Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft
File:                     TTuCKQwugJCSSp79nFF8oUpcNwQ.mft (raw, json)
Hash identifier:          8ALOuRY6QIwhQS1mErGBh0Im8ygJRulCdHss4V1ZIkU=
Subject key identifier:   65:22:9C:5B:82:67:4E:71:9F:6D:9A:7B:4D:61:84:B9:A0:7C:A7:AE
Authority key identifier: 4D:3B:82:29:0C:2E:80:90:92:4A:9E:FD:9C:51:7C:A1:4A:5C:37:04
Certificate issuer:       /CN=4d3b82290c2e8090924a9efd9c517ca14a5c3704
Certificate serial:       019CACB4D75985AF550287007E3D81478F3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TTuCKQwugJCSSp79nFF8oUpcNwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft
Manifest number:          1848
Signing time:             Mon 02 Mar 2026 04:00:58 +0000
Manifest this update:     Mon 02 Mar 2026 04:00:58 +0000
Manifest next update:     Tue 03 Mar 2026 04:00:58 +0000
Files and hashes:         1: QwYt5JGoziBuUynxaO7UwUNh6UU.roa (hash: 0qGrapZb7+jKIAgr/PeajOHIyrqRSG/2Cq6ydp/6ysU=)
                          2: TTuCKQwugJCSSp79nFF8oUpcNwQ.crl (hash: XQ62iifdiFAzXPH9PwQ7JTCXhdp1Zea1FCUJel9fqYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TTuCKQwugJCSSp79nFF8oUpcNwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b4:d7:59:85:af:55:02:87:00:7e:3d:81:47:8f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d3b82290c2e8090924a9efd9c517ca14a5c3704
        Validity
            Not Before: Mar  2 04:00:58 2026 GMT
            Not After : Mar  3 04:00:58 2026 GMT
        Subject: CN=65229c5b82674e719f6d9a7b4d6184b9a07ca7ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:60:76:59:a0:45:e2:04:2e:ed:7d:51:ec:de:
                    19:b9:b2:fd:63:77:19:96:56:0c:48:10:99:47:a0:
                    45:ea:13:20:b2:73:2c:d7:c2:8f:4f:8f:55:08:4e:
                    72:8e:2c:34:5d:aa:71:9c:3e:49:14:4b:1b:e2:12:
                    b2:cd:21:46:f7:29:81:dd:59:7f:51:1c:ce:58:15:
                    30:02:62:2b:07:b3:2b:13:08:79:4f:c0:87:bd:af:
                    4d:c7:50:2c:2d:b0:19:bf:fc:e2:6c:b1:8e:a5:f7:
                    86:9b:26:a6:45:bf:d5:05:c8:76:c9:41:88:79:c7:
                    81:16:4b:a2:49:ae:62:cd:ae:fc:2b:4e:21:15:04:
                    1a:76:f3:79:5a:e6:f9:4e:0a:7d:5e:1f:8e:70:af:
                    0e:f0:3a:bf:35:bc:72:f9:01:9a:35:29:bd:95:fb:
                    a1:5b:b2:38:33:3e:c7:c5:2e:6b:fa:21:2a:19:69:
                    00:a1:e0:09:50:22:89:56:10:30:56:8a:72:85:99:
                    48:01:c0:a4:ab:95:65:d5:23:88:b0:61:02:d8:ba:
                    bc:f2:f4:5f:85:44:d7:e1:6d:28:93:15:bf:1f:bc:
                    fa:53:ff:3b:86:76:d8:87:fd:8b:46:8b:d7:b2:71:
                    53:55:bd:68:13:7e:3b:ae:8e:92:16:cf:4d:c2:db:
                    c7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:22:9C:5B:82:67:4E:71:9F:6D:9A:7B:4D:61:84:B9:A0:7C:A7:AE
            X509v3 Authority Key Identifier:
                keyid:4D:3B:82:29:0C:2E:80:90:92:4A:9E:FD:9C:51:7C:A1:4A:5C:37:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTuCKQwugJCSSp79nFF8oUpcNwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:65:8f:6a:47:fc:03:b7:06:79:a1:84:e1:0d:3c:b5:b5:37:
         f3:0d:46:d0:50:7c:46:7f:93:6a:6c:72:6d:7a:f7:e5:87:64:
         dd:4c:2a:81:0e:72:e7:cf:82:4d:ce:4c:66:fa:76:40:ec:d5:
         92:a9:74:25:a6:09:67:3f:94:12:28:20:8f:98:3e:9e:f5:6b:
         d8:28:8a:30:97:28:62:3d:d8:87:8c:cf:07:4f:77:3d:a7:93:
         b0:7b:29:2b:eb:12:78:5b:45:de:a5:0d:e5:68:9e:db:be:a0:
         fe:65:82:3d:ca:8d:30:3c:7a:fc:3b:c7:54:c0:a9:cb:b9:c4:
         2e:ec:70:82:c9:d1:52:25:16:dd:54:b6:b5:5f:3e:e0:14:50:
         ed:78:f6:3e:23:ff:70:e4:66:35:c8:56:f5:0e:d5:a6:c8:f4:
         40:ab:e3:09:e7:61:a3:dd:77:30:8a:96:08:ae:1e:d3:a8:82:
         19:61:77:03:90:6a:04:91:13:35:75:1e:d1:93:fd:2d:47:28:
         7e:49:f0:d7:e2:18:1e:fe:b2:8f:57:5b:4a:32:29:a6:41:42:
         e9:41:89:27:3c:19:94:77:ba:b3:70:0a:ae:d2:d8:d4:9a:de:
         5c:76:13:07:ae:ff:23:4b:98:34:8c:0f:de:00:e3:60:d7:84:
         15:4c:7d:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystNdZha9VAocAfj2BR48+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkM2I4MjI5MGMyZTgwOTA5MjRhOWVmZDljNTE3Y2ExNGE1
YzM3MDQwHhcNMjYwMzAyMDQwMDU4WhcNMjYwMzAzMDQwMDU4WjAzMTEwLwYDVQQD
Eyg2NTIyOWM1YjgyNjc0ZTcxOWY2ZDlhN2I0ZDYxODRiOWEwN2NhN2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmB2WaBF4gQu7X1R7N4ZubL9Y3cZ
llYMSBCZR6BF6hMgsnMs18KPT49VCE5yjiw0XapxnD5JFEsb4hKyzSFG9ymB3Vl/
URzOWBUwAmIrB7MrEwh5T8CHva9Nx1AsLbAZv/zibLGOpfeGmyamRb/VBch2yUGI
eceBFkuiSa5iza78K04hFQQadvN5Wub5Tgp9Xh+OcK8O8Dq/Nbxy+QGaNSm9lfuh
W7I4Mz7HxS5r+iEqGWkAoeAJUCKJVhAwVopyhZlIAcCkq5Vl1SOIsGEC2Lq88vRf
hUTX4W0okxW/H7z6U/87hnbYh/2LRovXsnFTVb1oE347ro6SFs9NwtvHBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUinFuCZ05xn22ae01hhLmgfKeuMB8GA1UdIwQY
MBaAFE07gikMLoCQkkqe/ZxRfKFKXDcEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFR1Q0tRd3VnSkNTU3A3OW5GRjhvVXBjTndRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9jNWNjZDgtOGYwZC00ODYyLTg2YWEt
ZDk3OWVjZTkzMjg1LzEvVFR1Q0tRd3VnSkNTU3A3OW5GRjhvVXBjTndRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9jNWNjZDgtOGYwZC00ODYyLTg2YWEtZDk3OWVjZTkzMjg1
LzEvVFR1Q0tRd3VnSkNTU3A3OW5GRjhvVXBjTndRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH2WPakf8
A7cGeaGE4Q08tbU38w1G0FB8Rn+TamxybXr35Ydk3UwqgQ5y58+CTc5MZvp2QOzV
kql0JaYJZz+UEiggj5g+nvVr2CiKMJcoYj3Yh4zPB093PaeTsHspK+sSeFtF3qUN
5Wie276g/mWCPcqNMDx6/DvHVMCpy7nELuxwgsnRUiUW3VS2tV8+4BRQ7Xj2PiP/
cORmNchW9Q7Vpsj0QKvjCedho913MIqWCK4e06iCGWF3A5BqBJETNXUe0ZP9LUco
fknw1+IYHv6yj1dbSjIppkFC6UGJJzwZlHe6s3AKrtLY1JreXHYTB67/I0uYNIwP
3gDjYNeEFUx90w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:01:47 2026 by rpki-client