Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
File:                     TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft (raw, json)
Hash identifier:          GUtf+0wC+HXaCUuIcn+igkYltZuxwP+AcBKNh0YdBtI=
Subject key identifier:   F5:7C:CF:DF:42:4C:DD:B1:BE:31:A4:8A:3F:15:54:79:04:53:B1:24
Authority key identifier: 4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49
Certificate issuer:       /CN=4c51636fde905f8521f411479e81321cdcf49049
Certificate serial:       019EBFC87A11B08BC600F4DD6FDE6921A1D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
Manifest number:          0BEA
Signing time:             Sat 13 Jun 2026 07:00:47 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:47 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:47 +0000
Files and hashes:         1: TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl (hash: RZa32XI7P2jZgHRceOGJZppLrPvapb/SsZMQ8ZbT138=)
                          2: btVJTycrOu73mUIXm-DmnQZDlPs.roa (hash: XGmN+HVfqx/2ED53etC2ojf1SMKcGmAltxqzFq/xltI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:7a:11:b0:8b:c6:00:f4:dd:6f:de:69:21:a1:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c51636fde905f8521f411479e81321cdcf49049
        Validity
            Not Before: Jun 13 07:00:47 2026 GMT
            Not After : Jun 14 07:00:47 2026 GMT
        Subject: CN=f57ccfdf424cddb1be31a48a3f1554790453b124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:87:df:5a:2c:37:cb:34:8d:13:0f:5e:db:2a:
                    8f:64:f7:b6:b2:61:7b:42:56:b6:94:6e:9e:e8:41:
                    42:e8:02:80:f0:72:d4:5c:92:0a:f4:bc:14:0e:74:
                    4b:22:3b:bd:6c:31:30:f8:30:5b:17:6f:24:54:0d:
                    cc:8e:de:57:22:d1:67:94:b5:74:cd:c1:39:6b:80:
                    c2:c5:c9:3b:56:e6:e2:cf:ff:b6:06:cc:e1:1e:e4:
                    fd:66:5f:55:ee:0b:fc:ba:2c:79:a2:e5:74:e7:54:
                    e8:09:2e:43:70:ae:03:98:ce:50:4e:70:83:f3:57:
                    7c:4a:5b:39:45:26:8e:f5:51:b6:e1:05:ba:07:71:
                    8a:a3:22:df:00:ec:af:ff:e2:58:80:99:56:d9:98:
                    26:8e:c4:bd:8b:c0:cb:a7:1b:5d:6f:d8:59:8f:e8:
                    fa:e6:71:5f:69:5c:36:64:1d:75:84:57:91:0c:32:
                    94:0c:8f:1a:76:84:e1:84:9e:53:a1:ab:7c:73:e9:
                    3f:32:da:0a:fb:87:79:84:06:3a:a2:8f:af:75:22:
                    41:c1:41:24:c4:df:85:2d:36:ac:04:70:1a:58:a1:
                    39:05:89:4a:b7:98:9a:31:e7:6e:0c:95:cf:b1:13:
                    bc:7c:be:96:f6:fd:5a:d8:aa:d7:02:e6:df:2e:01:
                    59:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:7C:CF:DF:42:4C:DD:B1:BE:31:A4:8A:3F:15:54:79:04:53:B1:24
            X509v3 Authority Key Identifier:
                keyid:4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:d5:71:fa:7c:09:e3:58:fd:32:8c:3c:fa:b0:ff:fd:88:83:
         1f:a3:89:8f:a0:66:2b:c5:4d:f6:f6:53:74:96:88:54:73:59:
         2b:75:6d:c7:51:e8:3b:2c:45:d2:f2:bb:84:f1:20:75:78:17:
         f9:21:2b:a0:76:5a:f8:d1:a9:c5:a2:17:13:8b:8f:79:eb:1c:
         21:85:7a:19:6c:56:fe:21:06:02:ca:0e:fb:8b:ef:19:aa:59:
         01:f3:64:22:40:7c:06:c0:9a:5f:dd:d7:42:21:96:03:03:8b:
         06:c5:15:5f:07:f7:b4:25:84:89:30:22:c8:d7:cc:a6:fb:23:
         35:68:f2:6f:13:fd:92:6c:cf:a7:ef:8d:b7:60:22:9e:11:43:
         7f:e0:b3:34:e6:bf:56:30:74:9e:42:27:34:94:36:ca:d5:04:
         a7:20:ed:3e:71:9b:a6:63:a9:8a:22:d5:e5:e5:6a:46:a2:7d:
         a6:0a:42:b8:23:57:b4:72:11:a9:02:02:46:f4:49:a9:a7:2a:
         65:8b:ca:56:38:57:53:53:e1:d7:f1:47:ec:0c:ff:68:21:34:
         25:97:d7:63:08:08:51:0a:04:3f:b1:88:6a:36:5f:36:6f:a8:
         47:ef:f9:30:b9:cc:6d:67:cc:8e:c5:df:0c:e5:22:51:dd:7f:
         67:44:bc:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:46:43 2026 by rpki-client