Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft
File:                     Tl67mwUa1ex6Npifw_zJTByrzHQ.mft (raw, json)
Hash identifier:          3FvXzBhRXOqASXERzwCxykBrU7TW/122wkGLCmbiC+Y=
Subject key identifier:   84:B9:F9:DC:3C:EC:B7:69:F6:5F:96:1E:EF:4A:F9:3B:B5:1E:AB:15
Authority key identifier: 4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74
Certificate issuer:       /CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74
Certificate serial:       019CAC4787A84C3B15249AB551E826D6044F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft
Manifest number:          1860
Signing time:             Mon 02 Mar 2026 02:01:34 +0000
Manifest this update:     Mon 02 Mar 2026 02:01:34 +0000
Manifest next update:     Tue 03 Mar 2026 02:01:34 +0000
Files and hashes:         1: IC3KBofEraY-o2Xt0fXEgJfzG3A.roa (hash: KnhXw815iFAaQmnUWwTQE6WQ0M3tQmAE0zW0o+PJiU8=)
                          2: L3xiDt_DxrLi4lqDX4KsweyPBfU.roa (hash: mBvswTZSHAsOBHr7dGG73RpsdwizI277vUMRdc8O0TI=)
                          3: Tl67mwUa1ex6Npifw_zJTByrzHQ.crl (hash: iYjTqL5VW9V2z529K/9AqWzZNplXZqQaZF6h9V3CS/I=)
                          4: ynXUxqrdFjV2uDjhRAtcxC3THvU.roa (hash: +COHT3b/rqZFicrkLpp20JO0GYnlMEA+hKZxaCTFAkE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:47:87:a8:4c:3b:15:24:9a:b5:51:e8:26:d6:04:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74
        Validity
            Not Before: Mar  2 02:01:34 2026 GMT
            Not After : Mar  3 02:01:34 2026 GMT
        Subject: CN=84b9f9dc3cecb769f65f961eef4af93bb51eab15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1c:77:72:d7:87:19:bb:cd:77:76:32:aa:73:
                    61:5d:72:81:6c:09:ad:90:00:1c:ef:8b:9a:5b:fc:
                    67:ba:3d:65:b9:f0:2b:69:5d:27:be:55:b4:b3:0c:
                    10:5e:ca:70:26:5a:94:95:10:e0:b8:e0:c2:ff:34:
                    7b:0b:e0:e8:14:91:66:e0:46:ff:2e:61:7f:36:2c:
                    a8:19:27:8c:f5:0e:0f:d5:9b:0e:c0:e2:20:63:15:
                    04:9b:86:e4:88:1f:e6:3b:ad:7b:f1:1c:3e:ce:94:
                    d3:3a:8a:f6:d0:7f:cf:c6:0a:fd:27:ca:0f:92:c2:
                    9a:5c:ea:da:94:af:1c:df:83:f8:31:f1:e0:e8:e6:
                    c5:43:11:4c:bf:15:f2:31:73:44:eb:06:14:9b:f2:
                    d3:f6:63:b7:8c:c0:87:f5:01:0d:c9:25:ab:38:88:
                    b0:34:82:96:26:ea:ea:fd:4a:5c:b2:e6:cf:ad:01:
                    de:31:fa:e9:5d:37:7b:70:86:84:14:0d:bb:5c:5e:
                    5f:0e:0b:9b:72:5b:3f:21:57:ca:fb:45:50:38:47:
                    c5:1b:f3:71:5c:ab:51:7b:46:f7:35:77:4c:61:8d:
                    a6:b3:7b:e2:f6:e4:94:1c:f5:5f:93:58:6a:15:0e:
                    63:b8:51:3f:60:19:f9:87:44:76:bd:e7:4e:10:74:
                    af:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B9:F9:DC:3C:EC:B7:69:F6:5F:96:1E:EF:4A:F9:3B:B5:1E:AB:15
            X509v3 Authority Key Identifier:
                keyid:4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:f2:27:54:e6:4a:3b:a4:4b:42:0c:c2:57:2f:c8:2e:bf:0f:
         b6:f8:ab:ff:ba:cc:1e:f6:95:1f:32:de:34:57:5d:df:10:15:
         76:0c:13:18:77:14:05:29:27:7e:c9:b2:9f:d8:5d:75:91:f8:
         05:70:d0:ad:52:67:d4:a2:f3:2b:0e:c6:19:65:9b:fa:1b:43:
         83:0d:04:39:8b:5b:64:6c:61:f5:32:22:99:67:a7:5e:7e:03:
         9d:43:33:22:e3:dd:a7:e0:88:01:3d:a7:24:ba:a3:a0:a1:2f:
         61:5c:db:e9:1b:09:18:7b:d3:24:96:9d:6a:8b:2d:96:dd:59:
         52:3d:cb:8c:72:27:3f:52:08:09:d0:0e:1d:da:db:5c:87:db:
         56:ea:36:3c:54:35:28:94:1f:2b:90:76:b9:92:42:37:a8:4c:
         32:ec:58:15:e3:1e:3d:28:89:ce:b5:19:8f:ef:22:e4:5b:49:
         dd:67:b5:e2:17:23:ac:59:25:9c:e6:13:56:0f:8b:dd:86:c9:
         fc:e3:b7:2a:7e:09:0b:7c:cb:b6:5e:f7:40:23:2d:22:79:7d:
         ba:46:51:87:30:67:28:82:d5:ec:b3:27:69:95:66:c0:20:62:
         94:2c:0a:fd:77:3b:e3:aa:58:df:a7:aa:d7:f1:31:e3:79:65:
         ad:4d:26:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:08:51 2026 by rpki-client