Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
File:                     Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft (raw, json)
Hash identifier:          l/VPHGjeIAOD7m/xzXJr6Up21wG5t5iYLEQFIbUYhf4=
Subject key identifier:   D3:F9:E5:1F:0A:FA:5E:03:98:E9:FB:80:16:B9:14:D3:43:F8:D8:61
Authority key identifier: 4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA
Certificate issuer:       /CN=4e69b402b67d75936f45dc8bc54b86814e0636ba
Certificate serial:       019F190CE69C8A62743BB6BC613D589AEEE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
Manifest number:          1569
Signing time:             Tue 30 Jun 2026 15:01:43 +0000
Manifest this update:     Tue 30 Jun 2026 15:01:43 +0000
Manifest next update:     Wed 01 Jul 2026 15:01:43 +0000
Files and hashes:         1: LwJo-ZOAga1XsMB6kJmoJhsDKi4.roa (hash: 4U3Q5m4w5gDb99Fndaz4s602DhJvC8d4654L2Zwbqhc=)
                          2: Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl (hash: XwJSM0RDbERAg7TqEgm8NmhFW4RFu8KqzWPX6IXfzMI=)
                          3: mazgd2rK4HfvX3Omu_5x4KeE4q0.roa (hash: VMQzYJR5enDZAjPyu/iICQfNBSPELGmMcOQZHSHcGJw=)
                          4: vMIHGFPf0heT2WpdAxKEA8H1uqY.roa (hash: Y7aS0+OiMr6KF+wJQp4D98bim2LplH1VyBIQ6kJaS6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0c:e6:9c:8a:62:74:3b:b6:bc:61:3d:58:9a:ee:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e69b402b67d75936f45dc8bc54b86814e0636ba
        Validity
            Not Before: Jun 30 15:01:43 2026 GMT
            Not After : Jul  1 15:01:43 2026 GMT
        Subject: CN=d3f9e51f0afa5e0398e9fb8016b914d343f8d861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:84:79:f5:77:5b:89:1c:05:c2:d5:3a:57:d4:
                    ee:b2:36:e5:b3:6b:16:ce:8f:00:25:86:11:0d:d7:
                    15:59:c3:9e:2a:b4:10:4c:76:bc:0d:c3:4e:e0:2f:
                    ea:ae:8e:dd:ef:55:be:3a:74:6f:d4:e2:c7:4d:d9:
                    fd:7b:3c:86:50:c4:c5:5b:ec:18:26:77:4c:95:e9:
                    60:b2:f0:cb:b6:94:8c:c4:7d:da:79:d7:b6:4d:14:
                    c8:47:2f:ef:f3:3f:2e:81:09:0f:c9:61:5f:4a:9a:
                    0e:fd:72:fd:14:7b:bc:7b:8d:b9:c6:c0:8a:92:a9:
                    03:c9:93:ca:c6:51:8e:04:7e:00:f7:fd:76:1a:ac:
                    ee:5c:6b:a1:d4:33:6e:8b:c0:81:fb:3e:3c:35:70:
                    75:f6:3c:2e:f4:0d:49:52:eb:8b:42:50:d1:7f:49:
                    d4:d6:ea:f4:32:e2:e9:94:52:07:c2:ec:f3:e0:b3:
                    7f:00:4f:4b:9b:e5:1b:b1:12:97:8f:bf:4b:05:26:
                    1d:8a:76:dd:48:05:3a:e8:e6:13:84:ae:aa:55:81:
                    b8:af:2d:ae:ef:36:50:9b:4d:fd:42:f9:7a:e3:e9:
                    83:bc:c9:1e:0f:5b:1d:ef:95:32:fb:c2:b1:3a:fe:
                    03:f7:10:07:3b:7e:85:92:6f:72:25:32:77:ce:67:
                    f4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F9:E5:1F:0A:FA:5E:03:98:E9:FB:80:16:B9:14:D3:43:F8:D8:61
            X509v3 Authority Key Identifier:
                keyid:4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:bd:b4:94:f1:aa:d3:cb:0d:f9:c1:98:02:84:59:78:e3:3e:
         ee:c0:31:09:14:7b:26:51:2e:d8:fc:b9:75:79:bd:b9:ac:0a:
         78:f6:d6:45:82:b5:55:2a:73:8e:83:fe:2e:8f:b9:38:ed:4a:
         29:5a:e8:09:2c:1e:0d:41:02:9a:83:6a:b5:89:54:67:89:62:
         f6:a6:f5:61:17:c0:6e:b9:27:a7:01:14:91:38:14:69:ba:07:
         49:a5:16:af:5d:2d:12:65:5d:00:87:f5:fa:0c:bf:72:46:c7:
         ca:7b:6b:15:86:4b:ad:74:c1:7d:2d:2a:0a:73:5d:bf:fb:59:
         a8:e8:f8:4e:3f:ad:59:41:41:69:76:76:5b:4e:e8:a4:03:18:
         56:f4:51:4b:b2:df:02:72:08:1b:68:fd:43:c9:53:c1:45:60:
         f2:8d:42:77:a9:e0:61:90:5f:d5:45:2c:47:b7:60:cf:08:a1:
         40:99:ac:70:51:2a:20:8b:e9:41:a7:93:83:56:99:f3:c2:07:
         48:36:e5:59:75:d6:5b:60:ba:ef:d5:da:89:0f:bd:37:ad:b9:
         0a:af:41:c9:18:f7:55:eb:60:0f:41:60:5b:b1:26:db:44:16:
         38:0d:c0:3b:08:23:a6:74:e5:74:bc:4c:21:ec:5c:1e:0b:1a:
         99:72:49:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:42:25 2026 by rpki-client