Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
File:                     TGtjcblFo16d8wj_Q4A-JheFEGk.mft (raw, json)
Hash identifier:          K0MtYde+Not4+mDZBLHrB9zi0FijoHpPsADWBiRA0uo=
Subject key identifier:   41:46:B5:93:86:42:D9:6D:81:18:9C:28:6B:43:EF:C0:22:97:79:A3
Authority key identifier: 4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
Certificate issuer:       /CN=4c6b6371b945a35e9df308ff43803e2617851069
Certificate serial:       019EC06D69848F04F3A7092EB826ECD087C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
Manifest number:          1410
Signing time:             Sat 13 Jun 2026 10:00:56 +0000
Manifest this update:     Sat 13 Jun 2026 10:00:56 +0000
Manifest next update:     Sun 14 Jun 2026 10:00:56 +0000
Files and hashes:         1: SFGE70vQYmz_oKTtZMgB-YKUyZc.roa (hash: lZ0OnAmHAxbwpz0Bf+bKQq6tPOf7KpsPHIF+YP1ggzc=)
                          2: TGtjcblFo16d8wj_Q4A-JheFEGk.crl (hash: ZTTV+U5N5/051CB7PqgN/IMXsNguWf6TtdjNK+nJGF0=)
                          3: eHNuPU6iYgVIfZ9NIp8A3552y-I.roa (hash: AOM1Ajc5ONgwd+E4wuOhZtP8/uws9RFZszPyOYWcL2Q=)
                          4: vP7G0LDj9js2uqV_dVx329H3yeM.roa (hash: fyHdxLq/9tcpLwgIyk0ErgVx3QqPOxT/MFLUCo0yJ0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:69:84:8f:04:f3:a7:09:2e:b8:26:ec:d0:87:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c6b6371b945a35e9df308ff43803e2617851069
        Validity
            Not Before: Jun 13 10:00:56 2026 GMT
            Not After : Jun 14 10:00:56 2026 GMT
        Subject: CN=4146b5938642d96d81189c286b43efc0229779a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d8:9e:ef:d6:d9:03:88:4f:d5:80:2a:52:58:
                    4f:0b:7f:2d:0b:e6:c8:ef:a9:f0:d6:ac:60:1b:f8:
                    bd:80:0b:13:87:da:8d:ba:94:13:7e:c3:30:23:84:
                    e1:bc:17:2e:eb:8b:52:44:07:31:10:7d:1b:df:99:
                    72:87:c4:7d:64:48:ec:25:6b:98:be:9d:05:1c:a0:
                    6d:a6:f1:f6:95:f1:83:b5:68:1e:e5:f5:ad:ec:65:
                    5a:3d:8e:95:e9:68:dd:42:b5:fb:ef:d7:57:5d:aa:
                    15:32:03:96:e2:b9:25:43:82:19:17:88:69:5e:bb:
                    14:ac:a4:86:98:d0:9e:f5:78:c4:a1:d2:a7:f8:3c:
                    04:bc:fd:b0:81:aa:7c:3d:aa:1d:72:15:09:75:69:
                    d8:2d:2c:30:88:fb:f5:96:14:d7:79:aa:f6:74:a9:
                    1b:6a:24:46:62:f5:79:f9:72:77:3d:f0:81:c1:de:
                    f5:94:f7:f9:e6:69:11:ed:25:22:45:65:c2:99:f6:
                    99:9a:1c:3f:df:b4:20:2d:59:bc:e1:b6:7b:e1:e9:
                    55:d0:a8:30:7b:8f:01:71:a0:2f:5a:d6:32:94:5b:
                    02:10:c1:5e:78:cf:87:2d:95:1f:68:70:9c:f2:68:
                    90:8e:78:4c:f2:a8:d5:66:ea:2b:da:28:f3:fe:08:
                    29:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:46:B5:93:86:42:D9:6D:81:18:9C:28:6B:43:EF:C0:22:97:79:A3
            X509v3 Authority Key Identifier:
                keyid:4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:f1:41:a4:a6:38:2d:5e:b4:9c:06:23:82:0c:ed:c7:ce:42:
         5f:74:9b:c7:da:1f:d3:74:0e:56:71:b1:58:87:11:d4:bc:6d:
         1d:ea:47:87:61:91:53:c3:34:fa:ff:98:6f:89:04:9e:47:f7:
         e6:92:c7:f8:09:86:3f:22:31:de:1f:a9:03:16:a6:93:22:f5:
         6b:eb:15:56:e9:a1:1b:d1:f4:56:5b:8a:b4:a1:6e:26:a8:71:
         f8:cc:21:00:79:3c:ef:09:5e:83:91:b9:b2:f2:6a:ec:cb:b0:
         ca:74:f1:7c:67:c2:88:89:85:71:9d:00:8e:93:bb:5f:68:c1:
         60:37:61:52:eb:8a:b7:51:47:ff:3d:5c:59:bb:68:cb:58:27:
         d1:5a:ac:95:3c:4e:0c:f6:5a:e6:4e:40:20:92:d4:3a:df:ba:
         a6:c3:91:04:d1:00:71:f2:96:6f:7c:d5:61:8b:0e:7c:23:37:
         85:80:1d:00:df:e5:28:c1:d6:42:9b:5a:5a:16:58:7f:f0:56:
         1f:75:35:3c:9d:55:e3:2d:54:6a:98:8f:c0:83:87:0b:20:53:
         cc:de:81:19:2a:09:42:0a:83:14:63:02:2d:ab:67:7d:86:f5:
         0c:dc:0b:28:83:c5:ce:64:c7:d3:2c:15:15:43:6d:0a:51:d6:
         bc:b0:ab:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:13:41 2026 by rpki-client