs9HUNOIZu8.roa (hash: DObC6epbAV4/cO0FstWBi+3TiGPf6vSxTLwzr5V99So=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:cc:54:36:90:19:22:2e:a7:03:55:be:80:06:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e340187c0fce5fff037ced9a6508243e404da71
        Validity
            Not Before: Mar  2 00:01:43 2026 GMT
            Not After : Mar  3 00:01:43 2026 GMT
        Subject: CN=8e06b519c7aba942fa544eb94873c59e31b846b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9d:39:5d:50:b1:ff:44:61:8b:e4:8e:7e:df:
                    f0:36:80:bb:69:9d:99:5d:cd:56:17:f5:38:df:36:
                    6d:9f:7f:3f:78:83:44:05:4c:b8:8d:6f:6c:ca:2b:
                    04:77:16:52:37:7e:f7:7b:63:7d:0b:53:a5:ce:f0:
                    05:81:c6:25:cf:c4:fe:06:6d:e8:a2:c4:fd:fb:90:
                    5b:4b:e6:fe:37:cb:c4:fa:7d:8c:41:ac:04:b2:74:
                    86:fd:d9:e2:55:63:a6:be:43:80:c5:0c:ed:78:2d:
                    db:d2:22:82:b9:90:39:b2:4b:e7:64:6f:8d:fd:3b:
                    04:d5:8c:b7:24:e3:b9:e0:71:5b:2c:36:e6:15:54:
                    c3:16:2e:16:01:a1:3f:dd:f3:44:45:3b:14:fb:06:
                    81:66:cf:b9:09:66:15:e6:5f:3a:66:f7:9f:4a:eb:
                    f8:c8:51:97:94:4d:60:0c:db:9a:8c:2d:01:13:e3:
                    b4:4e:0a:1e:6f:01:9b:ec:be:01:46:52:95:be:d9:
                    23:7b:9b:ba:92:4b:e3:f2:76:72:bd:10:71:44:51:
                    39:82:01:23:96:86:63:1c:88:2b:21:ec:2c:8f:8d:
                    8b:01:a3:68:21:ef:1b:29:3d:8c:6f:e8:b5:39:0c:
                    18:7b:be:ec:03:28:94:66:3e:38:fe:36:e4:e8:63:
                    93:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:06:B5:19:C7:AB:A9:42:FA:54:4E:B9:48:73:C5:9E:31:B8:46:B4
            X509v3 Authority Key Identifier:
                keyid:4E:34:01:87:C0:FC:E5:FF:F0:37:CE:D9:A6:50:82:43:E4:04:DA:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:f3:f0:5d:fc:30:2b:fe:e9:d8:22:9a:7e:7f:85:42:63:76:
         24:16:b8:5d:25:d5:93:54:76:62:49:f6:63:fa:9e:1c:b4:8e:
         03:a6:fe:7a:1f:91:75:85:2b:08:3b:ff:87:a8:d4:7e:4e:cc:
         d8:68:09:ee:d1:fc:75:b6:24:6e:ab:b9:c4:85:b1:df:a0:7e:
         64:f6:39:75:52:88:5c:97:e8:c1:0f:89:ab:eb:58:ac:50:d9:
         e1:41:38:69:37:1c:4b:e1:1b:ba:f3:06:c7:22:32:32:f4:bf:
         6c:f6:f7:17:a4:b3:0d:fe:87:d2:5f:27:1b:c5:fb:00:f9:31:
         e2:d3:bb:22:48:ab:f0:d3:a8:46:74:e9:76:80:0e:a3:19:8c:
         6a:c3:78:5e:7f:1d:90:c5:4d:41:70:01:4e:50:56:9d:d2:04:
         08:11:14:36:89:97:dd:8a:f7:38:fb:bd:50:ef:94:75:4f:d0:
         10:4a:a7:fc:87:f7:19:e3:18:13:29:bb:6a:e4:84:c1:60:2e:
         48:51:3a:68:48:43:b2:2b:b8:9b:92:c0:72:a8:13:61:1f:e5:
         76:49:13:b9:33:db:79:dd:cc:7d:99:89:8b:d1:5a:ab:2a:00:
         ec:fa:58:4b:55:8b:65:ae:8f:3e:a8:3c:b6:b0:b8:ac:f4:16:
         6d:f4:36:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:45:24 2026 by rpki-client