Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
File:                     TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft (raw, json)
Hash identifier:          jVljgg3At+23zJEUHMfOhCB9ZX15tCzKHKaMA6cWYcg=
Subject key identifier:   0C:EB:17:BA:20:79:EB:E9:55:E8:DA:1E:02:EB:29:6E:89:1F:DF:0F
Authority key identifier: 4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8
Certificate issuer:       /CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
Certificate serial:       019CAAC6F66ADFA45AD481C65AD4842BCFE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
Manifest number:          1845
Signing time:             Sun 01 Mar 2026 19:01:31 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:31 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:31 +0000
Files and hashes:         1: 1-yMlj_lfkJoYBfYvpMydeDjmgSM.roa (hash: K/sPdE3c5W5fRpAqOLm5bFgaW4DKI4EBlPvEPl32aOM=)
                          2: RItX9BG6Bl_mx3MTjyJm8l3wLw4.roa (hash: ozz/LMoGDHWxs5USbAIdVcdqDkAaVci0RWqFGYt8Lgg=)
                          3: TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl (hash: zuRvRsH/4LZVYTPRU3wikzv98GBjmoRwh/Q/tdbAtus=)
                          4: tCb5DC6zfb4vzHPOix2UvW9ndS4.roa (hash: ntxgYvCvFvJADG1N43LItMS9Zjg6jG20YT8FEIvxIu8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 19:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:f6:6a:df:a4:5a:d4:81:c6:5a:d4:84:2b:cf:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
        Validity
            Not Before: Mar  1 19:01:31 2026 GMT
            Not After : Mar  2 19:01:31 2026 GMT
        Subject: CN=0ceb17ba2079ebe955e8da1e02eb296e891fdf0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c3:fc:63:a7:f1:74:37:c5:24:6d:61:20:26:
                    c9:79:af:c4:99:d1:20:50:71:7e:aa:ee:b4:8f:32:
                    c6:34:24:6e:c2:79:3a:3a:00:3a:88:ce:f6:37:2d:
                    5e:be:54:76:1d:9b:5e:b3:75:c9:85:2a:16:1b:ce:
                    69:dd:35:fc:96:f7:4c:e7:a7:b5:99:c0:fa:ae:e3:
                    7d:73:cc:55:84:b5:b1:86:d1:98:95:64:d3:cc:14:
                    bb:cb:26:5a:f7:61:e5:be:6c:2f:d9:2f:ea:80:af:
                    c9:a5:d4:1b:50:4b:90:ef:d9:d8:34:fc:45:39:b1:
                    b2:ce:32:ea:0f:86:5a:44:13:48:0d:9d:a3:90:d9:
                    8c:12:b0:66:b5:e8:7c:f1:aa:48:90:e5:8c:7c:6c:
                    da:60:cb:a9:b7:ed:b3:8a:78:a6:45:61:74:42:f0:
                    79:31:5d:35:29:81:a6:9d:2d:7d:f3:4e:4b:4b:e5:
                    51:51:ae:4a:c7:09:ae:df:31:f8:8a:63:c3:dc:73:
                    34:7c:aa:e5:d5:63:12:3d:cb:13:44:50:dd:4f:97:
                    62:fc:62:0f:46:fb:bd:9f:33:36:14:c4:b3:5a:bc:
                    60:fd:87:a9:8c:1d:06:5f:ed:97:35:88:65:43:c1:
                    ae:3a:ff:5f:af:49:51:01:eb:0c:a4:1c:17:f0:72:
                    cc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:EB:17:BA:20:79:EB:E9:55:E8:DA:1E:02:EB:29:6E:89:1F:DF:0F
            X509v3 Authority Key Identifier:
                keyid:4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:db:c6:b6:93:b5:0a:7b:8b:f2:db:41:17:2d:c8:8a:db:34:
         4b:59:f5:a1:b6:ad:33:50:76:87:3b:4b:6d:a3:45:74:f9:05:
         d3:72:76:b0:10:2a:cf:70:37:6c:e2:65:1c:7a:11:21:53:39:
         c2:9f:b5:a2:bf:a7:08:7d:80:46:aa:b1:a4:ec:af:f0:da:d0:
         0a:d3:cb:17:e5:18:a4:fc:be:35:51:0f:c4:e0:8a:db:3f:16:
         ac:16:d9:e6:97:7e:54:58:51:6e:a6:1e:dc:c4:ee:cd:88:d3:
         b7:3d:86:81:58:5e:58:ec:49:b7:db:c9:95:0a:87:66:e7:36:
         b4:63:25:69:6a:84:8c:e1:74:5a:f8:86:21:9f:bb:04:b4:24:
         da:26:69:c6:b1:38:86:92:7c:63:92:5b:d6:f1:97:4f:a5:43:
         34:74:ce:aa:38:dd:dc:5d:e5:84:34:fd:10:06:77:79:d3:1f:
         45:f5:7c:12:0f:68:8e:48:80:d1:2e:c1:50:dc:3c:0f:50:fb:
         1d:45:8e:2c:38:a9:c0:35:5e:dd:ae:72:19:b5:2e:45:68:4c:
         6f:3c:a3:cb:e7:55:51:b7:01:a3:47:b1:98:7d:23:17:24:78:
         b8:be:37:2b:30:11:0b:88:5f:ec:5b:88:e2:61:28:b3:76:ab:
         ad:e8:22:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:07 2026 by rpki-client