Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
File:                     TTpxp39MqbpTb5hhKpxW1AwMO50.mft (raw, json)
Hash identifier:          98JuMjq2t2OFyc+GbbmaL0HfeLPLMBp5jTaUA4pMeuE=
Subject key identifier:   C0:54:7A:FD:DA:0A:29:F4:A2:4F:2D:01:75:07:96:02:DF:6A:15:2C
Authority key identifier: 4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D
Certificate issuer:       /CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d
Certificate serial:       019EE69FDC9B110193E40A381AF1C7743B8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
Manifest number:          196C
Signing time:             Sat 20 Jun 2026 20:01:36 +0000
Manifest this update:     Sat 20 Jun 2026 20:01:36 +0000
Manifest next update:     Sun 21 Jun 2026 20:01:36 +0000
Files and hashes:         1: TTpxp39MqbpTb5hhKpxW1AwMO50.crl (hash: IgKUB/gNMwfLyJ7LTbNvKB3kHMZOONRmYP1b9RMQPPo=)
                          2: pBnqzIAytKpHQhX8QDpU_OY1RKw.roa (hash: pra/+hq5WQ/StXcBlep+m5KO06sTkTgn3LjOqqbBjzA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Jun 2026 20:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e6:9f:dc:9b:11:01:93:e4:0a:38:1a:f1:c7:74:3b:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d
        Validity
            Not Before: Jun 20 20:01:36 2026 GMT
            Not After : Jun 21 20:01:36 2026 GMT
        Subject: CN=c0547afdda0a29f4a24f2d0175079602df6a152c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:dc:8e:10:20:68:82:04:f9:63:c8:84:50:1c:
                    dd:0c:3b:58:79:12:4b:ce:93:6d:6b:c8:15:21:18:
                    b0:54:9a:6c:13:18:e8:ca:96:e0:9e:e9:94:bd:7d:
                    6f:61:3e:ea:a7:88:1b:61:ae:6e:3f:e1:bc:13:57:
                    77:7d:9a:77:0a:08:26:2d:8f:f7:6e:ec:86:a7:26:
                    bc:da:5b:80:7b:8f:8e:a7:9f:69:68:39:62:0e:3d:
                    c2:79:25:c9:5d:91:30:cc:8f:ed:3a:cd:69:e2:25:
                    9a:f4:b0:59:cd:37:fd:5c:ec:07:2f:3a:4c:e1:ac:
                    83:16:72:15:89:f0:7e:9b:6d:0a:10:86:e4:98:7e:
                    7e:6f:9c:27:09:0f:28:5f:22:10:ec:09:be:49:ee:
                    49:fe:87:b6:f4:f2:ed:17:fe:91:b0:3d:d3:f4:75:
                    64:cb:e8:1d:68:6e:0d:8d:47:f7:26:9e:74:40:08:
                    c0:3c:01:a4:af:e1:9f:88:2e:7e:a5:5c:c8:13:df:
                    ae:65:00:33:ed:b1:9a:16:e5:d2:70:95:a5:a3:c5:
                    fd:50:e0:35:8d:82:db:ee:bd:46:23:c0:97:2e:50:
                    78:ae:d6:ea:cb:6b:20:c3:59:30:f8:00:30:76:74:
                    fb:c1:9e:57:75:95:7c:1b:8c:d2:22:ad:90:3c:96:
                    ed:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:54:7A:FD:DA:0A:29:F4:A2:4F:2D:01:75:07:96:02:DF:6A:15:2C
            X509v3 Authority Key Identifier:
                keyid:4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:f4:8a:56:fb:12:92:b6:7f:b6:cc:83:c7:d7:68:c6:6a:b9:
         9b:6f:11:07:4e:35:ae:6a:30:01:f0:88:5a:12:cf:82:b8:6c:
         f6:d8:7c:83:b3:f0:4b:8a:c1:d2:6d:14:cf:c9:95:fa:b6:23:
         c2:3f:dd:b8:09:d5:38:24:e8:17:0f:79:bc:b1:b6:b7:73:b8:
         c9:50:c6:1f:06:3c:92:80:55:d6:61:d4:d8:78:d9:42:59:52:
         cb:5b:6c:96:11:a6:88:18:56:c4:5a:33:c2:7a:4f:6b:d1:7a:
         ab:e9:b0:9c:9b:bc:98:a3:19:a6:d4:78:7a:c6:67:e7:18:81:
         42:b9:6c:04:4f:89:2b:8f:91:85:aa:f4:8d:8f:c8:c3:98:62:
         92:94:2e:71:8d:22:67:8c:73:aa:7a:87:e3:fb:91:68:83:24:
         2e:e7:37:cb:ca:20:e4:ba:1b:ba:c2:7d:90:7e:75:d9:27:65:
         88:be:b8:f3:a5:08:3a:e9:f6:b3:dd:9f:dd:f7:4a:98:06:51:
         3e:f1:45:4f:fb:c8:5c:da:cd:86:d1:8e:70:da:95:11:c6:8d:
         bd:52:36:94:73:fc:33:ed:32:d4:ad:fb:16:e6:2d:fd:4c:40:
         9e:12:08:a0:79:e0:22:55:68:8e:4c:1b:59:e1:1e:b1:e5:45:
         6f:98:57:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 06:06:53 2026 by rpki-client