Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
File:                     T5rG_iAxrd4DZoJA48XZHsZxHh4.mft (raw, json)
Hash identifier:          pGZQQmWnlEJqNZy1NrT9OVtgmICEnp5/TG0WOXa7J24=
Subject key identifier:   4E:DB:39:BD:05:67:A2:39:CA:8D:61:86:15:00:5B:C1:CB:A4:05:5F
Authority key identifier: 4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E
Certificate issuer:       /CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
Certificate serial:       019ED5750DB2B2C47362D85C30D85DEB11C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
Manifest number:          196F
Signing time:             Wed 17 Jun 2026 12:01:18 +0000
Manifest this update:     Wed 17 Jun 2026 12:01:18 +0000
Manifest next update:     Thu 18 Jun 2026 12:01:18 +0000
Files and hashes:         1: 0dAC8_MIFapVxgRzs4TlZHVEeEY.roa (hash: 49clzQhW1ftGGWowSAxsNPEboDX4Z+TOAbVsOQgEQas=)
                          2: P1u4eEpMlt9VP1A_Q7ba9uco-DE.roa (hash: FS9C2EZkw3xynye9bdmDp7IY0lMQ/RYNxAFxC1rEr8A=)
                          3: T5rG_iAxrd4DZoJA48XZHsZxHh4.crl (hash: MVY+LaoKa5U5f1JKftVom8KnazcHNXewp2yvFleBWnU=)
                          4: jx00a_pu7cUe7ylsCN_mAD4NHH0.roa (hash: qbhokNXhBId7yUMzZ5kksb51Uw6RLNqqZ85yZyQ9F7g=)
                          5: ug2lwdEDypbroUTh-MUKjX7xHxM.roa (hash: tzIgDVhwzntyEbgry33zKLqLx6I3KowYd/8dZ4T/e/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 08:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d5:75:0d:b2:b2:c4:73:62:d8:5c:30:d8:5d:eb:11:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
        Validity
            Not Before: Jun 17 12:01:18 2026 GMT
            Not After : Jun 18 12:01:18 2026 GMT
        Subject: CN=4edb39bd0567a239ca8d618615005bc1cba4055f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:08:ce:68:1b:3e:e9:48:11:df:a6:4e:db:e8:
                    05:05:a0:0c:ec:b7:72:d8:c5:80:39:95:aa:ab:21:
                    f8:06:7c:c9:b1:84:ce:37:ce:65:b3:ae:e4:d7:30:
                    7d:c8:5f:cf:4b:7b:ab:9d:73:9b:38:27:38:dc:94:
                    e3:ae:85:76:76:51:16:6c:b3:e7:cf:9e:e8:88:33:
                    44:8a:1e:83:67:38:dd:22:8e:a6:06:f6:31:ea:f6:
                    30:7f:b9:04:d8:a3:a3:78:f0:99:10:98:25:79:db:
                    d1:18:6d:27:5e:f9:6a:c0:25:52:c9:f0:e4:68:ef:
                    7d:32:66:78:7c:2f:4c:57:a6:34:a6:69:6b:94:c7:
                    8b:cd:bb:76:7f:d9:aa:23:73:af:33:59:18:07:0d:
                    f4:39:10:13:ab:f8:5a:cf:ee:f6:d9:f6:26:49:6a:
                    9e:fb:cc:9b:f1:51:30:c6:f1:19:b8:32:6d:89:93:
                    65:97:e3:54:d0:5b:9c:28:44:39:c0:57:15:d3:e3:
                    c5:eb:7e:62:51:37:af:6b:25:d8:ca:e1:5e:18:79:
                    ba:9e:c9:54:cc:ec:5f:55:38:e9:ee:d0:89:c6:92:
                    5c:bb:67:41:67:a9:d5:c8:d4:36:3f:01:3a:85:eb:
                    29:ba:7a:71:45:32:f5:bb:82:c8:f3:af:1f:71:85:
                    13:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:DB:39:BD:05:67:A2:39:CA:8D:61:86:15:00:5B:C1:CB:A4:05:5F
            X509v3 Authority Key Identifier:
                keyid:4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:79:81:2a:e0:de:e6:ce:cb:f3:ae:50:11:e8:dd:7e:04:cc:
         31:06:55:48:83:e8:29:da:ba:a9:d6:9d:40:3c:77:97:9b:ed:
         a0:1f:f0:96:5d:c7:84:10:5a:f8:ff:83:47:55:9c:28:35:b4:
         81:e7:b3:b8:4a:84:b7:6a:b5:fe:ff:a6:e8:04:3a:1d:6a:b5:
         85:20:af:0e:1b:d9:e4:f7:19:65:05:6e:c6:41:4f:86:03:5c:
         29:a3:3f:f4:1d:c2:ec:f3:c0:fa:c1:33:49:41:04:35:03:bb:
         1c:d6:5f:96:5b:1e:3d:5c:7f:03:f2:78:dd:a5:85:90:c2:b7:
         80:bf:32:37:3f:7a:24:31:30:51:cb:46:ec:85:d9:3b:e9:f5:
         bb:79:20:73:35:18:14:42:76:de:5d:7d:dc:70:f4:75:60:71:
         08:ce:b0:80:cf:a3:37:e3:d7:cf:f8:b7:f8:1b:79:03:99:6e:
         5b:46:40:50:27:07:4e:43:91:0b:e2:c5:10:a5:fa:5b:d3:67:
         a0:84:fa:e1:6d:cd:04:6f:a1:a0:a5:60:88:a2:3b:00:fa:62:
         4b:7a:98:0a:ad:ff:b3:94:fb:1e:70:92:a6:70:0a:1f:9c:64:
         0d:c0:6a:1c:52:77:fe:d5:28:4d:22:c0:31:b4:f4:66:32:ed:
         a9:4d:e2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:40:26 2026 by rpki-client