Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
File:                     TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft (raw, json)
Hash identifier:          2eqGp6dBYwswNIBBCEbL80Pcm7ukj8xxUQ0RS+y4QZA=
Subject key identifier:   67:C1:17:B6:5F:C9:BD:F9:4A:E7:B4:B6:F3:B9:E2:98:A0:C4:60:77
Authority key identifier: 4C:DE:7B:38:BE:AF:3C:63:87:9F:F9:30:97:3D:16:3F:1E:88:E7:E6
Certificate issuer:       /CN=4cde7b38beaf3c63879ff930973d163f1e88e7e6
Certificate serial:       019EC224867EC4CC0CD2797E16233FE671BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
Manifest number:          035F
Signing time:             Sat 13 Jun 2026 18:00:34 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:34 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:34 +0000
Files and hashes:         1: LnjNGcMyH3MeERFj_pC3gRzTFnU.asa (hash: qASxAPP9ucQL4oyglFA6dDLN1CVjgDXdRMKgSKCNRhg=)
                          2: TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl (hash: uxL86czFrbkqUeLq9aWJlkNmYJam3lZoPbeFykk+NXg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:86:7e:c4:cc:0c:d2:79:7e:16:23:3f:e6:71:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cde7b38beaf3c63879ff930973d163f1e88e7e6
        Validity
            Not Before: Jun 13 18:00:34 2026 GMT
            Not After : Jun 14 18:00:34 2026 GMT
        Subject: CN=67c117b65fc9bdf94ae7b4b6f3b9e298a0c46077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:34:ec:c1:79:87:d7:63:50:ea:f9:d8:58:1a:
                    e6:9c:1e:3c:bd:72:b7:a1:0b:8c:55:fc:21:90:a8:
                    92:92:d4:2e:2f:f4:f6:83:3a:29:9b:5b:a4:bd:86:
                    72:70:56:80:3c:b4:e6:1e:f6:75:ff:fd:4d:23:96:
                    70:62:b4:57:d4:ac:80:81:06:0f:b9:b5:55:06:aa:
                    f5:88:6f:85:19:74:97:35:d8:42:f3:f2:f1:c3:6e:
                    9e:5f:fe:82:c0:94:51:6b:e6:f3:f2:c1:ad:a9:37:
                    c5:16:a7:78:69:3d:14:3d:20:07:ab:84:7a:8c:9a:
                    95:25:94:67:dc:bf:f7:a7:fa:ce:4f:30:8f:20:50:
                    56:46:52:ec:1b:5a:f6:10:94:1c:c8:50:c7:01:36:
                    2a:13:fe:87:6e:c2:18:95:61:5e:7d:99:a4:9a:0d:
                    34:f2:87:71:32:18:b6:65:07:a1:31:fa:d2:09:56:
                    85:70:47:33:bb:d0:5a:bf:f9:de:a8:35:08:8e:3a:
                    90:96:23:49:94:40:64:94:6c:0c:10:5b:28:4d:5b:
                    94:94:cf:c0:75:06:65:10:f7:67:5f:b3:a5:3b:b9:
                    7a:05:02:ae:5e:db:91:4f:6d:32:cd:06:0f:7c:55:
                    d0:97:e1:44:51:d0:e9:10:cf:5a:b9:82:16:c9:41:
                    f1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C1:17:B6:5F:C9:BD:F9:4A:E7:B4:B6:F3:B9:E2:98:A0:C4:60:77
            X509v3 Authority Key Identifier:
                keyid:4C:DE:7B:38:BE:AF:3C:63:87:9F:F9:30:97:3D:16:3F:1E:88:E7:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:f4:01:15:1e:4f:f2:72:e4:40:95:65:9b:c2:32:74:b4:fa:
         31:68:2c:7c:1b:84:26:33:f3:6b:06:65:cb:a6:93:ea:3b:0b:
         91:50:fa:18:c2:09:cf:42:32:93:7a:32:76:22:90:cf:23:bc:
         b8:bd:ed:8a:bb:94:21:d6:89:61:2a:79:a6:01:5d:08:47:c0:
         0d:f0:b3:51:33:79:e0:9d:94:ec:f8:98:0f:e3:6c:08:a1:7e:
         26:f0:b2:26:9a:ef:72:39:9e:bb:c2:28:60:d2:c0:48:2e:40:
         88:cf:95:13:06:bd:e7:4a:92:8b:39:e8:b7:20:7e:90:43:c4:
         7d:5f:ff:13:af:cb:e8:4e:f2:00:75:ee:de:ec:80:1d:ec:63:
         63:0d:e4:7c:d7:3a:2f:c8:9e:ec:6c:a6:1c:14:b5:b9:25:a3:
         84:6d:cb:23:1e:4e:d5:77:6a:a8:36:4d:7a:40:6d:2a:cb:97:
         86:a9:b2:c4:0b:cf:55:6e:14:dd:00:a7:58:cf:2f:cb:b4:89:
         50:7e:a7:ec:59:e6:2c:d0:a0:94:49:5f:68:c2:c4:75:35:a3:
         a2:ef:69:75:f4:07:22:96:33:f7:c9:54:c3:77:2e:6d:bb:d0:
         e0:f0:a1:8a:68:e3:42:a0:d8:62:54:ee:21:19:58:41:1c:7c:
         6a:4c:9d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:19:46 2026 by rpki-client