Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/35a75a-fa28-455c-a9d7-42538495a253/1/TVgfMWpFEM1xjwXN_aR_YLUkDfs.mft
File:                     TVgfMWpFEM1xjwXN_aR_YLUkDfs.mft (raw, json)
Hash identifier:          FTYU5HYdjq6Bloor+RGx9Jld1zK3cHzxMzqaHgktsXo=
Subject key identifier:   1F:AF:57:04:83:0E:C9:AF:5D:87:F5:AF:09:B9:9D:43:C2:0D:7F:8D
Authority key identifier: 4D:58:1F:31:6A:45:10:CD:71:8F:05:CD:FD:A4:7F:60:B5:24:0D:FB
Certificate issuer:       /CN=4d581f316a4510cd718f05cdfda47f60b5240dfb
Certificate serial:       019E555AA3185BB05527596BCF995410D382
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TVgfMWpFEM1xjwXN_aR_YLUkDfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/35a75a-fa28-455c-a9d7-42538495a253/1/TVgfMWpFEM1xjwXN_aR_YLUkDfs.mft
Manifest number:          FC
Signing time:             Sat 23 May 2026 15:01:03 +0000
Manifest this update:     Sat 23 May 2026 15:01:03 +0000
Manifest next update:     Sun 24 May 2026 15:01:03 +0000
Files and hashes:         1: TVgfMWpFEM1xjwXN_aR_YLUkDfs.crl (hash: Xdnd7YGN/v9ULm6Ixamw0LX6xZ7JtXBW7uUDPpoRVHg=)
                          2: mQhTuTKEwu8zhwzyt5PaOFOOFgo.roa (hash: f0RTXa3+LdAMLeM1vR+W1zWxntSZGi5bAcnStMVW9ME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/35a75a-fa28-455c-a9d7-42538495a253/1/TVgfMWpFEM1xjwXN_aR_YLUkDfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/35a75a-fa28-455c-a9d7-42538495a253/1/TVgfMWpFEM1xjwXN_aR_YLUkDfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TVgfMWpFEM1xjwXN_aR_YLUkDfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 May 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:55:5a:a3:18:5b:b0:55:27:59:6b:cf:99:54:10:d3:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d581f316a4510cd718f05cdfda47f60b5240dfb
        Validity
            Not Before: May 23 15:01:03 2026 GMT
            Not After : May 24 15:01:03 2026 GMT
        Subject: CN=1faf5704830ec9af5d87f5af09b99d43c20d7f8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:03:5b:5f:06:56:f7:4d:c5:ff:ad:41:ce:1c:
                    0a:16:9c:cf:06:f2:99:25:85:8a:01:fc:f6:fe:90:
                    92:c6:ba:e9:65:3c:bf:39:4f:b9:37:06:8a:e4:98:
                    e9:9b:4d:e1:ac:0b:de:c0:69:e1:61:4a:f5:bb:0f:
                    a4:9f:73:11:8b:5a:c7:8e:95:27:ac:51:fe:10:46:
                    7f:79:2b:8b:e9:9e:fb:94:c2:f8:57:9a:bb:a5:65:
                    13:df:87:03:44:92:06:c5:71:8a:89:18:20:36:ac:
                    cf:49:7b:9d:e5:43:36:bf:db:bc:9f:d7:dd:e2:4b:
                    76:02:4d:6a:0a:1b:80:77:7f:f7:dd:f7:df:f7:0c:
                    6f:97:3a:dd:ed:7c:6a:9d:8d:8d:71:c8:b5:ed:fd:
                    e5:87:ea:48:d3:86:5f:04:3b:81:75:d3:03:2f:4a:
                    f7:41:5d:fc:37:18:72:dd:3b:17:15:14:50:65:86:
                    25:8c:c7:bd:a6:29:ca:af:6f:6b:2e:05:d2:b0:65:
                    f3:70:76:62:80:0d:55:63:87:cc:3f:38:c4:10:1a:
                    a6:59:11:57:9c:dc:90:d3:ad:1b:0b:84:6a:89:d5:
                    c1:23:f8:87:f0:d7:fc:00:63:ec:00:be:91:e6:0b:
                    43:b6:24:d2:b6:76:25:00:44:0b:06:51:c7:c4:a9:
                    bc:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:AF:57:04:83:0E:C9:AF:5D:87:F5:AF:09:B9:9D:43:C2:0D:7F:8D
            X509v3 Authority Key Identifier:
                keyid:4D:58:1F:31:6A:45:10:CD:71:8F:05:CD:FD:A4:7F:60:B5:24:0D:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVgfMWpFEM1xjwXN_aR_YLUkDfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/35a75a-fa28-455c-a9d7-42538495a253/1/TVgfMWpFEM1xjwXN_aR_YLUkDfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/35a75a-fa28-455c-a9d7-42538495a253/1/TVgfMWpFEM1xjwXN_aR_YLUkDfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:3d:13:6a:e7:17:5f:4a:f3:77:b4:c0:96:2d:c9:b3:19:b7:
         3c:90:8a:04:1f:ac:6a:aa:37:f4:ec:f6:fa:fa:f0:32:06:7b:
         67:a1:c8:65:a4:b8:39:39:c9:67:f8:5f:93:cb:e5:7e:2d:83:
         ad:1e:2e:4e:74:ef:8e:09:ae:0e:65:4b:85:de:ba:7f:af:f0:
         5b:62:71:46:18:79:f8:29:d3:37:9b:a0:9e:19:0b:f7:b7:8a:
         59:34:57:aa:56:8c:43:26:7c:3c:52:72:78:43:d7:25:2d:2e:
         59:30:da:40:4c:f1:1d:4d:b0:5f:bc:e3:c9:1a:18:a0:d9:72:
         ef:25:8f:9b:d5:54:b5:fd:43:07:c7:f4:69:06:40:67:75:9f:
         07:dc:56:69:9a:94:e7:09:d4:60:75:99:cf:6e:67:ab:49:fe:
         06:39:7a:4a:0c:11:90:94:f6:03:4f:27:2a:9f:75:eb:46:f4:
         7c:27:a7:e9:85:76:43:9a:8b:a9:df:1d:a5:b1:cd:39:3b:92:
         49:85:80:50:f2:7d:49:4a:5c:20:e4:41:60:c7:18:73:57:8b:
         01:01:a8:1c:f7:ed:25:b2:ec:5c:bf:6f:d3:6c:dd:a7:82:2a:
         c1:11:8b:6b:ac:17:b7:15:52:78:ad:cb:a0:d8:34:ce:05:7f:
         3f:c7:74:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 21:13:29 2026 by rpki-client