Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
File:                     TFTszmy8nFSSnqpLIrM3sP2bNr8.mft (raw, json)
Hash identifier:          o5yDfdTbnATXOb4Eo33nJcjCg5MgJxHoEnAjpadyn+4=
Subject key identifier:   03:DD:94:7B:81:79:03:36:77:37:4F:28:8C:21:2F:78:FE:69:53:1D
Authority key identifier: 4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
Certificate issuer:       /CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Certificate serial:       019EBF23248CC9EBBD257E77D30B1C6516B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 04:00:11 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:11 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:11 +0000
Files and hashes:         1: G6FeIPbrFYt0Xs4RMbl3hxFSgPI.roa (hash: pCJOng4j62RgLgH4PaC9a8+B4/vINuGKFVNtITN4RoM=)
                          2: M_rnheFHEJEhvuv8N_w2Hds5XxU.roa (hash: 9c9DQN1bBCgnWk4FhLy9o/RslqwQ5t8KVo6nKa0ccUI=)
                          3: TFTszmy8nFSSnqpLIrM3sP2bNr8.crl (hash: wjXVN+wki9Y/PW15rX3beluD792enY8m5+bXSN6BkIM=)
                          4: nEGo15KsyAjBD-x5zbk8ARJINQU.roa (hash: 0lT9gQ6lEsFlDbleFuI9ud8vDG/jc8OcFzQhfPnweOI=)
                          5: vCLyUWR776gkWz1fg6zz0ef3IxM.roa (hash: SjoathDw0sUup7FL2NVGvfEYMvEvs24sBQi8PhmuU7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:24:8c:c9:eb:bd:25:7e:77:d3:0b:1c:65:16:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
        Validity
            Not Before: Jun 13 04:00:11 2026 GMT
            Not After : Jun 14 04:00:11 2026 GMT
        Subject: CN=03dd947b8179033677374f288c212f78fe69531d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9f:08:71:3c:57:e7:0e:a2:6d:44:02:bb:6b:
                    a1:9f:e3:35:6f:5b:1d:12:65:18:3d:c9:00:9c:38:
                    50:c4:65:ff:59:07:6d:52:4e:c1:71:41:7c:de:fd:
                    10:97:38:54:55:b6:4d:a9:39:c7:f7:de:f2:4e:8a:
                    15:5b:a0:f1:38:33:a9:36:6c:ff:76:bf:3a:d7:0b:
                    fa:90:4d:2e:52:ea:a5:c3:bf:ad:3a:cd:f8:0c:2d:
                    50:d0:dd:cb:a5:89:f7:21:0f:a7:c6:2d:e2:02:3d:
                    cf:b9:f3:66:5b:dd:ee:bf:6d:95:11:13:93:de:f7:
                    05:21:f0:d4:08:b5:42:1b:59:bc:71:9b:15:98:05:
                    c6:cf:d4:85:dd:3d:e8:f0:26:41:37:f0:85:d4:30:
                    9e:5c:0e:a2:1e:40:8f:c2:c0:7c:09:ac:e4:9f:8c:
                    1a:3a:50:f2:80:1c:eb:31:bd:fc:c7:c1:99:37:f7:
                    bd:e9:aa:a6:e7:98:1b:a7:23:08:26:9f:2f:64:81:
                    eb:32:f7:d9:d8:6b:2e:fe:63:00:3a:4f:6e:ac:eb:
                    c5:a2:86:11:91:1c:eb:fc:83:6c:fe:9e:a4:ae:64:
                    f3:3e:ce:5b:1c:d5:e7:04:93:2e:3c:a8:c6:a4:55:
                    1a:be:79:42:10:d8:c0:3d:cc:c1:d8:cc:8b:ef:a8:
                    f3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:DD:94:7B:81:79:03:36:77:37:4F:28:8C:21:2F:78:FE:69:53:1D
            X509v3 Authority Key Identifier:
                keyid:4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:6e:d0:58:89:7e:71:70:72:f6:e5:c1:37:c0:ef:02:66:58:
         d8:13:19:15:b0:54:63:ee:65:54:21:05:b1:e0:30:68:69:11:
         60:99:b1:d9:a2:48:1f:a8:9d:90:79:d5:68:d2:c4:da:79:6b:
         6e:6e:e4:1d:a0:f3:2c:46:cd:ae:d6:7d:ef:f7:fe:44:8b:1e:
         fe:4b:3c:93:e9:0a:0f:45:45:cb:c0:23:d5:53:af:ff:01:03:
         c7:ba:2b:91:a9:ff:e9:94:7d:fb:7f:ac:0c:57:fe:62:da:40:
         ae:66:a5:c9:0a:df:c2:de:8f:07:a8:a0:96:cd:92:3d:b4:9f:
         98:13:bf:ee:e9:d1:1e:5f:0b:ec:bf:57:ae:29:31:9d:2d:99:
         58:30:e0:fa:2e:99:03:a6:6b:2b:eb:98:f3:b3:15:4e:55:dc:
         bd:3e:00:b1:f6:7f:a7:00:bc:99:3e:17:f1:cd:9d:24:10:68:
         41:cb:d6:aa:7c:29:aa:bc:66:72:da:af:e4:a3:51:4f:05:58:
         b4:8b:be:93:3f:c5:a7:a9:97:76:46:d9:33:67:cc:a5:55:52:
         87:df:dc:d3:98:cb:eb:8a:6e:26:ba:9d:4c:6a:13:92:88:2a:
         7e:f2:56:8d:14:12:31:ac:10:93:f8:72:fd:57:4b:6d:3a:6f:
         30:ad:56:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:15:49 2026 by rpki-client