Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
File:                     TQreVMJ-b83aziYsT995DzIP7Zw.mft (raw, json)
Hash identifier:          hHNaTObQtfloNjfPHaOLUAXNEgsUtX2qaMveYorYrWY=
Subject key identifier:   4E:AC:82:CC:88:D1:13:95:6D:E2:87:08:91:88:F8:BF:EF:83:46:87
Authority key identifier: 4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
Certificate issuer:       /CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Certificate serial:       019F150350249EEC5CA96B00B6B06FBC7EDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
Manifest number:          198D
Signing time:             Mon 29 Jun 2026 20:12:46 +0000
Manifest this update:     Mon 29 Jun 2026 20:12:46 +0000
Manifest next update:     Tue 30 Jun 2026 20:12:46 +0000
Files and hashes:         1: AHrBc9IiI5rzT7NjkubAdT8SUZY.roa (hash: sAnmMyrh/QNIQf8VgWnCRno2TJ9xZybX3KXlbr+CHB4=)
                          2: DrETaOYFwhHteuK_cjZBqrhBn3E.roa (hash: oyhA6G3HiupfNb3jMCFjOduY9kIjz5cSnNY6U8ENZ7Q=)
                          3: FSkU1zt4wvML2Ttfy8k6I7os8Zs.roa (hash: dq1d/UwLiz9XXEmCgqOT7UCJTR2SgOpkulgHHbWFy0Y=)
                          4: RGZDs7FDHPZQveBdXaR6_RleIaI.roa (hash: f9EpD71aD4s84pzobb8iZVB6jiX1m2KzVjJwHRvpYCg=)
                          5: SIaMK_IuBxRiq7kTvu-I3ZuWh4c.roa (hash: R6bwiZJPSxjQW8oQUMZiQejN/ZuXwmuCXceRWrrSn8c=)
                          6: TQreVMJ-b83aziYsT995DzIP7Zw.crl (hash: lA5+JBBEoS6Pv+SpP37ZNwdRd8oYnJV/oP0f0JGkoZQ=)
                          7: TpE0DuP8Mw6CTXYw4ySwlEKf3f8.roa (hash: IATIDCMEa6O9YiZhEYOaf75cWoMv6GvzQS0vn1Zk4es=)
                          8: jXuAqsPHXvSfZGYgxhNksOYSF5U.roa (hash: yaNveVmpBlc0ed50geLDpHfxvb9X4WQOsQ1rbbUocCI=)
                          9: nYp3_cwZdOz_BuJRO8waybMbYvE.roa (hash: WJbnF4/GV3sKMU67v+tU/MzKdfAphkSSw1EOxJcBQnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 14:12:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:15:03:50:24:9e:ec:5c:a9:6b:00:b6:b0:6f:bc:7e:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
        Validity
            Not Before: Jun 29 20:12:46 2026 GMT
            Not After : Jun 30 20:12:46 2026 GMT
        Subject: CN=4eac82cc88d113956de287089188f8bfef834687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b1:47:96:48:dd:48:9c:3d:a6:3d:69:de:53:
                    f5:e6:71:e1:2b:1c:56:c4:e7:44:45:d7:a3:3e:56:
                    1e:7d:21:2e:95:e8:e7:82:48:9c:cc:40:1e:67:4f:
                    14:c4:9b:47:a2:35:5f:b0:a4:71:41:00:28:91:f5:
                    d8:21:1d:f7:a6:b8:df:c4:3a:b0:95:1b:be:26:8b:
                    bf:15:3a:5f:26:7f:40:19:ae:ab:94:cd:e3:24:cd:
                    00:c7:47:6b:d8:45:b7:5e:34:07:15:0f:ba:26:06:
                    58:48:56:c7:44:7d:70:f6:44:5a:88:44:43:0f:81:
                    62:30:fc:57:49:c1:3b:04:cd:cf:7e:ed:31:78:8c:
                    d8:51:ba:62:d5:ea:c5:8b:80:87:07:66:10:2a:c2:
                    7c:52:5d:f2:3b:50:d4:aa:8b:ee:87:6b:c5:2d:ce:
                    99:e7:41:0d:86:9d:d5:d5:88:1e:3b:d4:9e:43:10:
                    04:e5:43:a4:8b:77:d3:71:a1:0c:e6:37:b7:e5:38:
                    8c:b4:e6:83:17:57:1e:f8:6f:65:a4:cf:e2:af:22:
                    ec:1c:20:9b:03:33:50:c7:ff:a4:f8:b5:ff:fc:6a:
                    b3:aa:12:7e:ef:2c:4f:5c:7b:74:04:12:2a:f6:a2:
                    7d:38:ba:a3:22:96:22:9e:f4:5c:c4:ed:02:2d:48:
                    c8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:AC:82:CC:88:D1:13:95:6D:E2:87:08:91:88:F8:BF:EF:83:46:87
            X509v3 Authority Key Identifier:
                keyid:4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:dc:26:6b:c3:a5:02:6f:68:80:58:8d:25:bb:e8:9f:85:9f:
         d2:65:9a:eb:ee:fe:e5:b2:af:2e:a3:52:48:77:85:39:58:49:
         6a:fa:83:1b:e7:f9:f2:e3:af:d0:85:da:11:b4:65:6e:c2:df:
         1b:db:50:58:40:87:44:48:9b:44:f8:a8:93:b4:ae:a6:10:40:
         93:a4:b4:9d:02:22:12:c6:30:47:04:fe:09:7f:bb:00:43:61:
         83:c2:97:e4:33:77:84:8c:de:1e:69:af:63:05:9f:8a:00:5f:
         27:8c:f1:1d:d7:87:6e:70:a8:98:a7:8f:16:a8:b5:de:29:03:
         8a:3d:1f:db:3b:63:df:ec:20:6f:1c:49:ec:55:7f:03:4d:81:
         5b:3f:74:bc:59:9a:3a:af:78:56:52:3b:f2:e0:fa:86:17:d8:
         c4:9f:f1:1b:f2:ce:ee:2e:8a:0e:f8:87:6d:e6:a2:16:ff:27:
         4c:79:5b:06:cb:5d:c4:8c:83:0f:75:d8:43:9a:29:32:97:16:
         28:3f:54:59:e3:33:06:bc:b3:15:3d:af:8a:06:2d:b7:6d:d1:
         eb:94:67:70:19:8b:ce:58:fc:b1:e9:6c:21:14:b9:0f:c4:b8:
         d7:cd:bc:91:b6:9c:08:56:d5:d1:64:46:5b:3b:38:69:80:e3:
         77:75:d3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 23:12:15 2026 by rpki-client