Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
File:                     tFBkwayGkOLHepWaUCVG6YvNNyc.mft (raw, json)
Hash identifier:          huB7MlhU/UvSOLdwrzMej5hMERMabHlUtVQ4Bn7K5II=
Subject key identifier:   6C:F3:7C:32:76:CD:13:B7:AE:E7:70:11:24:38:D6:24:CF:54:B4:36
Authority key identifier: B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27
Certificate issuer:       /CN=b45064c1ac8690e2c77a959a502546e98bcd3727
Certificate serial:       019F93C9681828D1D9352B67CB74891BD63F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
Manifest number:          1048
Signing time:             Fri 24 Jul 2026 11:01:17 +0000
Manifest this update:     Fri 24 Jul 2026 11:01:17 +0000
Manifest next update:     Sat 25 Jul 2026 11:01:17 +0000
Files and hashes:         1: tFBkwayGkOLHepWaUCVG6YvNNyc.crl (hash: h/xBUBBLEpH5PN1aU6OuR+FiCE03rrEVFRIKzqJTKqI=)
                          2: wFIxH6rmc0pTO3lHbm1q54JXQUw.roa (hash: LdJ/iIkB/Qkjc76ikiZz0rGCtU2IPzIjdQ2qezYDSK0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c9:68:18:28:d1:d9:35:2b:67:cb:74:89:1b:d6:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b45064c1ac8690e2c77a959a502546e98bcd3727
        Validity
            Not Before: Jul 24 11:01:17 2026 GMT
            Not After : Jul 25 11:01:17 2026 GMT
        Subject: CN=6cf37c3276cd13b7aee770112438d624cf54b436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8c:65:dc:c1:5c:c4:16:be:7e:e9:e5:8a:14:
                    9e:e4:4a:0d:5a:ba:8d:08:9a:6e:2a:4f:1c:d2:79:
                    ec:93:47:cf:30:ab:d6:03:f1:00:32:de:a2:e0:c4:
                    f9:51:ce:47:a1:5e:e3:5c:22:1e:d5:0e:5d:2e:0a:
                    51:46:0b:be:5d:b8:54:2d:95:92:44:31:6d:4e:d2:
                    0d:ac:2d:a8:af:05:18:b8:b9:42:e3:f0:0b:c6:58:
                    8a:e5:e1:f7:16:53:81:ab:6c:f6:bf:86:9a:ca:dd:
                    f2:97:af:cb:31:38:2f:6c:8f:74:b9:65:e8:84:29:
                    5c:e4:03:37:4c:91:c5:3a:19:71:7e:32:6a:78:5c:
                    6c:09:7f:76:a8:46:98:51:ee:90:59:cf:a6:d4:73:
                    c5:d9:91:22:ea:11:c0:35:06:79:ea:ca:a6:77:e8:
                    9d:aa:04:2f:cc:27:67:55:30:f9:e3:21:9f:34:01:
                    1c:0d:5a:61:27:35:c4:d5:4e:17:f3:76:4c:2d:b8:
                    20:38:20:d1:f2:0b:5d:eb:3a:ca:99:c8:71:14:13:
                    85:fe:63:92:c3:df:51:12:0e:db:40:b7:5a:08:6f:
                    b7:43:97:c8:59:dd:71:21:3a:1a:22:18:01:48:25:
                    32:26:16:7d:dc:4d:70:01:8c:bd:d6:b7:84:b2:76:
                    85:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F3:7C:32:76:CD:13:B7:AE:E7:70:11:24:38:D6:24:CF:54:B4:36
            X509v3 Authority Key Identifier:
                keyid:B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:46:5c:13:85:f8:e5:71:35:89:dc:0c:9a:53:d1:c4:22:c0:
         c0:49:50:05:f0:1d:c1:6f:f5:1a:fe:8a:4a:a3:7d:87:f5:34:
         06:14:77:cb:d8:a6:c3:32:53:0a:b7:ad:6b:78:4d:c1:f2:31:
         98:da:84:ff:b8:50:c9:92:5a:68:a5:45:01:ca:85:91:43:9c:
         65:a7:d7:ea:65:64:e9:8b:73:10:ae:49:5b:e1:27:29:0a:0d:
         5a:f4:b2:cd:0f:b5:5c:3e:27:bd:07:e2:77:15:9c:80:3d:4c:
         2c:51:fd:a0:d1:7e:fe:6e:10:e2:eb:94:0d:8b:6b:58:0f:7d:
         ef:4b:81:09:fb:b3:4a:85:48:3e:2f:70:7a:d2:ef:58:51:bd:
         51:2f:28:5e:07:d6:b4:ed:92:94:c3:c1:5a:d1:f3:96:07:32:
         e7:0d:e7:b0:f8:d2:50:a3:af:28:96:ff:73:9f:3d:7e:08:af:
         e1:b4:c6:6c:f9:ca:cf:da:84:b6:79:3a:2b:60:68:51:22:86:
         08:8e:81:f5:f2:48:ef:e1:15:86:ec:4f:68:ea:e2:63:a0:dc:
         d6:3d:b3:82:5e:ca:1c:3a:fa:10:65:02:bd:8b:7f:31:f3:8c:
         fb:49:e0:65:be:93:9b:28:f3:fe:c4:ff:77:fb:58:5a:3b:81:
         ca:7c:a0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:43:59 2026 by rpki-client