Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/TTaHdCvs89CAgu0S6fNHC4LafP8.mft
File:                     TTaHdCvs89CAgu0S6fNHC4LafP8.mft (raw, json)
Hash identifier:          05LER9PKbPbL/aJCcPWyz1Ux4i7LW7Tj/k7NR2ILbS0=
Subject key identifier:   2D:20:A7:C7:86:70:B3:78:9A:5D:65:05:BE:BD:E1:F8:75:CA:72:5B
Authority key identifier: 4D:36:87:74:2B:EC:F3:D0:80:82:ED:12:E9:F3:47:0B:82:DA:7C:FF
Certificate issuer:       /CN=4d3687742becf3d08082ed12e9f3470b82da7cff
Certificate serial:       019EC337B28C02920A64F86C721633DB18FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TTaHdCvs89CAgu0S6fNHC4LafP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/TTaHdCvs89CAgu0S6fNHC4LafP8.mft
Manifest number:          103E
Signing time:             Sat 13 Jun 2026 23:01:07 +0000
Manifest this update:     Sat 13 Jun 2026 23:01:07 +0000
Manifest next update:     Sun 14 Jun 2026 23:01:07 +0000
Files and hashes:         1: DR-3C6YEtKMcL_5es4EXU7AZkNI.roa (hash: OUT6KMW2KBguWe74r4/N3KwEXWVjz7ZfPOq1uxqbzVY=)
                          2: TTaHdCvs89CAgu0S6fNHC4LafP8.crl (hash: v3Z8KM3AETIVAbnsNc8+mTpiREDigIylEMBpLGWK5DQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/TTaHdCvs89CAgu0S6fNHC4LafP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/TTaHdCvs89CAgu0S6fNHC4LafP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TTaHdCvs89CAgu0S6fNHC4LafP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 23:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:37:b2:8c:02:92:0a:64:f8:6c:72:16:33:db:18:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d3687742becf3d08082ed12e9f3470b82da7cff
        Validity
            Not Before: Jun 13 23:01:07 2026 GMT
            Not After : Jun 14 23:01:07 2026 GMT
        Subject: CN=2d20a7c78670b3789a5d6505bebde1f875ca725b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d5:cc:73:ae:17:84:ec:64:68:f5:2e:38:49:
                    77:ac:10:21:11:a2:77:00:5b:93:4c:d3:79:fd:01:
                    c7:a0:c7:16:22:1f:6f:d4:de:9e:83:2f:5f:c2:68:
                    26:44:7f:a6:2b:8a:8a:7d:4b:0d:28:1d:19:4e:b9:
                    bf:a3:a0:f5:d0:83:82:7c:3d:11:42:a0:c7:47:7f:
                    61:ce:82:bd:c0:75:40:49:d8:83:93:5c:af:dd:8d:
                    dd:71:9c:01:be:3c:e1:8b:6f:ab:a9:db:65:ea:fd:
                    25:be:4b:5f:21:54:e1:29:e2:6f:11:cb:90:31:42:
                    c7:47:f3:d8:f5:2a:b3:9c:5e:ae:ac:17:1f:9e:4d:
                    9d:06:63:51:91:fb:a4:2f:20:2a:f4:bc:92:91:05:
                    57:8a:39:1b:6c:78:28:47:61:48:11:63:65:9b:2d:
                    cc:b8:6d:a2:e1:32:26:76:51:48:88:aa:5b:27:54:
                    ac:b1:46:9f:7d:fe:17:54:59:8a:74:b2:d4:1c:5e:
                    14:c2:c0:97:88:c8:e7:8c:50:47:08:f2:3e:02:3a:
                    30:de:7f:68:15:a2:01:c8:49:4d:45:29:44:a6:b3:
                    77:a2:45:67:92:3b:8b:51:29:84:6d:56:62:3c:b0:
                    97:ae:aa:0d:3f:40:e6:c1:72:e4:d9:b8:61:e4:59:
                    52:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:20:A7:C7:86:70:B3:78:9A:5D:65:05:BE:BD:E1:F8:75:CA:72:5B
            X509v3 Authority Key Identifier:
                keyid:4D:36:87:74:2B:EC:F3:D0:80:82:ED:12:E9:F3:47:0B:82:DA:7C:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTaHdCvs89CAgu0S6fNHC4LafP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/TTaHdCvs89CAgu0S6fNHC4LafP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/TTaHdCvs89CAgu0S6fNHC4LafP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:c1:45:3e:fa:1b:a3:91:4c:a1:8f:08:14:c2:02:7f:2b:15:
         8a:14:1e:01:d6:38:6d:cd:8c:5d:b9:b4:94:96:cf:cf:d2:2f:
         30:30:4a:89:81:81:2d:ee:7e:39:a5:c2:00:6f:9f:3e:5c:8e:
         58:48:2b:3d:3c:23:75:95:8a:df:ee:f9:2a:d1:39:08:bd:a1:
         41:7a:82:10:fb:66:5e:2b:2a:97:c0:82:65:86:fc:4d:f0:26:
         af:4c:4f:1b:49:15:7d:6b:25:83:eb:de:be:cd:2b:13:66:38:
         8f:5b:ab:6a:6e:6b:a8:55:90:30:84:c2:12:f8:3b:03:98:18:
         46:3a:a8:49:0b:11:68:62:b3:ae:5c:c0:77:cd:91:c2:3d:90:
         d9:88:78:d8:ee:e2:8d:c8:c2:03:e2:2d:cf:b1:b5:a9:61:85:
         4f:a3:1b:0d:48:ee:f9:e3:69:9c:60:9d:f4:a6:dc:9d:fc:1d:
         8f:f2:36:79:a2:03:67:57:73:39:0f:73:cf:9d:bc:85:38:83:
         dc:7c:da:ad:bf:4e:3c:5f:a8:5a:0f:1a:b0:35:bc:f9:a6:8e:
         77:c9:fe:00:9b:38:6a:8d:25:4a:e9:97:69:d2:fb:a9:71:76:
         da:8d:4e:5a:5d:ec:ce:71:6e:e9:94:a4:63:45:23:09:cc:a3:
         13:29:ee:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:09:10 2026 by rpki-client