Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft
File:                     tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft (raw, json)
Hash identifier:          ZhgKFmzmUH1JWRwES78gw1vACCN8kULii5SW68xvL2Y=
Subject key identifier:   CF:E6:D8:B8:32:73:F2:DC:F7:8F:B3:87:D1:45:63:45:EE:90:0A:73
Authority key identifier: B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A
Certificate issuer:       /CN=b6f3db35659133315d2fcf93058dce350a4cb17a
Certificate serial:       019E1D22BE50F0A6779BB4EA00FDCA3A24E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft
Manifest number:          0301
Signing time:             Tue 12 May 2026 17:01:16 +0000
Manifest this update:     Tue 12 May 2026 17:01:16 +0000
Manifest next update:     Wed 13 May 2026 17:01:16 +0000
Files and hashes:         1: 1-Fy84YC95r-bQW2cLl79V6F_YT4.roa (hash: gL15S7gQEZVfvb5bxwrY+zQzlzYDYNRTFbb19+x9mOU=)
                          2: 1-Nznx-18fNZ6F7fV7FWsvpQVpSk.roa (hash: ESa0OQif8LkNT9zKRORM4Qe3nNaXNgqNLhdo7JNem/0=)
                          3: 2fYLBv1U0Aal5HtFShitrMTODDk.roa (hash: 2/V+b6fricNVBwCToj237iqhy26fLac2r/viReW4GF4=)
                          4: 3UqTULNUjwAb8aM5tZWDkdsXWeo.roa (hash: LLkvKetTDyJdMXPZuYokaJPjJ58hhOZl6BKgzGKR4fE=)
                          5: 4eZ7bkmpJQiebKtBTXoYVZg6Ldg.roa (hash: +qSceZV6AJUPDL56rity8Lx2SMr8wkGezaj/ssbWib4=)
                          6: 5A-xAaitVd-Z-3EM0tcDIKZtoa0.roa (hash: rvE7dA9kE2RGdYWQzFMr+Rr8fFZi5luB0pquTynO3s8=)
                          7: 9tWF1GqvjRro3KCeTjhlXGOeJnk.roa (hash: teh4jlkHAaykmKjheyxnAjMWR2tE22/CA39+lQwLfBY=)
                          8: AAN_C8py2EA1n7GC7uysYX9C8eI.roa (hash: YTXGhX9lVZicuBLsjZQtboD3S2P+2J1oVo6LxafsTbY=)
                          9: Aw2zWYgv8W7CwrMsEePdbTsLvok.roa (hash: wEinvm1qao+9BCRR0fnnIbv5tbDhJ2a5pDYCtrsJwPc=)
                          10: HTIxoi8WyFSrHeUOWzzUiEIhzDk.roa (hash: cd0RecHzNsbQYeDphiQhrKlq2//otbl1g44Ke+zy6bw=)
                          11: HwCEkBXkDVGb_trROXqUO3InBZs.roa (hash: 4VqvdzlCii9J+rZ10d2Ty8zbIKLGsNMqZiNczN/lH5o=)
                          12: J3Irj20a5Nlbymwp_tuM6NwpZGk.roa (hash: JOo4UjGWzNEE5RC1ZV6KYebK8zPHqC8OTRdKUFsxrbc=)
                          13: TIVfVbHfouWC6xhaqaOe2rROKk4.roa (hash: f7pxBjbhOpubYs4a19slbS3M7w5nVBiYFx5na8V322c=)
                          14: W-hqX4V_eWCdg6_rVRWyKKwNsZo.roa (hash: FbBn+Y+2aBjmifhJcGgHM6wc4kqUDt9aYkj9YzgXnQo=)
                          15: enXU2NRbrmUSLj3aNd49w6CB9kw.roa (hash: bqlmejBH4um+OhcSoaSwzujrI/A1SFNyu4se8eX8Jy8=)
                          16: fMecL_p_XorOu-OBjgfyWEuIE2g.roa (hash: E6t0K2Pr40cejujMiJaL8HUBY8+SoeQqKn7sy6Ra0fA=)
                          17: hTbfi8iyqpyBUx58enPyCnAk8B4.roa (hash: iR4m3I4+fi5SXyKVTPF8tJekzYjESRlBnoPf8B3mZQY=)
                          18: hnOMcA3FLHrspCaukH2G2BOpT8A.roa (hash: lcUqSg3j84OiYjox0KKVZ3oU4xCrQOPVs8tFQBrKuF4=)
                          19: lI-SGy6V9gbYheStfoup00TtjDg.roa (hash: j9/ph3cCY16/8Ag7j6nb1Eljp7GEHMNtLj6G3JeZuhg=)
                          20: ma_hJ5Go12WDQL6E3MOLLSFUGZg.roa (hash: ri5qcBP3AFkKJ9Kz9G4biTaRxnIVuPjswlV7TfCNoUM=)
                          21: tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl (hash: 7J+OG1QRJ29O73CzrD4fc0/7K5NyU37h6t+jqVK33mc=)
                          22: xAs-bndcqPd0AUG3p2gqYtNCwKs.roa (hash: RlwLGxg+e7W2Q6yDLdFrjAGx+ZccxU5PdajeFC3InjA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 17:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:be:50:f0:a6:77:9b:b4:ea:00:fd:ca:3a:24:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f3db35659133315d2fcf93058dce350a4cb17a
        Validity
            Not Before: May 12 17:01:16 2026 GMT
            Not After : May 13 17:01:16 2026 GMT
        Subject: CN=cfe6d8b83273f2dcf78fb387d1456345ee900a73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:19:5d:43:f7:14:48:7d:16:fa:a2:2c:82:1f:
                    ec:46:6f:6a:c0:f3:58:1b:c8:81:1e:b9:23:67:58:
                    d4:8b:1f:43:2a:ab:ed:1d:5a:8e:07:00:de:4d:6d:
                    1a:b8:83:90:5a:39:29:a9:c3:d8:71:ea:11:e2:ad:
                    51:9d:eb:50:b1:83:d9:74:51:c9:f3:67:55:a9:55:
                    77:22:cb:ec:2f:93:9a:2b:22:5c:8f:d1:9b:81:2e:
                    2c:05:97:87:1c:f2:f3:5a:4f:72:48:18:07:57:a6:
                    55:10:5b:5f:ed:81:29:94:e7:c8:ce:ad:ab:92:f8:
                    1c:30:7b:b2:76:86:a9:88:fc:a1:00:57:c5:6f:6b:
                    31:e6:05:57:c3:6d:6b:44:c9:9d:03:dd:16:b7:39:
                    fd:2b:7c:07:0b:89:d7:a0:c3:af:5e:bc:16:0a:36:
                    75:e8:81:15:c0:42:34:34:88:a0:dc:7c:fb:e4:b2:
                    af:5f:db:42:c1:1f:9b:fd:01:e2:ad:a7:9b:68:1c:
                    77:2e:b2:ab:eb:4b:68:47:e3:24:e7:cf:ad:02:27:
                    f2:ce:df:2c:26:a5:3f:38:0d:cd:92:ba:e6:6f:32:
                    68:99:52:b7:03:ab:30:6a:9e:be:08:17:61:4e:78:
                    3f:e0:36:25:b7:d1:46:19:6f:7d:4a:b3:3b:83:7d:
                    b6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E6:D8:B8:32:73:F2:DC:F7:8F:B3:87:D1:45:63:45:EE:90:0A:73
            X509v3 Authority Key Identifier:
                keyid:B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:f8:6f:81:8d:fb:35:01:c3:6c:00:58:f9:a7:41:64:78:90:
         c8:65:8e:bf:97:2d:00:25:53:60:f8:48:9c:5b:9e:25:9a:ec:
         0d:d3:b2:13:74:58:e6:b7:d6:4e:cd:ed:f8:eb:25:11:db:20:
         12:5b:38:d4:b6:77:15:09:ff:8d:f1:d6:9f:a3:ce:f7:1c:b8:
         52:ba:8e:65:f0:af:f1:4e:56:71:af:b2:e8:68:bf:77:c7:1c:
         03:05:8c:f0:3a:ea:4a:95:ad:61:8c:e7:cc:26:f4:69:fc:5f:
         93:01:46:7e:9d:d8:4f:db:64:9e:8b:42:af:df:81:11:11:ac:
         19:3e:5c:43:3e:4a:76:1f:7a:61:a4:9e:72:0b:52:4b:ea:27:
         41:60:48:60:90:de:73:4a:b3:5a:63:09:52:12:68:96:3f:5b:
         22:23:76:2d:3e:6e:ff:ed:52:6f:3d:23:ed:c4:97:15:e7:c1:
         d7:7a:d8:36:b0:56:3b:d0:37:a7:91:3c:44:d6:71:86:f5:21:
         d8:4c:5d:f8:7a:7a:51:22:df:c3:18:ec:89:04:43:50:76:c9:
         7b:7c:5b:a8:2e:46:b5:d5:62:b9:60:13:0a:71:68:18:53:5b:
         5a:17:7b:65:49:50:3a:31:8b:cb:6e:3b:58:ea:31:bb:0f:b4:
         61:50:3c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:17:31 2026 by rpki-client