Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/c229d8-738a-4117-af59-1093d4973091/1/tkkanUdy_S313Ak9TiDT7YEHKVc.mft
File:                     tkkanUdy_S313Ak9TiDT7YEHKVc.mft (raw, json)
Hash identifier:          nSsFe04HQiyw+uZBmlTC04/4VT+BzVD1cmelDksokho=
Subject key identifier:   B3:65:3A:DB:72:9C:8E:E0:CF:43:36:B0:F4:C7:D8:92:1F:E5:7B:33
Authority key identifier: B6:49:1A:9D:47:72:FD:2D:F5:DC:09:3D:4E:20:D3:ED:81:07:29:57
Certificate issuer:       /CN=b6491a9d4772fd2df5dc093d4e20d3ed81072957
Certificate serial:       019EDC89AD691F09767986155863AA572397
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tkkanUdy_S313Ak9TiDT7YEHKVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/c229d8-738a-4117-af59-1093d4973091/1/tkkanUdy_S313Ak9TiDT7YEHKVc.mft
Manifest number:          C0
Signing time:             Thu 18 Jun 2026 21:01:10 +0000
Manifest this update:     Thu 18 Jun 2026 21:01:10 +0000
Manifest next update:     Fri 19 Jun 2026 21:01:10 +0000
Files and hashes:         1: QyZsEO3bLQ3YXF28rvX5z3mE5oo.roa (hash: 4EvUaJPraxAe7s9f0hydZpLjgIHAJ4GNcSXocUv5gQM=)
                          2: tkkanUdy_S313Ak9TiDT7YEHKVc.crl (hash: vVVcSyDpPFz6agXEDyEmESnGlVJq02d0vHSRDUYpqg8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/c229d8-738a-4117-af59-1093d4973091/1/tkkanUdy_S313Ak9TiDT7YEHKVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/c229d8-738a-4117-af59-1093d4973091/1/tkkanUdy_S313Ak9TiDT7YEHKVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tkkanUdy_S313Ak9TiDT7YEHKVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Jun 2026 20:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:dc:89:ad:69:1f:09:76:79:86:15:58:63:aa:57:23:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6491a9d4772fd2df5dc093d4e20d3ed81072957
        Validity
            Not Before: Jun 18 21:01:10 2026 GMT
            Not After : Jun 19 21:01:10 2026 GMT
        Subject: CN=b3653adb729c8ee0cf4336b0f4c7d8921fe57b33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c6:19:41:c4:0e:64:ec:a5:e5:4e:26:61:05:
                    8b:5c:f3:58:e1:9f:43:ce:d2:41:0d:2b:a3:39:54:
                    64:e7:cd:a2:7b:a3:83:65:93:2d:28:cb:6e:fe:b7:
                    cd:50:c3:4c:73:4e:43:13:c9:8b:df:e1:90:b2:3a:
                    7b:a9:2e:dd:6e:88:43:3c:08:5d:c6:e5:54:6f:75:
                    87:ed:aa:ce:9e:7c:68:8b:9e:81:84:f4:40:7a:4f:
                    4f:0d:07:25:60:77:70:5a:79:81:76:5f:e3:27:28:
                    30:d5:f4:32:e2:1b:82:ee:4d:7b:dc:c5:a0:bf:f8:
                    76:fa:fa:cb:00:0b:58:a5:1a:46:04:40:dc:95:63:
                    15:c3:e0:4a:5b:9a:f4:7a:a8:b5:d0:7b:a3:dd:3e:
                    f3:7d:17:40:d9:a5:cb:9c:bd:74:db:53:65:cc:b1:
                    e3:b0:41:76:2b:37:ba:86:01:9d:a4:dc:2f:d1:6f:
                    88:72:2f:01:70:0c:80:7b:92:6d:8e:12:1b:d2:f2:
                    79:6c:1c:85:2b:9a:b3:66:7a:f0:16:3d:44:3d:b0:
                    06:d4:85:7e:4c:88:79:0c:8b:8c:18:10:da:42:9b:
                    54:68:5f:eb:b8:d9:2c:f9:ee:20:dd:89:03:38:55:
                    d7:08:04:ed:fb:a6:68:b8:f4:37:77:4d:8f:bf:57:
                    02:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:65:3A:DB:72:9C:8E:E0:CF:43:36:B0:F4:C7:D8:92:1F:E5:7B:33
            X509v3 Authority Key Identifier:
                keyid:B6:49:1A:9D:47:72:FD:2D:F5:DC:09:3D:4E:20:D3:ED:81:07:29:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkkanUdy_S313Ak9TiDT7YEHKVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c229d8-738a-4117-af59-1093d4973091/1/tkkanUdy_S313Ak9TiDT7YEHKVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c229d8-738a-4117-af59-1093d4973091/1/tkkanUdy_S313Ak9TiDT7YEHKVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:f0:7d:29:27:a1:de:95:65:f3:30:fd:ac:07:de:40:9e:9f:
         e9:08:60:21:30:63:ac:d6:57:0e:56:19:fa:80:1d:c4:2c:30:
         37:df:46:6f:ad:7b:e4:f1:6c:09:66:cc:dc:af:c1:86:92:e3:
         2f:f7:40:48:5c:06:5f:56:bc:37:70:54:bb:79:22:0c:da:39:
         59:7a:be:cb:9f:01:cb:5c:c0:2f:cd:aa:11:f2:11:26:2a:a8:
         75:07:e5:7b:46:1c:97:f2:5f:d6:dd:b5:e4:fd:9c:35:c2:cd:
         5f:6c:6b:b2:55:71:fd:46:28:ba:06:4c:ae:ea:4d:c6:c1:0b:
         fa:64:c6:14:05:a0:1f:88:52:8a:35:4c:ba:06:e6:67:bc:cc:
         4f:e2:f5:eb:7c:4a:f4:8b:fd:dd:57:4c:3c:7f:70:55:98:ef:
         df:01:fe:8e:cd:5d:fb:e0:9f:a6:67:5e:68:84:74:49:7c:0a:
         96:9c:40:5a:1e:08:80:0b:b2:0a:80:31:aa:69:5d:95:97:34:
         0e:1b:4f:56:55:8f:11:b8:25:37:0d:2b:af:4c:a1:2d:93:ea:
         c5:ae:7a:fa:aa:02:4e:44:0d:ae:c3:56:1e:94:ea:45:37:83:
         2d:12:c6:c9:15:fb:2d:c5:09:f7:47:b8:aa:a9:3d:5a:23:3e:
         a2:68:55:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 04:38:52 2026 by rpki-client