Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
File:                     TD6do79ZOALMgz_l2UelJpb1jI0.mft (raw, json)
Hash identifier:          lChO1nMJflMR/DX0e2wv85tUA1lsf57JvtrouPc/PWg=
Subject key identifier:   F6:2D:65:05:50:2F:D1:8C:86:2C:EF:B1:4D:3B:F6:52:28:15:22:AF
Authority key identifier: 4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D
Certificate issuer:       /CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d
Certificate serial:       019EC2922E2525697CE5301BF9F9893D70ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
Manifest number:          189C
Signing time:             Sat 13 Jun 2026 20:00:20 +0000
Manifest this update:     Sat 13 Jun 2026 20:00:20 +0000
Manifest next update:     Sun 14 Jun 2026 20:00:20 +0000
Files and hashes:         1: TD6do79ZOALMgz_l2UelJpb1jI0.crl (hash: +ch4VHaFQP2NxztLb54cRn/1fLERlS3SxqojClw9dCU=)
                          2: xoBSepf056vB7VihaJfLbbA7rl8.roa (hash: FqEFR7+yy5fGMc3KqbC1V37aXIXlQqiTJ1sLZ3ECBNg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:2e:25:25:69:7c:e5:30:1b:f9:f9:89:3d:70:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d
        Validity
            Not Before: Jun 13 20:00:20 2026 GMT
            Not After : Jun 14 20:00:20 2026 GMT
        Subject: CN=f62d6505502fd18c862cefb14d3bf652281522af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:50:bb:55:91:c3:2f:d6:08:eb:74:55:34:01:
                    c6:0c:0e:ed:61:7a:6d:9a:64:18:5e:fb:b1:d9:08:
                    a3:3d:bf:04:c0:e5:84:5a:f6:e5:f1:85:18:03:25:
                    76:bd:80:35:c1:c9:aa:90:ba:01:53:8b:ce:7e:82:
                    e6:71:76:c9:25:45:1b:00:c6:76:f4:6f:62:77:9c:
                    26:8b:4c:32:13:5d:fc:39:7e:9c:d7:c3:d9:68:52:
                    95:38:d7:4a:bf:45:89:7d:af:46:95:07:bd:99:ed:
                    50:a9:6b:8b:a2:b8:d9:69:80:f9:98:f3:60:f5:54:
                    51:d4:33:77:48:86:5c:d3:d9:7d:d2:33:ac:a8:15:
                    f9:4c:74:f5:e3:c2:c4:df:a8:8f:fb:58:f1:41:94:
                    85:b0:50:93:c3:b6:d4:32:21:0c:bd:55:73:6b:4c:
                    fa:61:c2:f6:75:ef:13:56:74:33:f4:bf:c6:c5:20:
                    57:83:ba:5a:dc:e0:0e:e8:ab:7c:41:a4:96:fb:c9:
                    ba:10:49:86:d1:94:d6:66:54:9a:8e:53:c4:fa:3c:
                    03:98:79:94:9e:0f:5a:03:74:2d:8e:1f:33:d2:f9:
                    88:1b:6a:d0:6c:ca:15:ae:01:1b:ac:01:c2:b4:a3:
                    08:23:91:60:59:53:37:a8:26:35:3b:3b:ce:23:16:
                    e4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2D:65:05:50:2F:D1:8C:86:2C:EF:B1:4D:3B:F6:52:28:15:22:AF
            X509v3 Authority Key Identifier:
                keyid:4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:77:0d:b6:01:4d:ff:04:ae:bc:47:35:a4:4e:c2:0d:5d:71:
         37:47:4f:b7:9f:99:af:33:5d:3d:3a:54:86:1b:4d:97:0a:31:
         88:91:d7:fb:f6:62:8a:cd:af:16:00:b2:1f:b0:8f:30:7c:33:
         32:35:fd:ed:45:71:93:b9:90:28:fc:7d:58:8d:a7:fd:fe:01:
         57:a6:b9:36:71:36:cf:c5:6f:0a:9e:66:fb:b3:a1:87:11:7f:
         06:89:0c:79:7a:01:b3:07:f3:ce:52:af:70:8d:fa:05:29:ce:
         89:cc:fa:9a:22:8a:94:aa:01:d3:89:96:f5:6c:e5:97:27:41:
         ff:bf:a2:2c:4d:c4:89:ac:6c:94:f8:cb:08:a0:a2:4f:ee:87:
         45:09:24:8f:b0:67:12:08:c7:71:0d:cf:11:9e:a9:52:bc:4f:
         65:28:84:b8:12:5a:ea:25:5b:92:88:6d:74:1e:f2:eb:c3:62:
         29:88:2f:03:8f:72:02:59:a0:e9:d7:3f:3b:b1:94:bd:d9:67:
         22:94:8a:3b:7a:e3:2b:c1:43:2b:8d:68:d4:3e:13:72:fa:93:
         0d:59:c7:73:b0:2d:5c:fb:fd:12:68:43:9e:6b:63:d7:ec:4e:
         f2:d9:14:67:e1:b6:77:fb:6d:10:1a:1f:10:dc:8f:ab:67:43:
         74:06:6c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:51:16 2026 by rpki-client