Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
File:                     T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft (raw, json)
Hash identifier:          RIrdJHUtk3ZgH/uHFpaxgoqs5Mf8WSxvlCwWHYwp8So=
Subject key identifier:   EF:79:D9:CD:8C:18:80:3D:ED:D7:ED:7F:13:63:60:86:7C:59:CF:A6
Authority key identifier: 4F:E3:19:D3:F4:EC:9A:76:0D:F7:74:F0:1C:FB:71:54:7E:16:3F:3C
Certificate issuer:       /CN=4fe319d3f4ec9a760df774f01cfb71547e163f3c
Certificate serial:       019EB8B3DA4097920A43AC07D290DD36DB61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T-MZ0_TsmnYN93TwHPtxVH4WPzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
Manifest number:          1955
Signing time:             Thu 11 Jun 2026 22:00:54 +0000
Manifest this update:     Thu 11 Jun 2026 22:00:54 +0000
Manifest next update:     Fri 12 Jun 2026 22:00:54 +0000
Files and hashes:         1: T-MZ0_TsmnYN93TwHPtxVH4WPzw.crl (hash: 3m0XUP3b3Vgyv4nXEFYmKtESXUmuQWSd2A4XydC+LUw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T-MZ0_TsmnYN93TwHPtxVH4WPzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:b3:da:40:97:92:0a:43:ac:07:d2:90:dd:36:db:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fe319d3f4ec9a760df774f01cfb71547e163f3c
        Validity
            Not Before: Jun 11 22:00:54 2026 GMT
            Not After : Jun 12 22:00:54 2026 GMT
        Subject: CN=ef79d9cd8c18803dedd7ed7f136360867c59cfa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:02:da:ec:20:11:2d:74:cd:a2:d4:e1:64:8d:
                    5d:e3:cd:d9:35:71:84:e4:f2:0a:7a:f3:68:db:ca:
                    49:38:db:ba:fd:01:fc:dd:0f:90:fb:ca:9f:a4:a1:
                    9e:f9:bd:7d:ef:93:14:12:56:69:d6:62:ba:38:d7:
                    2a:c7:10:16:d2:43:cf:55:82:1b:71:76:91:15:a5:
                    5b:83:7b:3e:62:a2:98:4f:e6:00:c7:53:5d:a3:c9:
                    54:d4:b4:18:87:23:c2:83:5d:7e:35:34:65:b9:af:
                    5f:2b:94:87:bd:ea:49:0f:4a:ab:5d:b2:6a:d7:d5:
                    11:b7:d9:f9:ef:95:89:8c:f3:33:34:19:f5:ce:a6:
                    86:48:f0:f3:6c:23:22:00:8b:20:8c:69:36:6e:03:
                    b3:12:19:4d:23:5a:db:5a:83:06:5e:05:46:17:3c:
                    96:26:45:b2:56:4b:35:9f:30:90:29:84:92:bf:d9:
                    5f:a7:d3:f6:38:12:43:4d:44:be:0b:73:08:f7:3d:
                    ae:a0:64:4b:be:ad:23:ad:1e:4f:30:3a:c2:04:83:
                    8f:cf:f0:64:ac:80:27:00:84:49:a9:ad:ad:e0:3a:
                    89:9f:76:e8:c0:6b:c9:92:59:4d:b2:aa:cd:a5:d3:
                    09:a7:99:02:03:a4:4a:59:9e:86:80:2f:d9:26:88:
                    2c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:79:D9:CD:8C:18:80:3D:ED:D7:ED:7F:13:63:60:86:7C:59:CF:A6
            X509v3 Authority Key Identifier:
                keyid:4F:E3:19:D3:F4:EC:9A:76:0D:F7:74:F0:1C:FB:71:54:7E:16:3F:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-MZ0_TsmnYN93TwHPtxVH4WPzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:4b:36:1d:af:3f:0e:5d:54:76:f6:64:59:40:58:66:b2:0e:
         76:06:f2:3e:d3:ae:0b:f2:96:ac:8c:af:bd:af:13:52:f7:a8:
         7c:b6:69:08:c9:f5:1f:59:89:ff:e8:fe:c4:57:5d:b5:0c:4a:
         b9:30:fc:82:78:53:5a:9c:46:c1:b8:dc:5d:63:85:d9:6e:2d:
         55:b9:b0:0c:b3:c7:57:c3:06:18:08:54:a6:3b:95:16:c6:d8:
         3b:b4:d6:f2:c0:26:7d:4d:82:d7:76:a4:5c:51:4f:d6:a6:38:
         e2:19:ba:78:71:f2:03:78:5b:ae:c9:34:36:fc:f5:a5:81:c6:
         40:9b:45:7f:85:8f:a2:b6:93:96:99:d5:31:e8:01:e1:28:6e:
         e0:32:24:d7:d3:1d:89:7c:61:de:6f:58:a5:4d:37:09:ba:45:
         fe:1f:53:9d:ad:2b:33:66:92:55:f2:13:d0:48:3f:7d:98:61:
         25:d6:fc:3c:c2:05:be:71:1e:df:6d:2b:87:e3:d8:8e:1b:61:
         eb:e6:90:59:b6:8f:9a:40:0a:a3:22:16:1f:9e:dc:41:ae:11:
         ce:99:b4:b3:a5:7a:8c:e2:98:af:9e:13:47:a3:e8:91:48:7d:
         bf:d8:77:34:b5:12:4e:70:b2:7a:7c:52:bf:a7:65:d1:2c:4d:
         41:ff:76:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:29:39 2026 by rpki-client