Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
File:                     Tchxtd3wdAsxfR4042smgQu5gCY.mft (raw, json)
Hash identifier:          8gmCuRetyHwBs6Cz1CovW828/P/I1GmHQnQDntWUTTw=
Subject key identifier:   C3:27:7D:78:69:A9:C3:79:F7:1A:A3:4A:A4:3A:EB:26:C4:17:A0:20
Authority key identifier: 4D:C8:71:B5:DD:F0:74:0B:31:7D:1E:34:E3:6B:26:81:0B:B9:80:26
Certificate issuer:       /CN=4dc871b5ddf0740b317d1e34e36b26810bb98026
Certificate serial:       019EB7334438ABC539E06CC8E23419C2EECF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
Manifest number:          0C27
Signing time:             Thu 11 Jun 2026 15:00:50 +0000
Manifest this update:     Thu 11 Jun 2026 15:00:50 +0000
Manifest next update:     Fri 12 Jun 2026 15:00:50 +0000
Files and hashes:         1: Tchxtd3wdAsxfR4042smgQu5gCY.crl (hash: Gorc4pD0YZpO9SOu5VfW5MaMa+iI96gFeZY0AeUuqYQ=)
                          2: jXwSEoxbq6KdrBrzSTnO_RMriMk.roa (hash: BbP0L4fPspJ9Y6QO7cR0z5Mqnlzrld3QNlzO8Lk3/gU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 15:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:33:44:38:ab:c5:39:e0:6c:c8:e2:34:19:c2:ee:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dc871b5ddf0740b317d1e34e36b26810bb98026
        Validity
            Not Before: Jun 11 15:00:50 2026 GMT
            Not After : Jun 12 15:00:50 2026 GMT
        Subject: CN=c3277d7869a9c379f71aa34aa43aeb26c417a020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0e:de:e4:c1:d1:0c:32:6e:25:6f:e4:a9:7b:
                    d5:a0:3b:d4:ac:28:b6:e3:8a:e3:9d:d2:ce:24:11:
                    62:81:9c:ad:28:ba:32:8b:ad:a7:39:41:5f:37:e3:
                    cb:53:b4:44:94:e2:d2:ce:1b:8d:1f:88:9d:87:fa:
                    86:9c:56:ee:39:2a:18:e8:14:6d:6f:31:e8:21:63:
                    f4:69:ec:69:38:f2:5b:5c:d4:73:11:20:e1:87:10:
                    18:ae:65:3c:fe:a1:5d:9d:d1:52:61:c9:a6:bf:20:
                    43:a8:fd:0e:25:59:49:8d:c9:b3:9e:fe:97:a8:f1:
                    98:bf:65:91:09:25:a1:00:fd:d1:b0:d5:68:f0:a4:
                    5f:0a:43:16:2b:83:f8:24:f5:b9:fe:53:63:32:6a:
                    9e:4d:db:c1:81:a8:23:30:78:28:af:2d:0c:b5:04:
                    99:ca:94:5f:67:31:35:3e:97:1b:37:27:d8:b7:69:
                    5e:89:b5:f9:de:5d:bd:e2:3c:4c:f6:b4:b8:53:84:
                    eb:b3:2d:e4:a1:84:b7:60:06:f1:15:0a:ab:ca:9d:
                    ab:34:6f:c4:75:d5:ae:49:f3:17:06:e9:41:62:52:
                    23:9c:6d:3c:a8:65:b6:ae:d1:2a:36:a5:dd:d7:a8:
                    0d:5e:62:0e:38:c0:19:1d:54:00:e8:2c:c1:76:53:
                    7f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:27:7D:78:69:A9:C3:79:F7:1A:A3:4A:A4:3A:EB:26:C4:17:A0:20
            X509v3 Authority Key Identifier:
                keyid:4D:C8:71:B5:DD:F0:74:0B:31:7D:1E:34:E3:6B:26:81:0B:B9:80:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:80:ea:bb:ba:60:90:0c:e1:45:46:0e:f7:21:cf:2c:b0:46:
         7c:32:1b:2c:01:bf:7d:86:5f:1b:90:9c:ef:ab:6d:d0:67:88:
         b7:ea:f7:18:b1:c8:17:d5:63:77:76:41:1b:d8:26:94:0e:06:
         b5:08:c1:d9:48:2a:78:95:ad:54:c6:20:6d:f5:21:33:85:69:
         d3:d4:be:68:7f:6d:e4:aa:54:80:3b:95:91:85:76:29:27:ca:
         c2:7b:20:9b:29:90:c5:23:6d:ec:d4:b7:f1:ef:07:e6:22:27:
         21:4c:16:1d:e0:d0:99:5d:90:ce:fd:25:b1:78:7a:8e:c0:5c:
         2f:a1:52:a8:25:8c:b4:54:13:db:46:14:76:28:d3:15:f1:85:
         0a:c4:53:0a:9c:e8:f9:41:f0:21:7b:bd:83:2f:ae:ef:df:35:
         40:a3:c4:c3:1c:ca:2f:5a:4d:ae:13:68:ce:77:7f:35:76:c5:
         c5:fa:4c:ab:d6:19:d3:9e:53:c5:e1:f2:09:9a:33:9c:9a:ff:
         f8:be:b4:7c:3c:51:31:d0:40:af:e8:ed:32:9f:01:e4:21:16:
         92:a9:80:03:45:07:16:7a:3c:43:61:21:5a:3f:bc:d9:f7:81:
         17:e0:f6:48:be:67:b9:e7:38:74:33:ee:c6:6a:49:18:c1:d0:
         16:74:fa:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:33:44 2026 by rpki-client