Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
File:                     T2qURK2qUjxXaOn2vhQGUYOsIKg.mft (raw, json)
Hash identifier:          0dV22pzZ43q02WEju9BKpZs5ZzAMYwYpXQyRUw2NWVI=
Subject key identifier:   77:04:5C:3C:3D:36:20:7C:A4:26:D1:8F:A9:54:8B:83:C6:04:9A:56
Authority key identifier: 4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8
Certificate issuer:       /CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
Certificate serial:       019EB95832FB3C4EB306EBEB0A405F395969
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
Manifest number:          1956
Signing time:             Fri 12 Jun 2026 01:00:25 +0000
Manifest this update:     Fri 12 Jun 2026 01:00:25 +0000
Manifest next update:     Sat 13 Jun 2026 01:00:25 +0000
Files and hashes:         1: T2qURK2qUjxXaOn2vhQGUYOsIKg.crl (hash: AvKpNLCN2RNM0QXGrHtetHELzN0YrfOfApDrg6dfx18=)
                          2: o8tO8stgvhxVUDIUNSKHy-JW2fo.roa (hash: Z08VgX0ivNPtY5zzCzl8jQ6u6U/EFae5aPOCebjGd+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:58:32:fb:3c:4e:b3:06:eb:eb:0a:40:5f:39:59:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
        Validity
            Not Before: Jun 12 01:00:25 2026 GMT
            Not After : Jun 13 01:00:25 2026 GMT
        Subject: CN=77045c3c3d36207ca426d18fa9548b83c6049a56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:11:9b:bc:25:d9:9a:17:1c:57:00:14:3c:aa:
                    9e:1a:5a:a9:d6:0a:12:57:f2:a7:08:3d:3d:48:e6:
                    6e:70:3b:1e:0a:3c:b2:af:d4:a7:07:8e:80:21:0d:
                    68:d8:90:ff:13:95:c2:77:c1:3b:d8:2a:8d:3b:e7:
                    05:a0:0d:7a:7b:58:60:60:5d:0c:b4:96:ba:4a:20:
                    f6:ab:a8:5f:cb:02:8d:47:c4:55:bf:5b:9f:56:a6:
                    67:96:40:5a:c4:ab:5b:d5:62:de:28:76:40:78:31:
                    7d:91:c5:25:2e:fc:9d:da:0b:81:37:8a:55:ac:66:
                    d9:21:96:da:40:b0:ef:70:6c:dc:83:ea:98:36:b3:
                    79:d4:1f:e2:ba:cc:b5:49:4a:c1:b8:bb:86:bb:2e:
                    a2:02:6f:8a:bb:33:b7:2e:da:65:a0:6d:87:8e:2a:
                    1a:fd:fa:93:0e:9e:32:95:96:83:75:23:3f:8f:98:
                    c9:1e:04:c7:f6:de:c5:c1:e9:e7:95:37:2f:da:73:
                    7f:5f:25:06:82:00:e4:9b:0b:90:ed:92:ab:51:16:
                    86:9a:9d:33:98:27:6d:73:fc:ac:a5:21:b6:0b:3c:
                    26:2f:3b:c1:df:00:2c:86:3d:81:7d:27:23:a4:1f:
                    0b:7d:9d:32:be:80:8e:31:51:db:1c:ad:cf:1e:9e:
                    01:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:04:5C:3C:3D:36:20:7C:A4:26:D1:8F:A9:54:8B:83:C6:04:9A:56
            X509v3 Authority Key Identifier:
                keyid:4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:c1:15:4b:66:bc:3a:a5:6d:91:c3:ed:31:5c:2e:d1:46:e2:
         67:d5:52:89:31:b9:cf:46:b2:68:cf:16:2c:d8:d0:1a:3c:1a:
         df:02:e3:46:ed:51:8d:c7:a7:4e:98:2e:10:22:e3:2d:b4:82:
         cb:f7:50:ea:25:3c:02:75:d1:df:06:56:12:a4:09:c0:c1:4a:
         60:0e:0a:7b:b4:93:3b:08:e2:50:59:73:e7:c2:2c:cf:da:82:
         e7:e9:93:c6:1b:27:20:45:c4:b1:9a:ae:8c:8e:94:af:55:f1:
         9b:4b:50:c6:55:a5:25:ed:a5:02:57:77:67:18:b0:23:9f:41:
         40:4d:65:10:08:4b:45:ab:bc:bf:b2:62:38:b1:b8:62:66:76:
         f3:83:46:4e:2e:46:9e:93:60:88:a6:00:fb:c3:71:bc:21:72:
         81:9f:d6:98:ca:a9:5e:21:f7:54:74:bf:d9:86:f8:66:17:52:
         72:e6:8c:96:c1:7d:37:c1:8d:c1:58:62:ac:e3:d4:cf:7f:0c:
         02:a9:4f:7b:22:26:4c:f7:29:b6:33:ed:19:34:01:c7:50:f4:
         f2:db:91:2f:de:e3:91:ae:74:3e:20:9d:dd:8a:60:99:29:4d:
         5b:8b:10:3e:88:69:16:bf:d4:b7:4a:59:57:03:11:f9:0f:66:
         59:f2:af:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:11:15 2026 by rpki-client