Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft
File:                     tyC-m1eyWx7aP4EJLgC0U4vosp0.mft (raw, json)
Hash identifier:          PaobuF2vJvJuPSJupY62vW4ewhbM9IrHvBWK+7z8r/I=
Subject key identifier:   98:03:7D:8B:1F:B3:99:A5:B3:D1:35:13:DC:45:62:53:52:0F:F8:84
Authority key identifier: B7:20:BE:9B:57:B2:5B:1E:DA:3F:81:09:2E:00:B4:53:8B:E8:B2:9D
Certificate issuer:       /CN=b720be9b57b25b1eda3f81092e00b4538be8b29d
Certificate serial:       019E216DBF37964B9D64A0DF5D472351023D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tyC-m1eyWx7aP4EJLgC0U4vosp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft
Manifest number:          1894
Signing time:             Wed 13 May 2026 13:01:40 +0000
Manifest this update:     Wed 13 May 2026 13:01:40 +0000
Manifest next update:     Thu 14 May 2026 13:01:40 +0000
Files and hashes:         1: 2bQPYE6C1xPKacn71h7uNUfwW5k.asa (hash: S/35bcKz6xhuKu6KdcMaM7TFCVzuh91pCLHJRPyRwag=)
                          2: tyC-m1eyWx7aP4EJLgC0U4vosp0.crl (hash: dnS3mgoyyQV0tBEniYNWPOL0BN8HUGza366IZ11WZTU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tyC-m1eyWx7aP4EJLgC0U4vosp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 13:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:21:6d:bf:37:96:4b:9d:64:a0:df:5d:47:23:51:02:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b720be9b57b25b1eda3f81092e00b4538be8b29d
        Validity
            Not Before: May 13 13:01:40 2026 GMT
            Not After : May 14 13:01:40 2026 GMT
        Subject: CN=98037d8b1fb399a5b3d13513dc456253520ff884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cf:ca:63:de:a1:7e:59:7b:74:44:06:d3:f7:
                    f6:03:2e:90:4c:fe:33:e1:cd:d9:43:83:90:1a:8b:
                    51:db:5d:a7:e8:fe:94:b1:9b:a8:4e:61:76:32:1d:
                    56:f8:b7:02:cc:67:fb:c1:c1:61:89:3a:e8:44:d1:
                    b7:66:ee:18:6e:db:de:eb:34:28:24:c0:fd:16:8b:
                    dc:4e:e0:df:6a:de:ab:71:26:fa:22:32:a7:77:1b:
                    11:0b:c5:fe:18:ee:4c:54:75:8d:d3:53:4b:92:02:
                    0b:84:d8:d1:6b:e0:47:22:5e:d7:2a:c5:69:fa:72:
                    1b:58:64:95:09:82:1d:61:5b:cd:b4:d1:d2:22:7f:
                    96:fe:fc:ae:ef:44:e6:50:65:c2:60:05:2a:2e:69:
                    11:74:a3:3c:56:8d:be:67:1d:e1:0a:37:2a:21:e9:
                    71:78:9e:43:77:94:58:5c:1c:1d:fe:52:b9:71:58:
                    76:0c:5c:b2:91:f3:24:82:e0:3f:91:49:b1:25:fc:
                    d2:6e:ef:59:96:d6:95:32:df:a3:d4:6c:3f:7a:7e:
                    d7:22:d5:ad:29:92:88:4f:85:d4:1b:8e:ae:a6:2f:
                    f2:4e:2a:a0:cb:93:bc:80:da:0b:bc:77:5a:e5:bd:
                    56:0b:e8:a4:de:d9:21:92:5d:59:e6:5b:4f:dc:64:
                    67:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:03:7D:8B:1F:B3:99:A5:B3:D1:35:13:DC:45:62:53:52:0F:F8:84
            X509v3 Authority Key Identifier:
                keyid:B7:20:BE:9B:57:B2:5B:1E:DA:3F:81:09:2E:00:B4:53:8B:E8:B2:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyC-m1eyWx7aP4EJLgC0U4vosp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:d6:e3:fb:ce:36:8a:dc:d7:d9:77:02:63:42:18:7c:b5:27:
         0e:9d:e9:17:d3:63:55:c0:75:c3:65:85:61:9e:ef:15:1c:28:
         22:8f:65:22:ab:34:04:99:0a:3d:dd:09:5f:e2:cd:ef:f3:b8:
         7e:57:ce:e9:8a:d9:a5:23:c5:a1:fc:ff:3d:6f:38:fe:e7:58:
         77:65:cc:f8:a5:cb:4d:24:74:25:de:78:ab:38:36:6f:a8:95:
         ba:bb:e7:78:a5:68:c8:bb:b5:a9:53:73:6a:2e:c1:c3:7a:d7:
         97:71:e0:df:07:9f:08:b6:fa:ed:de:71:d6:aa:d1:cb:53:c4:
         15:46:9e:69:19:59:c4:24:1e:27:56:0e:39:9b:6b:75:22:3b:
         fa:9b:55:6c:15:ba:a6:f8:5d:10:3c:7d:28:e7:03:94:bd:e9:
         3d:e4:d6:1a:64:17:04:a9:fb:26:20:48:39:ef:39:13:12:47:
         89:02:27:af:1a:67:a8:1c:4a:7e:c2:d2:4b:d6:c0:ee:9f:59:
         1b:7f:f2:b5:95:4d:84:f0:2f:91:2b:f0:73:08:d0:a3:52:81:
         d0:a0:f8:46:71:3f:8e:b8:a9:58:b9:c0:b3:4c:89:e7:7c:8d:
         7b:6b:46:0f:f2:65:eb:9e:b5:63:a2:e8:77:ef:0d:fb:74:28:
         38:5d:dc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:45:59 2026 by rpki-client