Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.mft
File:                     TM6YuMJCaF3bYPTiEJwr01GmQn8.mft (raw, json)
Hash identifier:          ZNBghgPMP3U42VjWRqkvLEbHjMBmEPgKcmBGFtZaFUE=
Subject key identifier:   F0:B0:31:AC:A4:9C:97:64:67:CD:25:7E:B4:F7:52:CC:7B:79:BA:66
Authority key identifier: 4C:CE:98:B8:C2:42:68:5D:DB:60:F4:E2:10:9C:2B:D3:51:A6:42:7F
Certificate issuer:       /CN=4cce98b8c242685ddb60f4e2109c2bd351a6427f
Certificate serial:       019EB87C78C1E28204EBF484D5DD2EE30FA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TM6YuMJCaF3bYPTiEJwr01GmQn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.mft
Manifest number:          1954
Signing time:             Thu 11 Jun 2026 21:00:25 +0000
Manifest this update:     Thu 11 Jun 2026 21:00:25 +0000
Manifest next update:     Fri 12 Jun 2026 21:00:25 +0000
Files and hashes:         1: TM6YuMJCaF3bYPTiEJwr01GmQn8.crl (hash: hGvpYcnjZ9XL6XK5g38gD4dYyD8pbzLiQkuQ0KC0guY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TM6YuMJCaF3bYPTiEJwr01GmQn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:7c:78:c1:e2:82:04:eb:f4:84:d5:dd:2e:e3:0f:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cce98b8c242685ddb60f4e2109c2bd351a6427f
        Validity
            Not Before: Jun 11 21:00:25 2026 GMT
            Not After : Jun 12 21:00:25 2026 GMT
        Subject: CN=f0b031aca49c976467cd257eb4f752cc7b79ba66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:31:8a:80:7d:4f:84:53:71:ef:af:be:e2:41:
                    fc:92:bf:44:fd:2d:e1:ef:0b:83:83:f2:17:de:b9:
                    bb:0a:99:e9:b4:f1:fb:54:5c:d7:83:f6:f9:e6:50:
                    c0:cf:c9:95:6b:02:bb:ca:90:f0:2a:20:9a:54:00:
                    02:4a:28:dd:9b:49:84:a5:98:73:32:ac:75:7e:d5:
                    ba:ea:8c:95:89:32:87:9b:4a:bf:41:5d:4c:04:63:
                    d1:7b:0e:b8:a0:24:93:0d:2c:d1:5b:be:45:a5:9f:
                    67:ab:d8:7d:75:de:72:e2:c0:c6:3d:ff:cd:ae:6f:
                    44:8f:21:a3:af:10:c5:26:13:b0:a3:5a:00:2d:24:
                    f9:4a:8b:44:b0:9a:21:8e:b2:dd:a5:70:e6:81:99:
                    98:83:c8:ee:66:51:07:4e:63:ae:bb:de:37:53:7c:
                    8f:0e:1e:6d:bd:29:9a:f6:dd:26:46:5f:4c:61:f5:
                    88:2e:0f:dc:40:1a:75:6d:ce:db:82:6f:d7:4f:0a:
                    7b:46:1c:3d:06:17:08:00:74:8c:f4:a2:b3:27:26:
                    a0:9f:b6:6c:1c:bd:eb:9a:6c:9f:9c:6f:bc:dc:ab:
                    b8:71:53:52:3a:b3:7d:a6:b2:0d:f9:cc:ee:5b:a2:
                    84:d7:83:1e:fd:f7:22:9a:f4:98:5d:9f:dd:23:b7:
                    a0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B0:31:AC:A4:9C:97:64:67:CD:25:7E:B4:F7:52:CC:7B:79:BA:66
            X509v3 Authority Key Identifier:
                keyid:4C:CE:98:B8:C2:42:68:5D:DB:60:F4:E2:10:9C:2B:D3:51:A6:42:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TM6YuMJCaF3bYPTiEJwr01GmQn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:5d:7a:97:b9:27:8a:ff:52:6d:02:77:f5:a9:3d:9e:b1:3a:
         c9:cc:03:e9:2c:3b:a5:d7:af:84:12:71:4b:e7:87:23:35:92:
         5c:de:e7:52:05:f3:62:06:59:52:2d:3d:e8:1b:74:09:e1:56:
         65:64:e8:3e:08:b7:8e:e7:38:06:30:e6:58:12:69:4e:df:d2:
         c1:b1:79:ad:25:e8:71:3e:14:af:4d:7a:1f:45:39:05:df:65:
         42:fb:c1:b5:62:97:4e:cf:a3:5e:c4:5a:63:4a:67:46:0f:1a:
         ef:98:c3:4b:66:db:e1:1b:69:f5:b4:80:f7:8b:56:cc:43:53:
         4f:ee:65:d3:ea:00:77:2c:8b:4c:6f:bb:86:9f:c4:39:47:fa:
         0d:da:bc:e5:3e:72:04:34:1b:82:aa:09:ee:15:ef:96:31:6b:
         91:1c:7a:6e:08:7b:c4:5a:be:8e:e0:cb:4f:78:9e:c5:00:82:
         a6:26:70:c6:44:d4:74:23:32:47:cb:1c:08:d7:f6:ec:01:d0:
         75:be:c1:21:c4:48:6e:4c:f5:50:6a:05:f7:dd:86:61:99:5b:
         ef:1a:47:93:d7:f7:e3:be:cb:e0:cc:40:e2:bb:b8:e9:13:54:
         27:17:f8:37:96:82:25:92:ab:59:eb:ac:a2:ad:12:af:e8:fe:
         05:34:0d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:13:23 2026 by rpki-client