Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/c229d8-738a-4117-af59-1093d4973091/1/tkkanUdy_S313Ak9TiDT7YEHKVc.mft
File:                     tkkanUdy_S313Ak9TiDT7YEHKVc.mft (raw, json)
Hash identifier:          cqq2wimLyFehxUWMEdp3l5C7Wc5oqIwUrg/epUkKFd4=
Subject key identifier:   71:38:4B:79:0B:E3:15:BC:5C:14:0F:A7:11:C1:7D:9D:3E:38:A6:F8
Authority key identifier: B6:49:1A:9D:47:72:FD:2D:F5:DC:09:3D:4E:20:D3:ED:81:07:29:57
Certificate issuer:       /CN=b6491a9d4772fd2df5dc093d4e20d3ed81072957
Certificate serial:       019FCC01FBEB9C3A929820151E3FC315B3DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tkkanUdy_S313Ak9TiDT7YEHKVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/c229d8-738a-4117-af59-1093d4973091/1/tkkanUdy_S313Ak9TiDT7YEHKVc.mft
Manifest number:          013C
Signing time:             Tue 04 Aug 2026 09:01:49 +0000
Manifest this update:     Tue 04 Aug 2026 09:01:49 +0000
Manifest next update:     Wed 05 Aug 2026 09:01:49 +0000
Files and hashes:         1: QyZsEO3bLQ3YXF28rvX5z3mE5oo.roa (hash: 4EvUaJPraxAe7s9f0hydZpLjgIHAJ4GNcSXocUv5gQM=)
                          2: tkkanUdy_S313Ak9TiDT7YEHKVc.crl (hash: 501CqhX4ylQu+n19HL0rH1sCew1YkCt3TMbQEJzTZbI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/c229d8-738a-4117-af59-1093d4973091/1/tkkanUdy_S313Ak9TiDT7YEHKVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/c229d8-738a-4117-af59-1093d4973091/1/tkkanUdy_S313Ak9TiDT7YEHKVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tkkanUdy_S313Ak9TiDT7YEHKVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 08:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cc:01:fb:eb:9c:3a:92:98:20:15:1e:3f:c3:15:b3:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6491a9d4772fd2df5dc093d4e20d3ed81072957
        Validity
            Not Before: Aug  4 09:01:49 2026 GMT
            Not After : Aug  5 09:01:49 2026 GMT
        Subject: CN=71384b790be315bc5c140fa711c17d9d3e38a6f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:23:36:4c:62:41:fc:84:d6:15:84:50:c8:dd:
                    94:41:e4:b5:f8:15:43:25:69:d9:b1:c0:59:b0:a7:
                    c3:6a:fe:af:3c:01:7f:60:e9:41:2b:9a:dd:2b:5a:
                    be:07:b2:73:e7:b3:05:7c:ca:cc:55:79:77:67:5a:
                    8b:ec:0c:fa:5a:4e:eb:f1:ae:d1:7a:c0:84:15:10:
                    39:c1:c4:fb:2a:c3:bc:5d:53:b5:4a:46:a8:84:c8:
                    58:d8:46:f1:50:91:37:1c:24:87:d7:86:0f:ff:14:
                    ad:0c:37:aa:88:0f:71:10:ca:6f:41:fe:fb:c2:32:
                    d0:4f:22:26:37:5a:89:60:07:0c:d2:76:88:0f:c8:
                    19:64:11:dc:d1:e6:a9:74:b7:3c:7e:e1:3a:6b:0f:
                    0f:a7:89:bd:3d:92:63:da:e6:52:fc:2f:e2:77:03:
                    18:ff:0b:66:36:dd:63:61:ab:30:84:dc:43:8c:84:
                    ed:d9:31:b9:bc:d7:47:89:1c:c4:69:e6:36:4d:3d:
                    e5:69:d5:fd:12:0a:52:fa:c3:41:6a:15:2d:4b:1e:
                    b4:0d:6f:49:d8:11:63:76:64:7c:a1:c5:98:d4:a4:
                    73:23:5e:76:ec:6c:de:4d:90:1e:c4:b8:92:2c:b8:
                    cd:52:39:88:5c:86:cc:b9:0a:a5:c3:e8:ae:35:78:
                    d3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:38:4B:79:0B:E3:15:BC:5C:14:0F:A7:11:C1:7D:9D:3E:38:A6:F8
            X509v3 Authority Key Identifier:
                keyid:B6:49:1A:9D:47:72:FD:2D:F5:DC:09:3D:4E:20:D3:ED:81:07:29:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkkanUdy_S313Ak9TiDT7YEHKVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c229d8-738a-4117-af59-1093d4973091/1/tkkanUdy_S313Ak9TiDT7YEHKVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c229d8-738a-4117-af59-1093d4973091/1/tkkanUdy_S313Ak9TiDT7YEHKVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:96:c5:0e:d9:2e:fe:7e:22:6d:40:30:97:2c:db:39:02:22:
         52:2e:af:87:4b:59:ed:1d:71:bd:75:c1:8f:3b:6a:fa:fc:77:
         11:8b:3f:e0:84:b3:f0:50:e0:05:85:5e:a9:6b:b2:2f:f0:7a:
         b3:3b:24:1c:01:ad:74:26:3d:ae:b7:9b:80:3b:74:d9:22:d7:
         06:53:11:70:e6:b0:b9:10:b8:f9:e7:b4:ec:e6:9a:72:c3:e3:
         16:57:fb:d0:02:7d:82:d7:b5:cd:52:9c:f8:c0:1c:f2:e0:31:
         e4:e7:14:20:9e:43:23:1f:24:c2:df:01:56:21:e8:44:a0:ba:
         21:e3:6c:b3:83:11:0e:de:79:2e:0b:5a:17:ce:87:c2:d8:11:
         e6:83:14:c5:10:d1:c0:c6:fa:62:2b:3e:53:e0:fb:1f:45:57:
         3c:b3:a2:e6:e6:04:36:fc:eb:c1:84:6e:b7:9e:49:d1:9a:85:
         36:99:42:cd:79:82:0e:fa:08:6a:43:55:ef:54:3e:a0:9c:14:
         de:8d:37:8d:17:ec:80:8e:ab:6b:2b:c7:3e:cb:9e:5f:70:db:
         e7:aa:3e:1a:8b:bd:7b:21:02:d5:59:e1:08:2d:60:e9:9a:88:
         10:f1:28:d1:0e:0a:78:0e:b8:41:87:e1:cc:2e:75:f4:63:dd:
         31:37:59:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/MAfvrnDqSmCAVHj/DFbPcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2NDkxYTlkNDc3MmZkMmRmNWRjMDkzZDRlMjBkM2VkODEw
NzI5NTcwHhcNMjYwODA0MDkwMTQ5WhcNMjYwODA1MDkwMTQ5WjAzMTEwLwYDVQQD
Eyg3MTM4NGI3OTBiZTMxNWJjNWMxNDBmYTcxMWMxN2Q5ZDNlMzhhNmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CM2TGJB/ITWFYRQyN2UQeS1+BVD
JWnZscBZsKfDav6vPAF/YOlBK5rdK1q+B7Jz57MFfMrMVXl3Z1qL7Az6Wk7r8a7R
esCEFRA5wcT7KsO8XVO1SkaohMhY2EbxUJE3HCSH14YP/xStDDeqiA9xEMpvQf77
wjLQTyImN1qJYAcM0naID8gZZBHc0eapdLc8fuE6aw8Pp4m9PZJj2uZS/C/idwMY
/wtmNt1jYaswhNxDjITt2TG5vNdHiRzEaeY2TT3ladX9EgpS+sNBahUtSx60DW9J
2BFjdmR8ocWY1KRzI1527GzeTZAexLiSLLjNUjmIXIbMuQqlw+iuNXjT4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHE4S3kL4xW8XBQPpxHBfZ0+OKb4MB8GA1UdIwQY
MBaAFLZJGp1Hcv0t9dwJPU4g0+2BBylXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGtrYW5VZHlfUzMxM0FrOVRpRFQ3WUVIS1ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9jMjI5ZDgtNzM4YS00MTE3LWFmNTkt
MTA5M2Q0OTczMDkxLzEvdGtrYW5VZHlfUzMxM0FrOVRpRFQ3WUVIS1ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9jMjI5ZDgtNzM4YS00MTE3LWFmNTktMTA5M2Q0OTczMDkx
LzEvdGtrYW5VZHlfUzMxM0FrOVRpRFQ3WUVIS1ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoZbFDtku
/n4ibUAwlyzbOQIiUi6vh0tZ7R1xvXXBjztq+vx3EYs/4ISz8FDgBYVeqWuyL/B6
szskHAGtdCY9rrebgDt02SLXBlMRcOawuRC4+ee07OaacsPjFlf70AJ9gte1zVKc
+MAc8uAx5OcUIJ5DIx8kwt8BViHoRKC6IeNss4MRDt55LgtaF86HwtgR5oMUxRDR
wMb6Yis+U+D7H0VXPLOi5uYENvzrwYRut55J0ZqFNplCzXmCDvoIakNV71Q+oJwU
3o03jRfsgI6rayvHPsueX3Db56o+Gou9eyEC1VnhCC1g6ZqIEPEo0Q4KeA64QYfh
zC519GPdMTdZog==
-----END CERTIFICATE-----
Generated at Tue Aug 4 14:00:53 2026 by rpki-client