Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
File:                     TzYQM0T807V1ny2z88cHE3b54jM.mft (raw, json)
Hash identifier:          /cNAyVYAvH/B6k4y2lhyhXXDyojIIs0kQX3ZD1+zg4M=
Subject key identifier:   B3:68:B9:D6:9F:B5:D9:3C:63:A5:56:4B:AD:EB:C4:9E:EF:2E:67:69
Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
Certificate issuer:       /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Certificate serial:       019EBE10A45528C3C2C410AD8769A94D4A55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
Manifest number:          1947
Signing time:             Fri 12 Jun 2026 23:00:21 +0000
Manifest this update:     Fri 12 Jun 2026 23:00:21 +0000
Manifest next update:     Sat 13 Jun 2026 23:00:21 +0000
Files and hashes:         1: 87ELvGR-tVd6OIalv11-VasMdI0.roa (hash: GT+ViPlDKtnswlta2ucK3jOCqFPeg5F12bpU1G0NLyM=)
                          2: 9HtQbFiuMYK5vn6ZdJ9A8WN33CU.roa (hash: NhpPo4MiaM2h+3uIW+206u04bojlNWdCKr/u5d1izOo=)
                          3: EgoHat_Mmduzy9sVoMLljVSWe1M.roa (hash: sKWx6PYAthDawxft6PEnQMKdlybWEO/LK5TV06bp3aI=)
                          4: Kdv421FxArGX_lR7dnoK8dbBkd8.roa (hash: QF5wI0hLNiGqV5YB/2mk9biUU4gFL01FMlpDcSvN+Dk=)
                          5: TzYQM0T807V1ny2z88cHE3b54jM.crl (hash: X7yPXrYkJqqFupDtLfl6NBBe1PX8r/8ax5qe5RcbWgg=)
                          6: VOy2pqg45DcbaU8g-AYkzB6uwX4.roa (hash: VFjQyoH7Ml5NUEDn/pVO3lEP5cH7fnzrRe/Tnl0alSQ=)
                          7: jueFlTq5Wpmf63P1qlwF3ekSIBo.roa (hash: 73q0Fc/38Tfq14N513XX+nWtiK95t2QQLqH0dSyYsFc=)
                          8: weCSLgcy81oriQwLxEbz5cBeJzg.roa (hash: TJPfh6TbLdnCL07UGvGbszVyYvuSMqDOujw1k7u6TFw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:10:a4:55:28:c3:c2:c4:10:ad:87:69:a9:4d:4a:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
        Validity
            Not Before: Jun 12 23:00:21 2026 GMT
            Not After : Jun 13 23:00:21 2026 GMT
        Subject: CN=b368b9d69fb5d93c63a5564badebc49eef2e6769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:51:6c:cf:4b:70:f3:bf:6f:ea:ab:dd:b5:65:
                    49:50:75:88:63:59:eb:dc:4d:78:da:9f:74:45:95:
                    00:94:91:23:25:28:db:7f:d7:bb:9a:69:5e:c0:13:
                    dd:29:5a:f5:fb:1a:11:08:08:6e:fa:a5:0b:df:07:
                    3a:65:3c:96:89:98:7d:65:82:cd:ab:8e:ce:f3:03:
                    39:5a:eb:9d:65:86:ed:92:ab:27:e8:c9:12:4d:66:
                    9f:f6:4d:83:11:0b:ed:9c:af:13:22:7c:6c:ca:d9:
                    02:53:33:27:4d:3c:de:61:58:c5:20:cc:a7:4d:e2:
                    fa:c4:a3:46:d7:f4:0e:eb:a9:bd:41:b8:28:b5:6f:
                    10:37:ac:4c:23:8d:8d:ec:59:64:f6:1e:66:31:22:
                    dd:60:2e:5e:99:4f:46:81:fd:b6:b2:b3:86:79:f0:
                    68:61:89:a8:97:2b:6c:18:02:8d:32:8e:ab:c7:a5:
                    37:d7:e7:0d:99:7e:26:c8:8e:94:a6:f5:89:70:07:
                    d0:24:70:7c:09:14:76:cb:98:36:1d:11:2a:e6:09:
                    a9:da:17:06:e7:55:ac:38:e2:5f:3c:98:60:4c:d9:
                    dc:07:21:3b:fe:6e:c8:90:c5:ee:88:52:3b:da:31:
                    77:ef:7f:ff:66:e4:45:8f:a8:57:76:f0:dc:32:72:
                    c3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:68:B9:D6:9F:B5:D9:3C:63:A5:56:4B:AD:EB:C4:9E:EF:2E:67:69
            X509v3 Authority Key Identifier:
                keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:19:d4:a9:d5:46:ef:96:ca:b9:2e:e8:42:07:d8:84:d8:d8:
         84:d0:08:f6:ca:a9:51:db:db:ce:29:ec:84:0c:13:1b:62:3e:
         50:54:24:0a:1f:b6:49:51:21:6f:dc:b5:e5:d6:84:68:c4:dc:
         ef:f5:1c:2c:ce:2e:85:91:d0:c8:63:47:7b:c6:3a:66:80:6d:
         4e:36:c7:bc:db:54:81:b9:d5:15:2e:29:0b:60:6a:08:9b:49:
         15:58:8b:7e:6d:25:30:44:11:87:63:5f:a6:56:3a:7b:16:86:
         a6:8e:20:9f:f0:da:94:31:da:ae:69:ab:1d:c8:cd:b5:c7:b3:
         b4:a2:e3:4b:ea:74:fb:99:0c:4a:a3:a9:d5:82:b1:c5:ba:56:
         9b:ca:4c:d7:ff:df:6e:aa:42:8d:3a:0e:09:36:16:e4:3c:f9:
         78:7d:f7:8b:d6:d9:f3:14:3d:bb:d3:b5:34:64:4d:5b:9b:c2:
         11:f9:a1:d1:9d:f1:8d:b3:e6:ad:ac:93:0d:c3:ce:3e:42:08:
         9e:48:0a:75:9b:f4:8a:c1:de:ef:21:00:53:6b:cb:0f:79:3a:
         22:e1:34:25:9b:91:37:e8:b2:65:10:28:b5:26:c2:67:5b:57:
         3b:17:9b:6b:6b:e8:95:05:a8:bd:e6:5c:cf:32:df:3a:29:a5:
         32:9a:2b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:49:31 2026 by rpki-client