Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
File:                     TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft (raw, json)
Hash identifier:          TziVe8OlG2VcqIpsoKwhwuZ1ChZ+G8NIGzDcNZvujmU=
Subject key identifier:   4C:F2:BB:A5:3A:01:30:25:3A:4F:A6:B9:73:36:F5:6D:58:66:3E:4E
Authority key identifier: 4C:CA:52:61:0C:77:C2:40:69:C6:A6:59:F5:F7:58:62:44:4D:21:D1
Certificate issuer:       /CN=4cca52610c77c24069c6a659f5f75862444d21d1
Certificate serial:       019EBFFEFCC8266238B01A18EA2BCF7722A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
Manifest number:          01A6
Signing time:             Sat 13 Jun 2026 08:00:19 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:19 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:19 +0000
Files and hashes:         1: 7zHV66w7Bkb2Ny1dDTCLE7Wl8ao.asa (hash: lHxtADA9XD8WHImnlrIbVNB8iNbIHqkbRGv2EysJnKE=)
                          2: TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl (hash: fO1/zkE2G1FMUBOpvnfNC8B/RaS0Clym3gj8n+AiqJs=)
                          3: xG9NFV14N6jhxkLPrteP6dgm9Uo.asa (hash: j7yw0JA2orCei5mBZaM+jkEs+OnrVp/04Pg2/7YewKU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:fe:fc:c8:26:62:38:b0:1a:18:ea:2b:cf:77:22:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cca52610c77c24069c6a659f5f75862444d21d1
        Validity
            Not Before: Jun 13 08:00:19 2026 GMT
            Not After : Jun 14 08:00:19 2026 GMT
        Subject: CN=4cf2bba53a0130253a4fa6b97336f56d58663e4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8b:53:4a:56:04:1e:57:a9:62:67:51:39:7f:
                    ce:93:6e:f5:c1:51:47:0e:00:95:15:65:66:9c:6d:
                    1c:62:4d:5e:f5:12:ce:bf:f8:58:fe:be:59:12:94:
                    0d:83:b8:5e:2b:29:ab:48:71:22:7b:32:01:08:b5:
                    a2:06:5a:13:09:cf:e2:e8:65:ef:1a:7c:70:5e:ea:
                    df:10:8a:f9:47:25:11:84:d2:45:8f:12:47:f7:3f:
                    c6:06:fd:b1:ad:ef:a6:40:8f:21:22:e6:33:1f:fd:
                    f5:22:dc:25:f0:ab:ce:6c:ea:38:f6:01:1d:69:cc:
                    d8:ca:9c:3c:9a:42:ce:36:1b:f6:98:3e:ac:c1:58:
                    cf:c8:bc:34:53:64:8f:ee:99:15:dc:15:3a:62:bd:
                    1c:3d:df:17:6e:09:bb:53:a9:75:06:d0:47:e5:8d:
                    bd:06:e9:39:47:40:31:97:db:f3:3a:91:a7:1a:f4:
                    fc:83:21:e3:58:7a:46:1e:ac:60:fc:e0:c9:06:b5:
                    d6:1d:ca:52:3e:01:5f:1b:c5:4e:e6:dc:a8:a9:27:
                    a6:aa:08:48:82:e7:16:47:fe:a9:a3:53:36:7d:eb:
                    d0:7e:55:ad:7b:58:79:65:94:88:92:b3:3d:a6:03:
                    96:48:34:ee:3f:ba:20:b4:10:ac:d0:b5:74:4e:d5:
                    bd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F2:BB:A5:3A:01:30:25:3A:4F:A6:B9:73:36:F5:6D:58:66:3E:4E
            X509v3 Authority Key Identifier:
                keyid:4C:CA:52:61:0C:77:C2:40:69:C6:A6:59:F5:F7:58:62:44:4D:21:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:df:c2:b8:9a:bb:fb:5d:be:1d:cd:2e:2e:b6:ad:81:62:f6:
         61:df:0e:15:fe:1a:01:74:6f:e0:2b:71:7e:27:99:11:ba:20:
         a5:2e:2e:f6:1c:ea:77:9f:4d:4a:80:b2:13:02:9f:cc:f4:d4:
         d9:8d:ef:d8:bf:b1:13:3e:26:5f:12:44:1e:78:2d:0f:50:6a:
         b6:4a:1b:7d:69:90:f2:53:07:70:b1:f9:ea:d2:ac:bb:db:60:
         cd:88:0e:5c:f1:16:f0:8f:2c:11:8e:26:97:32:32:bf:9d:db:
         4a:1b:57:52:6a:7f:cf:d0:ee:b1:23:ff:59:64:f0:58:95:eb:
         42:fe:e5:be:08:4d:f2:1b:b7:5b:69:fa:d5:e7:9f:8b:c7:ef:
         e3:d7:0a:1a:e0:ab:72:b4:92:b6:a9:93:d1:5b:e4:1b:35:d0:
         7e:69:c6:3a:0a:f1:59:e1:01:f4:c8:f4:f8:e6:7b:04:78:9f:
         c6:7f:be:e7:03:2f:aa:b2:db:c9:29:1f:3e:04:64:16:a6:65:
         74:cf:44:1b:02:c9:e0:44:01:d0:0a:c5:41:3a:eb:fc:08:39:
         43:12:cb:76:ab:50:60:2e:e2:ad:0c:68:47:d4:d5:f1:0b:b7:
         df:e2:3b:9f:a6:b6:f6:3e:42:0d:2c:0e:49:f6:49:75:6c:95:
         f8:03:16:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:50:34 2026 by rpki-client