Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
File:                     TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft (raw, json)
Hash identifier:          w1qRjqCdnulV35wckXdu82KPeUvAjQE+SYityVromJA=
Subject key identifier:   AE:92:43:0F:36:F8:72:7B:30:A4:C8:0E:8E:1E:55:B5:EF:50:36:58
Authority key identifier: 4D:CB:EF:06:AD:05:FD:6E:6E:7E:7B:10:84:CB:1D:7D:65:E6:42:6F
Certificate issuer:       /CN=4dcbef06ad05fd6e6e7e7b1084cb1d7d65e6426f
Certificate serial:       019EC2CA12F65801B713AE5E5CBBEE1393C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
Manifest number:          1376
Signing time:             Sat 13 Jun 2026 21:01:23 +0000
Manifest this update:     Sat 13 Jun 2026 21:01:23 +0000
Manifest next update:     Sun 14 Jun 2026 21:01:23 +0000
Files and hashes:         1: TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl (hash: Fs570haCH/pcAXvV4Uq0oeD8fjzMKq+580b4TfNcGnw=)
                          2: qdG_Gv-Z2yCeI5FZ0wm9b0l6kSw.roa (hash: qEsauC0Q7PPkI4NMJ7sTsrOSfvgrVIwh8wnzn4v958c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:ca:12:f6:58:01:b7:13:ae:5e:5c:bb:ee:13:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dcbef06ad05fd6e6e7e7b1084cb1d7d65e6426f
        Validity
            Not Before: Jun 13 21:01:23 2026 GMT
            Not After : Jun 14 21:01:23 2026 GMT
        Subject: CN=ae92430f36f8727b30a4c80e8e1e55b5ef503658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7b:6e:5e:45:42:2b:55:50:15:a6:12:e0:2d:
                    11:f4:77:74:66:50:99:9d:a5:63:d1:9c:ce:07:84:
                    5c:5b:ac:ea:87:23:a8:28:c7:30:77:6c:7b:7b:fd:
                    25:57:ec:b0:b9:db:87:d8:f6:a0:5c:63:4b:71:88:
                    ba:3c:c6:d6:6f:36:02:44:5b:93:f8:b8:08:4b:62:
                    3e:d1:bd:39:6f:99:89:19:60:91:b9:b5:bb:2a:6e:
                    6b:9b:69:26:89:dd:86:3f:62:25:4c:97:eb:8a:26:
                    3b:b6:ce:2b:4f:d4:40:44:2d:ae:73:0d:a7:0e:37:
                    19:82:55:7b:12:e1:b8:33:6b:9f:3b:20:0a:0f:ad:
                    bb:82:fa:2e:d9:26:5f:ef:6e:42:6d:6b:57:7c:d5:
                    74:f7:0d:93:85:0e:1f:f3:b3:0f:fa:68:13:77:c4:
                    c7:65:a4:c1:af:cb:9a:84:49:7a:db:97:51:d9:e0:
                    c9:5d:2c:98:6d:0c:4d:20:6d:cc:00:c5:59:e4:36:
                    84:a9:27:cc:bc:24:69:16:c6:7d:86:b5:b4:d4:09:
                    ee:7f:ba:2b:90:8d:a3:ee:dd:be:29:30:16:61:2a:
                    fe:fd:d2:68:92:e2:92:91:91:2d:df:32:4b:f2:f1:
                    f9:ee:ec:c6:69:c1:d6:2f:f1:23:7d:2d:e0:ad:01:
                    e3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:92:43:0F:36:F8:72:7B:30:A4:C8:0E:8E:1E:55:B5:EF:50:36:58
            X509v3 Authority Key Identifier:
                keyid:4D:CB:EF:06:AD:05:FD:6E:6E:7E:7B:10:84:CB:1D:7D:65:E6:42:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:6c:3e:73:c0:3c:a6:95:85:7c:50:7b:02:bb:8d:63:03:65:
         ab:85:87:21:32:88:3a:c5:69:fb:21:78:1b:3d:81:ea:b4:f8:
         13:1e:f1:4a:68:39:f6:38:58:25:7a:aa:3d:b3:9d:26:27:4a:
         23:d3:b7:fa:fe:aa:ec:0a:e0:35:32:93:56:f1:70:25:6a:58:
         13:d2:81:25:d5:f3:f0:8d:8f:26:1d:9a:21:40:09:7d:1f:ff:
         99:10:06:7c:36:7c:ba:c1:ff:61:8a:da:5c:ba:f5:ff:ca:aa:
         49:03:36:9c:8c:3a:e8:30:8d:52:f2:5c:14:c8:72:35:d7:a6:
         c0:30:e1:3c:8b:81:a0:f7:8d:79:e8:f2:8f:49:ab:3b:6c:ef:
         77:b5:fc:55:9f:c8:ff:75:07:e8:78:5f:03:45:cb:77:a3:89:
         a2:3f:e1:7e:3b:56:b2:19:12:91:c0:11:ce:6d:d1:ae:ff:6c:
         03:f3:b3:97:b4:8d:cb:f9:ec:7f:9e:27:87:b0:15:ac:4d:61:
         74:51:73:af:b4:3b:d2:c7:31:b6:d5:d6:c0:e1:98:3b:20:cb:
         7b:e1:a9:a7:33:99:4c:25:c6:d2:5a:f4:a8:e1:98:aa:90:ec:
         83:c6:94:17:0b:92:81:3c:9a:1c:68:f8:f6:bf:b5:c2:8b:72:
         06:17:12:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:24:20 2026 by rpki-client