Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
File:                     TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft (raw, json)
Hash identifier:          gshbLhOfLfJS05Ndp7VUGg/tOhB4z8WrmkoEaM2WnD0=
Subject key identifier:   15:C7:24:B8:BE:3B:A5:90:72:E3:90:B9:B2:A1:E4:7D:41:39:2B:1A
Authority key identifier: 4C:24:C3:08:B0:24:1C:3B:CC:14:CF:67:77:59:1D:27:23:7F:FA:F1
Certificate issuer:       /CN=4c24c308b0241c3bcc14cf6777591d27237ffaf1
Certificate serial:       019EB6FBE0C7B2ED7EF3A58DC6E801E5A1CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
Manifest number:          0639
Signing time:             Thu 11 Jun 2026 14:00:20 +0000
Manifest this update:     Thu 11 Jun 2026 14:00:20 +0000
Manifest next update:     Fri 12 Jun 2026 14:00:20 +0000
Files and hashes:         1: TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl (hash: I2Vp3mKQ4bC4ZQJHgxUUbrRi9zEMuHpomEXy5ND52pk=)
                          2: i3fwIWYHmrbZ4Q0LfBJoI0pL4eM.roa (hash: lzJAIL587sZVQf8sujo44Gz8CEXrbl2KlNzyp7ldRQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:fb:e0:c7:b2:ed:7e:f3:a5:8d:c6:e8:01:e5:a1:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c24c308b0241c3bcc14cf6777591d27237ffaf1
        Validity
            Not Before: Jun 11 14:00:20 2026 GMT
            Not After : Jun 12 14:00:20 2026 GMT
        Subject: CN=15c724b8be3ba59072e390b9b2a1e47d41392b1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:63:e0:4c:2b:92:1b:96:82:3a:9e:9e:ac:6e:
                    0a:33:c6:8c:73:e4:76:7e:0b:43:41:35:dd:34:4d:
                    8d:9c:18:06:01:c4:9a:13:94:6c:27:ce:1e:c3:7e:
                    8b:08:4e:fc:a6:7d:41:68:ac:3d:23:0b:74:01:3c:
                    e7:fe:9c:72:59:52:2e:19:f4:37:25:f3:da:77:db:
                    df:69:a9:82:1e:49:b0:98:cb:cf:b0:6c:38:1e:8e:
                    1a:6a:33:dd:88:2f:91:29:bf:5e:b2:e3:67:95:84:
                    f0:b7:fd:fe:cd:3e:e9:c7:65:3a:85:db:79:01:7c:
                    9b:73:cb:ec:b9:ed:e9:ef:8f:03:82:c5:1a:e2:40:
                    85:9f:c7:e7:b8:3e:a9:3f:5d:e6:36:87:cd:f2:1a:
                    3e:9e:21:5b:21:66:33:09:bc:c3:0a:20:22:d9:de:
                    e7:0d:18:6f:83:9c:3a:21:e9:80:8a:37:0a:59:79:
                    d6:a9:00:38:ec:34:eb:a8:87:3f:44:2e:0a:60:cb:
                    8a:08:7a:5d:be:79:4e:1f:2c:33:76:f2:d2:9a:22:
                    9e:12:a6:7a:95:f9:4c:12:74:cb:78:64:ef:25:34:
                    57:7d:95:df:e2:f4:13:60:a9:13:57:be:15:c2:52:
                    8c:52:2a:ab:06:40:bc:db:14:98:4b:da:9d:69:ca:
                    4a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C7:24:B8:BE:3B:A5:90:72:E3:90:B9:B2:A1:E4:7D:41:39:2B:1A
            X509v3 Authority Key Identifier:
                keyid:4C:24:C3:08:B0:24:1C:3B:CC:14:CF:67:77:59:1D:27:23:7F:FA:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:1e:96:9b:1a:5d:39:45:fb:20:1d:ef:6e:e8:c0:c4:cc:a3:
         a8:28:e4:37:b3:41:09:fc:4c:8c:cd:40:fd:42:38:98:cc:06:
         55:f4:a4:3e:ec:9b:25:a2:2a:47:61:6c:85:a0:fc:cc:55:80:
         a0:eb:c8:ea:4b:cc:ed:9b:b5:37:ed:34:9c:3e:6e:1e:c3:9c:
         79:9f:78:71:1f:c4:92:4a:c2:f1:67:15:ce:1d:ce:16:58:05:
         16:01:3c:3e:be:e2:8e:d5:ce:72:7e:f4:30:ae:6f:2d:ff:ab:
         64:5b:57:ee:91:5e:75:f2:f7:73:da:8d:2d:62:a4:79:2f:39:
         02:23:83:ad:ee:79:2b:07:f8:2d:9d:fc:a9:5f:95:3c:40:ae:
         df:02:7b:06:68:b8:72:5d:27:88:ab:fc:6c:02:76:7e:43:f9:
         c1:85:ed:8b:15:e4:f2:26:c4:da:7c:ea:1f:5b:8b:d9:2c:6c:
         55:6f:88:c3:65:f5:6e:e1:0a:b8:2d:dd:c6:f2:08:70:31:fc:
         fc:88:b2:5d:b4:ae:2c:de:40:6b:e3:3b:e8:8e:c1:0c:8f:21:
         8f:58:29:50:79:90:db:a3:26:bf:0f:6b:8e:e1:99:40:35:da:
         2e:9b:fa:ae:45:13:37:41:43:8c:1e:97:2f:7c:b6:a9:58:1e:
         69:76:a3:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ62++DHsu1+86WNxugB5aHPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMjRjMzA4YjAyNDFjM2JjYzE0Y2Y2Nzc3NTkxZDI3MjM3
ZmZhZjEwHhcNMjYwNjExMTQwMDIwWhcNMjYwNjEyMTQwMDIwWjAzMTEwLwYDVQQD
EygxNWM3MjRiOGJlM2JhNTkwNzJlMzkwYjliMmExZTQ3ZDQxMzkyYjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymPgTCuSG5aCOp6erG4KM8aMc+R2
fgtDQTXdNE2NnBgGAcSaE5RsJ84ew36LCE78pn1BaKw9Iwt0ATzn/pxyWVIuGfQ3
JfPad9vfaamCHkmwmMvPsGw4Ho4aajPdiC+RKb9esuNnlYTwt/3+zT7px2U6hdt5
AXybc8vsue3p748DgsUa4kCFn8fnuD6pP13mNofN8ho+niFbIWYzCbzDCiAi2d7n
DRhvg5w6IemAijcKWXnWqQA47DTrqIc/RC4KYMuKCHpdvnlOHywzdvLSmiKeEqZ6
lflMEnTLeGTvJTRXfZXf4vQTYKkTV74VwlKMUiqrBkC82xSYS9qdacpKGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBXHJLi+O6WQcuOQubKh5H1BOSsaMB8GA1UdIwQY
MBaAFEwkwwiwJBw7zBTPZ3dZHScjf/rxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVENURENMQWtIRHZNRk05bmQxa2RKeU5fLXZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85MmQ3MTktMGJjMi00YTFlLThiOTQt
NjYxYmIwZTllNmVjLzEvVENURENMQWtIRHZNRk05bmQxa2RKeU5fLXZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85MmQ3MTktMGJjMi00YTFlLThiOTQtNjYxYmIwZTllNmVj
LzEvVENURENMQWtIRHZNRk05bmQxa2RKeU5fLXZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQB6Wmxpd
OUX7IB3vbujAxMyjqCjkN7NBCfxMjM1A/UI4mMwGVfSkPuybJaIqR2FshaD8zFWA
oOvI6kvM7Zu1N+00nD5uHsOceZ94cR/EkkrC8WcVzh3OFlgFFgE8Pr7ijtXOcn70
MK5vLf+rZFtX7pFedfL3c9qNLWKkeS85AiODre55Kwf4LZ38qV+VPECu3wJ7Bmi4
cl0niKv8bAJ2fkP5wYXtixXk8ibE2nzqH1uL2SxsVW+Iw2X1buEKuC3dxvIIcDH8
/IiyXbSuLN5Aa+M76I7BDI8hj1gpUHmQ26Mmvw9rjuGZQDXaLpv6rkUTN0FDjB6X
L3y2qVgeaXajuA==
-----END CERTIFICATE-----
Generated at Thu Jun 11 22:40:51 2026 by rpki-client