Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
File:                     TSkoLUc3P5QvCti5HtlAk7Zuo68.mft (raw, json)
Hash identifier:          /qtknOKvnkdJFMKEa/ZGFSkmIynbr+VYQCRHhg0Rijg=
Subject key identifier:   FC:A1:2F:C8:7B:C0:07:09:BE:66:57:20:61:51:BB:8B:FD:2B:0A:11
Authority key identifier: 4D:29:28:2D:47:37:3F:94:2F:0A:D8:B9:1E:D9:40:93:B6:6E:A3:AF
Certificate issuer:       /CN=4d29282d47373f942f0ad8b91ed94093b66ea3af
Certificate serial:       019D992B20B41A1412D2574C0DB125A75E90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
Manifest number:          184A
Signing time:             Fri 17 Apr 2026 02:00:33 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:33 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:33 +0000
Files and hashes:         1: PNfIBENqPn1C2ky1c3Y7NiG7Ymw.roa (hash: DgC7dqgRapp52CiQQUrzN9ZAbunqBU0/xi2SXO7kKV0=)
                          2: TSkoLUc3P5QvCti5HtlAk7Zuo68.crl (hash: KIMh6TpS07DrWBJvrqQDbGvKrSwKWpLVpy5IBvFyzeI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:20:b4:1a:14:12:d2:57:4c:0d:b1:25:a7:5e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d29282d47373f942f0ad8b91ed94093b66ea3af
        Validity
            Not Before: Apr 17 02:00:33 2026 GMT
            Not After : Apr 18 02:00:33 2026 GMT
        Subject: CN=fca12fc87bc00709be6657206151bb8bfd2b0a11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fd:b3:c0:e3:e1:6a:da:df:ec:59:6a:c4:f2:
                    a7:9c:f1:86:6f:59:31:e0:57:76:b3:b1:53:6a:43:
                    d4:b8:82:46:ee:7e:70:60:86:ec:76:72:3c:69:76:
                    6e:04:71:b0:fe:07:ff:20:eb:56:98:ea:8e:46:13:
                    cd:af:75:e3:6f:0b:1f:fd:9d:c2:4e:97:19:0c:70:
                    2e:dd:f2:38:9e:18:9a:6a:ff:80:0c:6e:44:b5:69:
                    25:45:63:ce:fd:b7:44:04:5b:67:d3:2f:7d:92:31:
                    b9:d6:23:00:e0:fc:02:0b:63:4f:08:41:b2:24:32:
                    e4:06:38:35:38:1c:d7:62:a9:18:92:2e:bf:01:44:
                    e9:be:5e:b8:72:2e:5d:dd:66:00:24:1d:77:37:54:
                    9e:8c:2e:8c:70:cd:c9:14:22:bc:56:62:16:0f:60:
                    6b:59:ca:79:ae:bc:02:4d:bd:7f:27:8c:f3:01:37:
                    8a:cc:6a:00:6b:f0:16:1a:35:6e:1d:83:b7:7d:b7:
                    88:b9:58:76:6a:b2:65:77:17:98:ca:e9:74:77:36:
                    59:38:9d:24:83:44:a8:53:07:57:11:7e:c0:c1:db:
                    cd:9e:1d:13:6a:fc:07:a1:a0:54:45:37:1b:28:d3:
                    09:b4:37:54:8f:51:8c:f5:32:43:29:7d:d4:a2:fb:
                    a2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A1:2F:C8:7B:C0:07:09:BE:66:57:20:61:51:BB:8B:FD:2B:0A:11
            X509v3 Authority Key Identifier:
                keyid:4D:29:28:2D:47:37:3F:94:2F:0A:D8:B9:1E:D9:40:93:B6:6E:A3:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSkoLUc3P5QvCti5HtlAk7Zuo68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/65a4c2-34b3-4205-afd1-c5481db3718d/1/TSkoLUc3P5QvCti5HtlAk7Zuo68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:26:7f:58:1f:24:58:75:b9:a6:dc:93:86:d4:01:53:1e:b0:
         6a:a3:62:93:8d:b0:b6:38:c0:32:81:2e:99:77:0f:0a:06:c6:
         d2:ee:3d:b4:41:ec:46:2d:ca:6e:cb:7d:d8:27:f6:08:5a:7f:
         4a:1a:f5:e0:26:4d:d9:e4:66:2c:2d:91:a1:c4:a8:7d:74:4b:
         34:5e:cd:fc:34:91:90:9d:bc:f9:f2:0d:65:68:26:7f:ff:f4:
         c4:3c:ca:e8:f3:ff:2f:aa:2a:43:f6:9f:b6:66:ea:10:73:f2:
         7c:7e:b2:44:7f:da:c5:a8:91:1d:45:e0:f2:48:6a:c6:89:ec:
         14:3a:80:7c:5f:c7:e0:9f:67:06:6c:3b:12:35:6e:9b:50:03:
         41:cf:f3:74:eb:eb:15:da:41:fd:ff:ec:47:88:18:9d:cb:8a:
         1b:78:de:a1:34:86:9a:ab:55:c7:e1:8b:30:a7:45:0d:dc:99:
         af:13:3a:85:e5:6d:64:18:e9:87:07:87:da:0a:49:84:4e:9c:
         ae:70:c0:44:c0:6a:ad:92:29:b6:8f:b8:0a:cc:6e:39:77:a7:
         86:5c:fc:7a:65:61:ae:23:b6:ae:7d:6e:0e:66:d9:1b:92:cf:
         c4:41:bf:28:65:eb:91:b8:3e:b8:09:01:80:93:c5:7d:5d:4b:
         94:f9:8e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:35:44 2026 by rpki-client