Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft
File:                     TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft (raw, json)
Hash identifier:          C4vmCkc6DxsKfkogBFdZ94/C+QjGmD+/g/vYE+iuVYE=
Subject key identifier:   74:8B:46:02:B6:9D:8B:22:30:33:56:8E:06:EA:A2:8D:10:13:12:3F
Authority key identifier: 4D:86:2E:65:E9:3D:88:5C:4F:97:44:9B:CA:EB:AB:C3:51:DE:67:D2
Certificate issuer:       /CN=4d862e65e93d885c4f97449bcaebabc351de67d2
Certificate serial:       019EBFC8B8C3A9AA3BDA7250B700F3544B79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TYYuZek9iFxPl0Sbyuurw1HeZ9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft
Manifest number:          0199
Signing time:             Sat 13 Jun 2026 07:01:03 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:03 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:03 +0000
Files and hashes:         1: F3i7pvlCaVlLH03PBuARZVEC6Dw.asa (hash: FtQAM/wOBZf+OkMWx2MgLRzyqtUbtvx1ifNIr7aVQfc=)
                          2: TYYuZek9iFxPl0Sbyuurw1HeZ9I.crl (hash: H86kKV7sDM95Gh3Pi7zOIS7B8+p65Jq5Ai8F4y/xahc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TYYuZek9iFxPl0Sbyuurw1HeZ9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:b8:c3:a9:aa:3b:da:72:50:b7:00:f3:54:4b:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d862e65e93d885c4f97449bcaebabc351de67d2
        Validity
            Not Before: Jun 13 07:01:03 2026 GMT
            Not After : Jun 14 07:01:03 2026 GMT
        Subject: CN=748b4602b69d8b223033568e06eaa28d1013123f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b4:b9:a5:9d:ee:4d:fa:bf:ef:10:f2:0b:f9:
                    2d:5e:44:a5:f1:76:ec:e6:78:48:8f:1b:2f:57:a7:
                    c0:7f:7f:4f:07:dc:df:44:a3:e5:ae:01:cf:98:fe:
                    c0:b8:51:a5:c3:65:d9:ae:38:18:55:3e:32:db:3e:
                    a8:37:76:5e:de:ac:09:ca:d8:4d:43:1f:00:9e:78:
                    95:e1:62:b0:04:a1:59:58:c7:87:46:34:56:71:2d:
                    c6:ce:1b:13:98:1a:d8:6f:9b:e3:ba:00:78:5d:9c:
                    5b:86:c8:14:b1:63:a2:a0:a1:dd:c0:37:21:e0:fc:
                    e1:17:95:3f:0d:ad:4c:52:c6:6d:ed:67:c3:19:e6:
                    23:a8:89:2b:85:4f:36:8c:59:3a:b5:f7:28:bb:f7:
                    7b:13:4d:85:fc:75:75:4b:c4:36:72:86:04:74:e8:
                    d4:e7:1e:e9:16:f7:04:d6:86:08:29:ea:1a:61:a4:
                    a1:fe:78:ab:60:14:48:5f:68:9e:70:68:c4:27:f2:
                    cc:00:3d:5c:19:8a:4c:9f:54:96:c9:c9:e9:e3:49:
                    3d:76:bf:f2:7d:2b:33:ac:89:ca:33:5e:aa:9a:8b:
                    98:42:fb:2c:0b:8d:71:e8:a6:bb:b4:34:92:17:d0:
                    d0:b2:c5:55:8f:2f:3a:3b:3a:84:26:fe:e5:f9:8c:
                    22:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:8B:46:02:B6:9D:8B:22:30:33:56:8E:06:EA:A2:8D:10:13:12:3F
            X509v3 Authority Key Identifier:
                keyid:4D:86:2E:65:E9:3D:88:5C:4F:97:44:9B:CA:EB:AB:C3:51:DE:67:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYYuZek9iFxPl0Sbyuurw1HeZ9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:9a:b3:0a:4e:af:d2:f6:09:bc:2b:09:11:a1:99:87:cc:51:
         52:25:3d:e5:25:cd:6a:ed:d6:c2:26:00:97:2a:2a:c3:c6:00:
         dd:2c:53:71:88:10:7f:2b:d4:d9:0d:b0:a9:bd:a7:f8:4c:57:
         82:a1:92:d0:7c:30:8f:14:3e:a9:06:1a:b5:a3:13:4d:59:f8:
         10:e0:e0:20:9c:d4:0b:a6:c6:39:01:1c:45:b0:d6:46:e3:f6:
         70:11:dc:d8:10:50:3a:c5:1d:7e:f9:9e:42:dd:98:c4:17:30:
         d5:18:04:44:3c:a2:83:b3:6d:e4:f2:2b:09:67:31:b5:06:13:
         30:d4:44:41:8b:b3:bf:8d:96:2b:e8:36:79:03:21:11:ea:55:
         dc:bb:01:55:f5:c5:86:7b:91:23:d2:ff:fd:c9:df:e7:77:be:
         3d:8c:a5:51:98:cc:56:cb:cc:0c:8e:29:10:f6:b3:6d:e2:0f:
         92:04:e3:a0:47:c9:81:8f:43:7b:00:0b:25:fc:88:7c:07:92:
         49:b8:94:3e:7f:62:3c:8c:09:b6:0a:e4:4a:e1:11:6c:be:08:
         cc:e2:95:ef:4e:cf:16:ac:ca:ce:56:75:fa:5c:49:fd:03:b6:
         25:64:bd:d5:c9:bc:66:43:76:84:98:57:d2:9d:e9:b7:d1:ba:
         2a:dd:70:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:02:04 2026 by rpki-client