Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
File:                     TaTWGZrsgo9pieLoTOwXdlusXNU.mft (raw, json)
Hash identifier:          +pxX+BHjqRD0VHCDJJ5pOuTaMe8S9G8Iy+0m5nt64WQ=
Subject key identifier:   F7:32:0D:B9:D9:6F:FC:A0:78:1C:22:13:42:4C:97:FF:F1:ED:5D:BE
Authority key identifier: 4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
Certificate issuer:       /CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Certificate serial:       019F905A67E1F8BAF0AA6E6692BFA0BC9A43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
Manifest number:          19CD
Signing time:             Thu 23 Jul 2026 19:01:11 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:11 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:11 +0000
Files and hashes:         1: TaTWGZrsgo9pieLoTOwXdlusXNU.crl (hash: Qpo4ZDqqCOFDnqvwIqk0/RoNauDMS36BRmV0NwK4Tlc=)
                          2: TgOSFEfASWDSpD8EkyKS9nujPiY.roa (hash: 0PwFXdbWv8R/ss2S++46JT4vsGX/tK0Xl7tQX+Eh9g0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 19:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:67:e1:f8:ba:f0:aa:6e:66:92:bf:a0:bc:9a:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
        Validity
            Not Before: Jul 23 19:01:11 2026 GMT
            Not After : Jul 24 19:01:11 2026 GMT
        Subject: CN=f7320db9d96ffca0781c2213424c97fff1ed5dbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bb:30:b1:31:0b:a7:64:79:6f:2d:6e:4e:2d:
                    20:dc:44:3e:ed:e9:a4:82:2a:de:91:dd:9c:d6:aa:
                    91:15:b3:2b:89:db:5b:00:b4:19:c2:02:56:43:a8:
                    af:80:05:8d:c7:28:75:fc:78:42:8a:14:c6:4a:e9:
                    8e:39:43:81:6f:70:17:9c:1c:f8:fc:be:1b:44:4b:
                    82:66:2d:c5:0f:50:31:ee:b6:8a:81:c1:62:33:97:
                    e1:c1:42:c5:bf:78:1b:38:aa:ed:52:a0:7d:72:96:
                    41:0e:2a:47:54:0a:ee:31:dd:a8:5e:0d:96:65:ad:
                    0e:67:39:97:0e:03:72:2c:c3:83:62:dc:87:b6:8b:
                    d3:b8:0c:d1:e6:3f:75:75:a2:5c:ee:11:87:be:11:
                    23:c6:83:93:bb:87:85:a7:ba:35:28:43:41:ec:35:
                    70:d0:e2:da:12:e0:d3:71:d9:bd:22:d4:8d:12:ca:
                    af:f6:de:d1:33:a0:b1:81:98:1b:1b:28:f3:cd:49:
                    37:0a:95:22:97:0a:69:18:b4:ac:4b:b0:95:48:62:
                    ba:53:a1:8b:3e:10:04:52:1a:52:b5:6f:4d:13:51:
                    54:e6:d3:1d:fa:4f:8c:fb:2a:68:1c:f4:b7:d5:c2:
                    b8:55:a6:84:b3:00:bb:d4:0d:69:a4:bf:be:96:93:
                    b0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:32:0D:B9:D9:6F:FC:A0:78:1C:22:13:42:4C:97:FF:F1:ED:5D:BE
            X509v3 Authority Key Identifier:
                keyid:4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:d8:2f:8a:20:2a:ea:63:a2:e9:b8:46:1a:df:d1:8f:9e:ec:
         78:da:20:50:32:fb:c6:0b:b9:df:47:24:0b:3d:e5:e8:1a:62:
         45:15:0f:69:99:79:ae:8a:3d:0e:01:3a:47:44:80:3e:f6:1f:
         00:da:4a:15:0b:65:46:1c:3a:82:10:a6:ba:c7:b5:79:0d:c4:
         c1:09:82:18:24:24:19:64:8c:79:92:6e:df:10:a7:72:19:54:
         64:03:d0:95:07:b9:f2:e7:cc:d2:d7:40:92:c0:83:e3:49:4f:
         53:35:49:a5:cc:56:f2:1b:8b:a2:11:5c:ea:3a:d9:15:9a:0c:
         4e:ce:97:dd:b7:11:37:36:64:19:df:45:d0:b6:65:8a:f2:3b:
         0a:ad:22:ad:a1:6b:3c:61:d1:4c:5f:a1:ad:3e:1c:1b:64:cd:
         8c:1d:d6:b2:7e:83:f7:dd:cf:d3:38:e4:4d:b0:12:8f:e3:21:
         ae:12:ee:ab:1f:c4:a4:0e:3c:a1:39:c9:26:87:18:6b:21:26:
         7d:08:8f:05:6a:d8:de:72:67:5c:32:a7:d0:eb:89:22:f9:20:
         49:e4:77:24:18:ed:37:ac:b2:09:aa:80:2c:a2:9e:a7:01:af:
         f2:85:58:c4:f4:42:5d:73:e3:45:df:68:2d:78:e9:bc:05:86:
         89:3c:be:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:33:39 2026 by rpki-client