Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
File:                     TecEA8nS15Ys8RPZPEYvlJPYc2I.mft (raw, json)
Hash identifier:          rBw8qj6FkCC2f+AhGx8EbE8BTQV7fK8a3M0uUM/ceM8=
Subject key identifier:   BC:20:80:5D:E8:32:22:CC:91:4C:6A:B2:4E:1D:F1:B2:3D:00:76:2E
Authority key identifier: 4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62
Certificate issuer:       /CN=4de70403c9d2d7962cf113d93c462f9493d87362
Certificate serial:       019F15D4040BA8CF5888F42198F3DD2933AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
Manifest number:          1986
Signing time:             Tue 30 Jun 2026 00:00:43 +0000
Manifest this update:     Tue 30 Jun 2026 00:00:43 +0000
Manifest next update:     Wed 01 Jul 2026 00:00:43 +0000
Files and hashes:         1: TecEA8nS15Ys8RPZPEYvlJPYc2I.crl (hash: pYl/LZ4FzK+5TC+lvUddaoWeS8BpzTShbV17qEiTNpA=)
                          2: uhDIc0uEZUElVgS-_EocXKCrnM4.roa (hash: Q1EY9r/YhBigZO4RXwGxgcBbj+7/3SMubwYfDCdrIGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 21:41:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:15:d4:04:0b:a8:cf:58:88:f4:21:98:f3:dd:29:33:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4de70403c9d2d7962cf113d93c462f9493d87362
        Validity
            Not Before: Jun 30 00:00:43 2026 GMT
            Not After : Jul  1 00:00:43 2026 GMT
        Subject: CN=bc20805de83222cc914c6ab24e1df1b23d00762e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a5:be:37:75:1e:b3:8a:b8:1a:02:ef:74:12:
                    82:95:0b:08:7a:4b:c1:71:2b:9f:9b:ec:c7:fb:41:
                    7e:a3:04:3b:2d:a7:b5:c0:c4:d5:43:8e:f0:ea:81:
                    97:1a:3a:80:2f:57:54:af:21:b4:8e:74:5e:34:53:
                    40:3d:1d:85:bf:9a:94:c8:4a:71:6d:0e:62:04:c1:
                    97:27:7b:b7:30:7f:f7:66:73:0a:37:f4:fa:79:c8:
                    74:63:80:32:34:27:a1:26:56:f2:ba:0b:5e:39:a3:
                    b7:ea:57:d7:05:86:56:f1:17:19:4b:a5:47:5c:ca:
                    62:13:42:76:3d:a2:40:0d:4f:69:ce:7d:3e:fe:b5:
                    45:9e:19:b9:59:b7:f6:54:22:ee:ad:99:e1:45:d4:
                    fd:ce:48:90:1f:94:83:f4:bb:fd:18:b1:79:7f:da:
                    25:6b:af:d7:ac:d7:06:ca:23:40:3c:28:26:e7:68:
                    09:50:17:97:ba:38:b9:5b:45:2d:ec:5d:c9:0f:ae:
                    b8:55:9d:ea:4f:e9:d2:20:e5:07:ab:67:3e:b7:0d:
                    8a:72:7f:52:18:27:d6:71:10:88:73:f7:96:cc:99:
                    1c:2f:77:f3:8e:7e:a6:c1:d9:40:9a:89:47:c0:10:
                    f6:4a:ad:3e:f3:19:fb:a9:e5:7e:73:ac:50:de:f4:
                    a8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:20:80:5D:E8:32:22:CC:91:4C:6A:B2:4E:1D:F1:B2:3D:00:76:2E
            X509v3 Authority Key Identifier:
                keyid:4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:2e:0c:ab:a3:74:43:df:e1:94:fe:07:34:26:ec:87:dc:68:
         0e:3f:1b:95:4f:2e:1c:a2:7d:68:6c:7c:b1:df:53:d9:43:df:
         3b:63:8e:67:2b:00:e7:b1:34:29:bf:af:a8:64:65:c0:cb:4d:
         0b:5e:80:49:60:49:48:fa:2b:4b:8b:e2:8b:4e:6e:19:75:c6:
         cc:d2:23:e4:0e:56:ab:ef:0d:ee:55:bb:58:d5:77:be:3e:3a:
         34:6a:e5:90:fa:21:1d:00:2f:a9:ad:da:19:b1:ef:03:68:d8:
         7e:27:54:33:52:22:cd:8c:6c:86:57:a1:45:d5:6e:4f:c5:bd:
         1c:a4:4b:c7:7f:4e:b9:d2:51:94:b0:b7:ea:27:85:b3:9a:46:
         aa:56:8e:7f:a9:f1:1d:cf:6e:e1:38:14:69:f2:aa:98:09:d0:
         85:14:a2:ac:19:57:bb:f2:da:e4:1c:c4:4f:57:77:44:65:bd:
         b3:2c:d7:a0:a3:70:17:c7:73:59:17:3c:4c:28:46:5b:21:84:
         d0:90:1f:1f:5e:f5:f4:1a:6a:c1:5c:71:9d:53:e7:47:83:a1:
         ab:af:ae:dd:ea:20:69:a5:7a:1a:8d:ad:3e:50:2e:7f:bd:f1:
         e6:73:ac:61:b1:37:26:b8:f9:0d:82:f1:ae:c0:bc:85:16:4f:
         cf:36:34:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 03:13:05 2026 by rpki-client