Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
File:                     tgqsEEN2t53WgpCRlHt3nJia9os.mft (raw, json)
Hash identifier:          F8Jinapx/GPXua+HYcm9BsjK+IarUAm56iWnrEPVsJQ=
Subject key identifier:   59:5D:36:03:8F:B7:8B:AA:AD:BD:A9:31:3A:58:F6:CC:6C:38:A6:ED
Authority key identifier: B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B
Certificate issuer:       /CN=b60aac104376b79dd6829091947b779c989af68b
Certificate serial:       019E209127AC0BB58D1547CD3755E583126C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
Manifest number:          1519
Signing time:             Wed 13 May 2026 09:00:44 +0000
Manifest this update:     Wed 13 May 2026 09:00:44 +0000
Manifest next update:     Thu 14 May 2026 09:00:44 +0000
Files and hashes:         1: qpaxq7ZhsWj2r4DwD72krm1lajU.roa (hash: MqKBfCOBRTEgrXSIFmc+vLs4pABsdPRMHJhH8wTcfXk=)
                          2: tgqsEEN2t53WgpCRlHt3nJia9os.crl (hash: yT/EvNKiM1XjgS+THuNH+4a9m5JC+qxbhr3B4hev78Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:91:27:ac:0b:b5:8d:15:47:cd:37:55:e5:83:12:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b60aac104376b79dd6829091947b779c989af68b
        Validity
            Not Before: May 13 09:00:44 2026 GMT
            Not After : May 14 09:00:44 2026 GMT
        Subject: CN=595d36038fb78baaadbda9313a58f6cc6c38a6ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c6:54:fb:d4:85:44:b9:78:35:45:f1:23:16:
                    bb:e8:da:24:a7:f9:84:c9:a5:05:ad:1a:b2:73:ed:
                    a0:21:e4:8c:fa:87:90:e6:34:73:b2:c4:b1:65:38:
                    ec:f6:fe:18:71:46:c4:cb:8d:ae:9b:37:3d:df:16:
                    27:fd:dd:80:fb:3b:c1:69:e9:94:31:0e:f1:c0:ce:
                    74:58:f7:94:f1:0c:77:e8:ba:e7:df:1d:a9:61:29:
                    e0:25:70:bc:c7:95:dc:f6:ee:60:d8:95:9d:e7:a3:
                    9f:e7:89:e6:7f:f6:11:12:c1:96:65:9d:4f:75:7f:
                    72:3f:fe:6c:a4:5d:57:cf:4c:28:91:c9:7d:57:25:
                    00:af:b6:e9:05:df:c4:3d:b6:57:67:d8:e3:23:14:
                    5e:16:6b:7b:55:b1:de:f1:31:2d:02:be:a1:96:6b:
                    77:d1:17:41:11:7a:13:c1:4e:72:2e:b1:8c:06:65:
                    f7:f5:36:13:53:0e:57:28:d0:13:12:5d:5e:67:31:
                    7c:08:59:58:40:0f:bb:af:70:1e:3b:d1:29:be:74:
                    b3:d0:74:c6:3e:42:0e:73:82:e9:19:cd:00:2c:49:
                    b8:45:21:7a:ac:9b:0a:df:be:f2:07:57:8b:54:92:
                    47:0c:34:1b:8b:42:39:4a:8f:46:31:33:19:b3:5d:
                    79:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:5D:36:03:8F:B7:8B:AA:AD:BD:A9:31:3A:58:F6:CC:6C:38:A6:ED
            X509v3 Authority Key Identifier:
                keyid:B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:9b:f8:fd:8a:fe:54:ad:c5:3b:2d:f9:18:e1:2f:a7:fc:8c:
         2d:37:b4:c3:e7:84:ac:8c:c6:d5:63:4c:17:fb:9a:a1:51:df:
         a5:46:ef:9c:23:69:d9:16:e0:44:c0:fd:71:e2:8a:13:25:98:
         b7:7c:4a:55:b8:72:fe:2b:3a:38:91:19:f4:0c:97:03:47:da:
         76:8b:01:9a:70:4c:e3:79:e6:7d:d6:65:43:3d:1a:4e:2a:ce:
         21:65:b2:93:b2:97:16:73:a1:69:de:f4:58:65:18:74:89:d8:
         c4:56:92:b9:43:78:2d:83:fc:b9:67:a4:e9:7c:d3:84:77:c7:
         9e:db:15:ce:e7:0c:14:91:54:30:56:b8:59:52:38:3c:49:94:
         27:46:1b:cc:14:3f:cc:20:7b:d8:60:da:c0:b9:1b:db:c9:cf:
         8e:51:c2:f9:c1:dd:9c:17:42:59:57:d5:0b:be:bc:5f:96:34:
         14:68:d5:fa:01:6f:cd:5e:b7:7e:cf:0d:dd:7b:d3:7c:71:3c:
         6f:a2:07:27:07:3c:46:1b:7f:c8:5f:65:e4:69:b5:aa:38:89:
         8b:f1:8c:7d:34:52:31:64:4e:6f:3e:73:20:b6:85:da:6c:15:
         0a:b4:72:07:d8:c8:bf:0a:0f:5a:10:6c:a5:a8:4e:d3:27:81:
         28:3b:36:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gkSesC7WNFUfNN1XlgxJsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MGFhYzEwNDM3NmI3OWRkNjgyOTA5MTk0N2I3NzljOTg5
YWY2OGIwHhcNMjYwNTEzMDkwMDQ0WhcNMjYwNTE0MDkwMDQ0WjAzMTEwLwYDVQQD
Eyg1OTVkMzYwMzhmYjc4YmFhYWRiZGE5MzEzYTU4ZjZjYzZjMzhhNmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsZU+9SFRLl4NUXxIxa76Nokp/mE
yaUFrRqyc+2gIeSM+oeQ5jRzssSxZTjs9v4YcUbEy42umzc93xYn/d2A+zvBaemU
MQ7xwM50WPeU8Qx36Lrn3x2pYSngJXC8x5Xc9u5g2JWd56Of54nmf/YREsGWZZ1P
dX9yP/5spF1Xz0wokcl9VyUAr7bpBd/EPbZXZ9jjIxReFmt7VbHe8TEtAr6hlmt3
0RdBEXoTwU5yLrGMBmX39TYTUw5XKNATEl1eZzF8CFlYQA+7r3AeO9EpvnSz0HTG
PkIOc4LpGc0ALEm4RSF6rJsK377yB1eLVJJHDDQbi0I5So9GMTMZs115FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFldNgOPt4uqrb2pMTpY9sxsOKbtMB8GA1UdIwQY
MBaAFLYKrBBDdred1oKQkZR7d5yYmvaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGdxc0VFTjJ0NTNXZ3BDUmxIdDNuSmlhOW9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9lYWJiOWEtOWEwNy00ODY3LTk3MGIt
MmIxZGE2MjRmN2JjLzEvdGdxc0VFTjJ0NTNXZ3BDUmxIdDNuSmlhOW9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9lYWJiOWEtOWEwNy00ODY3LTk3MGItMmIxZGE2MjRmN2Jj
LzEvdGdxc0VFTjJ0NTNXZ3BDUmxIdDNuSmlhOW9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeZv4/Yr+
VK3FOy35GOEvp/yMLTe0w+eErIzG1WNMF/uaoVHfpUbvnCNp2RbgRMD9ceKKEyWY
t3xKVbhy/is6OJEZ9AyXA0fadosBmnBM43nmfdZlQz0aTirOIWWyk7KXFnOhad70
WGUYdInYxFaSuUN4LYP8uWek6XzThHfHntsVzucMFJFUMFa4WVI4PEmUJ0YbzBQ/
zCB72GDawLkb28nPjlHC+cHdnBdCWVfVC768X5Y0FGjV+gFvzV63fs8N3XvTfHE8
b6IHJwc8Rht/yF9l5Gm1qjiJi/GMfTRSMWRObz5zILaF2mwVCrRyB9jIvwoPWhBs
pahO0yeBKDs2ow==
-----END CERTIFICATE-----
Generated at Wed May 13 11:20:09 2026 by rpki-client