Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
File:                     TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft (raw, json)
Hash identifier:          2H3BnL6QnyW4gx7Z0DTf2xWuGOsfKStYpNfWa3/okfE=
Subject key identifier:   2F:FC:BB:AA:A1:9D:DC:32:33:D6:28:CA:64:86:EB:AE:57:EE:F7:52
Authority key identifier: 4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
Certificate issuer:       /CN=4cad0397487799e2118ff4cbcf8f159747f35891
Certificate serial:       019F8EA2766100272A6081925D3D289B0EB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
Manifest number:          19CB
Signing time:             Thu 23 Jul 2026 11:00:39 +0000
Manifest this update:     Thu 23 Jul 2026 11:00:39 +0000
Manifest next update:     Fri 24 Jul 2026 11:00:39 +0000
Files and hashes:         1: 228dGzsK5lDedCf7RamqB_6IyIo.asa (hash: dJG/hV50SEVqgYfa1k8cEjUQsQlpOKnDwSMyCIuDcyg=)
                          2: IS2YUSaSM7g3zrdWKlVJ5K8E2Y0.asa (hash: M3L8LodfErRThxrQMS3jQCWjzNRa40VCbb+9EdLD1CM=)
                          3: TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl (hash: Hm1jPKJJDhJ1oGBghH+aF1TEu+quwCHtfXCGhjP5w98=)
                          4: h9cJ8djqQtBviihaq4ao526E_0o.roa (hash: QQqAfzwPyXDoi3NQWDhEhtDBcPOcV5HPPvE/lan3w+c=)
                          5: stNr5OlaCfqNnuD6XmuVscuxDns.roa (hash: nGcnXVJXoyjj3G69xltC1kz7a5CldclAlqw5d6PpRjQ=)
                          6: uYcmPBoPe0dy5jc0jk1_pwkMfEo.roa (hash: 0SmAw2whgX+CEp/lCzfQR+CIod0NWK+0ehDPmmqX/7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:76:61:00:27:2a:60:81:92:5d:3d:28:9b:0e:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cad0397487799e2118ff4cbcf8f159747f35891
        Validity
            Not Before: Jul 23 11:00:39 2026 GMT
            Not After : Jul 24 11:00:39 2026 GMT
        Subject: CN=2ffcbbaaa19ddc3233d628ca6486ebae57eef752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0c:0d:f8:c4:a5:3a:66:27:b8:67:70:b6:06:
                    d7:ba:fe:19:b2:b6:fb:a7:12:6f:fc:70:63:13:2a:
                    95:8c:5b:cc:d5:03:de:1a:ed:3b:b7:40:9a:ab:d9:
                    b1:d3:a9:c7:a7:11:cf:3b:b7:34:08:dd:d5:ce:46:
                    8a:bc:76:49:40:a0:c0:d4:7f:a2:cc:1e:a2:db:b1:
                    06:87:e0:9f:30:0b:21:a0:00:6c:09:65:b2:9f:78:
                    92:7f:79:ab:e8:a4:a5:fd:8c:20:2d:83:b7:8d:a4:
                    c5:cb:a7:4b:d7:43:59:e4:af:d0:5c:17:61:7a:f3:
                    52:5c:58:ff:01:49:e7:72:75:88:70:5b:15:3d:c8:
                    7f:a2:ef:d6:24:90:7a:7f:87:48:c7:3f:e5:02:5f:
                    64:a8:59:a6:66:5d:cc:5f:e9:9c:c3:29:ca:c7:80:
                    45:5a:cd:eb:e5:5e:2b:8a:a7:f6:93:71:71:e7:a0:
                    88:c4:66:60:5e:0e:4f:ae:a0:1e:75:aa:94:30:68:
                    b8:9c:2c:63:65:5d:86:93:88:fc:ec:04:b0:0b:85:
                    4c:41:15:f7:18:86:86:a6:83:a2:03:da:2f:74:b8:
                    e6:17:49:7a:d5:e2:80:3b:ac:3c:df:c9:79:f6:60:
                    65:7b:50:50:0b:65:ca:2a:a9:b9:47:59:83:c5:a1:
                    13:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:FC:BB:AA:A1:9D:DC:32:33:D6:28:CA:64:86:EB:AE:57:EE:F7:52
            X509v3 Authority Key Identifier:
                keyid:4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:53:cd:75:45:ef:7c:dd:ca:99:e7:bc:22:a5:68:53:53:bc:
         9e:19:a8:d0:fc:6d:a7:bd:5f:2e:08:34:b5:80:55:24:af:ad:
         87:af:72:39:49:00:db:7c:8a:29:31:ad:70:1e:48:43:a0:ff:
         e6:ca:4c:f0:97:57:b1:46:2e:a0:e6:6f:b2:ba:0f:36:27:d2:
         fb:45:29:e9:4d:1f:55:8b:43:d4:54:82:24:89:a2:c5:8d:4b:
         f4:89:ee:e8:10:8a:d9:26:6b:83:08:14:55:5a:3d:14:58:6a:
         2c:ad:e3:75:6f:27:f2:63:80:46:07:91:a8:dd:70:02:7f:46:
         2f:28:53:39:84:c0:5c:8f:8a:13:37:2f:b7:81:cf:ce:fe:cc:
         ea:1f:6b:6d:15:f6:cc:fc:10:97:b9:5b:53:ee:75:7e:f2:2f:
         a7:21:a9:c1:10:26:6b:54:15:4c:5e:b2:18:58:06:78:1e:00:
         99:fe:c0:94:bf:5a:37:44:c9:fa:8b:2f:e7:c8:a7:8c:b5:0e:
         59:65:21:89:fd:46:ce:e1:23:52:37:ff:d5:17:4f:61:a3:88:
         42:e1:bd:73:15:c4:74:b6:f2:50:a0:aa:21:81:c7:c3:e1:a2:
         28:45:45:1c:f1:60:66:81:12:34:8a:e9:af:5c:d9:b1:93:ba:
         55:6f:49:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:04:32 2026 by rpki-client