Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft
File:                     TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft (raw, json)
Hash identifier:          7rTTZWl4Wzj+v27lRlnDIZQUZIrcvdCA7SARqxNeoWs=
Subject key identifier:   87:83:11:79:AF:2D:8E:08:7C:2B:13:53:3B:25:36:4B:77:E4:3D:96
Authority key identifier: 4C:4F:20:6F:DC:CA:B8:3D:DF:E1:9E:89:6E:91:63:D7:A9:AD:47:79
Certificate issuer:       /CN=4c4f206fdccab83ddfe19e896e9163d7a9ad4779
Certificate serial:       019CA9EB790FD826B21316009281108178A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft
Manifest number:          098D
Signing time:             Sun 01 Mar 2026 15:01:47 +0000
Manifest this update:     Sun 01 Mar 2026 15:01:47 +0000
Manifest next update:     Mon 02 Mar 2026 15:01:47 +0000
Files and hashes:         1: TE8gb9zKuD3f4Z6JbpFj16mtR3k.crl (hash: 0jyL+jtpyF5becgAytXR0PZ2HOcOa3XzFPrBGt4r2Wk=)
                          2: s4GobE8sP68HfnpFVrDAD7Hwpd4.roa (hash: PdzhOO0oTb4sqxU4udpTbIF7JFMYzVJmzBp6SizCWGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:eb:79:0f:d8:26:b2:13:16:00:92:81:10:81:78:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c4f206fdccab83ddfe19e896e9163d7a9ad4779
        Validity
            Not Before: Mar  1 15:01:47 2026 GMT
            Not After : Mar  2 15:01:47 2026 GMT
        Subject: CN=87831179af2d8e087c2b13533b25364b77e43d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:53:93:da:90:ab:e6:27:e4:aa:51:75:69:0a:
                    44:ae:69:86:8e:b0:a5:fc:39:3c:7c:6d:dc:aa:64:
                    51:61:6a:f4:d6:fd:29:79:ec:90:ce:74:ea:b8:2c:
                    33:72:0b:b8:31:37:c8:c3:b9:3a:0c:dc:b6:f9:40:
                    73:22:17:d4:1d:60:b4:7d:13:1e:bd:51:8c:5b:80:
                    34:41:b0:41:18:9c:39:f0:0f:60:37:87:b3:c7:b4:
                    a4:b9:4e:ba:a0:8e:45:12:fb:c8:91:b9:68:9b:f1:
                    0d:89:b0:02:fd:a6:5c:ec:05:86:8f:70:d8:71:21:
                    c1:34:ae:0c:1f:9c:dc:c9:d8:a4:1c:ad:b6:6c:d2:
                    b1:cc:ad:1d:cd:43:00:e4:83:94:69:64:9c:25:89:
                    88:ab:c1:1c:58:67:62:6b:3c:a7:2b:55:36:45:7a:
                    2e:97:24:ca:14:75:02:b0:e0:d7:a6:91:2d:81:7b:
                    92:0f:cc:6d:78:ef:e0:c1:97:ce:ba:f8:a8:36:ab:
                    2e:8f:89:de:3c:f0:89:57:1c:19:1a:a4:e5:89:8c:
                    e6:50:31:79:f0:18:54:86:59:46:ef:9a:f3:8b:21:
                    82:c8:2d:2b:77:43:82:d9:15:e3:23:ed:12:5e:25:
                    c2:38:12:bc:fb:17:1d:f8:70:55:93:c5:88:d4:33:
                    8c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:83:11:79:AF:2D:8E:08:7C:2B:13:53:3B:25:36:4B:77:E4:3D:96
            X509v3 Authority Key Identifier:
                keyid:4C:4F:20:6F:DC:CA:B8:3D:DF:E1:9E:89:6E:91:63:D7:A9:AD:47:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:18:70:9b:cb:14:87:69:b0:53:65:09:0c:2b:b8:3d:e3:83:
         70:9a:61:76:d2:50:20:4c:f1:9a:3c:f7:e5:a1:e9:65:6f:46:
         45:3e:db:10:38:67:0f:58:02:ab:1f:80:ed:dd:b8:4c:48:b5:
         d5:02:17:d8:77:22:de:75:d3:7a:98:98:fe:0b:82:02:6d:a7:
         fb:d0:c5:e8:a6:53:50:fe:7f:1e:4e:15:29:8e:27:83:33:f3:
         35:80:81:25:bf:26:93:4f:d6:c2:52:22:66:59:55:c8:71:75:
         94:47:0b:6e:7e:f7:53:87:55:66:df:11:b4:56:e4:f3:88:1e:
         fe:35:10:9a:b7:e1:95:4e:78:00:5b:10:3a:2a:cf:38:5f:0d:
         8d:6d:eb:b0:0c:5f:68:fd:b1:70:75:92:f4:ac:cc:26:6a:34:
         cf:72:18:af:9b:56:d4:88:d3:37:19:05:0a:8d:09:8c:ea:72:
         27:41:da:96:fa:46:6b:61:d2:3e:de:ee:63:e0:7d:96:f7:dc:
         d8:a2:dd:8e:7a:5a:94:e7:1d:a7:18:9a:bb:14:9c:88:bf:09:
         20:f5:ee:78:2e:04:97:ea:9a:37:2f:09:fd:d0:b3:c4:af:32:
         14:b7:bc:ea:30:c4:43:9e:13:ed:68:61:0e:27:08:48:5a:bc:
         f7:a9:ab:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyp63kP2CayExYAkoEQgXigMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNGYyMDZmZGNjYWI4M2RkZmUxOWU4OTZlOTE2M2Q3YTlh
ZDQ3NzkwHhcNMjYwMzAxMTUwMTQ3WhcNMjYwMzAyMTUwMTQ3WjAzMTEwLwYDVQQD
Eyg4NzgzMTE3OWFmMmQ4ZTA4N2MyYjEzNTMzYjI1MzY0Yjc3ZTQzZDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VOT2pCr5ifkqlF1aQpErmmGjrCl
/Dk8fG3cqmRRYWr01v0peeyQznTquCwzcgu4MTfIw7k6DNy2+UBzIhfUHWC0fRMe
vVGMW4A0QbBBGJw58A9gN4ezx7SkuU66oI5FEvvIkblom/ENibAC/aZc7AWGj3DY
cSHBNK4MH5zcydikHK22bNKxzK0dzUMA5IOUaWScJYmIq8EcWGdiazynK1U2RXou
lyTKFHUCsODXppEtgXuSD8xteO/gwZfOuvioNqsuj4nePPCJVxwZGqTliYzmUDF5
8BhUhllG75rziyGCyC0rd0OC2RXjI+0SXiXCOBK8+xcd+HBVk8WI1DOMdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIeDEXmvLY4IfCsTUzslNkt35D2WMB8GA1UdIwQY
MBaAFExPIG/cyrg93+GeiW6RY9eprUd5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEU4Z2I5ekt1RDNmNFo2SmJwRmoxNm10UjNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9jMjliYWMtNmNmOC00Yjg3LWE4ZTIt
YWQ1NDkzMWMyNGIzLzEvVEU4Z2I5ekt1RDNmNFo2SmJwRmoxNm10UjNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9jMjliYWMtNmNmOC00Yjg3LWE4ZTItYWQ1NDkzMWMyNGIz
LzEvVEU4Z2I5ekt1RDNmNFo2SmJwRmoxNm10UjNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGBhwm8sU
h2mwU2UJDCu4PeODcJphdtJQIEzxmjz35aHpZW9GRT7bEDhnD1gCqx+A7d24TEi1
1QIX2Hci3nXTepiY/guCAm2n+9DF6KZTUP5/Hk4VKY4ngzPzNYCBJb8mk0/WwlIi
ZllVyHF1lEcLbn73U4dVZt8RtFbk84ge/jUQmrfhlU54AFsQOirPOF8NjW3rsAxf
aP2xcHWS9KzMJmo0z3IYr5tW1IjTNxkFCo0JjOpyJ0HalvpGa2HSPt7uY+B9lvfc
2KLdjnpalOcdpxiauxSciL8JIPXueC4El+qaNy8J/dCzxK8yFLe86jDEQ54T7Whh
DicISFq896mr3A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:46 2026 by rpki-client