Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/c229d8-738a-4117-af59-1093d4973091/1/tkkanUdy_S313Ak9TiDT7YEHKVc.mft
File:                     tkkanUdy_S313Ak9TiDT7YEHKVc.mft (raw, json)
Hash identifier:          8A/lxpTsJzkpLSzzqk0qe1iUognA0XQf5I/32FeZNEY=
Subject key identifier:   72:67:92:12:1D:A4:5B:CB:A7:78:B1:CF:DE:9F:CC:7F:49:A0:93:04
Authority key identifier: B6:49:1A:9D:47:72:FD:2D:F5:DC:09:3D:4E:20:D3:ED:81:07:29:57
Certificate issuer:       /CN=b6491a9d4772fd2df5dc093d4e20d3ed81072957
Certificate serial:       019F95EE7375516FE0C7B7811420D091A171
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tkkanUdy_S313Ak9TiDT7YEHKVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/c229d8-738a-4117-af59-1093d4973091/1/tkkanUdy_S313Ak9TiDT7YEHKVc.mft
Manifest number:          0120
Signing time:             Fri 24 Jul 2026 21:00:59 +0000
Manifest this update:     Fri 24 Jul 2026 21:00:59 +0000
Manifest next update:     Sat 25 Jul 2026 21:00:59 +0000
Files and hashes:         1: QyZsEO3bLQ3YXF28rvX5z3mE5oo.roa (hash: 4EvUaJPraxAe7s9f0hydZpLjgIHAJ4GNcSXocUv5gQM=)
                          2: tkkanUdy_S313Ak9TiDT7YEHKVc.crl (hash: RwHrIuzSk5pqhgEvbwQqbBwvzKcC/WD29wePpTHzjy8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/c229d8-738a-4117-af59-1093d4973091/1/tkkanUdy_S313Ak9TiDT7YEHKVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/c229d8-738a-4117-af59-1093d4973091/1/tkkanUdy_S313Ak9TiDT7YEHKVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tkkanUdy_S313Ak9TiDT7YEHKVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:ee:73:75:51:6f:e0:c7:b7:81:14:20:d0:91:a1:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6491a9d4772fd2df5dc093d4e20d3ed81072957
        Validity
            Not Before: Jul 24 21:00:59 2026 GMT
            Not After : Jul 25 21:00:59 2026 GMT
        Subject: CN=726792121da45bcba778b1cfde9fcc7f49a09304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:df:a8:e6:98:fb:92:ee:7b:b2:be:1e:d1:63:
                    cc:52:21:f9:b4:e3:5e:54:0a:0a:92:fe:d3:8b:a0:
                    4a:a0:8e:37:6b:c0:63:c6:6b:04:b0:90:d8:7d:fe:
                    cf:c5:6b:94:a0:81:e2:be:70:cf:e3:88:82:1e:50:
                    e4:61:f5:eb:a1:42:cf:55:9a:6c:a8:61:e2:4f:b8:
                    8f:bf:8a:b7:16:69:2c:43:4f:8e:aa:50:12:74:76:
                    04:cb:d7:a5:30:a1:49:89:89:4a:5e:c6:4e:ab:77:
                    06:6e:02:23:b4:8b:ce:99:1b:7c:d7:95:3b:98:e5:
                    9b:21:1d:73:1b:ea:1c:33:28:8a:0f:41:b7:f0:b9:
                    5a:46:d6:5a:c4:f4:c2:6f:6b:36:90:de:33:17:4a:
                    54:c0:e0:ba:fe:63:b7:3d:8d:b6:df:f0:de:1a:2d:
                    9f:b5:53:08:27:15:ac:49:e9:8f:ad:88:91:8b:bc:
                    24:d1:29:c8:ea:74:00:29:1f:2a:37:a3:aa:ed:fa:
                    03:94:d4:a2:d8:8c:12:37:b6:42:6f:08:8b:52:8f:
                    ac:f7:51:cd:fe:6f:1d:af:f5:40:5f:04:f5:bf:09:
                    74:da:25:c2:1f:e8:49:20:f3:86:f6:6c:40:c5:24:
                    e5:a3:e7:79:8b:b5:73:69:91:5a:1a:41:de:1f:a5:
                    bb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:67:92:12:1D:A4:5B:CB:A7:78:B1:CF:DE:9F:CC:7F:49:A0:93:04
            X509v3 Authority Key Identifier:
                keyid:B6:49:1A:9D:47:72:FD:2D:F5:DC:09:3D:4E:20:D3:ED:81:07:29:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkkanUdy_S313Ak9TiDT7YEHKVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c229d8-738a-4117-af59-1093d4973091/1/tkkanUdy_S313Ak9TiDT7YEHKVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c229d8-738a-4117-af59-1093d4973091/1/tkkanUdy_S313Ak9TiDT7YEHKVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:a6:52:6d:21:e5:f5:f9:7f:a4:ee:3f:af:dd:f2:84:4d:53:
         a9:09:ef:19:54:d0:53:b1:ac:c1:c8:61:d4:19:f9:81:5a:41:
         16:33:8a:de:4a:92:65:71:66:4e:50:68:00:e7:3a:13:d4:64:
         07:27:7d:89:b5:82:96:34:15:c8:40:5a:21:16:8e:c7:83:a1:
         e1:c8:7c:c6:3e:01:38:95:98:70:b4:cd:26:c6:f3:0d:65:7b:
         65:06:11:00:18:3f:64:62:33:46:a9:a7:89:6a:9f:7e:21:81:
         88:39:75:58:ed:7a:d1:cd:b4:67:44:93:57:2c:84:25:08:f7:
         25:a2:b6:9a:6b:80:56:42:87:b2:af:e5:0e:b0:24:c2:16:e1:
         23:2a:12:92:25:fc:a2:99:3b:ec:9c:09:e0:93:25:6c:f2:c9:
         fa:33:28:78:1c:37:92:6d:a5:3c:db:fc:32:aa:d0:99:ca:d5:
         e5:03:7d:e3:55:00:62:4f:d2:65:4e:4d:8a:f7:e4:47:a9:b3:
         61:01:fd:9e:32:29:6f:68:72:83:7e:6e:f3:cc:d5:71:d3:70:
         8d:ce:d3:45:b4:93:5a:0d:5f:58:88:3b:92:a6:a6:7f:6c:af:
         fe:70:1e:6d:27:d2:0c:d4:cf:a9:9b:8a:58:fa:1d:e3:05:c2:
         e1:e5:86:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:16:22 2026 by rpki-client