Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
File:                     tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft (raw, json)
Hash identifier:          XDcj2z44rP/nVYpUnVnSShGZpJ+jeL2JZlwknkOTPz4=
Subject key identifier:   6E:71:7E:B3:8B:52:3B:F6:F1:46:A3:9D:B4:E4:4A:B0:27:35:99:FE
Authority key identifier: B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74
Certificate issuer:       /CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
Certificate serial:       019DCB98F01358C942E14025B959F1FD845A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
Manifest number:          15C8
Signing time:             Sun 26 Apr 2026 21:01:30 +0000
Manifest this update:     Sun 26 Apr 2026 21:01:30 +0000
Manifest next update:     Mon 27 Apr 2026 21:01:30 +0000
Files and hashes:         1: PeFK_yeJmAggBubY51FT5ExR7yY.roa (hash: kZM9hfI1X20jdNyqPobjCTSrN0qe4fcSM/JWGaBh8YA=)
                          2: XiIDJMPchO2MVQJnr2v3LL6-fD0.roa (hash: +0DK4fXLVL2er4TUt0Ah7Mip7BfbX2JKpUWdTlpILkM=)
                          3: tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl (hash: Yq544UDLx5dSQkWLOvXbHEjZBgVu5UaR4JDSOhzTTM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Apr 2026 21:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cb:98:f0:13:58:c9:42:e1:40:25:b9:59:f1:fd:84:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
        Validity
            Not Before: Apr 26 21:01:30 2026 GMT
            Not After : Apr 27 21:01:30 2026 GMT
        Subject: CN=6e717eb38b523bf6f146a39db4e44ab0273599fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:94:d6:23:e8:83:1e:6a:28:f4:1c:dd:61:0a:
                    5c:70:b1:1d:c7:5e:e4:40:5c:26:0e:51:25:f8:2a:
                    86:4e:5d:1f:5a:4a:25:9d:69:f0:d7:8d:61:53:a8:
                    67:b7:d5:6a:35:53:4c:db:fb:b0:20:d7:72:66:a5:
                    3d:86:fa:6b:5c:cf:32:67:48:6f:d0:4e:dc:79:88:
                    8e:66:19:d7:f7:ea:89:e1:20:5f:25:07:01:e8:2b:
                    48:bd:40:3d:3a:97:2d:07:ef:eb:d8:d3:73:bc:1a:
                    d8:57:32:c6:3e:df:e9:63:92:69:02:8b:e4:09:a2:
                    f6:ce:67:c4:74:20:40:54:80:47:05:ea:c8:15:62:
                    f1:d4:4a:22:fa:04:3e:59:e1:10:38:b9:28:80:8c:
                    a5:aa:f8:3b:7e:7e:22:a5:65:85:22:a5:7c:bb:6a:
                    93:bc:0b:2f:1f:9c:a9:48:8c:ab:40:f8:a9:5b:53:
                    a7:51:7f:9d:94:61:2b:fb:ac:43:71:4e:4f:b8:2a:
                    8a:8b:aa:cf:23:0e:fb:ea:5c:95:6e:56:5c:72:63:
                    45:46:b6:68:38:98:07:17:e6:06:91:25:f2:5d:02:
                    4b:e5:9e:dc:87:be:cb:2d:9b:61:fe:d5:7f:e4:55:
                    7c:9e:ef:66:2d:e6:9b:dd:e9:08:c9:c1:ad:35:27:
                    9f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:71:7E:B3:8B:52:3B:F6:F1:46:A3:9D:B4:E4:4A:B0:27:35:99:FE
            X509v3 Authority Key Identifier:
                keyid:B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:19:fb:47:97:53:27:14:ef:ed:fc:30:60:23:2a:53:2e:4d:
         47:e4:4a:d9:3b:f4:de:62:d9:3d:e5:c4:0b:1c:c1:fd:1c:7d:
         4a:dc:05:63:fa:38:22:bf:e8:5b:2b:99:30:17:0d:06:cc:81:
         ed:73:d5:b2:5f:87:7a:bc:a1:c3:46:f2:05:9d:b3:87:85:15:
         f1:a7:66:38:db:bd:d3:74:d8:5d:d6:1c:e6:27:76:ef:2d:28:
         4f:44:d0:72:3f:65:6a:5d:26:ad:9a:a4:b2:ea:ba:ed:38:d9:
         10:36:2d:28:b2:bd:02:e3:20:be:a4:4a:02:33:96:fa:68:d3:
         8e:d8:cd:89:5a:ba:d5:53:97:c9:49:4c:c8:f5:a0:55:72:91:
         3f:91:43:02:59:7e:f7:43:82:82:67:f1:dc:4f:21:b5:5f:df:
         e7:cd:43:2c:3d:92:db:5b:cc:d4:a8:38:06:a6:b8:b2:ef:a9:
         e4:5c:3f:87:07:ce:b9:95:03:99:81:b4:bf:1a:7d:c8:d8:e1:
         75:22:00:81:ba:da:02:2a:9f:a1:5d:71:d8:5b:08:58:3c:e4:
         b1:f7:e4:2f:dd:95:51:98:5a:d8:bd:41:08:a7:3b:18:3e:19:
         2e:36:84:7b:f3:ce:69:c6:5c:e0:44:26:21:74:a1:07:02:ee:
         0a:1d:47:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 05:47:28 2026 by rpki-client