Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
File:                     TJETJOhpvEyl7IutDT3f9oVEGXk.mft (raw, json)
Hash identifier:          iFjNkVTVoq8w4Nz2moF7dw+WjnlHlwx42xBduWbtBQk=
Subject key identifier:   2A:A6:2F:4C:6F:5E:6F:09:53:3F:4A:FA:40:60:84:3F:86:CE:81:56
Authority key identifier: 4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
Certificate issuer:       /CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
Certificate serial:       019FAB9A60AB993B8FF39C47FFA059398383
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
Manifest number:          19DB
Signing time:             Wed 29 Jul 2026 02:00:48 +0000
Manifest this update:     Wed 29 Jul 2026 02:00:48 +0000
Manifest next update:     Thu 30 Jul 2026 02:00:48 +0000
Files and hashes:         1: DfRI4dovSnMSIcVz_GFD0L7vBIw.roa (hash: kG8QsSLcBHIkntfvUqxfKD4RZMhBctOildhkIA33eIw=)
                          2: TJETJOhpvEyl7IutDT3f9oVEGXk.crl (hash: Ag2NlTlx4tiXllsFY9n8YuxOzen+SIbQybA5U46BKQE=)
                          3: oE6QS3Q6uaxGz3Cm7YOOUEm6M9s.roa (hash: gHUoKUVYSCToS8vVN5V7q87OQVYzxsOvUwmEfqESOxI=)
                          4: qSNYJ-9hvnj2oMFvdiXLbxjhOwk.roa (hash: bfBTAvujo01mv5S6EOQahz4Gss8vRe5ZhsQN9X0Csy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 02:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:9a:60:ab:99:3b:8f:f3:9c:47:ff:a0:59:39:83:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
        Validity
            Not Before: Jul 29 02:00:48 2026 GMT
            Not After : Jul 30 02:00:48 2026 GMT
        Subject: CN=2aa62f4c6f5e6f09533f4afa4060843f86ce8156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:48:78:4f:97:e7:2c:fc:f7:73:93:6a:00:fc:
                    1f:5c:1c:02:f5:28:9f:1d:e6:75:a6:60:1c:fc:fa:
                    63:dd:d7:f2:64:b8:ee:d5:6e:29:27:3b:2f:b3:bc:
                    4c:72:fa:2c:b6:0d:54:fd:92:a3:b1:ef:70:81:18:
                    41:82:4f:05:bc:48:f3:70:0d:15:63:9f:ad:33:40:
                    a4:f8:67:4f:24:9f:05:aa:5e:dd:f0:20:e7:ed:f6:
                    bb:2b:80:38:22:21:08:ac:20:9a:f0:05:0b:b8:ac:
                    52:1d:24:58:6a:68:49:46:15:28:d7:5c:3c:95:11:
                    48:30:73:cb:22:ef:3b:06:ad:75:81:ab:96:82:90:
                    7a:f0:45:81:29:37:6d:b1:4a:e4:a4:4f:ce:6c:fe:
                    d9:a7:1e:ea:16:f2:b3:1d:2a:d2:ba:53:b2:a6:ea:
                    05:fd:4b:a2:e3:dd:27:4f:e5:bb:07:0a:ad:02:37:
                    90:39:d2:3e:53:cf:31:0c:f0:6d:99:e3:3a:04:67:
                    12:4e:c9:b3:4a:6c:9e:d6:98:1b:4b:5e:e3:28:98:
                    65:92:00:ba:3b:ca:17:c0:0d:43:67:d5:ad:e6:34:
                    35:9d:08:58:55:ed:88:c1:1c:07:0a:7c:f2:68:47:
                    c8:5c:b2:6a:fe:f0:fc:32:08:2c:a2:cf:b3:f4:c8:
                    bd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A6:2F:4C:6F:5E:6F:09:53:3F:4A:FA:40:60:84:3F:86:CE:81:56
            X509v3 Authority Key Identifier:
                keyid:4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:96:b4:c8:5f:b1:9b:83:f8:59:c0:d3:78:8a:9b:8a:b4:f0:
         2e:77:c1:f6:14:c6:4c:f2:53:dd:0c:c4:77:5c:eb:0e:5a:6e:
         90:78:e5:30:3a:19:1f:d5:f6:e0:f7:cc:37:bf:fb:fa:ec:ac:
         ee:ba:01:fa:14:d1:3e:11:3d:ce:31:37:fa:f7:7c:6d:28:f7:
         16:8b:d4:ed:81:aa:5f:d6:8e:90:78:69:7d:88:7d:f6:00:03:
         6d:60:bb:b2:53:45:87:4f:5b:17:d3:8f:04:58:73:51:ba:95:
         b5:9b:b1:2d:de:9e:e9:51:43:d3:27:18:32:0a:fb:71:9e:7f:
         26:4d:05:1b:b3:a4:3d:5b:87:6d:81:67:9b:6e:57:1a:05:5a:
         e4:16:bd:fc:e9:a1:f6:53:cf:55:bd:4a:0f:c2:b9:95:69:34:
         13:c9:b7:03:99:2c:33:94:bc:60:b1:b4:c7:f0:ae:b3:ee:9e:
         dd:36:18:32:27:fc:bb:43:a9:a1:03:7a:2c:6d:3a:70:78:8e:
         22:38:23:9b:cc:14:93:03:85:3e:c5:f7:56:f4:06:dd:30:40:
         21:97:db:18:62:9b:4f:1d:f6:54:ef:2f:dc:ab:df:5b:b2:15:
         dc:8c:9e:0a:21:b3:ac:c9:b3:70:6c:ba:e9:8a:83:80:47:76:
         85:f2:3e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:33:25 2026 by rpki-client