Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/572b15-bfd7-48e0-bd9b-e69562097086/1/TWJ6NJyeo81uXc2grNej_IQ-xzs.mft
File:                     TWJ6NJyeo81uXc2grNej_IQ-xzs.mft (raw, json)
Hash identifier:          5SWSOmyBn3H2szT8JQmOZf2R3hV3/GkuaonmvA1VBrI=
Subject key identifier:   19:91:9A:7B:A4:74:31:61:9E:B6:EA:0F:4F:6A:B9:E8:CF:BC:B9:1B
Authority key identifier: 4D:62:7A:34:9C:9E:A3:CD:6E:5D:CD:A0:AC:D7:A3:FC:84:3E:C7:3B
Certificate issuer:       /CN=4d627a349c9ea3cd6e5dcda0acd7a3fc843ec73b
Certificate serial:       019ED3F46FC5B50451BB2AD3014642A12463
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TWJ6NJyeo81uXc2grNej_IQ-xzs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/572b15-bfd7-48e0-bd9b-e69562097086/1/TWJ6NJyeo81uXc2grNej_IQ-xzs.mft
Manifest number:          35
Signing time:             Wed 17 Jun 2026 05:01:12 +0000
Manifest this update:     Wed 17 Jun 2026 05:01:12 +0000
Manifest next update:     Thu 18 Jun 2026 05:01:12 +0000
Files and hashes:         1: TWJ6NJyeo81uXc2grNej_IQ-xzs.crl (hash: Pypq1gvvih302CJac/Y1jJLFM8CRq02cmBODoQR8CLc=)
                          2: c-MYYoNI7ANhpWNl4U8F_Hfzmow.roa (hash: skbSxRIkUCLTSaqSWg0+FjMPhARmWa5xKrDu6w4W5Wg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/572b15-bfd7-48e0-bd9b-e69562097086/1/TWJ6NJyeo81uXc2grNej_IQ-xzs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/572b15-bfd7-48e0-bd9b-e69562097086/1/TWJ6NJyeo81uXc2grNej_IQ-xzs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TWJ6NJyeo81uXc2grNej_IQ-xzs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 05:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:f4:6f:c5:b5:04:51:bb:2a:d3:01:46:42:a1:24:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d627a349c9ea3cd6e5dcda0acd7a3fc843ec73b
        Validity
            Not Before: Jun 17 05:01:12 2026 GMT
            Not After : Jun 18 05:01:12 2026 GMT
        Subject: CN=19919a7ba47431619eb6ea0f4f6ab9e8cfbcb91b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ab:2c:11:0e:4b:83:e7:cb:b4:1e:30:12:cc:
                    e9:e1:b2:f6:ae:72:7c:99:1e:4f:15:b8:99:9d:ca:
                    55:23:cb:ff:0a:52:dd:0a:10:be:d8:76:58:7c:11:
                    32:d6:2a:9b:cb:66:50:7e:c8:ba:0e:b3:26:1c:aa:
                    00:a0:5c:f1:0d:23:4e:2a:fe:1c:81:56:68:8e:3a:
                    93:33:04:59:f6:08:89:f5:65:33:3e:58:b0:1d:88:
                    52:5e:07:80:0a:39:bb:4d:2f:8e:bc:6f:c0:b0:8a:
                    82:ce:70:c8:ed:dd:fd:c1:8c:7b:1c:ae:85:7c:38:
                    38:6e:59:d9:59:98:bd:b9:88:bc:cb:a8:30:29:bb:
                    2e:6b:2f:53:2e:63:66:ad:ba:ff:0b:15:ae:04:90:
                    84:e9:7d:06:4c:4c:ea:74:19:c4:2c:25:52:8a:82:
                    01:88:6e:1a:23:70:2e:d6:cc:20:e0:06:77:0f:14:
                    19:1f:22:56:6e:ad:d7:00:b3:14:1d:e5:3a:02:bb:
                    a3:23:a2:f2:64:a1:29:05:a2:b5:4a:16:e1:68:6c:
                    de:77:e2:7e:7e:f0:c5:25:da:31:f8:20:34:96:39:
                    6b:a0:c4:85:a5:4e:89:8a:ff:15:1d:cb:e6:de:f8:
                    f4:6c:ec:b1:4a:b9:5e:c6:62:26:66:54:29:c9:99:
                    a6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:91:9A:7B:A4:74:31:61:9E:B6:EA:0F:4F:6A:B9:E8:CF:BC:B9:1B
            X509v3 Authority Key Identifier:
                keyid:4D:62:7A:34:9C:9E:A3:CD:6E:5D:CD:A0:AC:D7:A3:FC:84:3E:C7:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWJ6NJyeo81uXc2grNej_IQ-xzs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/572b15-bfd7-48e0-bd9b-e69562097086/1/TWJ6NJyeo81uXc2grNej_IQ-xzs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/572b15-bfd7-48e0-bd9b-e69562097086/1/TWJ6NJyeo81uXc2grNej_IQ-xzs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:48:80:2f:75:59:81:2e:98:c6:85:0f:18:5c:bd:10:ba:2c:
         07:52:90:a9:f6:3a:36:4b:d8:fa:4f:b6:52:9c:16:77:c9:7b:
         71:c4:25:37:62:7e:c8:d4:aa:bb:33:11:e2:60:f8:e3:6e:08:
         cb:61:f8:e3:bf:77:58:17:8a:a0:7e:f2:d7:af:9b:e4:a3:9b:
         82:aa:8b:59:d3:fc:15:a2:30:d2:cd:e7:a3:99:5f:88:ed:ec:
         a3:9e:f1:3e:39:b1:3f:ff:67:f8:96:ba:b3:61:ee:fc:14:e3:
         9f:c5:55:95:4e:54:9b:14:db:77:22:a1:b7:a5:28:b0:4a:c3:
         21:ba:04:ff:0d:dd:c2:64:18:b5:eb:a4:1f:ff:3d:27:b8:3b:
         43:32:0d:07:ea:6c:5c:86:89:0d:0e:d7:bd:1a:bf:da:5f:33:
         b1:7e:0a:b0:b5:a9:72:36:2b:83:a7:8b:e5:63:d8:6f:21:fb:
         21:6e:b6:53:07:f3:db:e3:cd:c2:db:76:40:cc:25:57:d4:de:
         72:25:67:44:27:2b:d4:82:90:79:5d:37:33:0f:eb:a4:3d:80:
         e8:37:2b:0f:7c:93:39:5a:73:80:8f:3f:6b:e5:20:a3:85:2b:
         d0:5f:62:3f:92:4f:a8:bd:02:74:de:96:ed:c7:fe:dc:25:42:
         b9:29:d6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:53:56 2026 by rpki-client