Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
File:                     tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft (raw, json)
Hash identifier:          DYLUF+hz7zrpPfgxF9Ub5rLBLOqUDIPCxmkGzX23/rQ=
Subject key identifier:   3A:30:59:D0:45:E0:66:2D:3E:E5:3F:9B:87:86:C7:D3:A2:8E:03:68
Authority key identifier: B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74
Certificate issuer:       /CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
Certificate serial:       019F9EF29A4FB62AD858DAC8D7CA974D5E73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
Manifest number:          16BA
Signing time:             Sun 26 Jul 2026 15:02:06 +0000
Manifest this update:     Sun 26 Jul 2026 15:02:06 +0000
Manifest next update:     Mon 27 Jul 2026 15:02:06 +0000
Files and hashes:         1: PeFK_yeJmAggBubY51FT5ExR7yY.roa (hash: kZM9hfI1X20jdNyqPobjCTSrN0qe4fcSM/JWGaBh8YA=)
                          2: XiIDJMPchO2MVQJnr2v3LL6-fD0.roa (hash: +0DK4fXLVL2er4TUt0Ah7Mip7BfbX2JKpUWdTlpILkM=)
                          3: tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl (hash: 3iGiULNKtGlr/Tz7s9NjCwOYVvRsisJlT6tbq03VFl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9e:f2:9a:4f:b6:2a:d8:58:da:c8:d7:ca:97:4d:5e:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6321eebf4f95be9f81f0f233f89f3602d2f0074
        Validity
            Not Before: Jul 26 15:02:06 2026 GMT
            Not After : Jul 27 15:02:06 2026 GMT
        Subject: CN=3a3059d045e0662d3ee53f9b8786c7d3a28e0368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:79:8e:25:bb:be:42:b5:35:e3:12:76:a6:9f:
                    c9:79:a5:d2:8c:18:48:23:25:2d:d0:82:cc:d3:d7:
                    0c:93:27:96:44:40:ae:ff:98:8d:0b:a3:5b:41:5f:
                    76:ad:68:bc:e4:68:4f:e1:c6:27:3d:a2:d9:22:4b:
                    9d:ca:bf:83:98:d6:7c:6d:cc:d3:10:85:4d:d1:d7:
                    a8:f9:bc:6a:49:88:21:eb:89:fb:81:27:ed:51:b1:
                    a6:75:bf:48:e0:ce:ac:46:9f:55:94:75:f4:53:6d:
                    26:d9:13:e4:0c:e3:25:6d:6e:12:bf:45:ca:18:9e:
                    5e:08:f8:d7:d0:20:72:c1:dc:85:f5:23:5a:49:44:
                    10:8a:9e:2a:11:7f:67:93:40:87:6d:f5:e6:a6:5e:
                    b6:75:59:f7:68:96:2c:a1:aa:b5:9a:50:6d:2b:0f:
                    f8:4c:c6:62:81:24:3a:96:e1:7d:33:79:d4:d3:a4:
                    99:05:a9:ec:66:6f:47:1b:6e:07:31:84:f0:4b:10:
                    f5:11:cd:04:92:45:cb:35:fb:d6:e7:84:01:36:d3:
                    21:de:64:01:15:4a:8a:f5:ab:35:16:48:3d:ca:37:
                    e1:68:f0:39:91:18:8f:a5:57:0d:e1:8d:fc:d4:cf:
                    19:19:00:1c:a3:dc:8e:5b:50:97:b1:4c:45:33:5f:
                    7a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:30:59:D0:45:E0:66:2D:3E:E5:3F:9B:87:86:C7:D3:A2:8E:03:68
            X509v3 Authority Key Identifier:
                keyid:B6:32:1E:EB:F4:F9:5B:E9:F8:1F:0F:23:3F:89:F3:60:2D:2F:00:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5c92d1-41e5-443e-a250-01baf78ec73f/1/tjIe6_T5W-n4Hw8jP4nzYC0vAHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:9e:f3:f5:5d:c1:8e:04:31:46:a4:f5:49:0f:6a:62:28:52:
         c9:89:d9:b2:a3:d2:fa:5e:16:cd:bc:23:96:c7:ba:8e:4d:21:
         48:7c:61:49:82:f8:c0:74:17:94:55:4f:24:2e:c9:f2:b2:8d:
         f8:37:1f:c9:b3:15:db:bb:ec:ae:8a:4b:d2:5d:33:17:ae:4b:
         2c:3c:08:1f:8c:13:44:7e:02:1c:b4:e5:4b:0d:52:10:e9:4d:
         3a:73:45:69:3f:de:ce:09:e3:5f:28:57:24:cc:97:7b:8c:7a:
         5c:4b:72:d3:61:fb:70:03:68:0f:69:82:0d:02:57:3c:dd:df:
         3e:99:7d:d8:b7:77:ba:24:33:2f:3f:3a:0f:7c:ac:a3:22:6c:
         65:ed:a2:b0:74:bc:a1:61:a7:b7:4f:d4:0e:79:39:59:91:17:
         1d:4d:6b:37:ba:da:44:c9:aa:cb:8f:43:5e:dc:a4:20:a9:0e:
         2b:38:af:2a:ce:22:92:c9:c0:9d:d9:ce:44:35:bc:bf:f2:0d:
         83:9f:50:92:d2:4b:aa:ee:14:97:8d:35:28:b0:ef:e7:24:48:
         99:5a:e9:e3:a6:ce:df:48:d9:60:7e:d5:ca:13:18:74:63:c4:
         65:b5:e1:b7:7e:0a:d7:55:81:62:cb:1e:be:f6:be:70:e5:73:
         63:17:87:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:50:04 2026 by rpki-client