Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
File:                     TqZcftukadCZ12qs19wmP03-xes.mft (raw, json)
Hash identifier:          bui0yvt5eYKWHEUBTRwNhlH+eHYxTpWpi0IR5LLY9oc=
Subject key identifier:   B9:BB:5F:F1:99:6D:CA:78:A8:27:BD:70:8B:E4:DF:33:48:F0:F7:EA
Authority key identifier: 4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB
Certificate issuer:       /CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb
Certificate serial:       019F1A1EE951BD88FE71F5B638964EFFF7A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
Manifest number:          08C5
Signing time:             Tue 30 Jun 2026 20:01:01 +0000
Manifest this update:     Tue 30 Jun 2026 20:01:01 +0000
Manifest next update:     Wed 01 Jul 2026 20:01:01 +0000
Files and hashes:         1: NE-Gskahv4yhz4NSW0eOQznOBbc.roa (hash: 2cjZe+aPFDte9rIu8wJCuhBoVs4OYpmJVxKR+K10wPw=)
                          2: QBVvQVEZlQ_FtBHlQ6LkxII5X7Y.roa (hash: is6gKcJbbow/p4d83+z8Fk6rRj/Sh2SQuegCzSpgZjg=)
                          3: RH3gRlxhVGrL9P1FAsxvNcZGcKg.roa (hash: BUrryx952cBQrnyyvdxiH2Hn6rJcg6+93M8bhY0hK8s=)
                          4: Rl7efdhYeXftFwvFAmfRH2As_rs.roa (hash: Fkewx2otKYj7NOwHTF8pWpF8lfCLVjfeAiN9uWh62QU=)
                          5: TqZcftukadCZ12qs19wmP03-xes.crl (hash: IOKwgk/UtRB+xkXy6Ms5qkYXegl6F9FX7Mu1UJQFBjU=)
                          6: ncCiHV5R8jHZ0soKsN7Ip4AqqnA.roa (hash: /O4pxVo1nhy254bmusK8i5RqU2c/+1dTlDhCRL7gqs4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1a:1e:e9:51:bd:88:fe:71:f5:b6:38:96:4e:ff:f7:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb
        Validity
            Not Before: Jun 30 20:01:01 2026 GMT
            Not After : Jul  1 20:01:01 2026 GMT
        Subject: CN=b9bb5ff1996dca78a827bd708be4df3348f0f7ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:46:ae:c9:a2:64:27:00:11:bf:1b:b8:cb:54:
                    01:84:60:ca:07:6d:fb:c6:5d:ae:5d:89:22:c1:c2:
                    6e:1d:ca:c4:04:5b:ea:8b:10:4b:af:8e:7b:28:8d:
                    f4:27:61:02:f0:36:2f:ef:c4:a0:fe:30:a1:f0:fa:
                    81:74:43:99:42:e0:d2:d1:73:15:5c:86:6f:72:47:
                    e0:57:90:fb:0c:fb:52:29:a9:8e:2e:0b:cb:cb:3e:
                    6e:8b:5d:91:dd:f4:1f:8c:6e:f2:c0:d7:d6:14:99:
                    67:53:17:04:46:12:63:45:2d:3d:c7:a3:0a:46:33:
                    d3:a8:82:fa:cc:bd:59:6a:ca:75:8e:1a:cb:f0:e6:
                    37:3f:70:13:5e:dd:21:35:2a:93:09:4c:2b:fe:88:
                    4b:5a:eb:1f:a4:59:86:f0:57:4b:21:31:af:81:18:
                    ff:34:37:bb:76:54:27:25:ab:f2:29:26:35:c6:6b:
                    22:ec:4f:1c:75:3b:0c:25:91:b6:d8:a6:4b:b0:a9:
                    f2:1d:5d:df:c5:1b:0a:15:0f:bf:f8:e6:68:12:4f:
                    75:87:b0:97:5b:c9:31:f9:6f:71:27:29:a3:21:08:
                    4d:74:68:54:68:46:cc:1a:44:ea:46:13:f0:f1:15:
                    6b:8b:21:ec:20:9f:ef:ca:19:58:af:c8:ee:ce:bf:
                    89:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:BB:5F:F1:99:6D:CA:78:A8:27:BD:70:8B:E4:DF:33:48:F0:F7:EA
            X509v3 Authority Key Identifier:
                keyid:4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:5b:55:2f:c0:ce:3e:f3:31:a4:fc:cc:82:66:65:2a:16:fe:
         c9:54:52:b7:5d:d7:e8:dc:df:b0:aa:ad:4d:4c:67:41:dc:9e:
         7e:13:37:d2:39:ce:05:ca:c7:e7:9b:ae:84:7f:4c:50:b6:e5:
         ab:78:0d:ab:b3:da:2d:f7:21:be:52:60:f2:35:83:db:cc:a8:
         54:32:14:50:4f:6d:9b:e3:d6:93:1d:ab:80:67:b6:b8:51:70:
         d1:80:36:8c:04:c3:f7:4f:9c:9a:d4:12:02:f7:4b:46:aa:60:
         f1:db:a6:44:35:9d:34:c1:c5:81:ee:f3:3c:25:d4:3d:40:2d:
         05:6e:55:a0:5b:30:cc:4f:b9:a5:17:f2:77:8b:47:14:7f:53:
         08:52:2f:58:a4:17:39:6e:0a:d9:88:07:e3:2e:79:30:80:c4:
         ce:b6:1e:59:86:6c:46:79:cf:cb:8d:96:7c:20:3e:e3:5d:ec:
         3b:77:e3:31:26:b2:96:74:3a:36:41:f6:38:7e:d9:56:0e:07:
         71:71:dc:21:ad:3e:c8:15:05:0f:89:ca:98:c6:0b:92:04:df:
         ce:7b:76:e1:c9:fa:b2:55:e6:2f:b7:01:71:b0:a1:ca:43:7d:
         44:21:38:25:00:70:eb:84:79:76:e2:f7:fd:85:6b:ee:06:c5:
         2a:a4:ab:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:35:26 2026 by rpki-client