Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
File:                     TecEA8nS15Ys8RPZPEYvlJPYc2I.mft (raw, json)
Hash identifier:          5ReO5N/h0J9kybahDvDQzXZ6cho1MO90INtAcklCwNw=
Subject key identifier:   77:5A:58:D0:E4:1C:75:B0:62:E6:DB:69:EF:8C:38:17:39:23:52:07
Authority key identifier: 4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62
Certificate issuer:       /CN=4de70403c9d2d7962cf113d93c462f9493d87362
Certificate serial:       019EC0DB10C77E3E7F044A0DB9E01D50D4A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 12:00:42 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:42 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:42 +0000
Files and hashes:         1: TecEA8nS15Ys8RPZPEYvlJPYc2I.crl (hash: s8ZhojVdPCxtTP0HZaeiJ1AtdlpQrFDM9BA2PzokXbo=)
                          2: uhDIc0uEZUElVgS-_EocXKCrnM4.roa (hash: Q1EY9r/YhBigZO4RXwGxgcBbj+7/3SMubwYfDCdrIGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:10:c7:7e:3e:7f:04:4a:0d:b9:e0:1d:50:d4:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4de70403c9d2d7962cf113d93c462f9493d87362
        Validity
            Not Before: Jun 13 12:00:42 2026 GMT
            Not After : Jun 14 12:00:42 2026 GMT
        Subject: CN=775a58d0e41c75b062e6db69ef8c381739235207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:5b:52:4f:01:f5:bd:36:c5:4c:09:7e:6e:64:
                    4d:8d:59:50:c7:15:9e:24:62:8e:c0:7d:c5:52:99:
                    2e:b1:5e:f5:a6:62:ff:30:0b:c9:76:ea:cc:09:35:
                    ee:be:a2:b8:49:08:32:d9:ca:89:15:20:3d:69:39:
                    8b:04:5a:d0:72:91:2a:d0:a9:19:72:51:9d:28:2f:
                    13:54:c2:dc:69:3a:37:12:d1:57:9b:c1:88:35:46:
                    5c:42:b8:8b:48:21:d8:ab:00:4a:55:f0:cf:97:bb:
                    fc:af:4f:00:90:06:a2:a4:0e:45:40:56:5d:ee:5a:
                    87:21:5a:3d:07:0f:a3:95:ee:78:45:d3:fe:d2:24:
                    22:cf:f8:6b:73:93:81:0d:39:f1:eb:e1:a7:7a:98:
                    66:70:5b:ca:b1:ee:5d:1e:76:83:5f:e1:7a:5c:85:
                    fc:de:b9:d4:d5:d1:f4:f5:3e:95:a4:64:63:05:e0:
                    57:a2:11:ef:9f:93:36:28:8e:60:c6:d5:fb:e7:78:
                    2d:b9:d6:2d:58:2b:65:19:9a:84:db:c9:aa:c6:46:
                    d4:40:37:f4:d1:49:76:0d:aa:ef:af:d0:99:51:6c:
                    8b:80:0d:01:c7:d4:b8:e7:43:1f:9e:c9:fc:46:4a:
                    ee:58:5a:ea:4c:16:92:e1:2c:20:87:86:22:50:8a:
                    8e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:5A:58:D0:E4:1C:75:B0:62:E6:DB:69:EF:8C:38:17:39:23:52:07
            X509v3 Authority Key Identifier:
                keyid:4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:36:1c:b1:8d:85:3f:63:cb:1c:e9:0d:f9:9c:88:cc:e0:32:
         42:fb:a0:4e:51:e9:8c:47:1a:2e:38:d6:75:c0:1d:16:a1:21:
         f2:02:3d:80:37:88:8e:1d:6a:4c:66:7b:68:25:06:38:f2:f5:
         24:e3:1b:7d:3a:53:fc:ed:9d:2b:8e:15:62:cd:6d:f7:d4:ff:
         e0:48:23:83:a0:94:53:9e:18:38:42:7d:40:61:73:bc:50:c8:
         51:63:51:18:9c:96:c9:22:59:d1:54:be:41:d3:d8:16:23:51:
         fe:40:d3:45:e3:c7:a2:9a:82:47:9a:35:b8:c5:56:33:65:db:
         dc:64:8c:4c:d8:12:6f:47:47:01:7c:55:1b:81:79:ee:7f:33:
         b3:ed:57:81:fe:d4:19:8f:69:4c:62:79:cc:28:da:bf:43:33:
         c8:d8:a0:c1:80:3b:e4:f7:e1:e4:31:be:3f:e3:fd:1a:74:1d:
         9f:e8:b1:ef:b9:b3:ba:dc:05:5e:23:33:31:f3:9f:b1:3f:19:
         53:68:9c:c7:9a:cd:f1:d1:5d:99:fa:5f:2c:5a:9a:79:bb:78:
         38:12:92:34:91:4e:ba:a3:a1:7d:98:cd:c3:80:9c:ca:c7:3f:
         32:02:27:e3:40:1f:eb:a2:5b:74:1c:dc:de:2e:b4:fc:92:df:
         37:68:97:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:33:14 2026 by rpki-client