Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
File:                     tgqsEEN2t53WgpCRlHt3nJia9os.mft (raw, json)
Hash identifier:          FvFt8unqVKYoY524vswYnllSX5SgLX96ln08gfKF+PI=
Subject key identifier:   0E:E7:3C:8D:5E:3A:EE:20:89:69:14:C3:18:73:4D:B0:45:C2:16:EA
Authority key identifier: B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B
Certificate issuer:       /CN=b60aac104376b79dd6829091947b779c989af68b
Certificate serial:       019EC2C9A67B85DF6AE94B1B84A4D3B7B014
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
Manifest number:          156D
Signing time:             Sat 13 Jun 2026 21:00:55 +0000
Manifest this update:     Sat 13 Jun 2026 21:00:55 +0000
Manifest next update:     Sun 14 Jun 2026 21:00:55 +0000
Files and hashes:         1: qpaxq7ZhsWj2r4DwD72krm1lajU.roa (hash: MqKBfCOBRTEgrXSIFmc+vLs4pABsdPRMHJhH8wTcfXk=)
                          2: tgqsEEN2t53WgpCRlHt3nJia9os.crl (hash: H698ICCraVUsMxSCvsWLi/9F8jQhfS3jCxbC3wbAnvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:a6:7b:85:df:6a:e9:4b:1b:84:a4:d3:b7:b0:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b60aac104376b79dd6829091947b779c989af68b
        Validity
            Not Before: Jun 13 21:00:55 2026 GMT
            Not After : Jun 14 21:00:55 2026 GMT
        Subject: CN=0ee73c8d5e3aee20896914c318734db045c216ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:00:9e:5e:33:44:8b:16:ed:95:c6:cf:8f:24:
                    eb:79:1f:79:92:8b:2d:0b:07:e1:cd:2f:66:51:06:
                    c4:a4:74:4f:8e:06:3b:b2:3e:dd:4c:1a:6e:bc:d2:
                    ac:01:bd:9a:87:60:bf:f5:97:8d:97:7a:e3:ce:ec:
                    88:87:cc:14:87:43:67:8f:31:56:80:eb:e6:31:60:
                    35:4c:19:93:40:a8:bb:ca:09:bf:6b:e6:f2:fc:2f:
                    a8:84:c1:49:12:50:87:80:39:a2:7e:77:f8:4f:62:
                    53:6f:38:d1:df:01:6e:15:0d:4d:51:15:36:e3:71:
                    e0:1c:34:5c:e4:f0:a4:53:a7:8c:af:18:17:ef:28:
                    c9:a6:08:27:49:7e:65:bd:21:c1:8e:36:7b:1f:49:
                    99:d1:b6:3d:83:85:28:c3:b9:00:f1:61:c3:20:1b:
                    91:c9:21:52:76:bb:92:43:f3:e0:6e:ec:c9:40:a7:
                    91:f7:99:3f:9f:70:b4:1f:c4:8d:5c:99:07:fa:d8:
                    35:07:37:d7:81:be:da:3b:76:6b:a5:ee:21:fe:20:
                    bd:d1:54:ea:82:3c:a4:5b:50:06:0b:50:71:9c:12:
                    c8:49:6f:be:4e:31:e8:35:bb:19:3d:81:c1:ed:b0:
                    75:4c:eb:8a:4d:19:52:30:6b:a7:80:96:6f:e9:d2:
                    87:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E7:3C:8D:5E:3A:EE:20:89:69:14:C3:18:73:4D:B0:45:C2:16:EA
            X509v3 Authority Key Identifier:
                keyid:B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:8d:90:c5:ee:34:1a:ae:54:1c:0d:93:ca:fc:00:b2:2c:09:
         eb:c5:cd:31:7f:fc:72:f0:37:fa:df:a2:6b:33:d4:9c:d2:df:
         aa:bf:86:0e:c6:29:0e:1a:ba:4a:6a:88:f9:7c:b4:9b:cd:fe:
         4e:78:c5:3d:ee:06:6e:c9:82:0d:32:b1:5e:75:e4:a5:76:0f:
         05:9d:8e:53:a6:7b:ed:8b:54:b8:b8:24:a5:5a:0b:f1:c6:a8:
         6e:f6:e5:0f:12:e9:d7:dc:b1:88:12:7f:ff:3a:b1:9e:63:39:
         f7:49:c7:25:d7:f0:c2:81:fb:8f:ad:a7:d4:3b:7a:cc:3c:a6:
         5e:cc:9c:01:b9:d7:5c:e8:4b:b9:b7:1b:ad:a7:33:d5:e9:76:
         ec:d0:d0:88:4d:91:fe:05:41:30:9d:6b:31:fc:54:32:3f:eb:
         9b:09:e1:b6:7e:96:b1:98:d4:9c:63:0f:0a:e9:71:2a:da:eb:
         33:2e:fb:ac:d9:5e:45:79:9d:f9:d2:84:cc:45:3d:38:46:17:
         c4:c8:81:54:85:e6:3f:cf:81:6d:d9:07:80:56:13:f0:56:94:
         59:4d:8a:ee:67:c7:bb:61:5d:a1:f8:ed:b9:73:b4:20:24:9d:
         89:6c:2b:41:e4:25:87:dd:fc:53:24:ee:2d:fb:3f:b7:b7:39:
         ec:e2:6d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:06:03 2026 by rpki-client