Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/87354c-9ad5-46bc-9576-6ce0214dc32b/1/Tsttw-UAFuqmq8aTDufgFjD0dxQ.mft
File:                     Tsttw-UAFuqmq8aTDufgFjD0dxQ.mft (raw, json)
Hash identifier:          gXp0MrTwUTOdYZ8styuqyYxImC8KJi6lplRcE8Kx5hQ=
Subject key identifier:   2B:C5:4D:FF:19:C6:68:EB:16:3E:95:97:3D:61:D2:A7:4A:1B:F9:49
Authority key identifier: 4E:CB:6D:C3:E5:00:16:EA:A6:AB:C6:93:0E:E7:E0:16:30:F4:77:14
Certificate issuer:       /CN=4ecb6dc3e50016eaa6abc6930ee7e01630f47714
Certificate serial:       019E1CEBBEBB8B299BA9F8AF7FA4D719029C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tsttw-UAFuqmq8aTDufgFjD0dxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/87354c-9ad5-46bc-9576-6ce0214dc32b/1/Tsttw-UAFuqmq8aTDufgFjD0dxQ.mft
Manifest number:          78
Signing time:             Tue 12 May 2026 16:01:12 +0000
Manifest this update:     Tue 12 May 2026 16:01:12 +0000
Manifest next update:     Wed 13 May 2026 16:01:12 +0000
Files and hashes:         1: Tsttw-UAFuqmq8aTDufgFjD0dxQ.crl (hash: +SSRRZnc/1CYYrzn9pVbQcn4Sw9lINZsu5osYzRkrag=)
                          2: ZY_YEbzrL_E-ZuZ3jIioPCydmlA.roa (hash: ilm5jQB9YySdwy/kG88g3FsUAj3cR0CDlM5CPaMuF94=)
                          3: pKLU-oXD96BLmopSPcq2hhBz9nU.asa (hash: K+LUZQF/Ots+yaB/LqTL2DJ9BOU+/ZErUIXXL3Msu0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/87354c-9ad5-46bc-9576-6ce0214dc32b/1/Tsttw-UAFuqmq8aTDufgFjD0dxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/87354c-9ad5-46bc-9576-6ce0214dc32b/1/Tsttw-UAFuqmq8aTDufgFjD0dxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tsttw-UAFuqmq8aTDufgFjD0dxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:be:bb:8b:29:9b:a9:f8:af:7f:a4:d7:19:02:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ecb6dc3e50016eaa6abc6930ee7e01630f47714
        Validity
            Not Before: May 12 16:01:12 2026 GMT
            Not After : May 13 16:01:12 2026 GMT
        Subject: CN=2bc54dff19c668eb163e95973d61d2a74a1bf949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:37:38:7d:85:80:c2:a8:e0:45:3a:2c:a3:8d:
                    a5:1e:4f:3f:5f:b7:ce:2f:e5:8a:3f:3a:06:bc:c0:
                    ac:37:f2:54:01:13:58:59:89:98:fd:f4:eb:24:11:
                    38:93:d6:35:a2:0e:60:9c:b6:44:0a:ed:bc:2e:dd:
                    82:d4:2c:2d:42:67:82:62:e4:9b:9e:f1:cc:2d:60:
                    2b:d8:4b:9a:bd:f3:49:e8:58:8b:d4:eb:1e:b5:61:
                    4a:2a:63:c4:9e:b2:21:ad:fa:a6:ef:e3:21:af:a3:
                    9e:ed:d4:09:54:3a:49:1d:d4:02:5a:60:a8:57:3f:
                    9a:df:22:57:01:a9:72:bb:97:8d:23:cf:2a:70:1e:
                    4a:09:ef:31:f9:bf:57:73:ca:f5:2e:6e:47:86:10:
                    96:28:c0:9a:b8:c3:10:ea:bc:8f:60:a5:71:69:4c:
                    df:35:10:b8:1b:60:c7:be:e5:80:d7:de:93:1c:14:
                    c1:8d:6e:c0:85:94:3c:6a:75:8a:44:69:a0:31:b7:
                    e8:b4:83:00:87:96:99:b9:c5:09:71:9d:ad:7d:c6:
                    af:69:c0:d1:ac:93:e1:84:64:81:cb:54:0b:bd:56:
                    9e:29:7b:96:3d:fe:40:c9:4c:84:1b:8e:3d:ef:17:
                    8b:e5:81:cd:40:4d:53:f0:ba:17:03:d3:c7:53:30:
                    a9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C5:4D:FF:19:C6:68:EB:16:3E:95:97:3D:61:D2:A7:4A:1B:F9:49
            X509v3 Authority Key Identifier:
                keyid:4E:CB:6D:C3:E5:00:16:EA:A6:AB:C6:93:0E:E7:E0:16:30:F4:77:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tsttw-UAFuqmq8aTDufgFjD0dxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/87354c-9ad5-46bc-9576-6ce0214dc32b/1/Tsttw-UAFuqmq8aTDufgFjD0dxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/87354c-9ad5-46bc-9576-6ce0214dc32b/1/Tsttw-UAFuqmq8aTDufgFjD0dxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:81:b5:f7:8f:bc:6d:4d:7d:16:4d:cf:4d:be:5c:5a:72:4b:
         59:f0:29:6a:6f:98:c9:ff:25:5c:30:2f:75:d7:cc:26:37:4b:
         3d:9a:ed:10:78:f7:71:91:9a:ef:e9:c6:47:c3:9f:b1:ba:6e:
         de:b2:22:f6:f9:9b:80:cc:57:86:bb:5e:da:7b:d2:c7:f0:03:
         8c:d7:6d:95:b1:35:d1:d7:44:d3:1e:fa:89:d2:92:b7:fe:bb:
         90:8c:9e:1d:1a:0f:3c:e4:56:4d:29:7d:ac:ad:02:83:12:96:
         e4:61:fb:c7:62:09:d8:01:e0:ac:1c:c0:73:ab:80:29:66:32:
         a0:b2:3b:35:ab:13:01:4f:46:06:1a:b6:c5:bd:72:f6:12:a4:
         ec:5c:f8:a1:10:fa:de:7c:ec:61:02:7d:6a:aa:3a:4e:59:a8:
         09:91:8c:d5:f1:4f:31:a7:e1:af:99:48:3c:35:cb:6f:9a:88:
         e6:ac:23:01:d5:59:02:00:12:00:2b:f9:5f:75:95:79:76:2a:
         ac:67:fa:33:37:32:b3:4c:7c:27:19:f4:78:23:3c:d4:a2:b5:
         9f:96:09:10:63:9b:ec:0d:50:eb:95:1e:4a:18:7d:42:d9:54:
         53:2b:05:43:ce:6c:2a:bb:d0:1a:e0:5f:62:15:e3:86:84:d3:
         2c:b9:44:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:42:15 2026 by rpki-client