Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
File:                     TaTWGZrsgo9pieLoTOwXdlusXNU.mft (raw, json)
Hash identifier:          SoZBcHEh+843yp0e2+m791a9tuVynWUQObPTlqtHRb0=
Subject key identifier:   FB:15:07:CD:F9:D0:82:AA:42:5E:4E:6B:50:B4:0F:7A:16:76:30:07
Authority key identifier: 4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
Certificate issuer:       /CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Certificate serial:       019EC3A4FDA3936E50ADD946C64A37CF6F78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
Manifest number:          1963
Signing time:             Sun 14 Jun 2026 01:00:30 +0000
Manifest this update:     Sun 14 Jun 2026 01:00:30 +0000
Manifest next update:     Mon 15 Jun 2026 01:00:30 +0000
Files and hashes:         1: TaTWGZrsgo9pieLoTOwXdlusXNU.crl (hash: dkQUDVHHzPDAgSOvcamHbb3MEWIhuDextv7t3yWwBhc=)
                          2: TgOSFEfASWDSpD8EkyKS9nujPiY.roa (hash: 0PwFXdbWv8R/ss2S++46JT4vsGX/tK0Xl7tQX+Eh9g0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:a4:fd:a3:93:6e:50:ad:d9:46:c6:4a:37:cf:6f:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
        Validity
            Not Before: Jun 14 01:00:30 2026 GMT
            Not After : Jun 15 01:00:30 2026 GMT
        Subject: CN=fb1507cdf9d082aa425e4e6b50b40f7a16763007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:dd:32:28:c8:8a:c5:32:a3:8b:fd:4f:95:05:
                    54:d3:2c:a0:b6:0c:c9:b9:1e:ba:74:5b:5c:32:20:
                    42:b0:82:03:4a:53:7a:fa:79:9f:0a:e8:0c:29:13:
                    06:fa:4e:4e:75:e5:b5:64:c8:00:21:e1:0b:71:99:
                    16:43:3e:af:13:e0:f4:0b:61:fe:04:cc:c7:d1:1d:
                    23:78:9d:a0:28:18:0f:75:65:20:ad:d0:13:6f:b6:
                    b7:d2:7f:72:47:01:b3:5a:df:50:ae:69:df:2b:96:
                    26:95:8d:d6:61:4e:fa:3d:48:0f:82:69:8f:45:8d:
                    04:4d:70:4a:df:10:7e:ad:7f:70:3a:a9:94:e3:cb:
                    79:93:00:44:4e:6f:3a:d8:8b:d2:ae:e2:70:ce:9d:
                    40:5b:db:b9:ff:07:0f:a5:ef:49:9f:7a:cb:ff:06:
                    8a:3d:a9:58:34:53:0b:27:18:08:7b:92:53:d0:6b:
                    80:82:ab:2b:68:e3:79:fd:9e:62:c6:1a:ba:54:4d:
                    9f:2b:0b:cf:f9:95:1d:1a:e6:97:3b:32:11:e6:7d:
                    b4:3f:47:f8:06:b6:f7:19:33:5c:8b:cd:73:de:01:
                    e5:da:16:f3:0f:ed:aa:46:d9:75:b5:38:02:42:f0:
                    6b:4b:35:37:37:2c:80:4d:01:9b:f6:c0:40:64:f5:
                    e3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:15:07:CD:F9:D0:82:AA:42:5E:4E:6B:50:B4:0F:7A:16:76:30:07
            X509v3 Authority Key Identifier:
                keyid:4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:95:75:5e:3f:84:86:62:9b:bf:bf:16:bf:ad:21:f0:c5:7f:
         76:fc:4d:e8:9e:82:1a:ca:28:ff:c6:75:9f:f3:b6:7e:9c:bd:
         d3:a7:42:19:39:4c:2c:1d:f9:a5:a2:4b:7d:42:8a:f4:dd:bc:
         9a:f4:fd:af:96:50:21:18:a4:ec:7e:ff:8d:a8:98:eb:f2:c2:
         f6:76:d4:b5:82:af:da:0d:37:81:1e:f7:6b:7f:4c:96:05:0e:
         a5:92:ca:37:d5:d5:46:a1:c2:24:f0:08:c0:d8:c6:d7:c6:14:
         76:47:5c:fa:e8:ae:20:5f:9d:b8:ef:04:15:8d:f5:20:9d:82:
         d7:0c:05:df:3a:b4:0c:47:a8:4e:9e:eb:a9:ca:3d:09:d1:ac:
         92:f0:7a:f6:a5:f5:59:a2:5a:90:32:3c:25:a6:94:0a:91:cd:
         9c:4e:ea:d2:5a:a3:28:41:21:29:5e:36:a2:57:44:b6:5f:97:
         e3:74:8f:42:1e:f5:13:77:11:b4:75:88:f5:c2:a3:cc:f3:d3:
         df:14:9e:56:3f:39:98:49:7b:1e:50:a5:43:bf:b8:0d:f9:f1:
         c4:9a:85:cc:6c:7f:0a:3a:7b:0e:c7:49:17:73:db:1a:74:8b:
         2c:f2:02:96:41:0f:98:4f:d1:0c:b2:b4:ae:18:1c:57:b6:c2:
         73:38:7e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:22:00 2026 by rpki-client