Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
File:                     tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft (raw, json)
Hash identifier:          9zcRSY6b+T/87siyIsNwpUx4jEvf8kj35yfHh/ZH+U0=
Subject key identifier:   6B:48:8A:D5:10:CB:8E:E9:60:21:00:E2:B0:6D:18:4E:8C:5F:52:2A
Authority key identifier: B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74
Certificate issuer:       /CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
Certificate serial:       019EC0DAFD3E4FB638B1612E07DD3BC877E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
Manifest number:          1647
Signing time:             Sat 13 Jun 2026 12:00:37 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:37 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:37 +0000
Files and hashes:         1: PeFK_yeJmAggBubY51FT5ExR7yY.roa (hash: kZM9hfI1X20jdNyqPobjCTSrN0qe4fcSM/JWGaBh8YA=)
                          2: XiIDJMPchO2MVQJnr2v3LL6-fD0.roa (hash: +0DK4fXLVL2er4TUt0Ah7Mip7BfbX2JKpUWdTlpILkM=)
                          3: tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl (hash: 9MUIpEtXq7y+r8iNp22BaoJ3VKobT+hVKMfXMq0aK2U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:da:fd:3e:4f:b6:38:b1:61:2e:07:dd:3b:c8:77:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
        Validity
            Not Before: Jun 13 12:00:37 2026 GMT
            Not After : Jun 14 12:00:37 2026 GMT
        Subject: CN=6b488ad510cb8ee9602100e2b06d184e8c5f522a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c5:8b:14:86:ed:27:04:84:db:c9:f0:26:a1:
                    ca:cb:5d:a3:9b:ea:b0:d2:ef:41:ad:29:b1:b1:14:
                    f7:fa:29:76:a7:69:50:f9:c0:eb:ad:c2:69:2d:57:
                    fe:9f:71:be:6d:1f:26:41:f3:dd:fd:e9:4c:4d:fc:
                    62:d0:ce:6d:5b:ff:c9:3d:44:47:54:01:bf:d8:e2:
                    57:e1:06:eb:bf:84:ae:48:38:0c:25:6f:e1:68:59:
                    83:a9:d9:14:b0:3d:70:ff:9d:59:b1:e9:92:09:d6:
                    9b:4a:62:88:3a:be:45:56:1d:90:4e:e4:a5:c1:52:
                    57:aa:a2:35:ac:da:05:c0:53:47:2a:f5:7e:58:53:
                    4a:59:da:f0:3a:8d:77:64:c2:f9:b1:c8:65:81:77:
                    f8:77:48:c5:54:c4:3e:55:56:77:a6:0c:23:2f:c2:
                    06:0f:18:ee:d2:9a:1c:62:72:89:12:33:42:f4:5f:
                    5a:52:13:77:21:15:c3:dd:81:e5:28:b7:21:7d:70:
                    3f:59:eb:3f:ae:0e:55:bf:91:71:4c:0f:c6:88:55:
                    85:4f:0b:2e:e1:90:f4:1e:24:4a:ad:0b:1d:91:fb:
                    4d:5a:cd:e0:bb:12:60:4d:81:7b:b2:de:7e:ae:ae:
                    23:06:96:3a:3d:13:8e:60:2f:8f:c8:68:f3:98:a8:
                    2e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:48:8A:D5:10:CB:8E:E9:60:21:00:E2:B0:6D:18:4E:8C:5F:52:2A
            X509v3 Authority Key Identifier:
                keyid:B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:35:72:f7:20:9b:fc:5e:44:28:57:47:b0:bc:6f:7b:1d:d3:
         d4:33:0a:b3:eb:ac:8a:ac:82:95:61:1e:bb:54:82:95:b8:7e:
         bf:51:ec:a1:70:35:07:de:9b:ad:d9:58:63:94:96:2e:a6:c9:
         8f:90:bb:da:ea:fe:b0:19:ec:30:3f:d0:8d:98:35:6d:fe:29:
         64:b7:52:42:7f:1a:88:0b:f8:85:67:7e:bd:ab:d5:e0:34:d8:
         95:27:ba:3f:10:cc:85:0a:f5:3b:0e:58:ef:39:b7:53:54:22:
         7e:a9:7e:6d:e8:2b:95:f4:44:9b:3c:ed:80:1e:7b:2a:10:84:
         7e:cb:d8:24:42:34:0a:40:a7:cd:de:66:43:58:ea:7f:1a:23:
         39:57:6f:4b:d4:d2:f3:7a:63:12:d4:22:59:70:6e:f4:85:1c:
         97:31:84:e4:9a:ac:7b:b1:42:b7:9b:7b:ff:eb:50:df:f1:63:
         da:54:3c:1c:85:32:63:c4:17:5c:5f:ef:7a:c8:4d:8a:46:05:
         e5:de:60:32:43:64:0a:5f:c2:b0:7b:b5:65:28:0d:36:d0:76:
         85:d3:64:ca:0f:9f:31:71:7b:9a:41:3f:f9:97:37:10:a1:c9:
         0b:c5:27:84:55:e1:04:5e:18:a8:ac:df:6e:1e:88:bd:32:6d:
         b6:2e:54:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:02:28 2026 by rpki-client