Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.mft
File:                     tpH_yGWeLmOm3s7H1vNtYLZkCWE.mft (raw, json)
Hash identifier:          KgexSJjOWCw+RDp+SiwoCNnnWvJjwKRLVwAs/MwR2l8=
Subject key identifier:   BE:5A:87:0A:60:5A:85:5B:EF:94:2C:DC:6A:42:C9:69:2B:F8:6F:DD
Authority key identifier: B6:91:FF:C8:65:9E:2E:63:A6:DE:CE:C7:D6:F3:6D:60:B6:64:09:61
Certificate issuer:       /CN=b691ffc8659e2e63a6decec7d6f36d60b6640961
Certificate serial:       019EBE477D7111210D4EFC7E4E42F55BE3A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tpH_yGWeLmOm3s7H1vNtYLZkCWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.mft
Manifest number:          0203
Signing time:             Sat 13 Jun 2026 00:00:16 +0000
Manifest this update:     Sat 13 Jun 2026 00:00:16 +0000
Manifest next update:     Sun 14 Jun 2026 00:00:16 +0000
Files and hashes:         1: CnAOgW0v2FHhY7xG5Ek16W61Xwo.asa (hash: BYtVtXvNLu7yhVLJxNiUtZ/vkS0B93JK13XOxYFj8W8=)
                          2: tpH_yGWeLmOm3s7H1vNtYLZkCWE.crl (hash: XVV0y3V1rU9OONE1OnQr1qMXNW0ajdp1ntzjyVlspK8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tpH_yGWeLmOm3s7H1vNtYLZkCWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:47:7d:71:11:21:0d:4e:fc:7e:4e:42:f5:5b:e3:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b691ffc8659e2e63a6decec7d6f36d60b6640961
        Validity
            Not Before: Jun 13 00:00:16 2026 GMT
            Not After : Jun 14 00:00:16 2026 GMT
        Subject: CN=be5a870a605a855bef942cdc6a42c9692bf86fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0d:c5:f9:2c:51:5b:f5:f0:f0:88:7b:13:a0:
                    7c:f3:ce:84:a4:38:16:1c:6d:5e:da:97:86:c9:c6:
                    16:62:96:2f:0e:67:92:38:18:1b:35:c4:92:33:42:
                    83:d2:3f:b6:ba:bf:07:09:03:ae:2c:a5:21:10:ef:
                    94:da:2b:ec:2e:cf:51:d3:a8:69:24:aa:88:c1:18:
                    38:e0:70:66:2f:70:c7:c7:38:4b:60:61:fe:cd:ea:
                    28:b6:b9:3d:3a:bf:0d:b4:37:c0:c9:8f:28:96:f9:
                    20:28:6e:94:8a:ab:1e:13:9b:8a:fe:9c:fa:2a:b7:
                    52:c5:7c:14:6e:01:32:79:cd:0c:76:db:ad:c7:51:
                    11:46:e9:7c:10:92:41:95:96:36:e5:a4:52:a3:4c:
                    03:43:ab:06:2e:94:59:95:17:ca:e1:ce:87:67:1e:
                    8a:46:a7:f8:71:7d:f3:e0:d4:85:3d:1f:03:3b:eb:
                    34:11:8f:25:d8:11:d7:5a:d6:c9:8c:3c:11:40:de:
                    eb:20:99:c0:7e:de:b0:c5:94:35:0e:4f:29:7d:83:
                    8f:18:7e:e8:e7:26:72:97:d1:0b:97:91:4c:c9:b6:
                    7b:87:50:c9:27:52:29:04:01:79:b2:34:0b:d9:86:
                    17:15:44:dc:38:42:6f:68:bc:d1:e7:8a:fe:a1:96:
                    35:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:5A:87:0A:60:5A:85:5B:EF:94:2C:DC:6A:42:C9:69:2B:F8:6F:DD
            X509v3 Authority Key Identifier:
                keyid:B6:91:FF:C8:65:9E:2E:63:A6:DE:CE:C7:D6:F3:6D:60:B6:64:09:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpH_yGWeLmOm3s7H1vNtYLZkCWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/24c4d1-863f-44c3-86ad-9a294c70c70e/1/tpH_yGWeLmOm3s7H1vNtYLZkCWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:00:c6:31:2c:03:7b:39:59:31:04:e2:82:39:b1:75:27:f0:
         13:a6:03:cb:09:06:6d:2a:ff:8f:6a:c6:4d:46:39:fa:c4:6e:
         0c:b6:6a:9c:d5:f5:88:6d:25:22:04:c5:1d:ba:3a:20:70:c5:
         d8:65:40:c7:e6:5b:37:76:c4:39:ae:6b:84:62:49:a0:19:fc:
         5f:02:35:74:b4:9f:9d:f3:1f:24:0d:eb:0e:f9:b2:38:b1:b0:
         7e:d8:51:47:e8:73:27:7a:f8:33:a4:be:b9:7d:fc:b7:e1:c6:
         28:34:08:dc:67:e4:4d:5f:ad:93:17:7c:5d:0c:ee:92:51:80:
         a8:a8:6d:9d:98:0c:b2:2a:0d:cd:f7:5c:56:07:da:51:34:d1:
         cc:37:fc:8d:95:dd:cd:94:38:2a:c7:b3:18:9f:e2:a8:dd:ee:
         17:08:c6:38:3d:0a:19:ad:7f:69:c7:2d:7a:d9:80:ff:db:5a:
         d9:e0:26:04:27:58:a1:6b:51:3b:2a:a2:a1:fb:ae:8f:15:ba:
         55:86:a0:8c:51:68:44:e6:20:7b:0d:e7:86:e7:95:6a:2d:22:
         2c:ae:ad:64:44:55:52:75:2f:e8:09:02:68:29:c9:13:01:80:
         42:bb:70:9a:e9:e7:77:24:f5:f4:ae:30:93:2e:a3:c5:5d:73:
         79:a5:8e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:59:53 2026 by rpki-client