Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
File:                     TiujrIcTmtEWAnd-TTXYFYKhkb8.mft (raw, json)
Hash identifier:          fCfVKc17aeg3oALjCi1L4ImhHimdsMIvWSRTS0ziiv4=
Subject key identifier:   69:A2:70:23:A1:23:24:82:18:C8:77:81:B3:FD:2C:32:25:12:58:53
Authority key identifier: 4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
Certificate issuer:       /CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Certificate serial:       019EC0DADABF71C2653B8987D1C58E1AFB0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
Manifest number:          0754
Signing time:             Sat 13 Jun 2026 12:00:28 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:28 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:28 +0000
Files and hashes:         1: TiujrIcTmtEWAnd-TTXYFYKhkb8.crl (hash: JiPdeWMombxqA2Q0n9dDvqa6jDWjoQ2nl0cWztYKu5A=)
                          2: s8uoBmRDwT1I6UHn-j9HLjE26mE.roa (hash: 93nVEqAB+I5Wpe2PdQ+LQC2FT2DxNkUueoInceH3LxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:da:da:bf:71:c2:65:3b:89:87:d1:c5:8e:1a:fb:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
        Validity
            Not Before: Jun 13 12:00:28 2026 GMT
            Not After : Jun 14 12:00:28 2026 GMT
        Subject: CN=69a27023a123248218c87781b3fd2c3225125853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:56:e3:f2:4f:c4:40:82:09:dc:03:20:0d:5a:
                    57:97:41:6b:04:8f:b1:de:37:6d:4e:16:68:7f:c1:
                    10:1f:cb:d1:19:cd:2c:dc:ff:79:01:54:d7:48:f2:
                    27:0f:10:fb:92:5c:e1:42:97:57:3f:09:64:15:e6:
                    2c:7d:86:40:94:70:85:75:f3:5f:32:be:a6:33:c5:
                    c2:48:64:2a:6a:f8:e2:1d:fa:f6:25:f5:8e:46:76:
                    6d:87:6e:b9:93:2c:86:49:7a:35:a6:32:58:1e:cd:
                    d9:ed:2e:70:00:f9:4e:4b:f4:9e:87:ab:c8:e4:40:
                    71:69:e4:f0:af:db:89:60:52:0d:b3:0a:63:83:3c:
                    8c:6d:91:97:33:d4:31:ff:3f:66:fd:48:d5:c8:61:
                    e1:26:a7:e2:30:5b:d2:1f:f8:4e:73:e5:73:88:6d:
                    d4:83:08:6e:41:f8:f6:2b:b8:7d:ae:ec:4b:fe:f1:
                    ef:54:dd:5e:50:fc:b2:f2:77:24:ac:65:a1:6e:1f:
                    d6:30:d9:5f:4c:43:3c:64:d4:f0:66:0c:24:7a:6b:
                    ad:37:21:e1:f9:50:de:22:c3:51:ce:2a:99:70:54:
                    9d:5e:4d:db:51:55:9e:d7:d9:a4:8a:c3:b5:cb:16:
                    6d:58:7e:58:56:a0:2e:da:42:da:53:48:ff:a6:8e:
                    a2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A2:70:23:A1:23:24:82:18:C8:77:81:B3:FD:2C:32:25:12:58:53
            X509v3 Authority Key Identifier:
                keyid:4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:fd:df:53:c0:0e:4c:46:c9:2f:5d:6a:44:89:e9:2f:61:8e:
         04:4a:a2:60:39:8d:a0:ea:2e:82:a3:7a:b8:65:20:23:e3:99:
         d5:6b:c3:9a:0a:83:57:34:68:43:f6:dd:10:03:15:dd:d2:68:
         74:b5:87:70:ff:17:0e:6f:f0:b8:92:87:6d:09:5a:d9:b0:0e:
         7e:e6:80:b1:b9:a4:ae:69:41:e2:4e:a9:ca:57:e8:04:13:d2:
         2e:9a:e0:dd:b5:6f:c9:6d:92:cc:30:2c:75:17:be:5c:01:ef:
         44:c1:22:5b:2d:7b:16:0d:f6:ba:45:e8:35:f3:c7:f9:f6:0d:
         7b:c9:99:4d:32:6f:18:f1:a2:95:2f:1e:1c:cc:7d:34:8e:cf:
         ea:dd:f9:b6:14:5c:88:48:2e:7e:e5:88:ad:16:a8:fa:0b:cf:
         34:c1:ae:a6:e8:d1:47:19:b3:52:54:be:57:cd:83:69:75:03:
         7b:6a:4e:f5:e6:e5:19:b0:76:74:99:bb:71:46:a8:72:dd:09:
         93:b4:5c:7b:c9:94:15:a7:f2:3d:f4:e8:b9:0c:f9:8e:96:07:
         8e:34:14:bd:b6:c6:a5:79:a7:eb:19:b0:22:45:9b:a1:26:bf:
         e5:86:86:e6:94:42:00:6a:6d:b0:f3:e0:01:3e:00:2d:e6:ab:
         fb:2d:c6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:07:55 2026 by rpki-client