Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
File:                     TdGyWHSQrQYcsgcXa97sgaUxWIw.mft (raw, json)
Hash identifier:          QKWg71VLBtA1SuZFccNey5JgqxARQJ98BPpf9rMxWZk=
Subject key identifier:   29:D9:C8:EB:F5:C1:99:D3:86:7B:5C:CC:CA:58:2D:24:81:01:59:5D
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Certificate issuer:       /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial:       019E1CEBE11ED170C7CB0AFFC829A98D04E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
Manifest number:          191C
Signing time:             Tue 12 May 2026 16:01:20 +0000
Manifest this update:     Tue 12 May 2026 16:01:20 +0000
Manifest next update:     Wed 13 May 2026 16:01:20 +0000
Files and hashes:         1: 02kOZkpvmw6H06A_7TJUg4SFXaQ.roa (hash: TpRuYePLiA4791T1EEAGr2x5CqL+fTtzRjsvGFbZMFE=)
                          2: 2uonQk8lw16FeBIvKKSSmhsYIS0.roa (hash: 2dNCmgQW6KMhs3bZJLn40BJuFp8E7ETzKi/EDLa0p5s=)
                          3: 5ziyZMsm-eF8rQKEiPIRLUjKrJc.roa (hash: ST0tOCj/lVMKy70YCsjUG8APQaOubaCeSEbJbdk4mkA=)
                          4: 8EjBwuh_9in2Z1YECnIBdQ9VNrg.roa (hash: PZyLvuJ766MtPxGWe7ycqZ9uJ2ybPMELzypr1ODKQyU=)
                          5: 8iq73EY8SNEMLGjWaX4ccQq1LKw.roa (hash: JmTLodfb4oaon3Tv2+zOKzJurk+8nq1oEroEJejbuII=)
                          6: FwWBUFukI5sYaoIJXPQl_VpBKGw.roa (hash: 1A5Wlz49N8I7V2ONwfh6sYJRe2syIOSrNYZlIXmZWdY=)
                          7: Gy-LFbASJWTVYACt4LtWc2cmLuw.roa (hash: ujJsb5LhZ8X8O1ISoHR/MP5k+2QVAPis3/2ApXdZZ3g=)
                          8: MO6J3ImYDWqYVzymL0l4FvP1thU.roa (hash: e0dvPY/H6He44W+ZncCzFUHFzRAKvhD4nFOOCJSgnhw=)
                          9: NjCxVetchGZ0XWn7taqHcdtexeY.roa (hash: luZWHi8jfVZ+lGh40HXz9Aj5QcdjwpUbYNovF4whMXA=)
                          10: TdGyWHSQrQYcsgcXa97sgaUxWIw.crl (hash: +zUh+pdnqYQpujG2x+Nr9EE1XrUTs86POYuAx67GkJw=)
                          11: YtD0hgbunNZVqmVM-mTLvyyQEfg.roa (hash: bXNfm9p7iVN39qRXUc3z+rEBdxvoCN2D2p6tjPh77Uk=)
                          12: aXSOc-PVHMUBKt_487iYToOm7qo.roa (hash: TgcrpfHL47vgaiMhXn3iuqbilgXgoWpFYf29PAeU7PQ=)
                          13: esYBbdHlmzNrFPaZHG9t4u-VPHc.roa (hash: lkNqbXeTq7xSvC4HTyeLweRSSMj+JVz2/1P8Io014A8=)
                          14: gH8loGqHuQUgS7s-27j8UFtooRI.roa (hash: 3c/uPZsoFkC/+vu1WnVFt+9jcD0vxFLrQc/tSOZVhig=)
                          15: irMc3rrBTtXnxu6Y6x7SlrREl3k.roa (hash: odarHoY4Wy3X+9/gV/9gi100gxxZ4b3sXjkX8UmBWCw=)
                          16: jSXCL2nU6ig_-VGukqzzbg83BZk.roa (hash: Az+cF5wKpW/d6F9stZPF4IUccQjeYz6jWseSjP0L2T0=)
                          17: kYEWFQU5-czKs7zv1vGT343BJ-g.roa (hash: xWtvvMN7qcqpohmug6+MXQLfldtO5B6k2u+O9bf+VTA=)
                          18: oitUYkAPeYiroXJK68BhqiN_Xek.roa (hash: zYA61o9aLXKLXeSg2vp84zehihqtVq61hd+jWJCYfGg=)
                          19: rbrxUA36Uj_W2cv5ysZhTVIwxp4.roa (hash: OT7C6O/C6TgYrrzLBRPYDZUiybzraaRPGIJN5wW++Ak=)
                          20: u0RIuGfpHnx-Tn2Xp-wlaIQU95A.roa (hash: VuT5SalQp4yYIzm6lgKxTmu1Rlv5TD85uBnxUVTY7eo=)
                          21: yLMV5lCxmugxTcjR0kvs8qTvDQs.roa (hash: VAFUfjT6/8ZbId3UHCjjJDfpK2X5rUeLGtPsXPOBDAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 16:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:e1:1e:d1:70:c7:cb:0a:ff:c8:29:a9:8d:04:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
        Validity
            Not Before: May 12 16:01:20 2026 GMT
            Not After : May 13 16:01:20 2026 GMT
        Subject: CN=29d9c8ebf5c199d3867b5cccca582d248101595d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:26:d6:1a:ab:77:fa:2d:c5:07:27:82:e0:dd:
                    80:83:7a:bf:94:fe:48:72:b5:89:b8:4f:a7:26:cf:
                    b5:7d:23:47:b8:7d:34:19:d9:3b:37:ab:70:09:7f:
                    9a:d0:6c:7c:0e:42:d3:93:f5:68:4c:ab:8f:aa:c8:
                    d2:8d:7c:9d:28:ac:4d:ac:0a:15:2a:d0:7f:78:43:
                    77:c0:c7:69:e8:3a:dd:08:ff:51:43:47:e9:86:69:
                    cb:ff:bb:39:77:8b:3c:01:52:d6:92:d6:54:25:c1:
                    28:65:3f:c3:22:6e:00:ab:e5:e9:ea:09:dd:7d:ba:
                    c9:9a:91:54:89:ee:59:9e:ed:36:48:36:30:e4:a5:
                    3d:54:77:d7:2d:d8:00:37:fc:30:f7:22:c6:03:ee:
                    8a:37:2e:c7:ed:e1:41:cf:ad:8a:7c:c7:8c:87:01:
                    d0:df:dd:a6:4f:a0:82:e0:18:58:5c:bf:ba:a6:33:
                    83:ee:16:ee:42:16:19:11:ad:fa:fe:6d:f7:fc:b5:
                    a3:e4:a6:97:d1:ef:3a:97:41:4e:30:b3:6f:9b:74:
                    e5:e6:a6:1d:4b:a2:c4:46:e4:99:e3:d0:9f:cd:bb:
                    d3:57:2b:6a:54:58:60:08:15:3a:80:6d:3f:a6:f0:
                    ff:94:24:26:58:98:57:7e:1f:8b:03:63:ff:85:a9:
                    4c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D9:C8:EB:F5:C1:99:D3:86:7B:5C:CC:CA:58:2D:24:81:01:59:5D
            X509v3 Authority Key Identifier:
                keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:fe:13:63:9b:93:25:64:c8:17:f0:90:7b:f1:03:61:03:d5:
         9a:48:c8:49:be:a2:cc:84:20:a6:5f:a5:28:ea:e9:cf:63:3b:
         92:6f:63:76:72:38:ae:8a:55:b1:e9:a9:8d:01:87:c2:13:c6:
         0c:9d:d1:2c:cb:cf:60:ac:b6:0a:9b:8a:15:53:09:05:eb:32:
         90:93:5b:b5:97:8d:30:11:43:4b:50:ce:2c:f9:bd:a3:bf:c2:
         3f:4b:c7:31:57:24:82:3b:26:87:e9:df:8f:41:a4:e0:fe:29:
         2a:86:b2:30:91:12:ed:c7:4a:e7:af:f0:40:8e:d5:67:5e:f1:
         97:25:c3:64:f3:f8:bb:a7:5a:0b:75:60:16:13:a3:d8:51:9e:
         64:3d:ab:de:bb:fe:0b:fd:da:4b:fd:79:99:76:ed:65:51:a0:
         05:bb:8d:bf:ec:40:a3:96:82:52:b6:53:11:93:bf:fc:d1:14:
         17:29:04:fa:8e:f1:15:65:ee:dc:c2:95:8a:f7:cc:fb:4b:4e:
         a9:23:c7:71:b7:78:69:6d:c9:7f:2d:18:b9:5f:1c:cd:c3:d8:
         9a:40:ee:69:26:e0:06:65:90:e4:95:ef:6c:64:75:ae:d5:86:
         7c:bc:ba:06:90:77:56:89:98:05:2d:cb:19:e0:02:9f:76:c4:
         5c:e1:5d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:36:29 2026 by rpki-client