Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
File:                     TJMhPYj6h060Rg4sXPG7GpHakHg.mft (raw, json)
Hash identifier:          bwCnMAh/kX4SCNZ+ibBFPOJLuMkrH5W7tAZaTfGIjHw=
Subject key identifier:   74:0D:3E:AE:35:16:51:2A:8E:33:89:C5:D0:9E:0A:71:79:CF:29:C0
Authority key identifier: 4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78
Certificate issuer:       /CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
Certificate serial:       019DDC558F837A5F8EA6435C1BDAB07F2E4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
Manifest number:          18E6
Signing time:             Thu 30 Apr 2026 03:01:27 +0000
Manifest this update:     Thu 30 Apr 2026 03:01:27 +0000
Manifest next update:     Fri 01 May 2026 03:01:27 +0000
Files and hashes:         1: 1SMtyrFP6eFZxMb7PZMbKYGMJi8.roa (hash: XxgHh0JzLHhNi3/TyAFFwO5EFUtAwR/nBi3ICijq0Hg=)
                          2: TJMhPYj6h060Rg4sXPG7GpHakHg.crl (hash: Je1PbkhhtF2BK/3MYsiE5qceUO1JTb6XZXchR6zWIJQ=)
                          3: Xb_xBMYO16QsavZuo57UMH_pTFY.asa (hash: pTF5yNZXnsPsUoT0zDPJu+l24+9PSGN9YfP8M+7/BDA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 03:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:dc:55:8f:83:7a:5f:8e:a6:43:5c:1b:da:b0:7f:2e:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
        Validity
            Not Before: Apr 30 03:01:27 2026 GMT
            Not After : May  1 03:01:27 2026 GMT
        Subject: CN=740d3eae3516512a8e3389c5d09e0a7179cf29c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:27:50:b1:53:3c:95:ee:71:b4:4b:b7:4f:fb:
                    64:8f:0b:b8:6c:b4:19:d1:a9:d9:19:7e:f1:0e:12:
                    a7:cc:7b:f9:2e:76:bf:11:9d:44:a1:2c:49:4c:fa:
                    4a:a8:bf:ad:2a:d1:88:b8:0c:8a:b0:b4:aa:34:17:
                    d0:3e:1b:e7:08:f3:4a:9e:2b:81:53:3d:94:44:90:
                    4d:f0:d5:78:cf:70:2c:a3:54:15:27:08:b0:6b:86:
                    d5:a2:73:5d:81:7b:d7:06:98:f1:bd:b7:37:88:80:
                    75:aa:a8:71:cd:e0:59:3e:ae:a1:fb:7c:53:f0:9e:
                    43:4b:c4:c0:9a:1f:b2:1a:ea:c6:86:9d:96:ff:33:
                    53:eb:18:5f:5e:b1:39:a1:c5:bc:67:24:9e:b7:38:
                    8a:c2:6b:ce:95:56:7d:7c:d1:b5:07:ca:66:89:11:
                    36:d5:42:0f:00:7c:26:ff:c7:f7:70:ca:2a:83:e6:
                    97:89:42:17:d6:ea:3b:51:7e:41:5d:61:29:15:69:
                    5f:f6:8e:59:38:19:27:89:cc:e9:9b:01:06:36:20:
                    1b:18:45:41:4a:bf:44:f0:dd:c2:f7:f3:c9:36:62:
                    6f:cd:7b:dd:71:75:47:0d:ed:b3:af:5a:37:4c:ff:
                    43:a6:79:2e:38:f5:27:ca:3a:35:59:44:94:44:0b:
                    de:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:0D:3E:AE:35:16:51:2A:8E:33:89:C5:D0:9E:0A:71:79:CF:29:C0
            X509v3 Authority Key Identifier:
                keyid:4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:c8:8b:ad:81:02:7f:2e:42:6c:2d:0e:81:27:1e:c3:81:25:
         a9:e2:11:79:8b:05:3e:17:31:20:56:12:cb:33:6d:54:cf:45:
         b6:ff:61:5e:a8:2d:4f:fa:bf:ed:e2:d5:8d:ef:f5:78:2f:d2:
         31:fc:93:d8:66:c1:b2:17:84:70:f3:31:ec:80:95:c9:aa:11:
         be:fa:e6:c2:ed:06:0c:0b:b0:57:38:68:4d:8e:af:ac:ae:da:
         2d:fc:a4:28:79:de:dd:39:d9:c8:33:c5:d6:68:7d:a0:e6:a5:
         72:e9:61:64:ca:b0:95:9b:e9:2d:a3:82:68:c8:e5:9e:e0:00:
         b8:c5:05:dd:88:f8:fe:99:28:d6:c8:b0:85:d3:e0:d6:10:e4:
         85:a2:bc:38:d2:09:f4:7d:1e:52:d2:5a:a9:0d:3b:9d:ce:98:
         cd:55:57:3d:6a:17:05:1a:72:ef:26:2e:ec:94:17:ef:8b:1a:
         c8:8e:c6:72:e1:11:db:ef:87:e8:06:19:d3:f3:30:aa:20:4b:
         ff:ba:c9:e7:1c:bf:b3:15:f6:6e:b8:6a:fb:ae:3d:f0:00:25:
         a1:ba:01:13:77:f7:cd:a0:33:e6:fd:09:e9:48:30:25:d4:6b:
         18:1e:3e:3a:a7:93:06:21:4c:41:8a:e3:ea:12:20:ad:f5:f0:
         d0:2d:31:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:49:19 2026 by rpki-client