Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
File:                     TTpxp39MqbpTb5hhKpxW1AwMO50.mft (raw, json)
Hash identifier:          xWlAjIZ8ld9T0hBz1AZQOy43auUJAmqNT/9tOBTC0xU=
Subject key identifier:   64:54:9B:CC:7B:D0:D6:FA:E4:3B:D9:5C:66:D6:9A:10:40:1F:25:FA
Authority key identifier: 4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D
Certificate issuer:       /CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d
Certificate serial:       019EC3DC46E47874D89DDF59B1882F1417BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
Manifest number:          195A
Signing time:             Sun 14 Jun 2026 02:00:53 +0000
Manifest this update:     Sun 14 Jun 2026 02:00:53 +0000
Manifest next update:     Mon 15 Jun 2026 02:00:53 +0000
Files and hashes:         1: TTpxp39MqbpTb5hhKpxW1AwMO50.crl (hash: JaIFSCx7QXSq8C22CuDgZ7jJbmsEQMfHbEE54BIpiRM=)
                          2: pBnqzIAytKpHQhX8QDpU_OY1RKw.roa (hash: pra/+hq5WQ/StXcBlep+m5KO06sTkTgn3LjOqqbBjzA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:dc:46:e4:78:74:d8:9d:df:59:b1:88:2f:14:17:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d
        Validity
            Not Before: Jun 14 02:00:53 2026 GMT
            Not After : Jun 15 02:00:53 2026 GMT
        Subject: CN=64549bcc7bd0d6fae43bd95c66d69a10401f25fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:1b:15:24:3f:fa:8c:8d:db:bb:96:08:11:9f:
                    91:0d:67:05:80:21:93:17:f9:38:25:4b:53:a4:9a:
                    75:86:2a:20:d7:7d:64:0a:8b:35:72:2a:5c:8a:f5:
                    34:4f:f1:f6:f9:6c:a3:2a:d6:fc:2a:ca:2c:01:cf:
                    44:a3:cf:f7:3c:27:44:fe:f7:9d:48:c1:58:fd:69:
                    cc:fd:33:52:fb:50:86:ee:fe:e8:ba:57:66:7c:7b:
                    05:33:ad:08:0e:37:9e:62:d5:53:c5:cc:90:b0:2d:
                    9d:3a:b8:a7:b2:bd:36:e9:3f:05:23:9f:87:95:91:
                    54:f6:2a:28:a2:eb:b3:37:cc:2a:eb:cb:60:a3:2e:
                    9d:3f:f8:f6:57:59:0d:a7:20:76:77:14:ab:27:0a:
                    6b:65:d5:b1:8a:f7:87:1c:c7:ce:06:6b:c1:26:73:
                    a5:54:47:fe:c8:a0:82:81:08:47:f3:9c:7c:c8:27:
                    ec:09:1a:68:d3:65:75:27:d0:3c:f9:f1:1f:d0:e1:
                    65:31:ea:79:c5:9b:38:3c:3f:5e:66:0b:4e:ae:23:
                    ee:b0:9c:aa:aa:2c:59:61:44:67:11:aa:ab:59:01:
                    4d:ae:52:3c:9a:dd:5b:0b:32:39:83:c8:32:39:e5:
                    b6:26:ed:9e:06:98:be:9f:8f:0b:70:fc:2a:db:e2:
                    37:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:54:9B:CC:7B:D0:D6:FA:E4:3B:D9:5C:66:D6:9A:10:40:1F:25:FA
            X509v3 Authority Key Identifier:
                keyid:4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:1a:a2:a0:12:78:42:15:8c:d2:84:71:aa:dd:b3:58:85:d8:
         00:e4:cd:3b:8c:e9:0f:df:24:ef:4d:9c:d1:cb:b4:7f:b8:1b:
         d9:3a:c9:ff:fc:10:50:11:eb:5d:48:7d:08:36:f4:19:f9:00:
         27:9b:0d:50:b8:4e:42:85:75:11:ff:24:c7:8f:5b:55:86:d2:
         5d:c2:03:78:9a:31:38:13:53:40:34:85:5f:6b:5d:d2:e6:af:
         a3:1d:61:80:ca:47:92:6d:db:07:e4:9e:11:24:ba:4a:f3:4e:
         e9:67:ec:17:c7:28:3f:e2:24:f1:98:0b:85:d1:83:fa:05:36:
         cc:31:53:a5:b6:88:54:e3:77:4e:b6:fd:7a:e7:53:de:c3:6d:
         7a:c4:a0:7d:4a:4f:83:19:b0:98:0b:a2:29:a5:b3:28:a4:61:
         51:1d:04:8c:3e:84:76:04:35:cc:5f:da:09:2c:5a:13:de:f6:
         a7:69:0f:be:83:d1:21:d1:68:45:36:3d:4b:af:05:e4:4d:4e:
         52:77:e8:53:25:f7:ad:d6:b1:a2:b3:8c:db:f7:df:d4:3d:a8:
         25:e1:75:80:60:8e:99:9c:6d:f0:a8:8d:06:d3:66:7f:b1:3e:
         d2:c5:eb:49:50:e0:e9:87:05:aa:31:71:da:de:cf:55:d7:78:
         cb:d1:8d:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7D3EbkeHTYnd9ZsYgvFBe/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkM2E3MWE3N2Y0Y2E5YmE1MzZmOTg2MTJhOWM1NmQ0MGMw
YzNiOWQwHhcNMjYwNjE0MDIwMDUzWhcNMjYwNjE1MDIwMDUzWjAzMTEwLwYDVQQD
Eyg2NDU0OWJjYzdiZDBkNmZhZTQzYmQ5NWM2NmQ2OWExMDQwMWYyNWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BsVJD/6jI3bu5YIEZ+RDWcFgCGT
F/k4JUtTpJp1hiog131kCos1cipcivU0T/H2+WyjKtb8KsosAc9Eo8/3PCdE/ved
SMFY/WnM/TNS+1CG7v7ouldmfHsFM60IDjeeYtVTxcyQsC2dOrinsr026T8FI5+H
lZFU9iooouuzN8wq68tgoy6dP/j2V1kNpyB2dxSrJwprZdWxiveHHMfOBmvBJnOl
VEf+yKCCgQhH85x8yCfsCRpo02V1J9A8+fEf0OFlMep5xZs4PD9eZgtOriPusJyq
qixZYURnEaqrWQFNrlI8mt1bCzI5g8gyOeW2Ju2eBpi+n48LcPwq2+I31wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGRUm8x70Nb65DvZXGbWmhBAHyX6MB8GA1UdIwQY
MBaAFE06cad/TKm6U2+YYSqcVtQMDDudMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFRweHAzOU1xYnBUYjVoaEtweFcxQXdNTzUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84ODc1MDEtNGQ4ZS00YmViLTk1OTAt
NjUwNzliNzU4NjhhLzEvVFRweHAzOU1xYnBUYjVoaEtweFcxQXdNTzUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny84ODc1MDEtNGQ4ZS00YmViLTk1OTAtNjUwNzliNzU4Njhh
LzEvVFRweHAzOU1xYnBUYjVoaEtweFcxQXdNTzUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATBqioBJ4
QhWM0oRxqt2zWIXYAOTNO4zpD98k702c0cu0f7gb2TrJ//wQUBHrXUh9CDb0GfkA
J5sNULhOQoV1Ef8kx49bVYbSXcIDeJoxOBNTQDSFX2td0uavox1hgMpHkm3bB+Se
ESS6SvNO6WfsF8coP+Ik8ZgLhdGD+gU2zDFTpbaIVON3Trb9eudT3sNtesSgfUpP
gxmwmAuiKaWzKKRhUR0EjD6EdgQ1zF/aCSxaE972p2kPvoPRIdFoRTY9S68F5E1O
UnfoUyX3rdaxorOM2/ff1D2oJeF1gGCOmZxt8KiNBtNmf7E+0sXrSVDg6YcFqjFx
2t7PVdd4y9GNPw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:19:52 2026 by rpki-client