Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
File:                     TtMkzMCQuDGCmReur3ODTwg0Ss4.mft (raw, json)
Hash identifier:          cbpiCC5qFe1OKRRJ9cjTShFIHHZxls/Vg+9Ie7bmjZI=
Subject key identifier:   47:81:80:68:25:8F:70:3D:66:FC:00:42:DF:B2:2F:B9:52:1A:F2:83
Authority key identifier: 4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE
Certificate issuer:       /CN=4ed324ccc090b831829917aeaf73834f08344ace
Certificate serial:       019EB6C5DD8A37B0B6CE9E44F88CDFD2E50B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
Manifest number:          0465
Signing time:             Thu 11 Jun 2026 13:01:20 +0000
Manifest this update:     Thu 11 Jun 2026 13:01:20 +0000
Manifest next update:     Fri 12 Jun 2026 13:01:20 +0000
Files and hashes:         1: C6nXsG6UDvJjYHmVMk3MguMztUw.roa (hash: DZ6jiw9DI8ZM7KfN0j9o/vZRidGddKGFVOWlQEbKrbI=)
                          2: TtMkzMCQuDGCmReur3ODTwg0Ss4.crl (hash: beTngl08H2heBwXuM+bwREjgBglUjOql8TG7E66o6E8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:c5:dd:8a:37:b0:b6:ce:9e:44:f8:8c:df:d2:e5:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ed324ccc090b831829917aeaf73834f08344ace
        Validity
            Not Before: Jun 11 13:01:20 2026 GMT
            Not After : Jun 12 13:01:20 2026 GMT
        Subject: CN=47818068258f703d66fc0042dfb22fb9521af283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f8:fe:de:01:d6:f1:65:de:0c:f4:35:f5:f1:
                    bb:33:0f:ed:3d:7e:cf:3a:71:f2:02:2b:3d:69:e3:
                    60:c5:64:02:63:f0:07:bd:2f:19:09:6d:cf:c5:74:
                    79:e9:fb:ff:c9:ae:74:1f:1f:a3:0a:24:da:3c:3c:
                    b4:ea:24:94:2e:6d:f5:b4:2e:f1:01:20:13:97:12:
                    3e:48:9f:a8:93:1c:d2:44:3b:38:53:a4:bc:f7:a8:
                    d6:4f:50:46:a4:87:f2:5b:f1:7f:59:69:93:9c:f2:
                    ad:f4:df:b2:38:e3:eb:bb:35:7d:ab:a3:42:f8:b6:
                    54:f1:32:da:98:3e:c8:7b:fe:62:b9:fe:ed:75:3d:
                    3a:69:15:4a:ca:f9:66:75:b1:94:3f:0a:c7:b1:df:
                    b5:13:9c:d9:92:49:63:99:f7:21:95:bf:58:15:59:
                    93:ac:36:7a:8b:17:37:35:0e:84:20:6c:be:9d:17:
                    36:4d:68:51:7d:d4:08:f8:2e:41:8c:72:80:74:c4:
                    c8:fb:c3:ae:2b:80:37:16:e5:1a:e5:46:a0:2f:03:
                    7f:0e:7a:be:78:67:10:8f:7c:f0:c1:e9:b2:f6:0e:
                    d2:0c:db:4c:5c:8f:19:16:a4:ca:25:df:be:fc:05:
                    b6:31:79:20:40:9f:69:c1:7b:95:df:30:ae:ef:84:
                    18:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:81:80:68:25:8F:70:3D:66:FC:00:42:DF:B2:2F:B9:52:1A:F2:83
            X509v3 Authority Key Identifier:
                keyid:4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:0c:ef:72:5e:d5:39:8d:c0:f6:b0:0b:92:ba:56:72:8c:85:
         fb:b2:7b:9a:dc:42:51:f9:d9:db:d4:f2:ec:de:2c:fe:8b:19:
         94:bd:de:64:96:2a:8d:92:9e:9b:52:31:8c:d3:c2:33:53:ea:
         fa:c2:4b:2b:56:9e:3e:a6:b6:83:34:e5:62:86:a4:66:46:4e:
         15:44:ff:e6:8f:25:93:53:43:b8:76:73:a5:86:44:c8:b6:a5:
         d7:0c:58:c4:82:ae:19:06:d4:57:7d:77:15:bb:79:61:ae:29:
         1c:07:71:e0:ce:af:25:b6:8a:b8:32:e0:e2:b6:35:6e:a5:37:
         98:00:d7:a6:2e:cc:55:f7:60:6a:cd:fc:8a:ab:f9:6d:9f:08:
         a3:68:19:e4:d5:48:b4:a0:dc:6f:38:e4:19:dc:a4:96:c8:78:
         ac:80:b9:ce:80:e5:f1:59:5a:d8:3b:78:66:5b:83:8d:51:5b:
         82:7d:79:68:6a:23:b5:6c:11:ea:c4:00:a1:77:ba:70:64:82:
         8f:0b:f7:74:13:89:d3:7c:cb:5f:0b:2d:7c:21:aa:bc:a4:22:
         b0:11:ae:75:52:c3:81:2b:1d:68:28:ab:b9:df:65:3a:14:9f:
         92:79:b6:a0:4c:96:12:4f:ce:13:56:ee:f7:db:ac:7d:a5:c8:
         6e:d8:4c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:02:14 2026 by rpki-client