Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
File:                     TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft (raw, json)
Hash identifier:          IwB5q2Ho1Nj9iUkRwDNotKi9IFi4DFGGjCOgVQgC2pw=
Subject key identifier:   A8:70:BA:31:F6:A6:CB:42:30:4F:F8:30:30:D4:A7:A4:59:8B:B3:40
Authority key identifier: 4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19
Certificate issuer:       /CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19
Certificate serial:       019E1EA2FAED4265EBF7F9F8EECE5B74D8E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
Manifest number:          0F94
Signing time:             Wed 13 May 2026 00:00:58 +0000
Manifest this update:     Wed 13 May 2026 00:00:58 +0000
Manifest next update:     Thu 14 May 2026 00:00:58 +0000
Files and hashes:         1: TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl (hash: 67FI6Fz8XyoXq+Mwy90YXPnC9qvwzpSQNT0shcabN5o=)
                          2: mYEf7RuSo0e-j7rjPL7Q9zNgxFc.roa (hash: cGf42p5lM09FOWIL9NbqXkxRKlJYCNacEJNXdW+oi2c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:fa:ed:42:65:eb:f7:f9:f8:ee:ce:5b:74:d8:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19
        Validity
            Not Before: May 13 00:00:58 2026 GMT
            Not After : May 14 00:00:58 2026 GMT
        Subject: CN=a870ba31f6a6cb42304ff83030d4a7a4598bb340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4d:4d:e5:24:3d:28:76:6c:ec:c1:70:04:93:
                    d3:a4:ff:c4:75:92:9e:9b:27:ae:cc:78:b1:25:aa:
                    0a:d2:7e:97:1a:6d:fa:42:40:44:50:bf:13:f5:62:
                    a5:8a:3a:6c:36:cb:7a:f2:dc:6a:c8:39:3d:7d:12:
                    16:00:3a:2a:24:25:ee:c0:5d:6d:32:a6:60:41:d2:
                    b3:a5:2e:22:7c:a0:40:d1:7c:e4:a5:08:41:79:6e:
                    86:77:ce:27:22:19:37:04:8d:7c:3a:a8:04:e0:5f:
                    34:13:e2:00:f3:1e:d6:fe:09:52:03:df:72:2f:8c:
                    13:80:62:61:68:ff:12:bd:7c:55:13:6e:fc:bb:54:
                    dc:45:2d:2d:5d:e6:8b:a1:43:f6:8d:bd:84:f7:3f:
                    3a:e5:86:a6:b9:5a:8a:d2:21:94:04:97:7e:e9:b7:
                    f5:e3:80:e2:d4:ed:ee:62:99:8b:e5:c6:cc:17:49:
                    7d:48:3e:12:05:b2:a6:fa:f0:72:7c:65:85:ef:c9:
                    83:14:f0:75:c2:f3:a6:8b:66:df:92:61:36:c1:2d:
                    79:f6:82:84:7c:f9:93:ab:93:8d:a9:9c:94:1d:14:
                    54:72:71:cc:5d:ab:ad:69:5c:ef:bc:61:3e:ee:cd:
                    72:ea:5f:aa:97:50:14:5e:be:03:61:a8:72:d2:99:
                    79:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:70:BA:31:F6:A6:CB:42:30:4F:F8:30:30:D4:A7:A4:59:8B:B3:40
            X509v3 Authority Key Identifier:
                keyid:4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:d3:8a:af:ee:3d:fc:bf:c0:25:05:72:72:ab:88:ad:9f:81:
         79:eb:c8:7c:61:a4:b9:a7:b4:cd:7b:bb:55:b3:84:cb:f6:27:
         d7:6d:0f:73:c6:a9:2a:50:e8:fd:c5:c2:b3:2a:ee:97:07:51:
         40:82:cc:a2:37:ba:96:54:22:f5:f9:2b:fd:80:b5:c4:b9:35:
         e7:11:d5:58:c4:59:0e:b4:15:9e:2e:1d:3a:38:0e:8b:de:11:
         3b:0d:a6:ec:8b:df:ee:3a:b2:4f:46:32:ed:c5:d3:73:d1:d5:
         2f:9b:9d:09:a2:b3:89:12:de:14:02:1a:63:c6:3e:54:42:73:
         93:2f:b8:1d:8b:0c:66:39:16:74:53:3a:15:df:18:eb:d6:97:
         e6:40:1a:d7:60:47:59:d0:63:a9:07:d8:8c:4a:7d:37:fb:c2:
         86:2d:e5:be:ef:fb:3f:63:b2:82:4b:55:03:6c:41:16:03:80:
         5d:95:35:78:e5:2e:5f:f1:2e:1c:30:6e:5e:90:37:5d:76:63:
         4c:14:25:eb:95:e5:b4:ef:1b:e5:7e:f4:b2:a4:5d:8b:6d:37:
         be:41:25:83:b9:5a:02:78:e7:0b:ae:88:b7:31:7e:24:c4:c9:
         e5:59:c7:c5:b8:8d:e2:0e:a9:26:d4:d5:66:73:78:27:0b:92:
         3b:4d:18:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:23:16 2026 by rpki-client