Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
File:                     e4f2uRGfqdzT4S5-a_twbf-XiCU.mft (raw, json)
Hash identifier:          MshjFrl7Ike6S3c1EjtizrDcCcg/XshvDtTscjcUlUo=
Subject key identifier:   FD:85:82:38:07:86:9C:5E:60:61:55:4E:D6:31:70:35:62:B1:AB:C8
Authority key identifier: 7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25
Certificate issuer:       /CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
Certificate serial:       019E1D23527E020960621AE2A9C6B4666602
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
Manifest number:          0E6B
Signing time:             Tue 12 May 2026 17:01:54 +0000
Manifest this update:     Tue 12 May 2026 17:01:54 +0000
Manifest next update:     Wed 13 May 2026 17:01:54 +0000
Files and hashes:         1: 4da3-XmLEkYcc3sAjFZripmjHEs.roa (hash: 1i27nzDEtTVh1XcH6FHCSz2Xc6Yvv2oFolpv88tvSsU=)
                          2: e4f2uRGfqdzT4S5-a_twbf-XiCU.crl (hash: mdzUdGeEdYYQMV5s1lE+os68CHImolL7bLoZHade3iI=)
                          3: xSGU6r0B_I3lvM9xUa1OSbzHYVw.roa (hash: TCNyWuHnIfYABJLhXFXZbaq2jMFfVpuSOsPz4euzfpQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:23:52:7e:02:09:60:62:1a:e2:a9:c6:b4:66:66:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
        Validity
            Not Before: May 12 17:01:54 2026 GMT
            Not After : May 13 17:01:54 2026 GMT
        Subject: CN=fd85823807869c5e6061554ed631703562b1abc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d4:cb:51:d4:6b:32:ec:b5:d1:65:8a:65:db:
                    92:34:b4:70:97:44:97:9b:dd:65:a3:2c:44:40:27:
                    29:17:57:d8:80:bf:b9:94:1b:14:5b:e2:c6:06:87:
                    22:50:d7:21:9d:0e:b6:ab:9e:50:26:0c:6d:5f:84:
                    f8:f4:06:b0:7d:8d:88:65:3c:3c:2f:7a:c7:b8:e9:
                    2d:ce:c9:6e:f3:14:4c:98:d9:a0:37:b9:3f:e3:54:
                    cc:f4:25:91:27:0b:3b:2e:e3:93:b8:0b:4d:60:ac:
                    2e:46:1c:29:b7:25:42:3c:99:e0:ed:96:f5:f4:26:
                    f1:da:33:00:a5:a8:87:2a:03:c6:1b:77:cc:60:2f:
                    60:a8:65:f2:87:5a:31:df:6d:b4:b2:fa:62:9b:97:
                    d8:9c:89:32:2d:83:ec:f9:43:15:e6:06:b9:e8:d3:
                    e7:97:c1:d1:c6:43:f0:c6:02:1f:7f:b2:1e:5b:0f:
                    d0:c9:f2:70:06:f5:66:df:ea:bb:0c:c2:77:7d:8e:
                    68:5f:ac:85:ae:cc:07:6a:40:e8:64:a5:c0:15:bc:
                    b5:90:49:b7:c1:30:43:fb:ca:fa:a1:20:ef:bf:c3:
                    15:a5:1a:26:0b:a8:25:2c:74:34:d2:e4:aa:b7:62:
                    a8:57:79:53:b3:b0:a3:4d:ef:60:9c:91:29:ec:0d:
                    42:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:85:82:38:07:86:9C:5E:60:61:55:4E:D6:31:70:35:62:B1:AB:C8
            X509v3 Authority Key Identifier:
                keyid:7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:b6:a5:3e:d2:c5:df:ed:e3:2f:05:1d:73:67:2d:fb:17:48:
         9a:a6:b8:19:7e:64:61:30:02:bb:69:2d:87:27:21:52:b1:d3:
         38:d2:1f:78:22:5c:b0:0f:d9:af:91:ea:3c:ba:70:89:23:2b:
         8a:96:6c:e4:34:48:b1:c3:73:bf:9a:1b:8d:59:51:82:a5:79:
         b8:a6:1f:cc:a4:33:f1:6e:24:da:e3:e6:26:98:e2:a2:a6:ec:
         68:3a:27:51:d9:8e:02:2a:e6:be:80:54:96:50:f3:e5:68:d5:
         f7:fa:86:c8:ab:f8:1f:2b:a3:93:01:cc:a2:4b:35:2a:6d:2b:
         91:4f:47:15:7a:51:cc:b0:1f:22:e0:57:01:17:b0:8a:74:40:
         72:59:fe:da:f7:4c:11:16:78:19:20:97:7d:d4:69:25:3b:63:
         1a:61:2f:9e:b3:eb:3a:3e:76:ca:f4:cb:0d:78:58:3e:ad:99:
         c7:88:42:37:ef:f3:09:6e:4d:63:72:00:34:e4:33:87:b9:46:
         d6:20:dc:eb:6d:79:aa:2d:f0:f0:0f:eb:44:f1:7e:94:20:41:
         c1:f1:60:b3:b9:e8:81:8f:aa:f0:db:63:c6:9c:54:cd:c7:ab:
         f5:d6:07:4c:80:7c:5a:14:15:78:2e:bf:5d:f8:b9:28:ab:a5:
         98:43:e9:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dI1J+AglgYhriqca0ZmYCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiODdmNmI5MTE5ZmE5ZGNkM2UxMmU3ZTZiZmI3MDZkZmY5
Nzg4MjUwHhcNMjYwNTEyMTcwMTU0WhcNMjYwNTEzMTcwMTU0WjAzMTEwLwYDVQQD
EyhmZDg1ODIzODA3ODY5YzVlNjA2MTU1NGVkNjMxNzAzNTYyYjFhYmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdTLUdRrMuy10WWKZduSNLRwl0SX
m91loyxEQCcpF1fYgL+5lBsUW+LGBociUNchnQ62q55QJgxtX4T49AawfY2IZTw8
L3rHuOktzslu8xRMmNmgN7k/41TM9CWRJws7LuOTuAtNYKwuRhwptyVCPJng7Zb1
9Cbx2jMApaiHKgPGG3fMYC9gqGXyh1ox3220svpim5fYnIkyLYPs+UMV5ga56NPn
l8HRxkPwxgIff7IeWw/QyfJwBvVm3+q7DMJ3fY5oX6yFrswHakDoZKXAFby1kEm3
wTBD+8r6oSDvv8MVpRomC6glLHQ00uSqt2KoV3lTs7CjTe9gnJEp7A1CVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2FgjgHhpxeYGFVTtYxcDVisavIMB8GA1UdIwQY
MBaAFHuH9rkRn6nc0+Eufmv7cG3/l4glMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTRmMnVSR2ZxZHpUNFM1LWFfdHdiZi1YaUNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZjNhYjEtNTk1OS00NWE4LWJjMGYt
ZDc4NTE0ZTllODEyLzEvZTRmMnVSR2ZxZHpUNFM1LWFfdHdiZi1YaUNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zZjNhYjEtNTk1OS00NWE4LWJjMGYtZDc4NTE0ZTllODEy
LzEvZTRmMnVSR2ZxZHpUNFM1LWFfdHdiZi1YaUNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKbalPtLF
3+3jLwUdc2ct+xdImqa4GX5kYTACu2kthychUrHTONIfeCJcsA/Zr5HqPLpwiSMr
ipZs5DRIscNzv5objVlRgqV5uKYfzKQz8W4k2uPmJpjioqbsaDonUdmOAirmvoBU
llDz5WjV9/qGyKv4HyujkwHMoks1Km0rkU9HFXpRzLAfIuBXARewinRAcln+2vdM
ERZ4GSCXfdRpJTtjGmEvnrPrOj52yvTLDXhYPq2Zx4hCN+/zCW5NY3IANOQzh7lG
1iDc6215qi3w8A/rRPF+lCBBwfFgs7nogY+q8NtjxpxUzcer9dYHTIB8WhQVeC6/
Xfi5KKulmEPpqw==
-----END CERTIFICATE-----
Generated at Tue May 12 22:14:37 2026 by rpki-client