Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
File:                     TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft (raw, json)
Hash identifier:          cbWekYLeayEhTpQM2qmhvw+Bx6+2IMHpi06f1WLQPnw=
Subject key identifier:   3C:10:C8:B5:2A:89:52:B7:05:24:EA:95:F2:28:BF:9F:F7:AA:3D:84
Authority key identifier: 4C:24:C3:08:B0:24:1C:3B:CC:14:CF:67:77:59:1D:27:23:7F:FA:F1
Certificate issuer:       /CN=4c24c308b0241c3bcc14cf6777591d27237ffaf1
Certificate serial:       019FAA50D339218358B1B57986BEC50214D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
Manifest number:          06B7
Signing time:             Tue 28 Jul 2026 20:00:51 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:51 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:51 +0000
Files and hashes:         1: TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl (hash: x5rgOLXWM9WWuDYomTdrQ+/+9OixcOAQdiCgPSODPPs=)
                          2: i3fwIWYHmrbZ4Q0LfBJoI0pL4eM.roa (hash: lzJAIL587sZVQf8sujo44Gz8CEXrbl2KlNzyp7ldRQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:d3:39:21:83:58:b1:b5:79:86:be:c5:02:14:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c24c308b0241c3bcc14cf6777591d27237ffaf1
        Validity
            Not Before: Jul 28 20:00:51 2026 GMT
            Not After : Jul 29 20:00:51 2026 GMT
        Subject: CN=3c10c8b52a8952b70524ea95f228bf9ff7aa3d84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ba:a7:d7:c1:60:bd:6f:04:4d:dc:29:75:56:
                    9b:59:27:db:78:ea:bb:3f:85:e7:dd:63:8e:ad:cb:
                    a6:13:71:4b:3e:d3:01:08:00:60:da:6f:41:e0:2f:
                    cc:06:82:2d:5d:6a:ae:b3:35:67:24:c6:50:60:bd:
                    98:6e:b4:7d:50:93:03:ae:81:b8:b2:f2:54:a3:ed:
                    ba:cb:30:1f:4f:9e:53:76:a9:b4:b0:72:92:2f:23:
                    4c:35:8c:a3:a7:1d:25:a3:b0:23:fa:f6:90:7c:b5:
                    3d:55:80:1c:5a:7f:60:5e:57:dc:aa:97:6a:81:e7:
                    8e:f5:ad:87:a1:ac:3e:15:32:8b:34:ab:a2:51:93:
                    ac:0a:84:58:46:2c:21:9b:12:ca:a2:1b:7d:b9:04:
                    c6:ba:bd:c6:d6:2d:c4:eb:96:0e:91:e7:2a:94:2d:
                    7d:e1:03:3c:9b:36:f0:55:c8:a1:80:e7:1e:7c:88:
                    77:8b:4b:15:42:02:46:c4:61:ed:44:8b:28:4b:5e:
                    cc:57:e4:43:a9:04:6f:80:7b:35:56:d1:78:46:e5:
                    61:bf:bf:33:e0:4e:6f:3b:3e:4e:9a:1d:df:92:bd:
                    6a:99:db:e1:df:90:e3:ce:67:48:ee:84:4e:ec:c2:
                    20:a9:59:b2:19:17:99:ef:b5:11:2c:d2:dd:27:78:
                    48:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:10:C8:B5:2A:89:52:B7:05:24:EA:95:F2:28:BF:9F:F7:AA:3D:84
            X509v3 Authority Key Identifier:
                keyid:4C:24:C3:08:B0:24:1C:3B:CC:14:CF:67:77:59:1D:27:23:7F:FA:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:66:ac:1b:ac:92:8d:84:6c:ab:80:f5:67:3a:d9:f7:35:6d:
         10:71:ad:2b:bb:01:0e:dd:b4:da:ef:b2:46:35:92:85:1e:43:
         e1:1c:7d:56:4a:ac:b4:bd:02:a8:59:4a:90:8d:38:c9:2f:ba:
         82:53:1d:f0:9d:57:ec:9d:bd:f8:8e:6f:0b:af:03:0f:a6:bb:
         24:26:f3:33:c0:8f:4f:47:00:7e:0b:c1:ec:f4:a6:dd:dd:e0:
         4d:4c:7d:73:cc:0e:16:72:50:59:7e:1c:01:7f:8c:9d:b4:1a:
         c7:84:85:36:27:f6:e7:81:64:1c:13:82:a4:79:05:ff:49:14:
         84:26:30:f5:c0:88:a5:cb:2f:9d:9f:b0:54:d7:a7:49:7a:53:
         ff:52:db:8e:a1:b6:4f:43:b8:88:0c:d5:49:16:3b:1b:71:2a:
         74:0f:cd:6a:1e:dc:03:12:a8:32:21:03:8c:2b:7f:f0:6f:c3:
         0d:91:eb:52:66:8a:2e:05:de:9a:cd:5d:ac:6a:72:85:f8:bd:
         c0:05:6e:0a:5f:35:8a:86:e0:6b:7a:bf:15:a3:33:a7:27:7c:
         4a:4d:38:de:a1:be:2d:43:50:c0:ed:71:48:73:07:3e:c8:24:
         5d:b8:07:d7:c3:04:53:83:c0:bd:59:ec:cb:51:bc:a8:02:6d:
         6a:94:68:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:41:27 2026 by rpki-client