Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
File:                     TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft (raw, json)
Hash identifier:          Aa/6r/0dLgoh6wx16EM2k5sDXIxZ4NNf6cx67L7etg8=
Subject key identifier:   CF:B6:43:34:C8:17:89:73:6C:D8:40:7A:54:68:BE:2B:11:44:7B:89
Authority key identifier: 4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
Certificate issuer:       /CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Certificate serial:       019EB7A13405432A9A9446E5839506B314D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
Manifest number:          1959
Signing time:             Thu 11 Jun 2026 17:00:55 +0000
Manifest this update:     Thu 11 Jun 2026 17:00:55 +0000
Manifest next update:     Fri 12 Jun 2026 17:00:55 +0000
Files and hashes:         1: AwY5mgjpthmtObHXqwAVAnajhhs.roa (hash: Ynq5lonnqADLu0ss1thtGFYZaU4FINs+79TFKUmEVMc=)
                          2: HBpn81d4cG4_UILVsdO8exzlDsY.roa (hash: kRgmgXZK5yKUe+saBJuegm6bkvNmijxbzes8bqH8BJE=)
                          3: Kpj-186fjuAYRRYnilKKfHVGN8E.roa (hash: W4eIu6BlkL603t8W8JuwGE33q4DgMOfHpuuHjrT/r2s=)
                          4: NueqQvkP6OwbYq3KeGusJiI5nB4.roa (hash: Iwo1uDTct62657OX8teLFspmVyOSx/FLeOTjd7KJmFk=)
                          5: TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl (hash: K3eje9ncEypLMs7t++bPOZsUj4/SBZYF55rSBni3ovc=)
                          6: XhbfkmgppgGaa0jwxEEK1QpmG_o.roa (hash: RblW9p63Q8/3oZMyKn6Kq61NaEzW9XB/T1oxdZPwAPk=)
                          7: hFJA5_fA_Gp7BCxbMO_bes9nk40.roa (hash: s64nTqpmoBBkk6Hywj8GwfB0MNxG8qecnHtsYCweNdk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:a1:34:05:43:2a:9a:94:46:e5:83:95:06:b3:14:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
        Validity
            Not Before: Jun 11 17:00:55 2026 GMT
            Not After : Jun 12 17:00:55 2026 GMT
        Subject: CN=cfb64334c81789736cd8407a5468be2b11447b89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b1:49:43:0b:90:98:b9:5a:8f:0d:1a:41:ce:
                    0b:79:ac:67:69:18:8b:3c:90:5b:04:7e:54:92:f1:
                    f6:9d:c8:f9:5b:68:ee:33:48:bb:2e:2d:b2:98:f4:
                    d7:ef:02:a2:ac:89:ac:29:e3:b8:ce:b0:c7:ba:32:
                    85:93:e1:a0:ec:b5:37:a2:a9:2a:8b:64:66:bb:cc:
                    92:ed:d5:e6:e2:7d:c5:b8:de:77:d1:c7:11:1d:20:
                    13:17:09:bc:03:90:fd:84:cb:91:7c:0f:55:12:1b:
                    ac:a6:3f:64:b5:e4:8a:c5:16:95:81:e2:84:0b:a4:
                    88:cf:0a:4a:ef:d7:3b:6f:47:91:f9:31:43:5c:c0:
                    5f:38:c0:01:ad:4b:d2:77:e6:97:e3:dd:e6:a0:14:
                    8c:f6:d3:8d:22:08:11:a1:83:b4:9b:4c:84:06:2d:
                    1b:69:ac:df:4e:13:04:f0:33:9e:b2:c5:9b:fd:7f:
                    7e:a1:36:c9:e5:5a:28:07:a1:ba:c4:a9:36:1a:7c:
                    a2:22:e9:01:c6:7a:a3:fe:44:44:8a:99:d1:01:eb:
                    c5:fc:2c:08:36:b8:16:42:38:a2:ac:9c:db:a2:6d:
                    f2:ea:11:39:f9:df:c2:45:14:29:4a:f3:e3:b7:ec:
                    71:b8:92:33:19:f8:44:3d:9a:11:bb:ff:3e:49:8d:
                    a9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B6:43:34:C8:17:89:73:6C:D8:40:7A:54:68:BE:2B:11:44:7B:89
            X509v3 Authority Key Identifier:
                keyid:4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:17:d4:60:96:4e:63:09:94:b4:f2:2f:fe:94:9f:64:c9:23:
         c1:82:3a:64:76:b5:f0:82:bb:3a:7f:1c:5f:46:ee:5b:09:d5:
         a6:e5:de:04:14:1f:a3:85:f8:56:f7:58:bc:86:4e:8e:2e:3a:
         7c:f0:37:ff:be:4e:f9:89:de:0c:16:9c:4a:6a:1d:06:5f:6f:
         89:8f:c7:90:ea:56:56:7c:44:e2:c0:2e:9e:d7:22:6c:8b:65:
         6d:f6:fd:57:82:ee:9f:f9:bf:0c:48:a0:60:d7:f3:cf:dc:0f:
         b9:7f:c6:a7:ca:54:b1:96:47:d4:f3:3e:3f:e4:3b:b7:18:fa:
         54:b9:34:be:65:b2:83:40:40:40:ea:1d:01:a0:05:ae:fc:02:
         03:90:89:99:2d:ef:23:69:6f:00:5f:ec:da:d1:bc:ef:14:fe:
         37:5a:22:e3:a8:0c:1d:3d:a6:2b:0a:c0:f5:e5:14:e7:57:52:
         07:a1:1c:fb:da:92:07:a9:3e:90:5a:20:4b:8e:89:33:ca:4a:
         70:6a:eb:07:50:c1:69:fa:32:c6:9c:31:f4:e7:14:f5:bc:26:
         8e:72:b0:f8:37:8c:ce:8c:df:77:4b:7d:83:2e:bb:4e:a4:c9:
         45:34:c1:52:7a:bf:59:41:3a:82:1d:af:1b:13:1c:69:78:37:
         1c:7c:29:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:24:44 2026 by rpki-client