Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
File:                     TCuJw8V6PilqpAYelihAvnro8Bg.mft (raw, json)
Hash identifier:          kevL1rXM9HxoZaSp4NLdvdX1NieZ94L9NildgsvJ0+s=
Subject key identifier:   53:92:FB:10:91:1A:CD:BB:DA:07:A8:D6:4F:3A:14:3F:3D:B2:C6:DC
Authority key identifier: 4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
Certificate issuer:       /CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Certificate serial:       019F0B87E1E6E6DA00F9C9E5419132944891
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
Manifest number:          1998
Signing time:             Sun 28 Jun 2026 00:01:22 +0000
Manifest this update:     Sun 28 Jun 2026 00:01:22 +0000
Manifest next update:     Mon 29 Jun 2026 00:01:22 +0000
Files and hashes:         1: 5VIlaSHQH8NxTnw-lkuxFUsxkAY.roa (hash: sPTPxc0CroKVp6si6UEZ5BaO2FHxg18oEZaAVxG/qgA=)
                          2: JwHH6LBZedJ4Hv0TunMjXoDshWM.roa (hash: D5XiTo1X7KneliPOhbgW7WFXSwpdBlipBaJGWbMwuis=)
                          3: TCuJw8V6PilqpAYelihAvnro8Bg.crl (hash: ObZfFbZycPvm9MXj/W31wnjcN1fGnIqWmDsbr5sgUz0=)
                          4: c-8uzc_bF5FkL0h-HqsGRbGhsWg.roa (hash: +aU4slc8iEEQxB/Bu7Kcz1ZF7yrHgsBSwr8YzuDbZ/0=)
                          5: g3ecyqqZSPjg-6ccrLkDwCQkrnQ.roa (hash: SV51OkrNOpOVdTqiKqHM9Ro93TRFuichJHgxteFHtRM=)
                          6: tYudPSYbftTU4j3hgTGLKXhO4P4.roa (hash: Wb5twGJdbpT/Rb1UlbeVOOTStMG3K3OQ+0w1qq8xOmA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Jun 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:0b:87:e1:e6:e6:da:00:f9:c9:e5:41:91:32:94:48:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
        Validity
            Not Before: Jun 28 00:01:22 2026 GMT
            Not After : Jun 29 00:01:22 2026 GMT
        Subject: CN=5392fb10911acdbbda07a8d64f3a143f3db2c6dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7d:45:8b:37:05:da:c9:52:f2:78:8c:98:a5:
                    87:19:a9:ab:b2:22:1c:4d:49:72:ab:7d:31:4d:e3:
                    5f:23:0b:7b:11:94:41:b8:c3:48:10:94:67:f4:dd:
                    0d:a2:78:80:a6:c4:89:01:e3:91:2d:a5:07:3b:09:
                    01:ff:80:4e:63:6d:a3:17:8a:d6:68:4b:d1:40:53:
                    c5:ab:a3:b2:41:3a:87:49:a0:6d:4c:11:a4:76:bf:
                    bc:96:26:25:05:17:04:19:b9:5b:70:ee:23:89:1d:
                    9f:c6:36:10:b1:07:54:6e:98:bc:f9:11:2b:24:ec:
                    b4:d7:37:65:21:dc:8f:26:b7:05:04:81:1d:38:90:
                    d0:80:4d:f9:1a:b7:31:05:57:a5:d3:6e:8d:57:c7:
                    57:f6:91:d8:02:ad:bd:40:03:af:e7:c8:63:26:9c:
                    dd:db:38:ab:e2:55:13:76:02:cf:69:bc:40:1d:8a:
                    61:73:a6:c3:f4:da:95:8e:a0:de:63:2f:ac:a3:c1:
                    8a:66:24:33:74:fb:8c:45:f2:ac:e5:a6:d1:25:77:
                    ad:1e:08:e0:0f:e7:15:e9:b5:ff:35:08:42:51:02:
                    26:e2:ae:02:16:4d:68:85:82:8f:d7:f9:9f:4e:58:
                    aa:62:66:90:59:13:6e:f2:e5:c3:6c:72:9a:b5:1e:
                    41:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:92:FB:10:91:1A:CD:BB:DA:07:A8:D6:4F:3A:14:3F:3D:B2:C6:DC
            X509v3 Authority Key Identifier:
                keyid:4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:a4:46:92:e2:0e:e6:e9:e2:a3:11:0e:d9:2b:61:27:2a:41:
         82:0f:a3:2c:2b:cc:4b:76:5d:5d:df:ab:56:79:ff:f3:4c:e8:
         d3:71:32:3b:b4:53:9b:67:f1:90:a1:42:47:ee:4e:ec:2c:91:
         36:14:2b:b9:1c:02:65:5b:00:f2:90:1b:9f:65:7d:01:8a:32:
         33:35:87:f9:c8:b4:e8:45:a8:1b:25:47:0c:7d:5a:d2:7c:fe:
         a2:32:90:a7:5e:ee:9c:88:4f:f4:a0:0f:ae:44:9a:9b:84:8b:
         c6:3a:98:02:24:f0:d4:42:f1:05:49:53:af:f9:01:fc:01:0b:
         82:de:fa:bf:75:b7:0f:26:6f:7a:85:8b:dc:57:18:75:ea:25:
         1e:75:9e:2c:77:76:54:9f:cc:c6:7a:5d:fa:19:32:56:6e:ed:
         e7:13:cd:f9:33:31:ea:8d:3c:f8:2d:47:ab:64:da:98:83:91:
         e1:97:fe:e3:c8:d6:d1:dc:64:a8:a4:02:d0:54:9e:fa:e3:b1:
         a1:49:ec:c0:03:fc:19:aa:7b:65:07:a0:2e:80:6f:a5:75:61:
         fc:78:c3:0e:c1:bd:98:57:70:34:b6:34:b8:aa:8f:e5:41:6e:
         9b:74:12:a4:6f:6f:f1:2f:5e:64:32:95:3b:ee:b9:b0:06:4c:
         09:cc:eb:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 08:29:17 2026 by rpki-client