Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
File:                     tTAFYZaI77r_0G4QikO98gZD4NY.mft (raw, json)
Hash identifier:          wmbYkK3XEWiEauHKmNpW8VfoYMfiCH/Bb+gmZAyI3Yk=
Subject key identifier:   66:30:E7:11:75:2C:F1:2B:2F:25:DE:5C:86:A1:99:42:CC:68:54:86
Authority key identifier: B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
Certificate issuer:       /CN=b53005619688efbaffd06e108a43bdf20643e0d6
Certificate serial:       019E1F47BBA3ABF9A748C8DCD4BEF593948B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
Manifest number:          190D
Signing time:             Wed 13 May 2026 03:00:55 +0000
Manifest this update:     Wed 13 May 2026 03:00:55 +0000
Manifest next update:     Thu 14 May 2026 03:00:55 +0000
Files and hashes:         1: ExGpRunqaEGx1C87iYbOQskR5uw.roa (hash: RiaEfvnW4XKOfGx9ToOnBoSA9Vrw+toQDu46/ctYlAQ=)
                          2: SH-0mJS__xq0Nrwordyx2eNpy6E.roa (hash: MFyq3HcX0V4paZzyvO44VehUzFoDp8T3DaYSoMIBwAg=)
                          3: eUXXUdsIFWgmK4QDPBj079S1krA.roa (hash: tLqc3PNhBtm/slptj0WlzHoHZqeLEYUFaZxJp22uQOY=)
                          4: tTAFYZaI77r_0G4QikO98gZD4NY.crl (hash: qTskMwAh8fb0PGtGyYR43/e+NNnSvoz2FOfRPzHwGoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:bb:a3:ab:f9:a7:48:c8:dc:d4:be:f5:93:94:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b53005619688efbaffd06e108a43bdf20643e0d6
        Validity
            Not Before: May 13 03:00:55 2026 GMT
            Not After : May 14 03:00:55 2026 GMT
        Subject: CN=6630e711752cf12b2f25de5c86a19942cc685486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ec:63:08:7c:8a:72:8f:c3:0e:14:72:fe:2f:
                    48:88:67:f1:a7:ed:14:d9:65:dd:80:6f:78:de:c5:
                    5b:3c:8d:97:43:26:fa:4b:11:b5:8a:85:95:41:30:
                    ee:7e:76:c9:8e:bd:d4:a7:86:03:c6:a0:26:16:a2:
                    80:ae:c2:3d:aa:4f:ce:ea:ba:f3:08:5b:eb:ff:4f:
                    16:76:51:c1:8b:07:dc:fa:bb:44:47:0a:06:a4:92:
                    09:e1:78:70:96:65:49:bc:5a:9d:1a:7c:28:3b:46:
                    c2:28:d5:5e:e5:01:f0:a5:0b:4f:4f:ec:52:42:2d:
                    48:15:a9:14:fe:1b:f3:8c:65:c2:f1:21:41:f2:41:
                    62:c8:74:26:34:7e:73:37:17:27:01:14:c3:a7:58:
                    eb:e4:61:43:3d:12:da:33:98:3f:19:b6:4d:f2:7c:
                    a3:aa:cd:7b:e0:d7:35:b2:bd:26:85:ed:b2:12:aa:
                    87:92:5e:e8:56:4c:fd:00:cc:9a:0d:15:57:8d:df:
                    67:0a:da:7e:8d:bc:a0:82:fe:e3:08:0f:27:ac:5c:
                    c8:e6:0b:4e:c5:53:35:53:2b:04:65:09:53:ea:c0:
                    3e:db:b5:a6:4f:ae:5a:0e:41:17:fb:1c:9d:75:f4:
                    33:23:72:c1:75:3b:17:f1:e8:5e:e2:8a:a8:8b:f0:
                    07:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:30:E7:11:75:2C:F1:2B:2F:25:DE:5C:86:A1:99:42:CC:68:54:86
            X509v3 Authority Key Identifier:
                keyid:B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:22:7f:b0:9b:54:c8:e8:a9:68:9d:a5:93:de:53:7f:27:46:
         08:56:15:6c:47:20:0e:5f:c1:ff:06:4a:d5:f4:e4:13:c4:60:
         4a:cc:6d:9e:73:d1:33:39:27:61:a7:56:ba:31:fc:19:57:ca:
         5e:aa:96:cf:8a:0b:ec:95:ca:43:95:bb:8c:91:25:a3:47:a1:
         88:84:11:3a:82:ee:d3:3f:29:79:4a:46:5f:9e:bf:70:9e:d4:
         14:ba:b0:63:a3:79:6b:78:6e:e6:57:31:e8:59:42:ae:85:08:
         49:68:c1:18:9c:45:21:b3:88:01:19:01:50:50:e2:35:09:8a:
         19:6a:32:a2:69:88:19:5f:7a:22:39:26:b4:9a:b9:7c:ba:13:
         b6:11:f0:86:3a:15:a7:7f:de:d6:69:fd:90:af:59:ac:44:d3:
         c8:45:90:3e:bc:fc:3d:3c:59:b0:b3:17:d4:02:cf:d7:93:29:
         a1:6b:8a:e9:e0:e0:f0:ea:8e:e2:1a:3f:8a:d4:95:85:b5:f3:
         a3:a6:a8:9b:72:d9:52:76:95:4b:3d:f1:f5:c3:74:58:fd:1a:
         39:4b:d0:d1:33:d9:64:d4:ed:fb:50:3f:ee:1c:30:b7:ed:32:
         ec:32:5b:66:01:fc:59:07:e1:f1:7c:e5:3e:4d:80:5d:bd:13:
         aa:01:34:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:21:32 2026 by rpki-client