Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft
File:                     TuhDqF3WZOncAxCJK9fdnOUlkcc.mft (raw, json)
Hash identifier:          tndcDqz5xO+gyVoNIp1ZOcNinFOsxsIzR5Je5nISAk4=
Subject key identifier:   C6:78:C3:C9:C1:AA:8E:BE:A6:BA:FB:C7:94:0C:B3:A1:BD:C4:15:41
Authority key identifier: 4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
Certificate issuer:       /CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Certificate serial:       019E1E35D553D577A51D2B21B7E59E5F745D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft
Manifest number:          191C
Signing time:             Tue 12 May 2026 22:01:44 +0000
Manifest this update:     Tue 12 May 2026 22:01:44 +0000
Manifest next update:     Wed 13 May 2026 22:01:44 +0000
Files and hashes:         1: 2jrszJlgV71mCpgTFgHjigRHN0o.roa (hash: WSCn/RX/PMY99fcjdFAAZEiGRwDYCQ00UuZMQjGF8MQ=)
                          2: 3cSgnwJIEpGgn7GA3QShVilz_Bk.roa (hash: AMd1V+dRDU56O4+xNiU6hAcBMYWFkRuAT+HMQQqt00o=)
                          3: 5CmVOyjMGaOx3Azoa9vaES31gNU.roa (hash: tmSpZLW8QseubN/4w6VFtZ3Yl76f3yLn1OWmBKE45j4=)
                          4: I_YkIIbROaBHikP_X2q88QJJL04.roa (hash: i+Ynuk2mjQ1KZXlivUmIRXIts9g1U/IQ+uGbqumlnv0=)
                          5: TuhDqF3WZOncAxCJK9fdnOUlkcc.crl (hash: VRkkWqlHo8JhTmUb2AfUlVEYERqy4Bqc81NCNkwIgm0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:d5:53:d5:77:a5:1d:2b:21:b7:e5:9e:5f:74:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
        Validity
            Not Before: May 12 22:01:44 2026 GMT
            Not After : May 13 22:01:44 2026 GMT
        Subject: CN=c678c3c9c1aa8ebea6bafbc7940cb3a1bdc41541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0d:ab:bc:fd:e2:b7:ac:98:11:38:2c:fd:c2:
                    20:d1:4f:61:53:c1:fd:3f:13:a4:a4:31:b7:0e:78:
                    ec:ca:0d:98:1f:53:fc:ce:bc:7f:ea:1d:bc:bb:cd:
                    91:92:9f:9d:96:c2:f4:55:2a:57:fc:81:4c:65:3b:
                    82:32:ea:1c:63:70:f8:91:e1:d5:80:6e:85:66:30:
                    08:a4:58:58:6e:ee:dc:f6:d2:89:ef:a5:ce:5a:dc:
                    21:75:09:bb:ba:53:94:a1:c1:11:23:f7:e1:b4:c8:
                    41:b6:b7:4a:ae:83:d9:40:86:12:de:5b:cd:05:7f:
                    3a:1a:28:75:d0:af:59:f0:e8:51:3d:9f:91:d4:8d:
                    04:a4:74:af:ae:ee:d3:23:18:83:e3:bc:97:79:6e:
                    94:09:d9:ce:08:e6:21:b8:7a:0c:1a:43:1f:18:48:
                    f2:5d:1e:d5:3e:d7:72:d5:14:f2:22:bb:f2:e7:b1:
                    1d:23:9f:8e:97:8f:94:37:7c:f0:c7:8d:27:ab:77:
                    9f:8e:7a:48:1a:32:93:db:ee:e9:4a:85:b9:e3:4d:
                    0d:15:4f:64:be:7a:f0:20:61:de:a6:f2:9c:48:7e:
                    54:9a:6c:ae:9b:d8:e3:76:e0:f1:f9:e1:0b:a2:b3:
                    23:82:8e:fd:27:80:8d:17:df:75:10:b2:83:89:c6:
                    68:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:78:C3:C9:C1:AA:8E:BE:A6:BA:FB:C7:94:0C:B3:A1:BD:C4:15:41
            X509v3 Authority Key Identifier:
                keyid:4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:2d:36:9c:5d:54:30:be:94:a9:c5:ec:02:b3:fb:63:54:78:
         a7:4d:73:11:ca:89:3f:f1:f1:7e:d3:b0:34:23:d7:8d:54:e9:
         a8:fa:50:77:92:56:13:07:3b:9b:22:18:0e:c2:22:0b:e5:d9:
         90:eb:2b:69:84:e3:16:1c:18:ba:2d:41:60:bf:1e:89:b6:7d:
         ec:09:03:5e:36:3f:ea:b2:d3:cc:a2:6d:22:a4:9c:1d:2c:9e:
         f4:1b:ed:a8:ce:66:bb:84:44:7a:2e:e2:3e:4c:97:3e:9e:0b:
         f9:0a:ae:38:ef:ce:35:99:da:24:95:8a:59:8c:23:b7:a6:25:
         47:cc:b8:aa:12:64:2e:6b:63:14:5f:ef:7a:f0:ac:25:ac:0a:
         10:61:77:f4:99:12:78:63:7d:7c:a9:52:21:4e:3a:c5:15:ca:
         d8:20:01:40:f7:e5:d0:c7:6b:50:03:92:6a:84:ed:f1:10:bb:
         d0:bb:71:5e:12:fc:26:ab:da:d8:d8:d3:6f:eb:e5:06:85:7a:
         51:60:8a:09:dd:65:c7:d0:c4:d6:9e:b9:ad:bd:74:88:63:13:
         f9:10:79:38:2a:82:cc:5e:69:bd:8a:72:0a:4e:0a:65:3f:03:
         69:08:e0:2c:b0:b0:49:74:15:16:ee:43:64:72:9f:63:05:ca:
         e1:f6:a8:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNdVT1XelHSsht+WeX3RdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZTg0M2E4NWRkNjY0ZTlkYzAzMTA4OTJiZDdkZDljZTUy
NTkxYzcwHhcNMjYwNTEyMjIwMTQ0WhcNMjYwNTEzMjIwMTQ0WjAzMTEwLwYDVQQD
EyhjNjc4YzNjOWMxYWE4ZWJlYTZiYWZiYzc5NDBjYjNhMWJkYzQxNTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtw2rvP3it6yYETgs/cIg0U9hU8H9
PxOkpDG3Dnjsyg2YH1P8zrx/6h28u82Rkp+dlsL0VSpX/IFMZTuCMuocY3D4keHV
gG6FZjAIpFhYbu7c9tKJ76XOWtwhdQm7ulOUocERI/fhtMhBtrdKroPZQIYS3lvN
BX86Gih10K9Z8OhRPZ+R1I0EpHSvru7TIxiD47yXeW6UCdnOCOYhuHoMGkMfGEjy
XR7VPtdy1RTyIrvy57EdI5+Ol4+UN3zwx40nq3efjnpIGjKT2+7pSoW5400NFU9k
vnrwIGHepvKcSH5Ummyum9jjduDx+eELorMjgo79J4CNF991ELKDicZoNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZ4w8nBqo6+prr7x5QMs6G9xBVBMB8GA1UdIwQY
MBaAFE7oQ6hd1mTp3AMQiSvX3ZzlJZHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHVoRHFGM1daT25jQXhDSks5ZmRuT1Vsa2NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9hZGFkMjAtYzUxMi00ZmIwLWExMjct
NDhjZjQxMmIzODdiLzEvVHVoRHFGM1daT25jQXhDSks5ZmRuT1Vsa2NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9hZGFkMjAtYzUxMi00ZmIwLWExMjctNDhjZjQxMmIzODdi
LzEvVHVoRHFGM1daT25jQXhDSks5ZmRuT1Vsa2NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACC02nF1U
ML6UqcXsArP7Y1R4p01zEcqJP/HxftOwNCPXjVTpqPpQd5JWEwc7myIYDsIiC+XZ
kOsraYTjFhwYui1BYL8eibZ97AkDXjY/6rLTzKJtIqScHSye9BvtqM5mu4REei7i
PkyXPp4L+QquOO/ONZnaJJWKWYwjt6YlR8y4qhJkLmtjFF/vevCsJawKEGF39JkS
eGN9fKlSIU46xRXK2CABQPfl0MdrUAOSaoTt8RC70LtxXhL8Jqva2NjTb+vlBoV6
UWCKCd1lx9DE1p65rb10iGMT+RB5OCqCzF5pvYpyCk4KZT8DaQjgLLCwSXQVFu5D
ZHKfYwXK4faozw==
-----END CERTIFICATE-----
Generated at Wed May 13 03:10:17 2026 by rpki-client