Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft
File:                     TEaPGBJltNlsooNaPlcMJnkDXf8.mft (raw, json)
Hash identifier:          w5KnSxsJpW0y6E/PKjeGJZALKelQyW7v61DWVkE223Q=
Subject key identifier:   02:6D:75:38:F1:D1:A4:85:43:2F:B5:97:2B:17:8A:04:49:AC:43:F5
Authority key identifier: 4C:46:8F:18:12:65:B4:D9:6C:A2:83:5A:3E:57:0C:26:79:03:5D:FF
Certificate issuer:       /CN=4c468f181265b4d96ca2835a3e570c2679035dff
Certificate serial:       019F946DB4A9BA7F2F35EAAF692EDB25EA89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft
Manifest number:          18FA
Signing time:             Fri 24 Jul 2026 14:00:45 +0000
Manifest this update:     Fri 24 Jul 2026 14:00:45 +0000
Manifest next update:     Sat 25 Jul 2026 14:00:45 +0000
Files and hashes:         1: G5xYweczugT7y9iKv0C3tFH_n0s.roa (hash: mJ6ZUqGAfQj432UWOlXl+ZROquxNC18uSJrAS/I3FwY=)
                          2: TEaPGBJltNlsooNaPlcMJnkDXf8.crl (hash: 9yoIC0neLiaxYO8KR4tMZEyww7+N5NYg4rZEkhqIk58=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:6d:b4:a9:ba:7f:2f:35:ea:af:69:2e:db:25:ea:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c468f181265b4d96ca2835a3e570c2679035dff
        Validity
            Not Before: Jul 24 14:00:45 2026 GMT
            Not After : Jul 25 14:00:45 2026 GMT
        Subject: CN=026d7538f1d1a485432fb5972b178a0449ac43f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:26:b7:fa:a2:b7:15:3f:b3:25:45:9a:4a:7c:
                    9f:08:aa:ad:de:47:9a:6b:54:42:5b:a3:33:8f:d8:
                    be:f5:ef:51:d7:46:58:24:6a:49:ea:88:59:ad:31:
                    6c:a5:7f:65:70:e2:b8:ed:99:0c:98:d0:22:45:62:
                    65:a4:45:fa:82:71:b9:ef:eb:0d:5c:a9:7c:4c:bf:
                    d4:ab:bc:47:c9:18:57:54:79:32:7d:2b:50:40:5c:
                    87:3a:2a:28:97:5d:ec:7c:91:65:66:13:47:87:02:
                    87:75:36:e1:d5:da:bf:5c:fa:20:e6:48:d2:ae:0f:
                    e1:e3:a4:bc:8c:69:f9:5f:25:c1:ac:a2:8f:a5:58:
                    7d:72:f4:a0:01:2d:29:77:19:db:eb:7c:f3:f0:87:
                    a1:eb:2f:87:68:15:e4:ca:21:fe:f6:29:71:f3:ec:
                    16:db:85:a1:7b:8f:be:83:68:f6:3d:ed:00:84:77:
                    4a:7c:f0:2c:c5:a2:7a:c2:e8:08:9a:3c:0c:99:5e:
                    19:43:ac:c6:7d:82:eb:d5:54:6a:11:0c:2d:10:2b:
                    4f:85:dd:b7:63:bf:91:0b:75:80:12:6e:5e:77:c3:
                    21:ce:2f:e1:fb:cc:76:48:41:02:fe:99:a8:79:01:
                    5a:b3:59:39:47:7f:ee:bf:52:0b:46:0c:dd:a3:d1:
                    6f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:6D:75:38:F1:D1:A4:85:43:2F:B5:97:2B:17:8A:04:49:AC:43:F5
            X509v3 Authority Key Identifier:
                keyid:4C:46:8F:18:12:65:B4:D9:6C:A2:83:5A:3E:57:0C:26:79:03:5D:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:91:70:19:44:50:59:11:c7:64:37:42:2d:4b:13:0c:31:f0:
         2e:c0:a9:ef:f7:62:d4:98:cc:00:f9:6d:7d:db:13:56:61:4e:
         fe:ae:f7:34:b7:1e:93:15:6e:a8:b1:71:ec:96:f4:55:6c:e9:
         d4:52:35:7a:43:aa:cc:1d:e5:a6:22:9a:6c:17:11:03:32:ec:
         ae:9f:74:da:c7:1a:bd:da:b9:48:37:5c:41:39:83:8d:14:c3:
         4e:e4:d7:e8:26:9f:bb:b5:9c:54:f0:3b:7b:8e:38:a9:0a:86:
         0e:bb:e5:76:c9:c4:25:07:c6:3b:b2:b8:3c:c1:50:fc:39:41:
         c5:a6:61:08:24:96:f4:e3:a1:0e:8c:37:be:be:19:97:f8:ba:
         8c:dc:84:1f:79:65:40:b8:37:63:22:aa:b1:f7:0a:d6:7e:3f:
         c6:d4:29:78:aa:23:86:e8:b5:5e:1d:5d:dc:29:52:3c:7f:75:
         1f:d9:db:0c:66:76:c1:f7:ad:77:1f:24:84:bd:69:05:23:a4:
         7b:50:f1:51:9d:84:6b:e3:18:62:43:97:b2:1c:cb:d6:09:85:
         1a:27:20:6d:21:ba:fb:f0:1e:50:2b:25:85:90:c7:0f:92:e7:
         0d:82:36:d5:06:5f:44:3f:16:d8:db:47:99:07:05:87:a1:2c:
         ee:b1:68:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:36:00 2026 by rpki-client