Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft
File:                     tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft (raw, json)
Hash identifier:          dLRcIuFFmISn0CTaZgyHrJBRa95gcIx4HPVDds1dZ84=
Subject key identifier:   B3:86:B5:A8:2D:31:10:C4:B2:4A:D2:96:81:33:22:76:37:32:12:80
Authority key identifier: B5:B0:A8:66:59:EC:31:4F:13:A0:4E:3A:03:DB:DB:12:44:A0:E0:A9
Certificate issuer:       /CN=b5b0a86659ec314f13a04e3a03dbdb1244a0e0a9
Certificate serial:       01A0C77C5E0262A2EA9F24787ECCBADA60DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tbCoZlnsMU8ToE46A9vbEkSg4Kk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft
Manifest number:          191B
Signing time:             Tue 22 Sep 2026 05:00:11 +0000
Manifest this update:     Tue 22 Sep 2026 05:00:11 +0000
Manifest next update:     Wed 23 Sep 2026 05:00:11 +0000
Files and hashes:         1: 8bRTFqqfGJUx5yKlpNBGGLyfeAk.roa (hash: kImY5tJNZeZT0ukreVQs42nY/D7z0/+YDr07Sp3JI24=)
                          2: CN-8Pu5bXSBT4QPtIGRjyVpzJzI.roa (hash: EZji+EdR2qZINXOAD9p9aVvQwY57zPJN1GhrheBWnsE=)
                          3: X7XF_Z41s1mEiSn68hr2N23_Z_M.roa (hash: zX/8WHiyiWYZSBhoo5FKkI77/U7PstQ4cdjNJSn1jls=)
                          4: Zi6T14ALAlh6vPIVj-p6wbXoXDI.roa (hash: BX99khHc0q72Oz6YygWlNq7UO49uBQ/389b6gOKYPCM=)
                          5: _auQCy3k3EaDuaZ7EPCV9pV4Ih4.roa (hash: 1toHC+hcpBjFnpYLj94qlEAibL9ZGiBJ5ML7CqI3XaY=)
                          6: tbCoZlnsMU8ToE46A9vbEkSg4Kk.crl (hash: +0Qr9lhbizbpvmtY3xvr1VJiwrltZTlQPYKXNXdmMa4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tbCoZlnsMU8ToE46A9vbEkSg4Kk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:7c:5e:02:62:a2:ea:9f:24:78:7e:cc:ba:da:60:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5b0a86659ec314f13a04e3a03dbdb1244a0e0a9
        Validity
            Not Before: Sep 22 05:00:11 2026 GMT
            Not After : Sep 23 05:00:11 2026 GMT
        Subject: CN=b386b5a82d3110c4b24ad2968133227637321280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:07:69:0b:44:c4:ee:e2:79:e9:22:16:b9:2b:
                    fe:56:fd:a4:53:de:26:ef:db:be:31:50:8b:cd:70:
                    f6:28:8a:98:c1:36:19:8d:08:b2:25:97:12:df:01:
                    7a:c6:ca:01:05:81:0b:f0:ae:9c:c5:8f:a2:91:8d:
                    75:96:6d:b7:f1:fe:03:3e:d9:6c:fb:88:ce:19:a9:
                    85:fe:d5:e5:d5:c0:fc:13:7f:77:ba:16:02:2d:13:
                    9e:1e:53:93:ad:49:41:50:76:05:7b:5f:0d:94:7f:
                    6a:39:78:25:39:6d:61:4d:01:54:85:66:af:02:84:
                    48:da:f3:7d:be:bb:f2:99:bf:b2:a3:ab:34:ca:88:
                    f2:af:5b:84:5e:a0:3f:fe:c2:19:4b:f3:ce:2a:41:
                    dc:7d:c4:12:48:ae:75:8f:fc:92:99:95:9f:b7:f5:
                    03:48:c6:17:88:bf:b0:f7:a0:91:37:00:cf:6d:93:
                    11:e3:05:43:d5:68:9a:36:a4:0e:0f:34:81:01:f9:
                    f7:ad:fe:76:4d:15:88:c0:f7:38:1b:49:9c:0a:89:
                    72:c2:af:26:80:cf:a3:ca:e2:58:6c:56:dc:1d:8b:
                    38:d5:34:34:36:f4:6c:91:6a:6d:6e:ec:e0:7a:a8:
                    fd:53:33:1f:7f:08:85:30:29:57:21:9e:fa:cc:d0:
                    ce:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:86:B5:A8:2D:31:10:C4:B2:4A:D2:96:81:33:22:76:37:32:12:80
            X509v3 Authority Key Identifier:
                keyid:B5:B0:A8:66:59:EC:31:4F:13:A0:4E:3A:03:DB:DB:12:44:A0:E0:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbCoZlnsMU8ToE46A9vbEkSg4Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:64:27:2e:88:f9:b7:a6:d9:c1:aa:9b:39:b2:f0:8a:f6:7b:
         4d:47:a0:4b:e5:3d:0e:71:a3:ea:7a:bc:48:9a:53:28:87:80:
         fd:9c:49:4a:b1:d9:61:ab:c8:09:90:d3:29:d1:1e:12:9a:9c:
         04:fb:54:40:50:78:79:7f:b3:26:6f:22:6e:51:e4:a2:c8:b5:
         50:c4:d4:d1:96:3e:12:0f:78:26:6a:f3:fd:f2:ad:fb:f9:fe:
         da:1a:6e:da:1f:76:82:2e:fc:ef:a3:93:c2:84:6b:8c:7a:d3:
         5e:cd:1a:04:b5:fb:29:3f:7b:f2:df:71:e2:16:03:77:d9:30:
         28:10:7f:f7:08:f2:47:8c:0f:b2:63:b2:90:74:9d:38:09:0b:
         94:fd:d2:ab:9b:5f:7c:f8:cb:80:01:28:ea:a7:b9:d5:b8:8e:
         bd:9b:91:16:c4:23:89:a0:36:71:0a:ce:9b:0e:48:c0:8c:6c:
         60:1c:3b:e9:73:8e:15:9e:3a:e7:da:3b:92:35:4e:e1:c8:4b:
         cf:bb:e9:1a:96:e4:55:f3:7b:1a:c8:93:15:07:f2:c0:3f:2b:
         ce:ff:c8:67:f3:18:da:d8:14:a1:10:5b:a7:a3:40:fb:a2:33:
         09:8b:e9:9e:31:d4:66:a5:7d:6f:3b:a8:bd:9a:7a:54:08:0f:
         33:bc:fb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:23:02 2026 by rpki-client