Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
File:                     TlFGu04hl0T1jCaOnsYhwY3SKcM.mft (raw, json)
Hash identifier:          FUJ6AOYVw5KL8aEvxYS1W0mufLq8oK/ipt6tG+uYXGg=
Subject key identifier:   3B:4F:95:96:79:6F:F2:C5:8F:4A:60:11:39:73:C6:36:75:0B:87:02
Authority key identifier: 4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
Certificate issuer:       /CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Certificate serial:       019F8EA2D1ABF58C75F8F85F1ECC3E5FC9B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
Manifest number:          19D8
Signing time:             Thu 23 Jul 2026 11:01:02 +0000
Manifest this update:     Thu 23 Jul 2026 11:01:02 +0000
Manifest next update:     Fri 24 Jul 2026 11:01:02 +0000
Files and hashes:         1: KFywMW4737-JPpo7ntDdVjcljY0.roa (hash: y+0Jhvx7MYfdfSZW5SGIaISfaSBvz9VuHqmA13RqQx0=)
                          2: K_yCMW3gEKPx-UvDR4vcUDQfi04.asa (hash: 5ltTYL5p8Fw8k0ASnDZeUNbyyXbm27rjjhji8a6UNc0=)
                          3: TlFGu04hl0T1jCaOnsYhwY3SKcM.crl (hash: 145pqDlWEBvrw2Ve+pQv2S5uRbhwL0FsEvPpshF871k=)
                          4: fhNDpez0tEXT55T0FQuT3YRDXos.roa (hash: +VEaHjpilB4sNBhuKG3GgrFbP8VWjeNr6HEMkdwaBYk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:d1:ab:f5:8c:75:f8:f8:5f:1e:cc:3e:5f:c9:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
        Validity
            Not Before: Jul 23 11:01:02 2026 GMT
            Not After : Jul 24 11:01:02 2026 GMT
        Subject: CN=3b4f9596796ff2c58f4a60113973c636750b8702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:17:3d:cc:c9:34:f6:fd:9f:94:99:8d:7f:5d:
                    54:ea:45:9d:90:13:bf:ac:ca:90:10:6c:47:c3:38:
                    08:de:3b:bc:76:81:fe:be:e3:ef:d8:ce:26:41:d4:
                    7a:6d:db:81:d0:a4:0d:5f:9b:00:be:6e:3e:8b:80:
                    ec:49:f3:00:32:2f:f3:0d:fc:95:ae:2c:c4:74:93:
                    1a:97:23:b2:07:09:35:02:fa:64:df:e1:2b:e7:4f:
                    21:39:35:74:88:b7:64:c9:63:ff:8b:02:72:4b:fd:
                    92:13:1c:86:73:47:35:3b:20:61:f7:3b:ee:06:78:
                    c7:2e:7b:f2:e1:c0:a3:bb:53:ac:39:25:46:26:73:
                    84:05:f0:55:c5:41:33:1d:6b:9c:d7:20:6b:0c:3c:
                    a1:16:3d:f8:9f:c4:b4:6f:59:92:d2:b2:7f:32:6f:
                    a8:69:ef:20:4a:2f:0e:a6:33:f7:a7:90:8f:0b:21:
                    d6:d0:21:ed:19:c2:c0:67:fa:96:34:36:d0:43:a5:
                    48:8f:c3:7f:2e:29:2c:de:e3:0e:c7:ad:64:35:57:
                    c7:c0:17:70:eb:00:cf:46:f4:f5:d7:c5:53:30:47:
                    8b:5f:6c:13:ee:db:4e:c5:f4:35:b2:4b:ea:45:19:
                    73:4f:9c:22:c9:83:b4:9c:4c:78:fb:1d:94:4f:f2:
                    11:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:4F:95:96:79:6F:F2:C5:8F:4A:60:11:39:73:C6:36:75:0B:87:02
            X509v3 Authority Key Identifier:
                keyid:4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:f2:9a:ef:40:e5:dd:86:b3:07:a8:ce:4f:2d:ac:88:f3:9e:
         36:e8:d9:8e:74:97:98:df:b5:9f:5b:b7:cb:66:45:ca:7d:99:
         7c:3a:f2:54:eb:28:d2:51:61:2f:22:d5:1a:6e:cc:8f:25:3a:
         84:66:92:1f:23:81:21:78:ce:58:2b:a7:16:69:d0:ff:ec:c9:
         93:21:02:ec:35:39:f3:05:e3:d5:fc:65:6e:fb:f2:f7:2e:21:
         bc:44:6f:e0:dd:f7:71:29:60:3d:37:ed:c3:af:c8:a5:7b:66:
         94:12:02:2a:0f:0d:85:5c:e2:e7:77:d2:e4:f6:31:a4:3d:4a:
         32:8a:4b:ab:8e:9f:2a:d2:6b:8f:6c:fd:a1:ea:9b:5b:31:4e:
         24:05:44:cd:94:a6:28:dd:ce:d3:70:da:ff:82:95:4c:6d:ec:
         8b:ef:d1:7b:fe:a3:fb:18:b9:37:cc:06:92:7f:e2:37:50:ad:
         70:73:9e:0c:ec:ee:bd:6e:f7:9a:f8:4e:11:63:27:47:25:b1:
         92:d7:ea:dc:14:64:b9:77:e3:65:58:d5:7f:29:95:db:d7:12:
         70:35:bd:cd:da:6a:11:7a:69:58:01:d7:03:f0:a9:cf:a6:dc:
         ec:04:7c:3d:35:08:9a:cd:c6:aa:9f:95:a9:84:38:44:c4:11:
         04:23:f5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:12 2026 by rpki-client