Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
File:                     tfGesN1I4bJJJJCLtbaEjMFnhUY.mft (raw, json)
Hash identifier:          Y5EAoN0+Bgk9K3WaHwD3gh3F7+E/OqLA95ebiTo6cmM=
Subject key identifier:   A2:EE:EC:DD:8D:AC:76:34:92:5C:6C:8E:C1:B7:22:B0:8D:AC:D1:F4
Authority key identifier: B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
Certificate issuer:       /CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Certificate serial:       019F8FEBC4BC7EFDD21BEA828D1086ACE09D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
Manifest number:          19C6
Signing time:             Thu 23 Jul 2026 17:00:20 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:20 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:20 +0000
Files and hashes:         1: FCOqF_sQRgQBJURZwz5LSyaOjJ8.roa (hash: 6lS73JUDNo7BbYfLMWtS8VyH4+hvb7PzpHKXOKKSc8o=)
                          2: S_kn4DkQroHqq7HAquDXguodEnE.roa (hash: 9xxNTgjpkgjoYZUn/S2u9DKQyLLVAn0QlTy3a/LjFvI=)
                          3: tfGesN1I4bJJJJCLtbaEjMFnhUY.crl (hash: 9tdRctzMsNoVEOBcMDJ1raFuoL2vLGdilT1ZVA0hiD0=)
                          4: wkBj6meKGNLkzfK8dNJpio292qU.roa (hash: fCT5GXsj0OqKgF2zl8rl9o29Q7I6qVhp6IsQiy2sl9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 17:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:eb:c4:bc:7e:fd:d2:1b:ea:82:8d:10:86:ac:e0:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
        Validity
            Not Before: Jul 23 17:00:20 2026 GMT
            Not After : Jul 24 17:00:20 2026 GMT
        Subject: CN=a2eeecdd8dac7634925c6c8ec1b722b08dacd1f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a3:22:83:88:62:10:65:70:8e:6c:8b:11:93:
                    15:b1:1d:1a:90:21:d8:4d:e7:3b:e4:2a:1c:c0:bf:
                    ba:a2:e2:c0:2f:95:2b:f6:4e:f7:4e:29:73:f6:cc:
                    a9:80:bc:aa:75:1c:91:2c:ee:25:fe:a7:d8:93:7c:
                    57:bf:39:9e:1c:c9:39:a7:89:56:a6:06:0f:1b:29:
                    06:78:18:02:93:aa:5a:3d:a0:e4:75:36:3c:31:5a:
                    70:2a:fc:5e:8f:b4:79:d5:2e:95:b5:f7:4e:0f:47:
                    ce:42:03:5d:4c:a3:43:31:28:fa:f5:01:61:6b:42:
                    53:b0:c1:85:b0:70:44:70:24:94:27:1b:e5:e5:82:
                    ca:16:70:41:35:d0:79:2c:1c:fb:67:b2:eb:d4:a1:
                    85:7f:17:84:03:1d:09:27:e2:cd:34:5a:85:a3:d3:
                    63:9a:06:70:00:85:fb:3e:e7:fc:b9:ca:96:61:03:
                    dd:17:45:42:76:f1:f2:fd:f7:09:82:33:ba:b4:7c:
                    b1:d5:fb:e3:88:bb:4e:75:ed:78:6f:74:9e:74:cc:
                    b5:2b:37:ab:b6:49:99:d0:fe:4c:a6:b7:a0:a3:58:
                    ae:13:e7:f3:c8:ff:98:73:68:5d:b4:72:cd:24:d6:
                    3c:0a:5a:82:ce:26:d5:dd:57:ba:6b:0a:0f:84:d4:
                    fa:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:EE:EC:DD:8D:AC:76:34:92:5C:6C:8E:C1:B7:22:B0:8D:AC:D1:F4
            X509v3 Authority Key Identifier:
                keyid:B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:11:2f:0c:72:d0:fd:ab:a8:66:8f:67:23:0d:44:a8:1a:1a:
         32:1f:5d:25:68:67:5f:82:f1:f1:a2:21:a1:f7:20:31:a2:14:
         dd:cb:6c:d4:79:27:34:d3:7b:0b:ae:db:d5:96:ca:d1:3a:7a:
         29:7a:f7:97:3e:9b:ef:9a:5f:cc:f6:36:b1:40:3c:38:78:18:
         4c:00:1c:b8:e6:09:e2:a4:07:12:fc:a8:1a:67:4a:ea:79:62:
         8d:20:ca:6e:af:2b:05:96:87:a1:3c:1b:83:3f:a9:01:3d:3c:
         1b:ee:c3:29:89:a4:40:88:d2:86:fa:ab:42:06:c2:63:24:61:
         e2:dd:4c:73:ce:78:fa:7e:92:42:2e:49:30:08:87:e5:70:dc:
         57:8a:56:2b:6b:4a:16:54:61:1b:ec:e5:10:21:f2:85:b9:5e:
         41:d7:e6:be:ad:c5:71:d8:a3:45:ec:28:20:67:08:16:10:ea:
         e5:5e:0f:e8:4a:34:3d:82:f0:0d:9c:a9:78:b8:4e:28:8a:2c:
         df:ce:7f:22:bc:19:9c:72:a2:2d:68:0a:db:7d:c0:4c:dd:95:
         e5:6d:4a:d2:c1:de:9c:67:b5:44:ca:5d:df:4d:64:92:23:cb:
         da:a9:f1:15:2b:68:6d:c0:50:75:a5:81:eb:92:1a:df:f6:97:
         34:f8:01:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:17:07 2026 by rpki-client