Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/c229d8-738a-4117-af59-1093d4973091/1/tkkanUdy_S313Ak9TiDT7YEHKVc.mft
File:                     tkkanUdy_S313Ak9TiDT7YEHKVc.mft (raw, json)
Hash identifier:          9lCKd7wtzqpJk/DdnXu8TFWx9B1VLttKFHouI6bkyOw=
Subject key identifier:   BC:86:88:A8:D5:E0:4E:8D:89:87:70:72:F3:62:E6:99:1C:8D:17:D7
Authority key identifier: B6:49:1A:9D:47:72:FD:2D:F5:DC:09:3D:4E:20:D3:ED:81:07:29:57
Certificate issuer:       /CN=b6491a9d4772fd2df5dc093d4e20d3ed81072957
Certificate serial:       01A13B92F7AD52C98960EF89832D3BEBB9F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tkkanUdy_S313Ak9TiDT7YEHKVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/c229d8-738a-4117-af59-1093d4973091/1/tkkanUdy_S313Ak9TiDT7YEHKVc.mft
Manifest number:          01FB
Signing time:             Wed 14 Oct 2026 18:00:49 +0000
Manifest this update:     Wed 14 Oct 2026 18:00:49 +0000
Manifest next update:     Thu 15 Oct 2026 18:00:49 +0000
Files and hashes:         1: MYKEbEbG2BOde6gzN9ttGm9H4jg.roa (hash: ERm9KLynZ/NxLY8GY3PLaYvLuotadE/r63dZSbos3LM=)
                          2: tkkanUdy_S313Ak9TiDT7YEHKVc.crl (hash: NPcqctnafJutfdML15EOKsp39TEfrp/AzhdtWpkRyic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/c229d8-738a-4117-af59-1093d4973091/1/tkkanUdy_S313Ak9TiDT7YEHKVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/c229d8-738a-4117-af59-1093d4973091/1/tkkanUdy_S313Ak9TiDT7YEHKVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tkkanUdy_S313Ak9TiDT7YEHKVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 18:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3b:92:f7:ad:52:c9:89:60:ef:89:83:2d:3b:eb:b9:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6491a9d4772fd2df5dc093d4e20d3ed81072957
        Validity
            Not Before: Oct 14 18:00:49 2026 GMT
            Not After : Oct 15 18:00:49 2026 GMT
        Subject: CN=bc8688a8d5e04e8d89877072f362e6991c8d17d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c0:0f:1a:8c:aa:6e:f2:36:58:de:fd:2c:48:
                    af:c8:bc:cb:9a:fc:fe:38:ff:41:ff:5b:6d:9d:6e:
                    23:3d:49:a4:d0:cf:14:75:d8:be:39:18:3b:b2:44:
                    8d:9c:fd:cb:b0:c4:9f:bf:ce:56:4c:2a:e5:6d:88:
                    40:5e:32:1c:17:b8:12:94:ce:b5:13:4c:b7:6e:2f:
                    a9:a6:8c:3b:05:62:86:3e:4f:61:ca:c5:87:30:66:
                    58:58:ea:ff:71:9c:00:39:e1:5a:d0:cd:2c:02:0d:
                    eb:26:70:2f:2d:aa:00:94:1d:d6:d3:78:eb:57:fe:
                    cb:85:8f:08:6e:83:ac:d1:47:4b:4e:2d:d9:33:76:
                    81:a6:cc:6d:27:de:d6:1a:05:4c:4e:49:d9:a9:e7:
                    ab:94:7e:dd:a8:93:cf:f0:ea:5d:69:4c:57:bf:b4:
                    6c:9f:ba:5d:79:ed:14:18:13:73:cb:cb:e9:18:4d:
                    d7:80:6f:c9:8d:1a:11:50:e0:72:f4:03:86:54:24:
                    fe:a1:28:af:81:87:8f:20:a0:bf:83:3d:cd:66:cf:
                    f0:0d:8e:a8:4b:09:31:a4:29:ed:56:1d:c6:cb:44:
                    04:1b:37:e3:c5:e7:d4:65:53:b4:cc:7d:79:03:94:
                    e9:8b:53:66:6f:76:ef:90:bc:fb:a0:04:36:22:77:
                    82:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:86:88:A8:D5:E0:4E:8D:89:87:70:72:F3:62:E6:99:1C:8D:17:D7
            X509v3 Authority Key Identifier:
                keyid:B6:49:1A:9D:47:72:FD:2D:F5:DC:09:3D:4E:20:D3:ED:81:07:29:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkkanUdy_S313Ak9TiDT7YEHKVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c229d8-738a-4117-af59-1093d4973091/1/tkkanUdy_S313Ak9TiDT7YEHKVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c229d8-738a-4117-af59-1093d4973091/1/tkkanUdy_S313Ak9TiDT7YEHKVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:df:1a:b5:a1:39:47:2e:05:50:3c:c4:d8:0a:f5:4d:fc:bb:
         91:27:1a:72:9f:e9:d2:e9:5c:c6:30:b4:72:ea:7c:4c:c7:ec:
         39:b0:aa:c1:44:d1:b5:ea:2c:27:06:6e:ea:1a:00:ab:ed:f1:
         a4:76:4d:12:81:2e:5f:64:e5:ed:51:88:44:1d:f0:25:7c:58:
         aa:e3:0c:ae:18:bf:fe:47:10:bb:f4:79:be:63:76:5b:70:28:
         22:5e:05:6f:e3:3b:d0:ff:5d:ea:77:b4:96:ad:fb:6f:18:f6:
         b9:57:bd:27:4c:85:63:fc:a5:f0:bc:45:5b:fc:9f:a5:58:a5:
         35:c1:6f:cb:7f:49:2d:01:92:eb:64:f2:aa:69:a7:d9:4a:95:
         11:52:da:97:d1:12:77:fd:5c:a2:60:94:2d:49:8c:bc:83:5d:
         70:90:25:d7:89:36:3e:69:9c:68:36:a3:0e:61:f3:a4:5a:31:
         54:b5:f9:a9:7d:aa:01:b8:5c:40:5f:04:2e:d4:d5:2e:cb:9e:
         a0:35:72:d0:30:ac:d0:19:86:8e:89:2c:28:36:3c:1d:4e:ea:
         2e:0f:25:9d:8a:af:ce:d1:99:a1:6a:80:16:e6:aa:29:91:dc:
         a1:31:cb:1a:86:15:6d:09:02:5f:c6:db:13:33:47:5f:34:69:
         d8:c8:4a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:41:28 2026 by rpki-client