Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
File:                     TOdM9jcjwCadUoOxBlghrzhKmiY.mft (raw, json)
Hash identifier:          GgpfUdK38Yj990/HP4GTW0SKg/2T9EU+FPlRvEclwqE=
Subject key identifier:   D7:04:74:F0:29:5A:F9:82:8C:6E:4D:08:39:12:CF:DD:D6:B3:AA:66
Authority key identifier: 4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26
Certificate issuer:       /CN=4ce74cf63723c0269d5283b1065821af384a9a26
Certificate serial:       019E1FECACFF9D6F0E6A75D037E587599160
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
Manifest number:          099E
Signing time:             Wed 13 May 2026 06:01:04 +0000
Manifest this update:     Wed 13 May 2026 06:01:04 +0000
Manifest next update:     Thu 14 May 2026 06:01:04 +0000
Files and hashes:         1: 4B_VfQWMTYDObUKM-BwKNSOeYqM.roa (hash: GtaOXYjrA7K8muzv0dOWQS3DgfVa4oJVWDqmEM1Lb0o=)
                          2: 8Q40PlY6cpiTHKi29S26G9DdZhI.roa (hash: ZDmF+D6x42sRt1+OHh8Qa/2IzhhfYVV5gqAu2bLK1o8=)
                          3: TOdM9jcjwCadUoOxBlghrzhKmiY.crl (hash: P+ARsdqARuqxSuRzFNRlUciKAJLXVcDlSn8fOEqgz1Q=)
                          4: mJxvlVesYFyqMGJZoVjJ6H8bytQ.roa (hash: VwZ3L7NHL8vXYsjYAD8iL+X2hR9DNXoNspGIhoXBzzg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ec:ac:ff:9d:6f:0e:6a:75:d0:37:e5:87:59:91:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ce74cf63723c0269d5283b1065821af384a9a26
        Validity
            Not Before: May 13 06:01:04 2026 GMT
            Not After : May 14 06:01:04 2026 GMT
        Subject: CN=d70474f0295af9828c6e4d083912cfddd6b3aa66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f8:fa:e9:1a:0b:04:8d:a2:e2:d2:d9:a9:90:
                    64:5a:1d:36:31:81:5c:7c:4d:84:ac:31:2e:6d:83:
                    bb:77:2d:e1:39:73:96:de:2a:4f:50:2e:7b:46:27:
                    e2:8d:36:1f:10:39:dd:5e:df:4e:b7:4a:c7:17:36:
                    ad:8c:5a:c0:1e:55:29:80:a2:ad:59:3d:a4:80:dc:
                    c9:e9:6a:72:f2:ed:32:96:6f:d2:d5:02:82:51:6f:
                    a3:1e:57:89:a0:91:e0:fd:74:f8:29:60:f3:8b:66:
                    cb:17:a1:68:42:8e:6b:83:62:ab:27:e0:1e:cb:1d:
                    0b:94:71:de:0f:a4:6d:1f:4a:d8:e0:4c:bf:d3:13:
                    bd:f1:3c:4d:cc:83:03:4d:3d:d8:f8:33:f6:a4:64:
                    4d:ea:e0:47:e5:45:84:40:1a:90:33:fc:78:27:1b:
                    00:6b:b5:bf:b9:41:f2:7a:c8:8c:6c:d2:82:6b:09:
                    c9:4b:bd:f3:20:1f:f7:da:00:96:75:55:59:77:b8:
                    f0:ba:13:e5:3b:90:bd:27:0b:94:f5:86:18:2c:98:
                    0f:2f:e2:a6:c7:e6:9c:24:6f:26:df:31:0c:06:1c:
                    4e:9c:e4:be:df:ac:2f:36:a0:01:d2:9d:2d:46:12:
                    87:2d:86:ba:78:90:1e:db:08:cb:18:3b:4c:71:fc:
                    ee:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:04:74:F0:29:5A:F9:82:8C:6E:4D:08:39:12:CF:DD:D6:B3:AA:66
            X509v3 Authority Key Identifier:
                keyid:4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:3b:43:0a:91:e3:28:a6:a2:ed:20:b6:f7:e9:fb:5d:aa:d0:
         46:ba:32:f4:1d:99:51:94:6b:5c:96:d2:53:94:a3:78:56:37:
         73:c2:a1:81:16:79:d7:54:49:7c:b3:d7:96:5f:7c:d5:b6:63:
         79:a5:2d:93:ce:27:8b:74:37:44:95:3e:55:a9:78:43:41:ab:
         3b:fc:a0:e6:7e:f6:9b:a7:39:ab:14:db:54:d0:cc:aa:d3:a3:
         e6:98:07:0c:cc:2a:59:00:3c:cd:70:4a:4c:6e:0c:5e:dd:1c:
         57:18:39:87:23:a0:d0:4e:d3:9c:1f:27:1a:d3:71:c0:c9:b4:
         d1:71:20:02:87:69:44:55:02:99:5f:99:9c:ac:79:ac:e5:a9:
         ef:e2:46:3e:32:b8:b5:0e:02:66:67:d2:0c:39:2c:c3:ef:1e:
         5d:58:09:2e:0f:2c:16:8d:8b:39:46:3a:94:41:6c:ed:b8:65:
         e3:10:f8:d0:44:6c:23:eb:72:a4:ef:94:85:18:83:ef:36:5c:
         c2:bc:48:23:45:20:ef:2c:53:73:39:c0:b2:ab:69:62:4c:1c:
         3e:2e:90:a3:52:1b:c7:af:d8:19:ad:ce:3f:82:88:5a:30:32:
         3c:70:b1:a1:85:68:4b:fc:3f:fd:e1:ff:1c:13:2c:dc:dd:6e:
         5a:85:12:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4f7Kz/nW8OanXQN+WHWZFgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZTc0Y2Y2MzcyM2MwMjY5ZDUyODNiMTA2NTgyMWFmMzg0
YTlhMjYwHhcNMjYwNTEzMDYwMTA0WhcNMjYwNTE0MDYwMTA0WjAzMTEwLwYDVQQD
EyhkNzA0NzRmMDI5NWFmOTgyOGM2ZTRkMDgzOTEyY2ZkZGQ2YjNhYTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvj66RoLBI2i4tLZqZBkWh02MYFc
fE2ErDEubYO7dy3hOXOW3ipPUC57RifijTYfEDndXt9Ot0rHFzatjFrAHlUpgKKt
WT2kgNzJ6Wpy8u0ylm/S1QKCUW+jHleJoJHg/XT4KWDzi2bLF6FoQo5rg2KrJ+Ae
yx0LlHHeD6RtH0rY4Ey/0xO98TxNzIMDTT3Y+DP2pGRN6uBH5UWEQBqQM/x4JxsA
a7W/uUHyesiMbNKCawnJS73zIB/32gCWdVVZd7jwuhPlO5C9JwuU9YYYLJgPL+Km
x+acJG8m3zEMBhxOnOS+36wvNqAB0p0tRhKHLYa6eJAe2wjLGDtMcfzuUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcEdPApWvmCjG5NCDkSz93Ws6pmMB8GA1UdIwQY
MBaAFEznTPY3I8AmnVKDsQZYIa84SpomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE9kTTlqY2p3Q2FkVW9PeEJsZ2hyemhLbWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81YTBmODEtMzFlMi00ZGIyLTgzMzkt
OTI0MWZmNmVjM2JmLzEvVE9kTTlqY2p3Q2FkVW9PeEJsZ2hyemhLbWlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81YTBmODEtMzFlMi00ZGIyLTgzMzktOTI0MWZmNmVjM2Jm
LzEvVE9kTTlqY2p3Q2FkVW9PeEJsZ2hyemhLbWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbztDCpHj
KKai7SC29+n7XarQRroy9B2ZUZRrXJbSU5SjeFY3c8KhgRZ511RJfLPXll981bZj
eaUtk84ni3Q3RJU+Val4Q0GrO/yg5n72m6c5qxTbVNDMqtOj5pgHDMwqWQA8zXBK
TG4MXt0cVxg5hyOg0E7TnB8nGtNxwMm00XEgAodpRFUCmV+ZnKx5rOWp7+JGPjK4
tQ4CZmfSDDksw+8eXVgJLg8sFo2LOUY6lEFs7bhl4xD40ERsI+typO+UhRiD7zZc
wrxII0Ug7yxTcznAsqtpYkwcPi6Qo1Ibx6/YGa3OP4KIWjAyPHCxoYVoS/w//eH/
HBMs3N1uWoUS7Q==
-----END CERTIFICATE-----
Generated at Wed May 13 13:52:11 2026 by rpki-client