Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
File:                     TnRhR3tZt7wJBvbOYGULs60t7lc.mft (raw, json)
Hash identifier:          70I9up6SH0kS7sjFxvQRDy9cEZ9M1caBlkfUaIr+Vxs=
Subject key identifier:   65:A2:88:90:ED:F9:34:FD:72:B5:CF:47:EE:60:84:19:71:F6:D8:4E
Authority key identifier: 4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
Certificate issuer:       /CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Certificate serial:       019E1F7EF4B8F14F31EF9582147BF45BB6B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
Manifest number:          095C
Signing time:             Wed 13 May 2026 04:01:14 +0000
Manifest this update:     Wed 13 May 2026 04:01:14 +0000
Manifest next update:     Thu 14 May 2026 04:01:14 +0000
Files and hashes:         1: 75HOIa64fDxinyOIx01Blej1elM.roa (hash: EnalwxHiL7Yvbfzav+WqLHXQw4xqRSm24VA6Qft2ERI=)
                          2: TnRhR3tZt7wJBvbOYGULs60t7lc.crl (hash: R/pY97CzbFjVElKKMKVAmU8Rj20lzgyQqX7Doo6DJNQ=)
                          3: gNIwlQhqrQHrAmcQt_v7U7yPQls.roa (hash: m7SKJRURhbOe8VuRCSBhxT8f7MRPwICOeiYwoIYek9I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7e:f4:b8:f1:4f:31:ef:95:82:14:7b:f4:5b:b6:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
        Validity
            Not Before: May 13 04:01:14 2026 GMT
            Not After : May 14 04:01:14 2026 GMT
        Subject: CN=65a28890edf934fd72b5cf47ee60841971f6d84e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7b:0d:07:ac:a6:3b:0b:58:7f:92:25:84:bf:
                    fd:52:70:06:96:c3:7f:1f:3e:85:4e:ef:21:87:d0:
                    97:28:2c:0a:1e:3f:d1:9f:87:7d:da:59:7b:a5:bf:
                    c7:07:10:c1:27:56:3a:05:43:47:6c:41:f1:69:ab:
                    12:d2:c9:a0:74:df:56:d6:ef:be:5d:6b:67:4a:1f:
                    a5:e0:66:9d:47:58:29:51:e8:91:28:0a:bb:33:74:
                    58:51:e8:30:90:5e:60:c5:59:f2:d7:d3:0f:8c:9c:
                    45:24:cf:f2:87:c2:2d:34:9a:cc:b2:22:c2:76:88:
                    71:7f:e0:d9:c4:b9:36:8e:3c:50:e8:dd:64:6a:d2:
                    40:5d:0e:be:b2:b8:65:8c:bd:d5:01:d1:d2:60:75:
                    6b:17:91:7f:75:b0:c4:2b:1d:42:35:f2:44:dd:a6:
                    6a:bb:61:e8:99:e5:c9:d5:a9:b3:cf:5c:f5:75:5e:
                    c2:ac:b0:6a:a8:70:49:e8:12:6f:e0:bb:15:f4:a2:
                    99:4c:dc:dc:b4:a7:a2:2b:a0:a2:28:32:e4:02:16:
                    15:fa:7b:84:b5:7f:0a:88:4b:99:09:61:c1:6f:6b:
                    20:e1:ac:18:e7:85:5e:84:28:d0:60:ba:ea:74:8c:
                    aa:dc:97:6b:58:b1:aa:48:c9:19:a9:80:cf:27:c3:
                    3b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A2:88:90:ED:F9:34:FD:72:B5:CF:47:EE:60:84:19:71:F6:D8:4E
            X509v3 Authority Key Identifier:
                keyid:4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:00:61:fc:40:68:55:1c:29:42:e6:90:eb:dd:ff:d0:01:f3:
         97:71:68:69:ef:76:a2:ab:a4:16:ec:27:07:8e:ab:74:c3:97:
         d9:be:3c:9b:63:5c:e3:54:d6:aa:0d:4a:7f:bf:27:1e:88:94:
         da:0c:8d:c9:d1:83:e9:0a:94:ad:37:46:f7:31:e3:6a:9b:c5:
         ff:83:c1:5c:bb:ee:af:1f:24:01:2d:78:59:3b:b8:39:f2:04:
         8b:5b:d9:48:d6:5f:31:db:60:27:8e:72:3e:94:af:78:85:3e:
         7e:49:02:f9:d0:c8:f4:25:b6:9a:1d:fd:c1:20:6f:b2:cb:a6:
         cf:54:32:f7:ba:46:f2:5c:6e:44:15:47:c0:d9:e0:c9:33:ec:
         58:bb:37:f3:13:a1:11:8c:f5:3a:2d:04:ff:67:d9:d7:b7:15:
         2a:bd:cd:32:2b:34:4f:87:2d:9e:33:25:9e:f0:b5:54:88:90:
         68:1b:42:b7:bc:dd:b9:c4:6f:4a:89:d9:82:28:70:ff:be:3c:
         3f:74:4b:ef:24:6d:30:40:2f:e1:56:70:aa:94:81:b1:c0:7e:
         f8:92:af:de:ad:6c:fa:de:72:1c:a5:3d:cf:04:81:86:81:50:
         37:d2:63:cd:95:a5:07:ac:e7:03:bd:45:db:0c:a3:73:49:e3:
         4d:bf:03:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:59 2026 by rpki-client