Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft
File:                     tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft (raw, json)
Hash identifier:          CNLxEdIwtlxT1BbxUDTWqIs2++a/wqrp8luKFdHuOgE=
Subject key identifier:   94:8A:FF:17:3D:7A:37:BA:CD:41:8C:DF:D6:07:50:AC:E6:FB:7A:43
Authority key identifier: B5:B0:A8:66:59:EC:31:4F:13:A0:4E:3A:03:DB:DB:12:44:A0:E0:A9
Certificate issuer:       /CN=b5b0a86659ec314f13a04e3a03dbdb1244a0e0a9
Certificate serial:       019F9090D0F219F689C776115785CE728980
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tbCoZlnsMU8ToE46A9vbEkSg4Kk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft
Manifest number:          187A
Signing time:             Thu 23 Jul 2026 20:00:37 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:37 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:37 +0000
Files and hashes:         1: 8bRTFqqfGJUx5yKlpNBGGLyfeAk.roa (hash: kImY5tJNZeZT0ukreVQs42nY/D7z0/+YDr07Sp3JI24=)
                          2: CN-8Pu5bXSBT4QPtIGRjyVpzJzI.roa (hash: EZji+EdR2qZINXOAD9p9aVvQwY57zPJN1GhrheBWnsE=)
                          3: X7XF_Z41s1mEiSn68hr2N23_Z_M.roa (hash: zX/8WHiyiWYZSBhoo5FKkI77/U7PstQ4cdjNJSn1jls=)
                          4: Zi6T14ALAlh6vPIVj-p6wbXoXDI.roa (hash: BX99khHc0q72Oz6YygWlNq7UO49uBQ/389b6gOKYPCM=)
                          5: _auQCy3k3EaDuaZ7EPCV9pV4Ih4.roa (hash: 1toHC+hcpBjFnpYLj94qlEAibL9ZGiBJ5ML7CqI3XaY=)
                          6: tbCoZlnsMU8ToE46A9vbEkSg4Kk.crl (hash: s4CENFD7tw84PyiRxBDAJjR2QfRmXSt7CHzT6sBzvI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tbCoZlnsMU8ToE46A9vbEkSg4Kk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:d0:f2:19:f6:89:c7:76:11:57:85:ce:72:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5b0a86659ec314f13a04e3a03dbdb1244a0e0a9
        Validity
            Not Before: Jul 23 20:00:37 2026 GMT
            Not After : Jul 24 20:00:37 2026 GMT
        Subject: CN=948aff173d7a37bacd418cdfd60750ace6fb7a43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8e:71:a7:a6:ac:4c:30:b2:72:19:b2:12:10:
                    61:67:c6:4f:17:47:10:17:24:8d:27:5a:5d:91:80:
                    b0:d2:48:2d:ea:0a:36:80:cf:b3:92:13:70:62:fa:
                    8c:09:75:d3:8f:03:d5:ae:83:e4:7e:78:fd:b3:c4:
                    72:6c:48:d4:6d:26:ab:94:56:22:42:3d:ae:ab:8b:
                    a6:b9:21:84:22:10:82:16:c1:5d:41:7b:81:a9:63:
                    f5:dd:e2:7f:1c:aa:c0:ef:96:5b:26:c2:e0:cc:6a:
                    db:3e:34:d4:cd:4a:e5:c4:ab:77:86:72:38:6d:04:
                    ff:cf:84:c8:c6:e0:6e:83:2e:ca:9e:58:01:31:83:
                    10:a9:75:ca:6d:1b:0c:2d:e2:d3:98:40:5d:c7:a4:
                    8b:d2:48:59:9e:47:13:53:c4:db:88:54:a4:e6:b1:
                    96:aa:ab:1d:a5:6b:0c:2c:9f:30:bd:45:78:02:e1:
                    fe:2d:50:7d:2d:87:11:f1:d9:30:4e:fd:25:65:e0:
                    bd:2a:c3:50:65:ac:8a:82:a5:73:0e:a9:65:60:5b:
                    c4:d2:64:9c:c0:9b:10:35:6e:e0:87:ed:67:7d:27:
                    c8:d3:95:36:67:92:e1:08:8b:dc:1b:1b:d1:87:85:
                    61:45:7d:1e:11:69:9c:ed:d6:b4:f6:bb:f3:26:06:
                    4a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:8A:FF:17:3D:7A:37:BA:CD:41:8C:DF:D6:07:50:AC:E6:FB:7A:43
            X509v3 Authority Key Identifier:
                keyid:B5:B0:A8:66:59:EC:31:4F:13:A0:4E:3A:03:DB:DB:12:44:A0:E0:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbCoZlnsMU8ToE46A9vbEkSg4Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:b9:59:dc:41:6d:9d:3d:07:7b:77:d5:2b:f9:bb:05:44:32:
         89:1f:b4:43:bd:0d:67:27:37:7c:36:f7:3b:fb:45:ea:9e:9d:
         ee:3a:50:f8:c5:34:54:d4:14:40:8b:78:77:68:62:6e:24:18:
         fb:c5:1b:8f:f8:4a:fd:8f:b3:43:bf:0e:aa:75:45:39:0b:78:
         e7:c8:06:cd:b8:87:50:56:cd:8f:3c:e2:57:d8:94:a3:12:e4:
         3a:b4:2d:d5:17:12:59:b6:56:c1:56:31:f2:79:5f:ae:45:c2:
         27:0c:4e:aa:41:ac:16:e4:4d:f8:a7:c3:3f:42:47:1c:2a:d1:
         a7:f4:89:51:0e:f4:fd:57:0e:7a:28:7e:d9:50:a4:d0:f6:d4:
         cd:1e:8c:76:5d:f6:23:aa:24:dd:f7:02:d0:22:ce:d5:4b:ad:
         65:10:fa:90:7c:b6:c3:09:5c:4a:17:b4:22:05:df:f9:b2:90:
         b3:24:af:65:06:6a:82:5d:a3:ef:9e:5c:fb:8e:ce:49:ff:2f:
         44:96:cc:05:92:62:09:3b:78:aa:34:00:ec:0b:fb:f7:61:97:
         b8:8d:3a:02:7a:47:93:40:2e:1b:57:18:21:15:9a:31:79:f5:
         84:aa:04:cc:fe:4f:e2:82:ee:7f:eb:2e:75:e1:89:07:22:cb:
         aa:41:cb:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkNDyGfaJx3YRV4XOcomAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YjBhODY2NTllYzMxNGYxM2EwNGUzYTAzZGJkYjEyNDRh
MGUwYTkwHhcNMjYwNzIzMjAwMDM3WhcNMjYwNzI0MjAwMDM3WjAzMTEwLwYDVQQD
Eyg5NDhhZmYxNzNkN2EzN2JhY2Q0MThjZGZkNjA3NTBhY2U2ZmI3YTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY5xp6asTDCychmyEhBhZ8ZPF0cQ
FySNJ1pdkYCw0kgt6go2gM+zkhNwYvqMCXXTjwPVroPkfnj9s8RybEjUbSarlFYi
Qj2uq4umuSGEIhCCFsFdQXuBqWP13eJ/HKrA75ZbJsLgzGrbPjTUzUrlxKt3hnI4
bQT/z4TIxuBugy7KnlgBMYMQqXXKbRsMLeLTmEBdx6SL0khZnkcTU8TbiFSk5rGW
qqsdpWsMLJ8wvUV4AuH+LVB9LYcR8dkwTv0lZeC9KsNQZayKgqVzDqllYFvE0mSc
wJsQNW7gh+1nfSfI05U2Z5LhCIvcGxvRh4VhRX0eEWmc7da09rvzJgZKGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJSK/xc9eje6zUGM39YHUKzm+3pDMB8GA1UdIwQY
MBaAFLWwqGZZ7DFPE6BOOgPb2xJEoOCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGJDb1psbnNNVThUb0U0NkE5dmJFa1NnNEtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wNDQ0MDItYzRkNC00MjU5LTkzZTIt
N2ZiZjVlZTI5MGFjLzEvdGJDb1psbnNNVThUb0U0NkE5dmJFa1NnNEtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8wNDQ0MDItYzRkNC00MjU5LTkzZTItN2ZiZjVlZTI5MGFj
LzEvdGJDb1psbnNNVThUb0U0NkE5dmJFa1NnNEtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiLlZ3EFt
nT0He3fVK/m7BUQyiR+0Q70NZyc3fDb3O/tF6p6d7jpQ+MU0VNQUQIt4d2hibiQY
+8Ubj/hK/Y+zQ78OqnVFOQt458gGzbiHUFbNjzziV9iUoxLkOrQt1RcSWbZWwVYx
8nlfrkXCJwxOqkGsFuRN+KfDP0JHHCrRp/SJUQ70/VcOeih+2VCk0PbUzR6Mdl32
I6ok3fcC0CLO1UutZRD6kHy2wwlcShe0IgXf+bKQsySvZQZqgl2j755c+47OSf8v
RJbMBZJiCTt4qjQA7Av792GXuI06AnpHk0AuG1cYIRWaMXn1hKoEzP5P4oLuf+su
deGJByLLqkHLwQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:02:20 2026 by rpki-client