Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
File:                     tFmZiZ920uLkzN_IF_mHnPrAa74.mft (raw, json)
Hash identifier:          5j8r3Q6jBW373ChWnENFF1c8LjRfdotkJ8RY3B4yWWY=
Subject key identifier:   DA:18:67:1D:E3:83:98:23:62:6F:0D:45:07:FA:2F:81:E2:51:3E:51
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Certificate issuer:       /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial:       019E1D90DDC684BC8C47C21525BA13E6BE43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
Manifest number:          1206
Signing time:             Tue 12 May 2026 19:01:33 +0000
Manifest this update:     Tue 12 May 2026 19:01:33 +0000
Manifest next update:     Wed 13 May 2026 19:01:33 +0000
Files and hashes:         1: 00yjAHUjPi78LWd5NKw2W62obOE.roa (hash: fy76k6hktxmrp/33ybyKcOrtr3l2uBboJQ/aOUgHGR4=)
                          2: 1hJj5lLq19A-j9_WZiFK8KryVh8.roa (hash: BdyFvctNzfBBkcxWw8lGFz2gTUvcnLbqttbqeJ44fGQ=)
                          3: 2O9349WO0t6H0E9ZK0f1QWi3t0Q.roa (hash: 2RhFKguLdx/frIsqfhlZq+St14nwRLDsFvzdspSUCHs=)
                          4: 3DayZInlpCng2LjdqaK2o4E1lt8.roa (hash: 55bCle765DxtS3imH/01djboah5uSEuHS5mv+0u8br4=)
                          5: 3Hua7wKmQfp9JEgzSI5kFZ9qKuY.roa (hash: b4NMrJHTU6u3cjIt8gqKKQ1+s/2nFZTA+L4AbUR1Vzk=)
                          6: 7SmXzQd-nWaNe8t8rqOA7438J_s.roa (hash: RMY9iFIYUbgR/WmLppHu9PswGGc4qk7Roiy4Bmlgw3s=)
                          7: C0vG0uZJhdLke9zV4DtlDw7x7x4.roa (hash: HCSSZlXrpOKQe2BM9iayndjEAssKEROhKaQr2TLBt40=)
                          8: DHLKNILgfx16JsrlSXMeY6f762E.roa (hash: z5ydua2ZisWly8IjsMlT6pkwvFda1aV+qss6iF0vFOU=)
                          9: FerkNmRdMMqBAxxCWnxbdwDF0fM.roa (hash: X4J4aibstvyyZ1dw044vF6xHdgTuovNe6IxPq/bGSrQ=)
                          10: GWLPm0EaGoN4BtEyzXiiEIZ-GTE.roa (hash: w7giHRJ/Hm+CuvJmm/pIjg11UlpDd5+GD+ZEyWmk2uc=)
                          11: JoqKm8sMA3Uu8bfvQqeKdzY6joo.roa (hash: LnpktCIb6RF6zzxK4zr5D3vSGTrAo2pAVOT0PFiTHVI=)
                          12: K9Dqioe9b1QzXjqNmFeropCvp-0.roa (hash: sgULkqb+pMBqo5qKyD2WmWceUGLc0NbCM+ENzx9wYYo=)
                          13: KKcG59VmFqQ4cXd0BBLDjoayHpI.roa (hash: I8RNIw+sEHGZn2p4ZlnQNs1qXyAS/e9dFOjjqFagY3w=)
                          14: LgY25QbgZqhNvhqdpq4jCmc_b18.roa (hash: 6a+VIppYRWxmbviK7LZBjjPP+2OlNWWoNbpMAlqB7IE=)
                          15: LvDcdbQFTKKtCL0HWtHi8ZHMICw.roa (hash: pr9dzyzuzRXVF7OipbNJiEIFE2wIqGOEkXf2LlwVcSo=)
                          16: PZU4IIeyEkNUYzUo959cxHqGiME.roa (hash: 4kKemKUnTaECIacGpN+OjJhGEQ9cruITFABLowf6IMg=)
                          17: ROXrZox9qmRyvEk1U37LkhE8O1k.roa (hash: O/Kmp71WYLzeqzuXJvcZSb52Tj33zZc/vYWStp0shFw=)
                          18: b1R5F1rXBZ-9jQYuesOiTfnnXjw.roa (hash: i2y4+MSKBcNxu87+qDE+/nX7xefI7C4Gq8swc9+9PNU=)
                          19: bsu95ghiIBpd9cfADiMIa9Yxj6Q.roa (hash: 16b5K9754SCIP/D165OSsKJafJ6ZtxK/WBHz3KMDFr0=)
                          20: eUlwfQNbP2vIOtwAcyEsR7HEJss.roa (hash: P1z0FJdjv4KMmXfM20mE40d3OdggWf6hJHcQuPfAi3M=)
                          21: jQpPOBphDwOHGz-YTTgRfMl55f4.roa (hash: ZN+2LfzVaZonpBeZ6jR5K6U7ZyZ37D18XY7PBjVsHPg=)
                          22: jl1wYnhLUOSbsZUU80_UB5Kx2dE.roa (hash: uChc1aHz2hrtDcLAVGR6Xk6XuTeM5AKvLRgVGOGtFQI=)
                          23: lJE-9MHI0m9odS0-ez-OUf7XXOo.roa (hash: NzsXcZUGn5wcX+3FrmFWw7UtvY0O9+75hmCPmsbk3Bg=)
                          24: pADycQ-9xhjD7DWrrFk7pCQ_Ijo.roa (hash: K1+0R7I0/kdM14j+kEitEaAtqppeRpYjvV274U8LEQY=)
                          25: tFmZiZ920uLkzN_IF_mHnPrAa74.crl (hash: cs8aUZzSsJLfpTkoVTOdvTYvABfC/BnfSIcNWP4lAuE=)
                          26: trir8qL64aNBmuq7kCE6q-vw1qE.roa (hash: e1sr1CETTzxHpRTFfDyLkJVAK4EzBhmgBByIF0XK3ZI=)
                          27: uYe5oaUK8hVW2om_IAHy0X4_gSc.roa (hash: MzIlUgDKPBOByTPkQl8istY2JT1L8/f98rWrZ5ecX8k=)
                          28: wHn4Idt9pbw0xNqo1xXnrZAME_c.roa (hash: 1V81c+Xq4YaFlhjRvvqZvgJ/aOSF31vxmGkYy8VJT/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:dd:c6:84:bc:8c:47:c2:15:25:ba:13:e6:be:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
        Validity
            Not Before: May 12 19:01:33 2026 GMT
            Not After : May 13 19:01:33 2026 GMT
        Subject: CN=da18671de3839823626f0d4507fa2f81e2513e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:91:cf:75:52:41:90:80:85:7c:9e:da:c9:56:
                    39:9d:5b:07:94:20:48:1d:44:f1:42:44:eb:f2:5a:
                    a4:9e:75:b0:55:49:6c:44:37:87:7b:24:0e:f3:16:
                    b2:65:a5:6d:a1:59:f5:5a:e1:33:4f:08:08:38:69:
                    21:72:75:f2:b3:1a:dd:9f:cf:cc:d0:c8:e3:6f:6e:
                    6f:fa:e3:4e:a2:11:b0:33:4d:cc:8f:39:f5:4d:75:
                    b1:4d:6d:6e:c1:cc:27:6c:ef:b5:f8:d3:18:5f:bc:
                    13:48:61:dc:8d:4d:29:28:be:81:c9:c0:1c:44:15:
                    c9:d6:07:bd:4e:32:fb:c1:d1:32:b0:ce:1d:57:67:
                    60:78:21:6b:73:f0:df:fc:6a:66:1b:c6:63:1b:e1:
                    3a:39:79:bb:b2:77:43:5e:af:69:df:2d:7d:62:35:
                    bd:9b:e8:82:0f:9b:25:09:88:bd:a9:bd:c5:85:cb:
                    1f:d8:2d:19:99:48:3a:fb:f0:be:68:ac:b5:fa:5e:
                    01:20:b2:2e:1a:7a:cc:02:29:06:4b:01:e2:a3:c8:
                    93:32:c9:47:27:60:bc:66:83:a1:d0:7c:47:09:2c:
                    5e:7f:74:c5:d0:d3:0e:84:36:6a:6c:0b:51:0b:63:
                    ce:92:07:68:36:d5:e8:cd:51:5e:fb:c2:35:9a:ee:
                    45:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:18:67:1D:E3:83:98:23:62:6F:0D:45:07:FA:2F:81:E2:51:3E:51
            X509v3 Authority Key Identifier:
                keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:84:d1:21:06:35:b2:90:fc:4b:6c:5d:4f:41:62:6b:9d:cf:
         97:a5:03:fc:c5:19:7d:c1:c4:69:69:1b:c8:18:16:1d:b7:99:
         6e:9e:ac:6f:69:de:85:47:d8:ba:90:41:d9:f6:d6:3a:21:ff:
         2b:24:5f:a5:77:9d:ed:9b:9c:23:f3:b7:bb:9c:1a:d3:93:76:
         19:d0:68:6e:4b:41:a5:71:7a:91:4d:75:05:83:ed:a1:24:06:
         4c:14:15:9a:66:89:89:67:49:af:36:86:43:63:3a:c6:73:e3:
         03:82:92:b7:cb:f6:aa:f9:06:cc:37:21:d6:32:20:88:20:d3:
         9d:40:6a:5c:2f:7d:e0:79:fd:59:86:3a:ed:ad:79:55:fe:d7:
         a4:0b:39:7a:63:e0:86:5c:d4:1e:c9:30:f1:9b:20:30:39:ce:
         48:55:6d:a7:d5:23:c4:d1:30:5d:60:8c:21:3f:6b:5c:d5:e9:
         8d:e1:3b:b1:41:c5:1c:1f:71:b9:c6:8f:65:33:ed:fd:f4:fa:
         a6:85:68:76:4c:07:07:9b:16:28:9b:80:43:4a:31:db:38:90:
         62:cb:18:f4:47:14:72:8b:4b:89:82:5c:3b:a5:e8:f3:1f:46:
         ba:6e:90:fd:31:f0:a3:7d:3c:50:ad:32:26:51:23:81:69:52:
         40:21:93:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkN3GhLyMR8IVJboT5r5DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj
MDZiYmUwHhcNMjYwNTEyMTkwMTMzWhcNMjYwNTEzMTkwMTMzWjAzMTEwLwYDVQQD
EyhkYTE4NjcxZGUzODM5ODIzNjI2ZjBkNDUwN2ZhMmY4MWUyNTEzZTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pHPdVJBkICFfJ7ayVY5nVsHlCBI
HUTxQkTr8lqknnWwVUlsRDeHeyQO8xayZaVtoVn1WuEzTwgIOGkhcnXysxrdn8/M
0Mjjb25v+uNOohGwM03Mjzn1TXWxTW1uwcwnbO+1+NMYX7wTSGHcjU0pKL6BycAc
RBXJ1ge9TjL7wdEysM4dV2dgeCFrc/Df/GpmG8ZjG+E6OXm7sndDXq9p3y19YjW9
m+iCD5slCYi9qb3Fhcsf2C0ZmUg6+/C+aKy1+l4BILIuGnrMAikGSwHio8iTMslH
J2C8ZoOh0HxHCSxef3TF0NMOhDZqbAtRC2POkgdoNtXozVFe+8I1mu5FdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNoYZx3jg5gjYm8NRQf6L4HiUT5RMB8GA1UdIwQY
MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt
NzM0MjhmOWM3YmZmLzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm
LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWITRIQY1
spD8S2xdT0Fia53Pl6UD/MUZfcHEaWkbyBgWHbeZbp6sb2nehUfYupBB2fbWOiH/
KyRfpXed7ZucI/O3u5wa05N2GdBobktBpXF6kU11BYPtoSQGTBQVmmaJiWdJrzaG
Q2M6xnPjA4KSt8v2qvkGzDch1jIgiCDTnUBqXC994Hn9WYY67a15Vf7XpAs5emPg
hlzUHskw8ZsgMDnOSFVtp9UjxNEwXWCMIT9rXNXpjeE7sUHFHB9xucaPZTPt/fT6
poVodkwHB5sWKJuAQ0ox2ziQYssY9EcUcotLiYJcO6Xo8x9Gum6Q/THwo308UK0y
JlEjgWlSQCGTrA==
-----END CERTIFICATE-----
Generated at Wed May 13 06:07:45 2026 by rpki-client