Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft
File:                     tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft (raw, json)
Hash identifier:          wlb69rDPnr4YDZt2TG8g4Iswnc2b5c9kpAtuDJaNK2w=
Subject key identifier:   30:B9:4A:6A:96:24:95:AA:78:06:CA:0D:2F:14:1E:51:C1:4D:91:58
Authority key identifier: B6:41:B2:88:B4:D4:13:E9:55:FE:A4:46:0B:32:BF:2C:C1:82:AF:03
Certificate issuer:       /CN=b641b288b4d413e955fea4460b32bf2cc182af03
Certificate serial:       019FA3A96889E8F50221C76CB5CDA4D25DB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tkGyiLTUE-lV_qRGCzK_LMGCrwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft
Manifest number:          19CC
Signing time:             Mon 27 Jul 2026 13:00:16 +0000
Manifest this update:     Mon 27 Jul 2026 13:00:16 +0000
Manifest next update:     Tue 28 Jul 2026 13:00:16 +0000
Files and hashes:         1: tkGyiLTUE-lV_qRGCzK_LMGCrwM.crl (hash: x/LC5mB0rFOhPVVXezfwf4uGfpNOh09Yqw1V8Gx8YUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tkGyiLTUE-lV_qRGCzK_LMGCrwM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 13:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:a9:68:89:e8:f5:02:21:c7:6c:b5:cd:a4:d2:5d:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b641b288b4d413e955fea4460b32bf2cc182af03
        Validity
            Not Before: Jul 27 13:00:16 2026 GMT
            Not After : Jul 28 13:00:16 2026 GMT
        Subject: CN=30b94a6a962495aa7806ca0d2f141e51c14d9158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a8:7e:12:13:11:3f:c7:cc:08:ae:95:69:38:
                    56:44:10:f6:3a:ad:81:28:73:57:4b:27:78:20:30:
                    e1:00:4e:f5:7a:1c:29:31:2e:91:fe:11:c1:23:09:
                    60:53:ac:69:a5:97:aa:61:59:2b:d4:b0:05:f7:c6:
                    a4:d2:5c:ab:68:63:f9:ed:55:f2:3d:97:79:c4:f4:
                    3a:ce:f2:43:2a:eb:dd:2e:f4:a5:fe:95:10:fe:aa:
                    e7:10:5e:a1:8d:db:77:9d:6d:72:d4:84:a9:31:ef:
                    56:8d:d1:34:55:c0:fe:60:4b:90:09:5d:cc:72:f6:
                    8d:66:d1:c2:fd:f5:dd:d1:91:c9:dd:10:fe:62:fc:
                    6b:f7:12:0d:7d:b7:1c:b7:09:17:f4:b8:60:ad:db:
                    d4:26:cf:d3:5a:b0:79:30:0b:4e:a3:f6:ce:31:de:
                    2d:5b:a5:66:ef:be:6c:a0:b5:54:db:e7:ec:44:3c:
                    37:69:04:61:b3:66:19:be:91:e2:20:d8:b9:e0:8c:
                    f7:c5:d6:c6:90:80:ac:0b:f8:b6:a2:0f:77:91:f8:
                    ef:62:e5:4f:80:f5:c1:60:3d:bb:34:69:d3:69:4a:
                    96:f8:36:6d:a8:66:06:5b:f0:7b:0f:2c:a7:d1:23:
                    72:f2:23:0c:04:2e:2a:fb:79:f4:e1:d5:37:86:40:
                    2d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B9:4A:6A:96:24:95:AA:78:06:CA:0D:2F:14:1E:51:C1:4D:91:58
            X509v3 Authority Key Identifier:
                keyid:B6:41:B2:88:B4:D4:13:E9:55:FE:A4:46:0B:32:BF:2C:C1:82:AF:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkGyiLTUE-lV_qRGCzK_LMGCrwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:4a:da:3a:ec:29:e6:5f:81:b2:66:82:10:4e:ec:b3:c6:e9:
         90:0b:41:0c:c0:3c:9c:e6:c8:d1:0a:97:b9:58:20:59:1d:db:
         57:10:76:a8:8f:37:6e:14:4b:3c:3b:53:d2:60:e9:47:ef:b5:
         24:63:56:a0:1f:ab:c9:4a:8a:c1:e9:11:be:9b:5f:d8:b2:be:
         51:8a:03:76:cc:76:dc:26:bc:70:70:a3:9f:8e:cd:4e:82:c1:
         cc:3e:b3:de:ce:57:72:5d:5c:29:b2:a4:86:32:57:2e:59:ce:
         fc:e2:8c:6b:df:bb:be:d8:d9:b2:e4:d7:c5:1c:63:ea:96:f2:
         aa:03:f3:18:9e:dd:89:08:78:07:76:70:07:58:45:ab:76:97:
         0d:d4:cf:5d:54:81:77:4d:06:6f:82:2b:43:41:a3:f2:d3:17:
         2c:68:65:ae:4e:92:ef:73:99:67:f7:41:cd:25:bf:bd:05:25:
         06:fd:ae:43:82:20:1a:b9:20:2b:02:22:04:d4:c3:88:d1:57:
         b9:28:68:8a:36:23:c8:9f:01:f3:83:b8:ab:f8:29:d3:60:df:
         05:0f:8e:ff:9f:9c:ba:5d:e6:55:76:1b:88:ad:11:83:45:c0:
         93:4c:2b:ab:e0:f2:8d:c3:9b:d9:06:78:d9:ce:8b:ba:85:88:
         65:11:7f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:18:41 2026 by rpki-client