Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/25651d-ee73-48ed-af68-29f420752d5e/1/travTd-DFvvxAck2ROZZQUZXB2I.mft
File:                     travTd-DFvvxAck2ROZZQUZXB2I.mft (raw, json)
Hash identifier:          ENG6IJoCL9Xx1RNHh+y6xurm9XDojwS3LLD+3CQyqEs=
Subject key identifier:   3C:5F:6A:D1:B1:89:5E:4E:C7:C3:17:8C:A7:85:78:39:B2:05:A6:BC
Authority key identifier: B6:B6:AF:4D:DF:83:16:FB:F1:01:C9:36:44:E6:59:41:46:57:07:62
Certificate issuer:       /CN=b6b6af4ddf8316fbf101c93644e6594146570762
Certificate serial:       019CAC46B0F1433513749578368FB4F0180B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/travTd-DFvvxAck2ROZZQUZXB2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/25651d-ee73-48ed-af68-29f420752d5e/1/travTd-DFvvxAck2ROZZQUZXB2I.mft
Manifest number:          05FD
Signing time:             Mon 02 Mar 2026 02:00:39 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:39 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:39 +0000
Files and hashes:         1: c-FJOZlIKFN6CN9lwMQEj8i5-4A.roa (hash: n9+iXHiynD+L9250sU27FEMenQGRsR/F4AyGQjkCYkk=)
                          2: travTd-DFvvxAck2ROZZQUZXB2I.crl (hash: uQoE479D/TcX2RyfnFsAuDA+wzmwzSWjdWydR70Apfg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/25651d-ee73-48ed-af68-29f420752d5e/1/travTd-DFvvxAck2ROZZQUZXB2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/25651d-ee73-48ed-af68-29f420752d5e/1/travTd-DFvvxAck2ROZZQUZXB2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/travTd-DFvvxAck2ROZZQUZXB2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:b0:f1:43:35:13:74:95:78:36:8f:b4:f0:18:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6b6af4ddf8316fbf101c93644e6594146570762
        Validity
            Not Before: Mar  2 02:00:39 2026 GMT
            Not After : Mar  3 02:00:39 2026 GMT
        Subject: CN=3c5f6ad1b1895e4ec7c3178ca7857839b205a6bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c3:7f:b0:8f:49:b1:f8:8d:ca:60:b5:54:d9:
                    60:07:2f:56:ae:74:2f:ee:18:ca:06:de:26:3e:02:
                    bc:7d:ff:3b:63:05:10:f2:b6:35:51:05:9b:b4:36:
                    0c:ef:00:ea:a0:3a:b2:b5:67:9e:5f:aa:0a:1f:52:
                    da:cb:b0:9a:a5:f4:c5:95:e1:1c:da:c6:b3:18:f9:
                    da:a5:30:96:87:22:d3:4e:b9:2f:a1:c4:a9:f6:92:
                    26:5f:28:74:50:39:6f:5d:56:d5:1a:89:cf:9b:43:
                    88:dd:11:7c:6c:bd:9b:26:e4:7d:6f:c2:57:82:ae:
                    31:de:c8:ea:06:ba:0b:3e:26:dc:f9:77:23:4c:a0:
                    f4:28:8b:e7:11:1a:dd:16:5a:0b:c5:af:72:b3:46:
                    8d:e5:d9:de:78:be:0c:cd:8e:de:d5:e6:23:b7:b2:
                    35:7b:ec:26:ba:a1:51:55:e8:ed:85:29:40:20:d7:
                    c0:e9:0d:be:82:2a:cc:42:81:3f:db:26:0a:00:ae:
                    99:f7:da:81:cd:89:20:17:df:99:fe:8b:00:bd:78:
                    cf:65:3c:53:de:a6:8b:c6:85:a9:14:34:40:7d:97:
                    6b:81:7f:6c:e4:96:5a:20:81:95:f0:ba:a4:05:92:
                    b0:dd:57:01:7e:c4:43:da:90:5a:91:c7:bd:51:70:
                    61:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:5F:6A:D1:B1:89:5E:4E:C7:C3:17:8C:A7:85:78:39:B2:05:A6:BC
            X509v3 Authority Key Identifier:
                keyid:B6:B6:AF:4D:DF:83:16:FB:F1:01:C9:36:44:E6:59:41:46:57:07:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/travTd-DFvvxAck2ROZZQUZXB2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/25651d-ee73-48ed-af68-29f420752d5e/1/travTd-DFvvxAck2ROZZQUZXB2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/25651d-ee73-48ed-af68-29f420752d5e/1/travTd-DFvvxAck2ROZZQUZXB2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:c4:2c:cd:a5:53:c0:8e:b2:7b:63:73:27:b8:7b:c0:98:c4:
         d4:90:4d:2a:8f:f6:6e:5d:6e:c7:42:c8:3b:8b:82:17:e9:c9:
         0d:e8:3f:07:72:c2:94:1f:57:f4:da:ee:90:10:f5:d2:86:87:
         ff:6a:17:c7:cb:23:2b:53:05:77:9f:2e:49:77:e4:06:50:53:
         95:d1:65:3a:3c:72:7b:be:aa:c3:d5:20:14:60:56:5d:56:ba:
         25:9c:30:31:f4:4d:ae:d7:e3:02:8f:8a:33:98:94:de:3b:9c:
         8f:e8:28:dd:be:e0:3c:53:98:d8:39:1a:ed:4e:09:c3:ae:22:
         a0:5c:06:e8:49:b3:e4:02:b8:b8:98:ad:35:68:81:9e:5d:c4:
         c2:f1:1e:5c:17:f6:97:78:b0:3d:36:da:75:bf:67:a9:13:0a:
         b4:a3:ff:5f:62:07:b0:cb:e4:6c:90:5e:4a:11:71:66:f0:c7:
         40:d0:32:cf:b2:eb:7b:65:39:a8:30:dc:46:b2:df:ec:9d:07:
         f1:68:28:a7:ae:d0:be:4b:69:7e:f5:fb:0e:41:3d:87:40:22:
         57:2f:b6:87:31:d9:9b:6a:60:13:00:34:84:64:10:5a:ea:ce:
         b7:10:af:90:38:fe:3f:e7:47:78:82:66:cb:60:16:bc:2d:33:
         3e:6b:91:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:40 2026 by rpki-client