Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
File:                     tNc6atd6j4WbQD2yznFegtHPMv4.mft (raw, json)
Hash identifier:          OofSkrDxUJXtaxrmMAAxAx+ukZ+DytuncyffVFx8hoo=
Subject key identifier:   E7:C5:E4:C8:2C:19:C0:46:9D:64:26:F7:BA:E7:7C:C2:7F:52:FC:5E
Authority key identifier: B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
Certificate issuer:       /CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Certificate serial:       019E9213C9BCB8404A5E89EFE14FF3660FFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
Manifest number:          1942
Signing time:             Thu 04 Jun 2026 10:00:30 +0000
Manifest this update:     Thu 04 Jun 2026 10:00:30 +0000
Manifest next update:     Fri 05 Jun 2026 10:00:30 +0000
Files and hashes:         1: EQDYZSB-4iaJyQwjSjIIBQzlhys.roa (hash: TgbIpBd4+tQ0V9vZqIWgoPeSE6DQXvJ+wX5nCs7obXI=)
                          2: _Ww4rYBbxbAH2gUCkDRQ1hd15WA.roa (hash: 84bc4cZmGpgQymic02SrkDgsWwCytvG15eu2yEnR910=)
                          3: tNc6atd6j4WbQD2yznFegtHPMv4.crl (hash: E+MQO8AvjlXqHG4QPWyFevFUvhr5xCMZg2ESr8QXsPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 07:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:92:13:c9:bc:b8:40:4a:5e:89:ef:e1:4f:f3:66:0f:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
        Validity
            Not Before: Jun  4 10:00:30 2026 GMT
            Not After : Jun  5 10:00:30 2026 GMT
        Subject: CN=e7c5e4c82c19c0469d6426f7bae77cc27f52fc5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:13:aa:a1:ce:1b:4b:5d:8b:0a:b6:68:f0:2e:
                    4f:4e:f7:ef:5e:0d:bb:75:43:bf:89:da:a4:67:2a:
                    12:e1:92:5f:c4:d5:5f:db:3e:42:99:61:7e:59:62:
                    2d:28:f6:98:1c:ac:db:55:b5:c3:61:9a:07:40:ce:
                    ed:de:4f:dc:b2:6c:4e:c2:e2:4e:37:e3:62:4f:01:
                    e9:e0:36:b8:e1:f8:6c:18:32:bc:80:7f:10:ab:65:
                    f5:b3:44:0c:57:ad:61:29:17:aa:30:51:72:d9:11:
                    e4:56:4e:1e:fe:42:dd:2b:a3:d6:ba:84:44:0a:fd:
                    b7:74:af:a4:64:a6:ed:fc:c9:92:49:42:19:1b:cb:
                    3c:7b:d0:0a:11:6d:f8:df:19:e2:f6:b3:39:b6:41:
                    eb:ba:03:a1:d1:eb:87:13:aa:ff:03:88:58:18:09:
                    8d:77:a5:49:c9:11:e6:21:0a:6a:6d:19:8f:4f:0f:
                    ff:49:83:18:2c:19:de:d4:4a:23:0a:ee:89:82:2e:
                    f4:fe:d1:68:cf:12:6e:53:38:0c:ab:39:87:0e:83:
                    03:3c:45:97:6a:55:f0:de:4c:36:a9:12:de:99:a7:
                    b8:f9:de:2c:3b:96:06:d9:18:04:c5:ed:17:49:f2:
                    f0:fb:46:3a:df:51:d9:cd:dd:9d:81:f4:5c:5a:70:
                    d3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C5:E4:C8:2C:19:C0:46:9D:64:26:F7:BA:E7:7C:C2:7F:52:FC:5E
            X509v3 Authority Key Identifier:
                keyid:B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:71:ce:04:40:20:7e:a2:4c:8e:ae:d0:5c:fd:c3:ef:ea:1d:
         f7:fa:b0:1d:12:28:a8:b6:a7:7a:a6:f0:dc:a4:76:29:4d:7a:
         4a:45:94:41:8f:ad:15:fd:5f:1a:cd:c8:1e:f2:c9:93:20:30:
         96:15:4e:88:52:2d:51:47:ee:e8:fa:30:f0:1b:20:e3:21:e7:
         fd:0a:d3:b8:cb:4c:16:d8:14:42:59:6e:3c:7a:14:ae:43:18:
         d8:47:7d:5e:bb:02:55:f8:48:08:2b:0b:07:77:66:18:81:84:
         87:b4:c8:9a:3c:5c:6d:29:61:2a:69:47:4f:67:96:dc:c9:51:
         6c:b9:29:8d:c0:30:da:45:36:d4:cd:4b:b6:0c:5e:06:3b:16:
         57:0c:ca:19:ff:d1:d8:8f:21:b7:1b:1e:69:89:74:bb:68:54:
         12:64:e1:a9:48:48:cf:9a:45:9c:d2:f0:47:36:80:cd:2d:cf:
         c4:0a:43:7c:33:ef:c2:b3:f0:5d:c8:a1:98:b3:5f:9e:d5:69:
         90:7c:a7:0f:04:4c:f4:3d:ea:d4:41:9e:f0:30:7f:fb:c9:85:
         e0:3f:d7:40:e2:47:98:b6:53:8a:49:71:28:01:32:c2:94:42:
         7c:5f:86:83:ca:df:f4:47:7f:06:1c:46:b9:a2:bc:57:ac:2a:
         e4:52:bb:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:05:24 2026 by rpki-client