Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
File:                     TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft (raw, json)
Hash identifier:          Wkc4iYTmSrv6ItX26oze5+kOEQtSfrM+elHD3dWx8uM=
Subject key identifier:   EB:A2:34:50:1B:8B:40:67:7D:4E:36:AC:A2:70:F4:77:7C:B8:20:32
Authority key identifier: 4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
Certificate issuer:       /CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Certificate serial:       019EC3009B6F808F6610C23CF2E15992A68D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 22:00:57 +0000
Manifest this update:     Sat 13 Jun 2026 22:00:57 +0000
Manifest next update:     Sun 14 Jun 2026 22:00:57 +0000
Files and hashes:         1: NM6bC8g_JOCJcB_SqI4c_RpTy0s.roa (hash: PVdIpdqsXSW7un2HJAR4RrNhmciVj3imB2fnXeIUv8I=)
                          2: TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl (hash: bSg9GiXZjACktmzdPvhyDmzqrjTmrwQIE7Ju3vvLsZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:00:9b:6f:80:8f:66:10:c2:3c:f2:e1:59:92:a6:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
        Validity
            Not Before: Jun 13 22:00:57 2026 GMT
            Not After : Jun 14 22:00:57 2026 GMT
        Subject: CN=eba234501b8b40677d4e36aca270f4777cb82032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e0:e0:df:52:cc:94:36:39:47:1e:74:a4:02:
                    ce:c6:aa:56:d5:2c:3f:b2:d2:32:ba:0b:81:ed:63:
                    9f:07:d4:be:9a:16:9e:3b:a8:9a:b9:5e:d7:1d:e2:
                    c6:b1:01:83:2e:8e:32:59:ea:52:9f:89:ad:30:eb:
                    64:6f:96:6b:7f:cd:45:92:d2:0e:6e:3d:e1:b8:72:
                    5f:b9:ae:c2:c3:7a:22:5b:f3:4e:0c:76:db:bb:63:
                    8f:0e:0f:e8:6b:a4:f9:df:71:f6:44:3a:39:2b:30:
                    f1:c8:09:9f:eb:e2:31:b4:f0:c7:d9:42:5d:88:b1:
                    50:5c:39:40:f6:f9:20:6a:79:2d:9a:8a:98:25:4f:
                    8b:cc:87:de:6c:b5:53:7b:a1:5a:11:29:e8:69:9f:
                    32:68:b1:6c:26:60:d2:b3:4b:97:ea:7a:2f:e5:1b:
                    b5:16:2a:5a:21:1b:30:1c:15:e5:52:4e:29:3f:48:
                    9d:7e:ed:53:aa:b9:14:50:7d:bc:ba:a9:9d:c5:fb:
                    c3:23:b4:a5:99:05:2c:b9:d0:a1:6a:ca:b9:dc:ec:
                    61:2e:bb:73:18:7b:8b:6e:9b:ad:02:cd:d6:26:6e:
                    3a:47:57:a3:81:26:b9:e3:db:99:e5:4b:49:22:49:
                    fc:77:7a:07:78:71:9d:c1:20:44:87:ac:7a:b9:8c:
                    74:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A2:34:50:1B:8B:40:67:7D:4E:36:AC:A2:70:F4:77:7C:B8:20:32
            X509v3 Authority Key Identifier:
                keyid:4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:19:20:02:f6:bf:a7:15:5f:a2:40:a3:26:96:89:72:96:3e:
         cd:3d:f7:6b:2a:2b:39:fa:d3:60:d4:c6:b6:6b:f6:8b:d0:8c:
         22:fe:ba:95:86:ff:9a:6b:e5:51:38:32:4b:11:df:94:d6:93:
         41:a5:e3:8e:ae:7e:52:26:db:96:cc:d8:ab:5a:9c:ad:a8:23:
         cc:04:1d:76:35:67:98:d6:5d:bc:f5:30:1b:58:21:8d:7a:de:
         9e:16:5d:5a:32:e5:57:fa:c4:82:b1:9e:62:33:3b:62:d8:d8:
         27:3c:c2:c6:f5:90:3f:1d:d5:96:67:ff:99:5a:37:6f:33:3a:
         86:22:eb:e1:d1:69:a0:86:32:ad:ea:89:fd:c7:af:53:96:82:
         9c:6d:30:54:f5:e2:ea:0c:3b:c1:a6:19:be:b1:74:9b:21:d8:
         50:86:2e:d2:50:f8:44:30:fd:85:2b:bd:7b:7f:04:5c:8b:be:
         56:5f:00:76:4a:00:9a:95:fc:96:95:a0:61:28:03:7f:43:0e:
         34:17:0b:47:fb:f0:a4:78:a7:6f:95:db:39:4d:ea:c3:19:97:
         22:67:0e:6b:9b:07:4b:4e:e7:bd:92:ef:a9:d3:80:24:6a:a2:
         32:38:32:ca:c6:bb:67:cb:0d:1a:26:e5:bd:c8:05:3f:3a:78:
         54:82:99:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:26:29 2026 by rpki-client