Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft
File:                     Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft (raw, json)
Hash identifier:          bY9BqAcFtBIuK1E/Uy4p1RqYExdtymgDhNUjjcj9Y3Y=
Subject key identifier:   83:DC:B8:90:25:C8:1A:7F:1E:7E:36:D8:EF:76:D3:A1:DA:02:3D:6E
Authority key identifier: 4E:6B:32:D9:D3:EB:C6:EE:49:BD:6F:A6:CD:90:E4:F5:C7:D5:44:E8
Certificate issuer:       /CN=4e6b32d9d3ebc6ee49bd6fa6cd90e4f5c7d544e8
Certificate serial:       019CACEB89A18583C2454DA6341FDF610AE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tmsy2dPrxu5JvW-mzZDk9cfVROg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft
Manifest number:          0610
Signing time:             Mon 02 Mar 2026 05:00:43 +0000
Manifest this update:     Mon 02 Mar 2026 05:00:43 +0000
Manifest next update:     Tue 03 Mar 2026 05:00:43 +0000
Files and hashes:         1: HW5RUStuLbxYQOe8Gu-H_E5aWV0.roa (hash: x07LEmxGJBV5xPNSCMiyKaX4u86SUnl4qoOBSfBpXEw=)
                          2: Tmsy2dPrxu5JvW-mzZDk9cfVROg.crl (hash: 8Swj0KNW8dtmbn/XSmQUj+YGYRnmst7Bwnn8Wot5m1I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tmsy2dPrxu5JvW-mzZDk9cfVROg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:eb:89:a1:85:83:c2:45:4d:a6:34:1f:df:61:0a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e6b32d9d3ebc6ee49bd6fa6cd90e4f5c7d544e8
        Validity
            Not Before: Mar  2 05:00:43 2026 GMT
            Not After : Mar  3 05:00:43 2026 GMT
        Subject: CN=83dcb89025c81a7f1e7e36d8ef76d3a1da023d6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f9:bf:0c:e4:ac:50:fa:b1:0e:ee:cc:f1:eb:
                    45:8a:84:48:11:6f:5d:34:35:38:2d:54:62:d2:54:
                    37:71:78:fe:81:d3:9e:ce:b0:45:11:85:9e:8e:89:
                    a7:53:fc:04:e6:95:0b:a6:83:1c:e5:7b:74:17:3c:
                    9b:ae:6a:12:a4:82:fa:ad:70:c3:c4:60:e4:70:01:
                    02:c8:75:48:4a:51:99:3b:ca:59:7a:db:1e:05:79:
                    2f:e4:e9:30:46:fe:ba:c2:8f:d2:55:85:ac:5d:b1:
                    f9:f1:7b:36:a3:e1:6c:9c:1a:a2:29:61:2f:68:2f:
                    cb:37:7c:a5:3f:da:c4:ee:60:98:c9:35:4f:1e:04:
                    a7:77:b8:12:5d:87:dc:d2:eb:99:65:c6:4f:c6:52:
                    cf:c8:6f:f8:a5:5a:94:60:36:77:44:be:36:00:69:
                    53:45:49:4f:ac:0b:1f:fe:d8:e0:68:84:15:a8:d2:
                    2e:eb:46:ed:a7:a6:6e:d2:ec:31:b0:c3:64:39:91:
                    df:d5:2a:2b:2e:81:a3:63:ea:17:d1:f3:a5:d5:da:
                    8b:35:1a:4b:60:75:15:05:b2:7c:66:62:c8:25:14:
                    63:34:b7:2c:5d:d2:8b:e2:e9:d0:f3:ef:f7:4f:18:
                    23:7c:52:5b:d9:4c:f6:24:31:3c:e8:9c:d5:ed:b3:
                    6a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:DC:B8:90:25:C8:1A:7F:1E:7E:36:D8:EF:76:D3:A1:DA:02:3D:6E
            X509v3 Authority Key Identifier:
                keyid:4E:6B:32:D9:D3:EB:C6:EE:49:BD:6F:A6:CD:90:E4:F5:C7:D5:44:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tmsy2dPrxu5JvW-mzZDk9cfVROg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6274d7-8d1c-493b-9c22-096ee29d997d/1/Tmsy2dPrxu5JvW-mzZDk9cfVROg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:46:c9:cf:da:97:09:69:36:ca:bf:0e:e7:57:67:a9:7c:e1:
         7d:44:33:d0:d4:fb:6a:1d:38:87:c3:84:0c:eb:0c:2d:06:aa:
         d2:13:16:c7:ec:b8:f6:7c:0c:09:ab:50:07:b8:0f:26:60:1a:
         3a:4c:00:f6:09:d1:00:2e:a8:56:e8:61:8b:e6:83:e0:af:39:
         a7:4b:41:3f:3e:2e:74:b4:12:81:9e:c1:6a:0c:e7:73:97:92:
         35:1d:35:52:45:fe:c7:6e:72:77:85:44:de:2f:1f:32:f8:83:
         11:46:65:ec:85:9a:f3:70:c7:72:db:1f:4e:0f:67:2d:d4:71:
         01:80:2e:ed:5d:d9:18:6f:6a:7e:66:1c:79:28:96:9b:93:11:
         73:5c:70:25:bd:9a:b4:e7:f6:3c:f5:27:50:18:eb:7f:53:2a:
         ad:d8:82:8b:22:6b:ce:ee:c0:ec:fa:1f:ed:3b:09:84:ba:01:
         fb:c0:19:64:c3:21:75:9d:05:37:75:21:ae:ab:8d:0c:1e:e8:
         3d:74:53:a0:4c:68:4a:5a:b5:e1:3f:cc:5f:9b:96:3e:33:a0:
         6f:8c:d8:93:fe:67:ca:0e:c8:07:ef:9f:9e:08:d8:6b:b5:e0:
         3b:28:7c:65:85:68:00:02:63:78:ca:91:f4:67:53:85:7f:21:
         31:f6:b4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:42 2026 by rpki-client