Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft
File:                     TLIktT7JyLF_MYlbFqjUVx8OaXA.mft (raw, json)
Hash identifier:          fjUf2OOGQWNukJ2HcIOKQqnqYBkSLxCn/zYnbYfJR50=
Subject key identifier:   45:A1:0D:AE:46:B3:C1:1C:25:8A:BF:55:CE:42:A2:D6:36:31:6C:2A
Authority key identifier: 4C:B2:24:B5:3E:C9:C8:B1:7F:31:89:5B:16:A8:D4:57:1F:0E:69:70
Certificate issuer:       /CN=4cb224b53ec9c8b17f31895b16a8d4571f0e6970
Certificate serial:       019D9962B3CD57B4DA7A260883A968382563
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TLIktT7JyLF_MYlbFqjUVx8OaXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft
Manifest number:          065C
Signing time:             Fri 17 Apr 2026 03:01:15 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:15 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:15 +0000
Files and hashes:         1: OmNYh4uARDq1ZHJac3Gy8m3tuys.roa (hash: FCrDfeFT2pJ/Q6YRp1wjXdR8Urjp7+4nxbesJ1y96Mg=)
                          2: TLIktT7JyLF_MYlbFqjUVx8OaXA.crl (hash: zfakLB2mApks3pRFgta1rZX3TIYyNraj8MoDo2Q3R6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TLIktT7JyLF_MYlbFqjUVx8OaXA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:b3:cd:57:b4:da:7a:26:08:83:a9:68:38:25:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cb224b53ec9c8b17f31895b16a8d4571f0e6970
        Validity
            Not Before: Apr 17 03:01:15 2026 GMT
            Not After : Apr 18 03:01:15 2026 GMT
        Subject: CN=45a10dae46b3c11c258abf55ce42a2d636316c2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:00:99:4c:57:9f:fc:79:75:bf:0d:d3:1a:59:
                    a6:af:be:77:da:5a:0a:2c:73:49:e0:35:66:37:b5:
                    80:c7:5d:4d:26:5b:33:86:ed:a1:70:6e:49:dd:d1:
                    db:9e:1e:c9:a2:dc:2b:d2:0e:08:9f:7a:23:0f:66:
                    65:93:1f:9f:85:7c:b1:59:17:48:ad:3a:9f:d6:b5:
                    34:61:cd:de:7a:0c:1e:47:a0:98:32:c5:06:11:22:
                    19:ec:43:e3:e6:88:43:e1:b4:4d:73:bd:4c:fe:d5:
                    0e:6b:d4:43:a4:80:aa:6d:46:35:94:51:9d:87:02:
                    b2:40:6b:3a:12:82:47:18:61:46:c9:33:c2:3c:ab:
                    17:f8:b4:ab:1e:22:c3:84:1d:45:27:fb:70:2f:cd:
                    7f:53:2a:ce:55:f8:4d:bf:46:28:6b:ff:19:04:23:
                    f1:de:d4:2e:31:7e:55:95:31:ad:03:5f:36:91:63:
                    87:1b:2b:d9:0d:64:1d:61:94:d3:83:63:41:89:a0:
                    04:f0:ea:25:58:1c:ef:54:83:79:a2:f0:a9:25:44:
                    73:a2:73:4c:42:79:dd:61:f7:92:f7:f9:bb:57:b0:
                    2c:da:56:2c:b6:d0:50:35:78:41:c6:d8:5b:12:75:
                    47:0a:b4:b1:04:fb:e4:cf:2f:93:d2:3a:c1:5f:0a:
                    b9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A1:0D:AE:46:B3:C1:1C:25:8A:BF:55:CE:42:A2:D6:36:31:6C:2A
            X509v3 Authority Key Identifier:
                keyid:4C:B2:24:B5:3E:C9:C8:B1:7F:31:89:5B:16:A8:D4:57:1F:0E:69:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLIktT7JyLF_MYlbFqjUVx8OaXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:74:34:24:95:f1:a2:0f:21:ce:a1:ed:5f:56:ce:bd:f0:1f:
         6b:ed:db:e7:07:d4:de:a3:2e:33:8e:9d:13:5d:06:ab:b4:e7:
         04:65:98:60:13:71:ed:a0:fb:0a:b4:42:07:31:2d:58:d7:7e:
         f4:fa:92:11:f1:3f:39:98:38:b3:1f:e7:7b:75:eb:8f:c3:b3:
         2d:dc:6d:0b:36:32:63:64:a9:f4:8d:d2:c4:ca:25:b3:93:20:
         18:0d:3b:fe:14:66:9f:9b:46:f6:e3:f5:6d:8f:d1:07:67:3e:
         6f:65:c4:56:e8:e6:c3:d1:0c:ca:33:2b:2e:68:24:95:e5:2e:
         2b:87:8c:2d:50:9e:4b:48:b8:0d:5c:a5:fa:c0:c6:f7:44:7d:
         2e:a3:93:9d:20:fa:09:11:6a:3a:5f:aa:ce:76:96:0f:0f:3b:
         c1:ab:17:6f:8d:dc:a1:c7:2c:1c:b0:f0:55:af:6b:7a:b3:e5:
         b6:74:7a:35:82:46:75:10:ab:59:c5:58:b7:01:cb:85:4f:6a:
         40:b6:01:0e:00:62:ab:5c:8a:7b:2b:ae:ef:be:7c:5e:9b:79:
         fb:44:9c:69:35:e4:e0:ef:3d:67:fc:0f:43:02:90:75:c2:ce:
         ef:84:21:04:1b:77:81:35:75:e6:f9:be:5c:a3:c4:fa:db:a1:
         6c:68:4d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:47:21 2026 by rpki-client