Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
File:                     TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft (raw, json)
Hash identifier:          QfUFG/zac65Xdt3yYNaqGT9iuhJ/IJcd6nobLnGR7UQ=
Subject key identifier:   CC:EA:0B:7E:85:84:F2:B2:27:05:F9:42:C3:79:B4:0A:68:08:AC:BD
Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
Certificate issuer:       /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Certificate serial:       019EC36E70D24D74907FA3976DDCA2BF6A36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
Manifest number:          1964
Signing time:             Sun 14 Jun 2026 00:00:55 +0000
Manifest this update:     Sun 14 Jun 2026 00:00:55 +0000
Manifest next update:     Mon 15 Jun 2026 00:00:55 +0000
Files and hashes:         1: BMJTX-1VIsJCIAKC_UCdqIb839w.roa (hash: AwaFPfahDvnxUQFxf1zHHxQY3shWXenV5hfHWr+eRSE=)
                          2: Bv2hzFMshraYJZMhKiNAPQW5yzo.roa (hash: mozy1oa9z+5oxHPkAdcnEjtIYIUHTFuELC5cUHnd2ds=)
                          3: GN5fvWr40gdv3JGN6vxjkZjGr-M.roa (hash: opZrG09Q9xFPvDT9n75han8TkL1qCnmykUVsSTdQ9Hw=)
                          4: TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl (hash: lmKw+Gv/3/mpN/qvK5TGYZg+9U3FFfoSq3iLWX3pfjs=)
                          5: l5bd30j_MQRGXqfWahBHTqJdoFc.roa (hash: t0VGEeZo8Fahoj1ko4o+rBeCd1Be3+5NalKn7WyM9tU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 00:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:6e:70:d2:4d:74:90:7f:a3:97:6d:dc:a2:bf:6a:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
        Validity
            Not Before: Jun 14 00:00:55 2026 GMT
            Not After : Jun 15 00:00:55 2026 GMT
        Subject: CN=ccea0b7e8584f2b22705f942c379b40a6808acbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e8:61:0d:ae:d7:ba:dd:22:1a:4b:e5:24:3f:
                    7b:84:48:22:c9:f4:b7:6b:70:4a:32:ae:c2:e0:8b:
                    42:cd:0a:bb:f5:c4:d7:97:f9:ac:0c:02:05:c5:67:
                    ec:db:66:71:9d:b5:1a:d4:28:f0:2d:39:81:26:4b:
                    5a:07:3a:ca:6b:a7:45:a5:d4:7a:77:73:c7:7b:6d:
                    05:8f:af:45:2e:15:15:ff:4e:99:59:6a:1e:8c:c2:
                    8a:21:6e:4a:5e:26:2f:53:00:50:9b:06:ba:71:a3:
                    b3:51:82:1a:a6:3d:af:2a:c7:fe:b1:a2:3e:4f:e5:
                    87:a2:64:dd:d8:7a:ac:bf:66:62:e7:ba:2e:f1:08:
                    5f:4e:8a:bb:c2:58:2f:45:5c:59:ce:7a:5c:61:f0:
                    39:61:81:dd:39:a7:ef:84:1c:a7:3d:25:ea:a9:03:
                    8b:bd:97:83:0b:1d:99:60:67:66:ec:57:bb:ab:d8:
                    33:d4:59:df:d8:7d:a3:a4:2b:4f:3a:1f:cf:19:08:
                    81:42:f9:63:4b:be:45:bb:9c:76:e2:5f:b8:bb:a7:
                    60:4a:c2:5a:b0:7e:fe:4d:a2:5c:07:67:ca:ae:a6:
                    ed:95:51:d9:69:7f:82:ec:4e:20:ff:cc:bd:e6:2f:
                    8f:4e:a2:19:4c:d4:e2:ca:3d:af:a8:15:6b:9f:76:
                    0c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:EA:0B:7E:85:84:F2:B2:27:05:F9:42:C3:79:B4:0A:68:08:AC:BD
            X509v3 Authority Key Identifier:
                keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:6c:38:3e:2b:37:04:0b:25:9d:38:0b:70:e8:04:1f:53:1f:
         2e:2a:0e:7d:cc:63:88:61:6c:17:3c:60:9c:4a:e8:03:52:28:
         82:af:50:c6:a6:04:31:ae:83:39:7c:43:2b:19:d2:a5:ce:2a:
         33:16:c5:04:bc:66:11:6d:63:c8:96:d5:9a:46:a6:47:ea:89:
         5b:97:df:da:aa:2d:ae:18:26:ab:37:7c:82:55:49:ff:7e:50:
         49:0e:54:83:2e:b8:8d:6d:47:bb:45:30:37:ca:f9:f2:b3:e8:
         8e:d1:fa:0c:ea:08:a1:ba:1a:6b:1b:3f:96:b2:fc:80:a8:dc:
         df:b7:85:87:0d:58:ac:fb:30:4f:e6:46:6a:7f:fa:2f:b7:40:
         39:d5:b8:ff:07:85:86:e8:cd:68:f2:11:87:ff:9f:35:71:e4:
         ae:b2:71:a1:cd:68:d9:21:ad:00:04:e1:11:83:b1:e7:e9:7a:
         c0:a2:05:10:37:ee:20:70:c1:24:a0:bf:78:85:6f:54:ef:82:
         ef:bb:c4:4d:ca:46:f1:59:1c:29:1c:05:5f:f0:60:b3:7c:38:
         0b:f0:03:77:21:ba:79:8d:c3:6d:a9:1f:b5:f6:f5:5a:5e:e6:
         6d:b2:eb:9c:28:26:3e:e9:e8:c6:ad:cc:38:26:d6:24:03:15:
         7b:88:d6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:36:31 2026 by rpki-client