Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
File:                     TjwBugxcvyCuPpPKPTeeYt9clZo.mft (raw, json)
Hash identifier:          0c1WXAvaFQa/32mGXZrces+wncKc3w2/2qchOx2lOgE=
Subject key identifier:   71:EA:AA:75:EC:3F:F4:55:A8:93:2A:30:8E:5A:96:72:87:E1:B6:F3
Authority key identifier: 4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A
Certificate issuer:       /CN=4e3c01ba0c5cbf20ae3e93ca3d379e62df5c959a
Certificate serial:       019F295B525C2AB8B01F4D5CA3BAD4C8F6EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
Manifest number:          1991
Signing time:             Fri 03 Jul 2026 19:01:18 +0000
Manifest this update:     Fri 03 Jul 2026 19:01:18 +0000
Manifest next update:     Sat 04 Jul 2026 19:01:18 +0000
Files and hashes:         1: FjQD5obfjitF4TyVNiOnrUuu6ko.roa (hash: 4qN5nXtzPSFJUF4nfX9RAWVMRw9xA5tlQvP0vuood6U=)
                          2: TjwBugxcvyCuPpPKPTeeYt9clZo.crl (hash: O7nfwipp68VojM/RFPtTtSt3wVQumc9KurbWEOIoI+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 Jul 2026 19:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:29:5b:52:5c:2a:b8:b0:1f:4d:5c:a3:ba:d4:c8:f6:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e3c01ba0c5cbf20ae3e93ca3d379e62df5c959a
        Validity
            Not Before: Jul  3 19:01:18 2026 GMT
            Not After : Jul  4 19:01:18 2026 GMT
        Subject: CN=71eaaa75ec3ff455a8932a308e5a967287e1b6f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8f:90:c9:69:54:12:17:d1:f7:60:7d:2b:b1:
                    f8:25:6c:15:f5:96:c1:79:f3:86:99:f4:f0:65:d6:
                    fa:44:2d:50:cc:1a:30:fb:26:0e:2c:87:e7:0b:20:
                    83:aa:5f:ba:6b:d9:9f:27:9f:55:4b:e7:18:9d:dc:
                    04:e9:ca:bc:be:51:03:9e:76:46:1c:10:4e:d8:71:
                    f5:a3:32:8b:ad:61:63:e1:c3:b1:ee:61:36:6d:12:
                    ac:5a:e1:0f:97:31:ad:ff:29:2e:cd:06:16:3e:fd:
                    84:c2:5e:b4:56:6a:c1:50:02:a3:56:a4:c9:e7:94:
                    b7:e8:0d:2f:9e:e4:8c:ed:12:11:76:27:cf:b6:c0:
                    49:3c:66:17:31:2f:06:1e:00:69:34:a0:60:b8:a3:
                    a0:e4:17:7c:e7:b9:95:d6:f0:67:14:be:c4:6e:63:
                    dc:9d:3f:f8:37:ae:c6:e2:67:73:db:31:bb:46:19:
                    e3:91:12:7c:d1:91:c8:d1:99:fc:d7:ef:18:fc:65:
                    50:62:9d:9d:cd:db:2f:45:8a:74:a5:92:e4:c5:28:
                    22:a6:bd:5f:8f:66:6a:03:86:45:61:1d:6c:f7:da:
                    46:7f:65:b9:6d:7a:02:e7:d0:e6:d9:bd:49:fd:28:
                    fb:d0:45:27:27:a7:72:e7:45:44:a5:d5:35:86:fc:
                    cb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:EA:AA:75:EC:3F:F4:55:A8:93:2A:30:8E:5A:96:72:87:E1:B6:F3
            X509v3 Authority Key Identifier:
                keyid:4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:34:c0:73:f9:61:e0:6d:4d:a3:5e:1d:82:2e:c1:f8:35:bd:
         8d:bb:2e:3e:de:a3:3e:53:49:e4:2e:7a:b9:84:5b:2b:75:0a:
         a0:a5:0f:f6:b9:90:9e:19:2d:69:e5:87:76:92:f6:76:0b:a2:
         09:d8:89:a4:1c:6d:9b:3c:f7:48:2c:f9:9a:56:21:96:67:04:
         c3:0d:1a:76:b7:8c:fb:a4:49:eb:33:95:50:ce:bd:2c:40:bc:
         fb:b3:7f:21:57:7f:43:20:c5:79:0c:37:f2:9f:33:e7:9f:91:
         f5:84:49:12:fe:d8:39:da:cc:d0:3d:50:4d:e5:6f:37:b8:e4:
         ac:b1:ad:67:a5:ff:0e:2d:c9:62:9b:f6:9e:03:a4:4d:a5:d3:
         0a:cc:56:85:f0:31:d1:b9:6a:49:b8:7b:26:82:6f:0f:06:3d:
         8d:46:f3:a4:b2:46:57:51:63:10:58:94:7e:70:10:21:a6:d1:
         7c:47:1c:86:f4:3b:1f:43:4b:7b:27:a3:d0:99:fb:11:79:b5:
         4d:76:e3:84:c4:5d:8e:75:68:de:b4:a9:42:2c:78:b2:39:8a:
         ad:86:02:77:12:77:d3:38:cd:70:9a:c0:c7:80:86:db:4a:87:
         6d:e3:8b:a6:4a:a9:7a:58:57:5c:d2:0f:14:cb:24:e8:d2:16:
         a6:3e:96:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 21:45:25 2026 by rpki-client