Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
File:                     TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft (raw, json)
Hash identifier:          oxRcCGXlrE6/s4MCwlOw8/rwBfOKK2m43j/TjtfihZY=
Subject key identifier:   CC:67:F9:4D:64:4B:80:95:B9:8D:1C:45:CD:32:1B:0A:AE:85:CA:CB
Authority key identifier: 4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49
Certificate issuer:       /CN=4c51636fde905f8521f411479e81321cdcf49049
Certificate serial:       019FAD51C225B885209410097D613C1D9C6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
Manifest number:          0C65
Signing time:             Wed 29 Jul 2026 10:00:44 +0000
Manifest this update:     Wed 29 Jul 2026 10:00:44 +0000
Manifest next update:     Thu 30 Jul 2026 10:00:44 +0000
Files and hashes:         1: TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl (hash: skEBmH9cc7J3O/Eh5t4jIOuiH7x5nj16mAYG2Azqc8E=)
                          2: btVJTycrOu73mUIXm-DmnQZDlPs.roa (hash: XGmN+HVfqx/2ED53etC2ojf1SMKcGmAltxqzFq/xltI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:51:c2:25:b8:85:20:94:10:09:7d:61:3c:1d:9c:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c51636fde905f8521f411479e81321cdcf49049
        Validity
            Not Before: Jul 29 10:00:44 2026 GMT
            Not After : Jul 30 10:00:44 2026 GMT
        Subject: CN=cc67f94d644b8095b98d1c45cd321b0aae85cacb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:be:58:3a:8a:b7:2a:6f:de:81:0d:73:86:67:
                    86:fd:2a:b5:fb:4c:ea:fb:c4:23:18:7d:67:e3:b9:
                    a5:4b:52:4d:0e:08:e5:39:91:98:d2:29:6b:75:75:
                    b6:e6:4d:a1:ea:34:14:2a:cc:b9:fb:5e:0c:ae:47:
                    ee:6e:cb:72:62:2b:91:12:f4:01:08:1b:7a:32:6e:
                    37:5f:50:1c:1c:ae:49:4f:7d:71:07:f0:d9:d9:94:
                    6f:d2:fc:6f:00:68:e9:d6:39:bd:be:89:f9:0b:f7:
                    06:e7:35:32:31:68:1d:24:77:11:46:34:42:9b:28:
                    1a:27:64:96:c5:ed:c7:44:b7:bb:c4:4d:47:8b:13:
                    e3:66:f8:68:c3:aa:d4:e9:69:cc:2b:7a:6c:48:57:
                    3b:5d:41:45:22:1e:c8:3f:cd:da:7c:49:cc:ef:4a:
                    43:d2:10:e1:c2:cd:37:bd:d8:25:00:f7:fc:8b:81:
                    5d:66:d6:e4:e1:ce:95:0b:c0:2f:5f:25:1f:f6:f0:
                    77:d2:c7:e8:59:1e:6a:9c:53:e0:04:03:12:e2:43:
                    ab:58:96:ea:60:34:50:31:52:88:30:14:6b:3c:ed:
                    a8:e0:4c:a2:31:c8:25:b2:96:b9:8c:1e:61:18:65:
                    26:e9:44:5e:67:e0:06:d8:ab:af:55:21:dd:89:6c:
                    6e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:67:F9:4D:64:4B:80:95:B9:8D:1C:45:CD:32:1B:0A:AE:85:CA:CB
            X509v3 Authority Key Identifier:
                keyid:4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:6b:d4:f2:a7:41:8a:03:c2:5a:08:21:31:2c:8f:cb:05:a2:
         11:04:ce:a5:11:b1:00:fa:5d:c6:d5:df:24:6c:d8:40:07:d3:
         ff:b6:92:43:ec:2d:fa:2d:73:1d:7d:eb:4d:c7:97:5d:c7:6f:
         44:af:42:a8:fa:66:ad:07:ce:cd:af:a1:59:b1:02:68:78:b9:
         ab:95:5e:70:c0:8e:6a:df:be:03:01:4f:f2:64:3b:b4:31:d8:
         99:c6:37:4f:66:df:dd:88:7d:82:71:4a:27:6e:81:1d:b7:ed:
         d1:a7:30:90:a2:62:44:71:5d:eb:b7:3f:bd:4d:a5:3b:45:04:
         e2:26:6f:26:d5:cb:de:d6:5a:11:fd:49:f1:41:ad:d5:e6:04:
         ff:99:e5:20:9c:00:54:49:ee:26:f4:e6:e7:2a:e8:3e:55:16:
         d9:c0:68:b1:af:b9:0c:fe:57:ee:27:2b:be:2d:8f:b0:19:ed:
         42:4c:34:dd:09:9e:9e:de:b7:c2:d7:8e:07:ef:37:6f:92:6c:
         7b:4c:90:5b:cb:34:9f:ae:58:11:2e:55:27:2d:b6:99:1b:38:
         ac:a6:db:39:3b:12:78:04:d0:bb:59:6b:97:d0:63:66:21:55:
         c5:ee:35:99:2a:7e:2a:e1:19:ce:f3:29:6c:5f:4d:48:01:03:
         19:e0:cd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:11:32 2026 by rpki-client