Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
File:                     tltl1ApY9eFCwAss67gU4XpNHM4.mft (raw, json)
Hash identifier:          MEV8Uh2wB4T+0jQuV4JsTJvOxvga52ZvPmYMcZXS6dw=
Subject key identifier:   5A:C2:2C:A4:D8:23:C5:EF:55:6A:70:AF:80:A5:E7:18:DA:6E:CA:60
Authority key identifier: B6:5B:65:D4:0A:58:F5:E1:42:C0:0B:2C:EB:B8:14:E1:7A:4D:1C:CE
Certificate issuer:       /CN=b65b65d40a58f5e142c00b2cebb814e17a4d1cce
Certificate serial:       019E1DC7A604E8CEA204786C95298AA1C2D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
Manifest number:          011F
Signing time:             Tue 12 May 2026 20:01:23 +0000
Manifest this update:     Tue 12 May 2026 20:01:23 +0000
Manifest next update:     Wed 13 May 2026 20:01:23 +0000
Files and hashes:         1: LwZw57KRcsSlFCkevmi86lLELNg.roa (hash: GnI2zO7N9aow5t6/as/HPtUeoPLxUymlPVs+tJmlDwE=)
                          2: XjSNL--AGv2RohzwC7S-Qp8mmh0.roa (hash: clDhjF0Ylt17QbqIBE+8qKYkZ8/cSocUrgMK4Nq5Jzk=)
                          3: tltl1ApY9eFCwAss67gU4XpNHM4.crl (hash: +jnHXnMWsWzCg6VKb9UZNYXFTxHH0FhMNxn9DAEXNsw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:a6:04:e8:ce:a2:04:78:6c:95:29:8a:a1:c2:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b65b65d40a58f5e142c00b2cebb814e17a4d1cce
        Validity
            Not Before: May 12 20:01:23 2026 GMT
            Not After : May 13 20:01:23 2026 GMT
        Subject: CN=5ac22ca4d823c5ef556a70af80a5e718da6eca60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7b:30:6a:56:62:87:10:3c:9e:e4:0c:b9:9f:
                    ab:27:ad:40:62:49:63:70:63:3b:bd:0b:07:dd:e9:
                    5d:c4:a1:52:d4:ea:02:3a:f4:40:33:e1:2e:35:94:
                    f0:65:84:b7:36:9a:b5:da:04:49:fe:fc:c5:dc:22:
                    60:16:87:09:a4:ad:0f:a9:c6:d8:5f:c7:20:d5:58:
                    76:5e:15:0e:3c:53:d6:2a:c2:92:4f:f8:ae:b2:78:
                    47:d1:c0:dd:1e:76:6a:11:83:b9:08:7e:d0:39:b7:
                    c5:b6:f1:78:0e:9c:5c:97:f3:cd:91:1e:86:9b:5f:
                    6d:7b:ee:77:84:df:21:69:36:58:ec:31:20:c2:c2:
                    d4:e3:56:1f:72:f1:0a:12:2f:97:af:39:30:91:57:
                    d3:b0:1b:1e:21:fd:09:7c:11:34:15:91:6c:5a:97:
                    c3:b9:7d:27:36:98:a7:15:af:f0:af:d4:ea:4b:9c:
                    7b:55:26:4f:09:7e:6c:3f:67:1e:7d:0e:cc:7b:3c:
                    87:c6:44:e9:39:2a:03:81:66:79:82:89:09:f6:20:
                    fb:12:f3:0e:74:5f:f3:ac:ba:0d:bf:af:39:cb:0b:
                    14:f0:85:ec:e0:78:77:76:b7:9c:b2:83:f1:eb:8a:
                    1a:d6:85:de:9e:01:00:f1:ed:d1:b6:64:09:2e:ca:
                    be:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C2:2C:A4:D8:23:C5:EF:55:6A:70:AF:80:A5:E7:18:DA:6E:CA:60
            X509v3 Authority Key Identifier:
                keyid:B6:5B:65:D4:0A:58:F5:E1:42:C0:0B:2C:EB:B8:14:E1:7A:4D:1C:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tltl1ApY9eFCwAss67gU4XpNHM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8b14a3-190f-41a4-b66c-bdf1ba08d5fe/1/tltl1ApY9eFCwAss67gU4XpNHM4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:0b:9f:6d:a2:5e:e3:fb:88:ba:63:6b:1d:e1:15:c2:da:5c:
         ac:a1:4a:77:d3:33:62:22:9e:bd:60:65:83:02:dd:b7:82:a2:
         d7:d4:7e:32:4c:53:fb:ef:0a:e9:00:94:45:51:32:29:52:77:
         28:75:b4:16:f9:11:9e:71:2c:f2:c1:2b:1c:c8:65:15:e7:5b:
         8a:ba:c8:65:c5:9d:e1:65:c1:e4:7b:9a:36:eb:b6:cb:0a:ae:
         8f:e2:4f:8d:5f:9e:a8:84:41:60:4d:70:bf:99:58:ae:e9:1d:
         bb:f1:36:e2:23:02:75:82:7e:4c:26:60:bc:15:d1:ae:57:75:
         d5:a7:5d:5a:82:d6:0a:3a:42:30:e8:9a:d5:57:af:0f:61:61:
         3f:4e:7e:a7:44:44:6d:91:01:93:29:9d:fe:a7:50:28:0b:0a:
         90:a2:4b:49:62:36:85:6b:2e:38:77:03:b2:10:c7:55:bc:20:
         4a:c7:6c:65:ab:7b:99:b1:83:47:6c:58:6a:a9:08:b0:69:32:
         fa:8b:b0:c7:21:72:09:ef:4a:0d:34:b2:d6:e4:6e:ac:fe:fd:
         af:3f:d0:50:09:88:19:b2:67:1e:a1:fc:b1:30:fc:67:21:9c:
         33:d0:30:7b:ed:1d:aa:07:3b:e1:fe:f0:5b:1c:59:a7:62:7c:
         c6:fd:0a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:05:45 2026 by rpki-client