Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
File:                     tTAFYZaI77r_0G4QikO98gZD4NY.mft (raw, json)
Hash identifier:          NRbhXyswrhQCcnrEhRCEqNZ1/mFQ3uSLg/3Cc+xLDK4=
Subject key identifier:   62:70:8D:0F:3D:A4:B8:9F:1C:CE:41:BA:30:50:A6:84:46:4A:C4:CC
Authority key identifier: B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
Certificate issuer:       /CN=b53005619688efbaffd06e108a43bdf20643e0d6
Certificate serial:       019F374E6019C0CCF5597805DB14EECBE513
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
Manifest number:          199E
Signing time:             Mon 06 Jul 2026 12:01:50 +0000
Manifest this update:     Mon 06 Jul 2026 12:01:50 +0000
Manifest next update:     Tue 07 Jul 2026 12:01:50 +0000
Files and hashes:         1: ExGpRunqaEGx1C87iYbOQskR5uw.roa (hash: RiaEfvnW4XKOfGx9ToOnBoSA9Vrw+toQDu46/ctYlAQ=)
                          2: SH-0mJS__xq0Nrwordyx2eNpy6E.roa (hash: MFyq3HcX0V4paZzyvO44VehUzFoDp8T3DaYSoMIBwAg=)
                          3: eUXXUdsIFWgmK4QDPBj079S1krA.roa (hash: tLqc3PNhBtm/slptj0WlzHoHZqeLEYUFaZxJp22uQOY=)
                          4: tTAFYZaI77r_0G4QikO98gZD4NY.crl (hash: wiy5AYxqHJIlr0DlQZfm9CxXs9xBwBJDJzMRuGbot5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 12:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:37:4e:60:19:c0:cc:f5:59:78:05:db:14:ee:cb:e5:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b53005619688efbaffd06e108a43bdf20643e0d6
        Validity
            Not Before: Jul  6 12:01:50 2026 GMT
            Not After : Jul  7 12:01:50 2026 GMT
        Subject: CN=62708d0f3da4b89f1cce41ba3050a684464ac4cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e2:8f:aa:18:ff:30:ca:27:b9:c1:41:85:d6:
                    76:4c:1e:12:8a:10:c0:6d:64:7a:1d:8d:3c:60:0b:
                    ac:f0:38:63:49:1b:2a:eb:e5:3b:8f:1c:bb:21:fa:
                    e2:95:eb:c2:67:24:c0:3e:52:3a:20:6c:d2:44:e0:
                    06:5a:66:9a:ba:8d:14:5b:ba:b2:80:45:34:13:ec:
                    4a:d3:7d:32:1d:29:c1:fc:93:74:ec:10:be:b7:a5:
                    a7:33:db:e6:ef:67:d0:2a:5e:33:95:11:35:69:33:
                    4c:9f:ef:c6:62:e7:88:3c:b9:93:dd:d6:9c:2a:8d:
                    e8:1d:21:f4:c8:f3:e1:ee:1b:91:7c:7f:6b:3c:bf:
                    04:86:df:34:fe:69:46:1c:1f:e2:fe:c1:2c:a9:77:
                    b4:16:9f:ba:03:e2:c3:55:d4:de:2c:ba:4b:79:64:
                    18:df:14:ef:98:ca:b9:13:cf:35:b3:0d:f6:50:0e:
                    fc:b5:b7:42:d9:d7:61:ed:3e:a4:9d:74:4b:fc:7a:
                    0a:a6:df:e1:f2:06:30:96:7f:69:87:9a:21:0d:e8:
                    f3:a2:56:02:f7:e2:f3:88:c2:95:88:7d:10:43:bf:
                    a7:50:93:4f:29:ae:f7:4f:7a:b9:cb:46:25:56:58:
                    c0:a9:b1:25:a5:61:a1:1e:69:d0:f8:a7:48:a9:cf:
                    3a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:70:8D:0F:3D:A4:B8:9F:1C:CE:41:BA:30:50:A6:84:46:4A:C4:CC
            X509v3 Authority Key Identifier:
                keyid:B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:4a:55:b8:ac:c7:5e:a3:9b:b3:17:34:b8:c8:3b:50:e1:57:
         40:88:51:22:bf:80:f7:01:38:a5:02:8b:a5:1f:bf:0d:ee:93:
         7c:f3:ff:46:57:12:9b:63:95:b6:cc:c4:77:dc:a2:e9:7d:2b:
         b0:bd:fd:cd:d8:7e:dc:a6:39:9e:47:2a:f7:84:f7:2f:a1:7c:
         07:41:f8:51:27:b2:b6:3b:13:00:30:82:cf:97:71:ab:3b:4d:
         9d:99:7f:ef:4f:74:4c:bf:e0:56:92:15:87:20:8e:46:28:00:
         cc:50:7e:63:3c:39:d5:af:cf:55:96:ca:71:a5:78:93:95:a6:
         c5:5d:fe:fd:2d:9d:89:a5:1a:88:d4:bc:d6:57:95:0b:c0:30:
         8e:0d:74:ac:1a:f6:58:7b:c5:87:0d:63:eb:ba:51:01:a8:35:
         b2:07:a3:de:5c:55:1b:b8:e7:a9:38:e2:c3:19:f1:9f:1e:4a:
         96:94:1a:92:4f:27:04:de:fe:25:04:8c:cf:e8:cd:4f:61:f2:
         6e:db:9f:d8:27:e2:14:66:f6:12:f6:fd:1b:96:42:f9:5c:ee:
         c1:bf:e3:d2:e1:22:c9:29:3d:2a:22:6a:f3:04:c9:c0:b4:70:
         f2:43:67:36:eb:a3:47:70:3a:37:2d:a0:43:ac:92:8a:72:54:
         68:ba:c7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:16:53 2026 by rpki-client