Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
File:                     TKE73qVPdrioVxKv22FRhrM4OME.mft (raw, json)
Hash identifier:          iiOrlrDBZBdMfr84PCxIt28hVAJ6N2uh0Xk+lAux0nU=
Subject key identifier:   18:2B:1A:95:1F:9E:06:D0:0A:87:CA:95:E1:4B:BF:72:58:F8:00:C0
Authority key identifier: 4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
Certificate issuer:       /CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Certificate serial:       019EC36E1CC3F3371F65879E0997ADB666E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
Manifest number:          1964
Signing time:             Sun 14 Jun 2026 00:00:33 +0000
Manifest this update:     Sun 14 Jun 2026 00:00:33 +0000
Manifest next update:     Mon 15 Jun 2026 00:00:33 +0000
Files and hashes:         1: Qxxba2Z0l_Oo3VLzB9UPPLzLHh0.roa (hash: XhyQFSQAtoaUlYwvcU/d0bS+hKuIarz0HhNEQgTiZRY=)
                          2: TKE73qVPdrioVxKv22FRhrM4OME.crl (hash: Pl39TKqh3wt+yRSLRnRGtMv0o+KGbAyUeUz5gXyk4F0=)
                          3: wRfimvYG6uP1BQuztrYnul5AxK4.roa (hash: mNygzVCgId8/gWan0H+Y7eRS9fJ6Q7D8ydV4jRxwL1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 00:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:6e:1c:c3:f3:37:1f:65:87:9e:09:97:ad:b6:66:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ca13bdea54f76b8a85712afdb615186b33838c1
        Validity
            Not Before: Jun 14 00:00:33 2026 GMT
            Not After : Jun 15 00:00:33 2026 GMT
        Subject: CN=182b1a951f9e06d00a87ca95e14bbf7258f800c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ea:1e:40:98:85:96:12:bb:64:e4:27:6c:39:
                    0d:50:24:8f:c4:4a:23:dc:73:1c:36:0f:2f:a8:04:
                    f7:7e:87:8e:ca:b6:2c:8e:30:99:99:35:76:fd:ed:
                    02:7b:9c:b5:ec:07:1d:c5:a0:cf:c6:1c:92:7f:da:
                    12:f0:1e:76:63:58:82:aa:d1:cf:32:14:02:9f:45:
                    56:d3:15:aa:3f:f1:e7:9b:cd:fd:94:c1:e9:3d:2f:
                    8b:85:26:42:db:a2:df:1f:2e:c8:e9:7a:1c:8a:b4:
                    2f:3f:50:21:ad:b4:b0:94:95:be:7c:85:18:93:58:
                    a6:a3:52:cc:91:1f:66:4f:fa:95:ec:10:0f:9d:aa:
                    8b:b3:03:ef:bc:3d:67:7b:f8:3d:a7:fb:ef:81:96:
                    6f:3b:e0:5c:27:2c:64:b2:37:a3:e6:b8:84:1b:4d:
                    f5:db:6f:00:6d:c2:8f:32:d6:56:1f:ff:39:18:4f:
                    f2:c8:cc:56:b3:e6:bc:8d:aa:32:22:7e:a5:4a:6d:
                    9e:e3:e7:cb:62:4f:ab:12:61:5d:cc:2f:2f:03:f4:
                    11:03:55:47:31:fd:5a:35:42:c5:a8:0d:ec:c3:e2:
                    c2:2a:00:28:8f:0e:3c:b3:f1:b8:6b:f6:94:89:4e:
                    1b:f5:0e:c8:b7:bb:15:a2:db:43:39:a2:a9:45:3a:
                    89:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:2B:1A:95:1F:9E:06:D0:0A:87:CA:95:E1:4B:BF:72:58:F8:00:C0
            X509v3 Authority Key Identifier:
                keyid:4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:e2:b5:a4:35:e5:a7:59:d3:4a:b3:87:ec:56:47:09:69:3d:
         ba:02:ec:8c:bf:95:4a:5a:90:9a:01:5a:0a:26:ea:c3:72:85:
         05:2a:67:5d:f7:07:3e:37:72:96:17:bd:82:d1:d8:93:8d:52:
         4a:05:39:91:04:6a:98:e3:01:fa:d4:a0:58:fc:69:64:cf:77:
         41:46:bc:42:ee:8a:a9:f8:4f:2c:e3:b8:fb:c2:32:9f:74:11:
         4b:5d:17:86:fa:b5:72:79:43:47:a5:c4:62:5b:d8:b1:2e:62:
         ac:73:f1:35:ac:01:02:77:d5:6e:2e:02:df:f6:ff:31:33:a4:
         fb:91:34:7f:f8:c2:04:c7:4d:c9:f1:39:42:9e:9e:25:2f:a5:
         b1:c8:21:9d:87:70:df:2b:d8:08:32:e6:cc:86:92:50:e1:a3:
         8e:3d:3e:66:cb:1e:ef:63:b2:4b:55:47:e0:3a:6c:23:da:b9:
         ee:a0:53:f3:25:23:7e:dc:f9:9d:ed:3a:6f:a8:be:c6:10:f5:
         8c:d4:27:aa:89:61:9b:a8:4e:e1:9d:f3:36:9d:60:08:cc:ee:
         85:4d:7a:79:ff:b6:1a:4d:9a:b9:d6:52:cf:16:b9:55:5c:8e:
         4c:1b:29:ef:f2:99:c8:56:bc:72:4c:e7:38:ea:5a:20:e2:26:
         a4:3f:04:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:58:00 2026 by rpki-client