Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
File:                     tgcVWH7cyzJajXwPWkLY8EOHHbc.mft (raw, json)
Hash identifier:          Nh2qFFl69mMzdv7GoL42r886bEbBH7FqBP6l1rEqqm0=
Subject key identifier:   02:85:39:B3:2F:DE:B2:04:58:A3:84:C9:83:F9:9C:1E:B1:FC:96:6D
Authority key identifier: B6:07:15:58:7E:DC:CB:32:5A:8D:7C:0F:5A:42:D8:F0:43:87:1D:B7
Certificate issuer:       /CN=b60715587edccb325a8d7c0f5a42d8f043871db7
Certificate serial:       019EC300ADC619061A05097E94BA1E10404D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
Manifest number:          0481
Signing time:             Sat 13 Jun 2026 22:01:02 +0000
Manifest this update:     Sat 13 Jun 2026 22:01:02 +0000
Manifest next update:     Sun 14 Jun 2026 22:01:02 +0000
Files and hashes:         1: eB4gEEpPyWFq6clsUK7vv51vvfQ.roa (hash: vOzaKzOf/nV2cWIeYZMZ7vTHjq9ov1FtZCm3hsoyh/8=)
                          2: tgcVWH7cyzJajXwPWkLY8EOHHbc.crl (hash: bqgyyiWSOT2+RA97dvwPo8i2hTwPZ0N4uq4IllfKnxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:00:ad:c6:19:06:1a:05:09:7e:94:ba:1e:10:40:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b60715587edccb325a8d7c0f5a42d8f043871db7
        Validity
            Not Before: Jun 13 22:01:02 2026 GMT
            Not After : Jun 14 22:01:02 2026 GMT
        Subject: CN=028539b32fdeb20458a384c983f99c1eb1fc966d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:40:2a:c4:a8:aa:b8:78:6b:53:3e:ce:98:c4:
                    ac:b6:83:da:7a:96:0f:66:79:1f:92:a4:19:35:c4:
                    8a:da:5e:59:40:54:5b:21:8e:cd:c9:76:f1:71:71:
                    f3:7c:0e:b1:25:c3:74:fd:17:9a:d9:7e:82:da:c4:
                    b0:59:f6:39:17:93:d4:9a:1b:14:37:77:e1:ef:c1:
                    4d:f0:b8:b6:15:c3:4d:f7:90:24:3d:e2:fb:ba:bc:
                    e9:3a:0a:c9:b5:f5:49:b2:26:0d:3a:c3:30:63:43:
                    a7:67:e4:7b:a0:c7:01:07:e0:b8:10:b0:69:dd:91:
                    f5:ab:fd:c9:b8:b1:51:e7:c4:50:fc:35:a9:03:ad:
                    49:ed:08:ed:fe:e7:cd:65:ef:52:81:55:c1:99:36:
                    03:e5:ae:50:e2:a3:a3:90:3b:5a:fe:b8:a1:00:9c:
                    3c:d7:3c:26:07:5e:31:ea:30:26:a4:fe:d7:d0:dd:
                    de:6c:2f:9a:27:f8:3c:19:75:ea:f4:3d:08:98:2a:
                    ef:80:58:e1:5e:ad:61:7e:bc:5b:3c:49:22:bc:8d:
                    3b:f5:7e:3e:8e:3e:f9:bc:54:1b:a3:f2:01:1c:76:
                    2d:31:fc:60:ca:5d:dc:02:fb:d5:d0:74:11:33:e1:
                    da:be:59:d4:04:6c:a7:62:15:86:52:e9:c1:56:b1:
                    3d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:85:39:B3:2F:DE:B2:04:58:A3:84:C9:83:F9:9C:1E:B1:FC:96:6D
            X509v3 Authority Key Identifier:
                keyid:B6:07:15:58:7E:DC:CB:32:5A:8D:7C:0F:5A:42:D8:F0:43:87:1D:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgcVWH7cyzJajXwPWkLY8EOHHbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/359d71-1e9e-439f-93f1-1f5428684fc7/1/tgcVWH7cyzJajXwPWkLY8EOHHbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:e2:11:9c:79:fd:e9:68:56:65:53:1a:44:de:cb:3e:78:05:
         b5:5f:2d:99:b6:cf:91:fb:c1:36:96:4d:33:da:32:97:91:8a:
         96:f2:fb:4b:9c:19:43:4c:b4:62:05:f8:ad:3b:94:ac:24:d6:
         e2:b8:3d:da:21:1e:74:25:a1:71:9b:14:53:df:11:25:75:f9:
         f3:d7:39:ac:f7:e8:42:f2:0e:58:3f:c3:98:25:fe:1b:97:c7:
         0e:01:60:67:32:d9:3c:a4:4c:50:49:c7:63:ee:71:e7:70:2d:
         56:17:4b:06:21:ce:4b:40:fa:fe:54:da:5a:52:89:45:cf:62:
         80:9c:b0:89:43:f1:14:b0:8c:4c:b8:9d:72:36:e2:34:43:6b:
         d0:14:7b:da:c4:3c:8a:c8:43:25:6d:76:20:d5:c9:b8:a3:0a:
         99:ea:68:5d:19:6c:fc:f2:a2:72:96:17:52:78:ad:c6:dc:0e:
         39:32:47:e6:5b:37:c1:bd:40:f7:59:b9:13:15:a9:03:a5:d3:
         f0:bd:fb:cf:7b:42:9c:1a:14:9f:33:36:30:27:d5:91:09:4a:
         54:aa:1a:3e:af:80:5a:dd:6d:68:c0:c9:51:2a:67:2b:8d:82:
         8e:ae:47:ff:6d:58:f8:bd:9f:2a:89:10:10:55:40:ca:fa:f7:
         7d:ce:8e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:44:48 2026 by rpki-client