Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
File:                     Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft (raw, json)
Hash identifier:          BIh54xd7lR/1sIJGD3/VV4HC3MUb6VKsY99zBLev1QU=
Subject key identifier:   AC:98:F2:4B:68:D7:47:16:23:51:3B:0C:28:78:C0:97:55:86:7D:BB
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Certificate issuer:       /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial:       019EBF91840FE7806A7F2310A967FA396334
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
Manifest number:          19BC
Signing time:             Sat 13 Jun 2026 06:00:45 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:45 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:45 +0000
Files and hashes:         1: 7kCTcBBf9Y2mZp4MQo4FaThhaw4.roa (hash: 4G5b5APOZBeeZ1ZvQcD3v0tSN26DXUsz89KNzub4qWo=)
                          2: Axy-VDMaL0TttuQWr1HwszNqc0I.roa (hash: bbZhwLgQwTeviEfEB8kT+/Hr8GEpDxbaZvVMkhGxoa8=)
                          3: EIf4_e1IxdxiLFBKRrmbYkLdBhg.roa (hash: wTMfLnzpxmyagKAjlQHgrc2pzICPnW5ADwDSG8SyfAI=)
                          4: TX_u3ri8rca4P81egD9tMMtVs-E.roa (hash: VizDbLVqd0zmsz68Is1wbARP6+9Ai1vW465jIZXJ0vw=)
                          5: Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl (hash: uztUyHV9ekS854zOnIs+GGclH1t2mi7mf5ydLJiNbcA=)
                          6: gnfK8SBpVOdVbxYnE0YvG_aCqwQ.roa (hash: 4HCQGxp9LRlzVGgeY9uvcPRB+giBsSJBc0o5g6+TINI=)
                          7: nlpW1LdUG8ccgcMsu_bYGBcmxBE.roa (hash: WjkJjvp8/U7WObhL1QFmDulfOKAgaqrKAeSX8GWbEKY=)
                          8: wtWJEYRFSG9Qv3ctSlt-PvC9YxU.roa (hash: zMI/aBSI0MnE5srRM6wJIzfTVWrBiFahbqJC56lWnfg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:84:0f:e7:80:6a:7f:23:10:a9:67:fa:39:63:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
        Validity
            Not Before: Jun 13 06:00:45 2026 GMT
            Not After : Jun 14 06:00:45 2026 GMT
        Subject: CN=ac98f24b68d7471623513b0c2878c09755867dbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5a:e0:56:48:b2:8d:19:98:2d:aa:92:31:3e:
                    c2:21:66:83:8a:67:74:97:bc:1f:96:9e:fd:8b:bb:
                    ff:01:65:3e:aa:39:e9:06:33:8c:9a:2e:79:79:1d:
                    83:b1:31:dd:94:76:22:4a:8d:90:f9:22:29:2e:bc:
                    36:97:3d:21:02:f8:ce:e6:bc:df:8a:8b:15:73:22:
                    93:78:22:91:52:74:9e:18:1c:3a:dc:3d:1f:2b:8b:
                    67:fa:93:2c:62:92:ba:a6:dd:bf:82:8b:9b:b4:27:
                    88:1c:d4:51:2f:6a:1b:2a:07:6d:85:ba:dc:ff:53:
                    1f:e8:a4:d2:bb:f7:96:fb:d0:82:51:4f:81:81:97:
                    00:b0:d5:fc:69:15:f3:7f:19:f7:f4:cb:b2:e9:30:
                    28:9c:a7:cd:9a:76:66:6c:1c:e6:7b:22:8a:36:4e:
                    57:63:f2:13:a6:4c:01:e5:a5:18:5c:29:5f:fc:c8:
                    09:5b:07:aa:3f:b2:2e:02:70:b6:8b:6c:11:f1:2d:
                    21:f2:9c:c2:ba:99:61:51:ea:95:df:e8:b4:48:fc:
                    14:d4:cc:06:0f:be:69:a1:cf:7e:fa:38:d3:78:60:
                    05:fd:d3:eb:07:ae:97:8a:a9:2e:59:b4:bf:93:84:
                    89:79:5c:17:49:f6:60:73:bd:0f:32:ff:f5:0c:46:
                    c9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:98:F2:4B:68:D7:47:16:23:51:3B:0C:28:78:C0:97:55:86:7D:BB
            X509v3 Authority Key Identifier:
                keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:4d:56:dd:41:b8:f6:0e:68:18:39:27:77:15:e1:c5:ec:de:
         5d:20:f7:0d:05:1a:6d:e8:cb:07:63:3e:dd:ff:fd:69:3e:2f:
         dd:2d:a7:75:c2:9f:fc:85:86:16:23:84:c1:e6:e3:12:03:43:
         fd:81:2f:5c:10:6f:44:c4:51:07:a5:53:a1:45:ff:b2:e3:23:
         56:d1:82:0e:f1:ea:c1:7e:b3:0b:ad:07:dd:1e:f6:47:4c:99:
         76:bd:7e:24:0e:14:3d:df:83:72:3b:4f:0d:b4:cd:94:85:e2:
         58:94:87:cf:cc:3c:75:ec:7a:18:56:e7:65:a6:d3:99:b2:d8:
         b8:55:65:56:2c:fd:b3:ad:cb:ac:e6:18:76:0a:85:e1:3f:85:
         2d:18:36:a3:fd:71:6f:fe:50:ba:cb:39:22:41:7f:f2:5f:36:
         94:d8:9d:5b:eb:b2:cb:56:d4:d4:41:d7:82:d8:77:56:07:d3:
         55:75:81:25:d7:32:3d:2a:78:de:7b:f4:f3:94:d9:38:fb:eb:
         a3:c6:8e:cc:7a:7e:91:1b:ab:11:52:83:42:ca:3d:48:4c:72:
         2f:4f:d4:4f:f7:fe:02:d7:2b:04:fd:52:c2:5a:e8:10:1a:44:
         fa:35:a2:ae:0e:1a:52:b0:e6:c4:a7:8c:3d:4b:f2:1d:59:5a:
         84:ca:5a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:23:39 2026 by rpki-client