Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
File:                     ts9OV8vBXOTs70T1DluFkvvu7qA.mft (raw, json)
Hash identifier:          w1eDtR4V/LQCMXe/4f9+wBIq0VCXdU212htthRWYCG8=
Subject key identifier:   CB:92:CA:96:99:F8:76:FF:9C:CA:D1:BC:78:2A:1A:DD:21:E9:90:EA
Authority key identifier: B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0
Certificate issuer:       /CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
Certificate serial:       019E1D598A397F46F8704BE9C1570BA0EEF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
Manifest number:          10BF
Signing time:             Tue 12 May 2026 18:01:07 +0000
Manifest this update:     Tue 12 May 2026 18:01:07 +0000
Manifest next update:     Wed 13 May 2026 18:01:07 +0000
Files and hashes:         1: C-iIHFCFPPAyH44XN2FUfWFmMuQ.roa (hash: 4EBK9TE3DKNE91PsZ8jPUioXBBKUno4c9ILnL/KNCRs=)
                          2: m0XHnqLimHCaVdrwyhH4qvYB5k4.roa (hash: AyXTFUEVIX6Aa2cN5D+zF56YX+NxzZvMWIw5F0uYaGI=)
                          3: ts9OV8vBXOTs70T1DluFkvvu7qA.crl (hash: j6cHThZcpOHoGCNFO3DuxGczNUc/+u113fR0B5dnxBU=)
                          4: uFaZ7j6WOK_rFoGA3dV4DOr3Azw.roa (hash: 7Q1qXKsYai/yvbGaDBAb/Nup5NNAKS6f69A2HPPsnRA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 18:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:8a:39:7f:46:f8:70:4b:e9:c1:57:0b:a0:ee:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
        Validity
            Not Before: May 12 18:01:07 2026 GMT
            Not After : May 13 18:01:07 2026 GMT
        Subject: CN=cb92ca9699f876ff9ccad1bc782a1add21e990ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a1:3e:6f:24:3b:dc:43:73:d7:d3:ae:82:b4:
                    f7:cc:44:dc:1e:65:56:6b:dc:0b:a7:45:79:b7:3f:
                    e2:f2:98:4c:f7:35:7f:c1:d6:f5:e1:26:4c:ec:0e:
                    55:92:c9:07:bc:96:34:19:80:d9:75:db:81:4f:83:
                    31:51:39:df:a0:04:96:95:d1:db:89:93:11:50:b1:
                    d4:11:bc:c2:a7:40:9a:03:50:ab:3a:7e:38:8b:32:
                    1c:fe:bc:0c:20:a8:34:bc:75:8d:d5:b6:db:a9:3d:
                    44:df:0a:12:b7:b9:85:31:db:ab:30:30:43:87:e2:
                    96:24:ea:2f:f2:2e:31:d8:79:5e:d2:bf:ea:b2:8b:
                    b3:a3:7c:9e:85:f0:b2:cb:c1:0b:6f:3f:8a:45:02:
                    1b:62:b3:69:67:85:f4:f5:84:4e:a7:2b:a4:6f:7a:
                    96:e4:46:ea:db:51:71:23:a1:40:88:39:b8:75:b0:
                    66:ce:50:5c:90:cf:ee:2c:33:51:b4:2a:05:fe:7e:
                    b4:3e:cb:cd:6d:53:2c:cf:1a:18:09:03:41:b6:f5:
                    50:e5:56:21:35:e2:c7:8e:a9:1b:3e:dd:a1:24:d9:
                    3a:3e:d4:fc:b4:8e:b4:71:2d:79:15:3d:70:ea:63:
                    30:f3:02:b6:58:41:b0:d9:e4:00:f6:3b:e4:5e:d1:
                    70:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:92:CA:96:99:F8:76:FF:9C:CA:D1:BC:78:2A:1A:DD:21:E9:90:EA
            X509v3 Authority Key Identifier:
                keyid:B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:1d:8a:da:b7:32:8f:40:6e:a7:75:3c:11:bf:6a:6b:3e:95:
         94:ef:b6:3f:67:05:21:e0:0d:b5:00:1b:e6:46:da:65:db:5c:
         68:50:c5:43:e8:3b:23:65:ab:17:e7:d4:bd:78:1f:13:23:70:
         05:df:c3:bd:e6:ac:16:9b:90:43:74:17:66:a1:0a:2b:8d:e6:
         d4:2a:08:c0:80:da:94:5a:d4:6b:18:85:4c:26:a5:7a:af:50:
         64:4c:57:c2:d5:f2:c1:5c:f6:be:89:9c:ba:c0:98:e3:4b:ba:
         85:5d:e1:a9:c8:22:0e:a3:5c:79:9c:82:71:26:3d:f4:7c:ca:
         e5:e8:1e:81:7e:2c:28:3d:4b:78:71:a3:17:15:d7:e8:41:be:
         d7:6f:07:41:21:9b:b7:e0:9d:fc:81:62:1f:50:b4:52:bf:ef:
         3b:d7:61:f1:46:31:ea:e8:4a:8b:b2:27:f4:5c:f5:a1:d5:5b:
         04:b3:ed:6a:73:46:91:96:47:e6:75:38:e0:a4:8e:7c:d4:c9:
         e3:55:26:0f:02:f3:11:39:f6:a8:d4:3a:8b:72:f3:4b:6e:4b:
         77:e9:8a:81:78:db:46:47:3d:bc:ef:1b:46:14:bd:ee:60:cd:
         6d:4e:1c:4d:11:69:d6:df:7e:42:f3:3e:22:f6:89:43:d7:d5:
         26:10:7c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:10:14 2026 by rpki-client