Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft
File:                     TXfM16lEFd_GjMyodOlMLowiIC0.mft (raw, json)
Hash identifier:          pr0TK4G9QtDZUc93KdYa/WyxwOiJXvz/p8zSinyAlrU=
Subject key identifier:   BB:E7:CD:79:E0:2E:CA:8D:77:F7:D3:2A:9F:91:6F:21:DF:64:E7:AE
Authority key identifier: 4D:77:CC:D7:A9:44:15:DF:C6:8C:CC:A8:74:E9:4C:2E:8C:22:20:2D
Certificate issuer:       /CN=4d77ccd7a94415dfc68ccca874e94c2e8c22202d
Certificate serial:       019E1D22765A47115E1F3C793A323F14CF2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft
Manifest number:          1905
Signing time:             Tue 12 May 2026 17:00:58 +0000
Manifest this update:     Tue 12 May 2026 17:00:58 +0000
Manifest next update:     Wed 13 May 2026 17:00:58 +0000
Files and hashes:         1: Na30MdB5zwEKr_r0SUKu8zdQTw4.roa (hash: xfnkXnSAbtguyfEj9MIvTb5o3BtX77AXLc2VZsYQIqg=)
                          2: TXfM16lEFd_GjMyodOlMLowiIC0.crl (hash: 6Xtzhfg1qv0BXK+pCcz+sMP7WLXJv7s34wlO7POzQfw=)
                          3: gVi39EeTsdnoO7eTwDanhGM1H0I.roa (hash: DtiliU1JGliSpHI+PJT+vAy9Sc5gsRSb35eDO6PM7lY=)
                          4: iCDdGA_7tQsgfDibWuYcU70NfTs.roa (hash: BwHpqgb+51nQjkzwTsIhaODzLjTxX1oHWG2GvyC+9Qw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 17:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:76:5a:47:11:5e:1f:3c:79:3a:32:3f:14:cf:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d77ccd7a94415dfc68ccca874e94c2e8c22202d
        Validity
            Not Before: May 12 17:00:58 2026 GMT
            Not After : May 13 17:00:58 2026 GMT
        Subject: CN=bbe7cd79e02eca8d77f7d32a9f916f21df64e7ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f7:f9:e7:9f:fe:a0:f8:e8:64:e9:05:76:dc:
                    f1:be:4e:19:f0:f0:82:f6:df:cb:87:3d:02:ad:18:
                    4b:0c:04:79:99:f6:33:f5:4a:60:e8:d1:58:20:d8:
                    90:de:d4:a5:be:d6:89:3c:0d:22:5d:d0:d4:c9:48:
                    6c:74:c3:40:f6:5e:a3:7e:d1:4b:9e:a8:a1:3e:02:
                    e7:89:35:96:ff:c7:31:d8:57:21:e8:0b:da:d5:ce:
                    dd:36:37:51:1c:b2:f5:43:af:6a:af:af:ac:d8:3f:
                    c4:d2:0e:8c:ca:cb:84:5a:88:7a:f0:18:1a:32:4a:
                    8d:f4:0a:76:4d:1f:05:7a:20:11:48:b4:c7:6d:46:
                    34:4d:50:7b:3c:e7:e1:91:15:ca:db:c1:dc:3b:e4:
                    bd:a0:3b:ec:f6:0a:9b:72:87:fc:18:f9:ff:c7:af:
                    61:a5:f6:51:a8:41:9d:10:84:7a:d2:6e:85:74:ed:
                    82:c7:35:22:19:09:81:d8:07:04:8d:51:d9:10:9c:
                    aa:fb:31:7d:36:1d:04:92:be:89:32:7b:4e:52:99:
                    85:13:bc:7e:28:2c:3e:4c:b5:cc:24:18:53:76:eb:
                    d9:b4:23:15:1f:a1:c3:45:fa:79:53:a2:af:87:84:
                    6a:21:5e:c5:bb:84:0e:20:90:ef:c0:70:c1:5b:42:
                    9b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E7:CD:79:E0:2E:CA:8D:77:F7:D3:2A:9F:91:6F:21:DF:64:E7:AE
            X509v3 Authority Key Identifier:
                keyid:4D:77:CC:D7:A9:44:15:DF:C6:8C:CC:A8:74:E9:4C:2E:8C:22:20:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:71:65:ce:c4:4f:72:81:fd:fd:7c:25:a1:35:d0:35:56:aa:
         1d:3e:56:a2:77:7a:ac:56:33:d8:b1:21:af:4b:90:2b:70:48:
         3e:02:6a:27:ed:ad:b4:a2:f9:96:52:e5:c3:14:5c:0d:4d:76:
         c9:17:e5:d1:c7:37:19:b1:1c:d1:cd:4f:6f:e3:ca:b1:81:a2:
         5c:8a:86:92:33:c6:93:84:a5:4c:68:fa:50:90:b1:f4:a0:e5:
         99:6d:a1:7a:19:85:89:e9:de:1e:4a:31:19:81:9a:90:7e:51:
         9a:ae:0e:c1:db:f5:f3:b1:9f:0e:a6:c2:0d:52:cf:68:cc:a1:
         82:84:eb:ec:62:ea:8d:a0:2d:e8:ef:ab:bc:26:25:39:f3:1b:
         86:4d:e5:8d:d5:06:72:6c:fc:df:98:d9:0d:2f:2c:04:44:cb:
         44:b0:b7:22:91:b5:49:86:16:fc:9a:e8:d9:11:40:b1:dc:e7:
         f2:5f:48:df:5b:22:d4:18:5e:20:cf:45:ed:8a:70:96:76:95:
         a3:a4:fd:3b:26:8d:09:9b:ba:da:ff:1c:04:4b:29:76:d6:2f:
         98:66:18:fa:1f:2c:5e:ca:40:f3:1d:5c:82:68:37:53:41:e9:
         22:c9:aa:d6:47:b7:a5:2f:e6:84:f2:bb:c8:04:92:f1:f5:3e:
         79:a1:a5:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dInZaRxFeHzx5OjI/FM8sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNzdjY2Q3YTk0NDE1ZGZjNjhjY2NhODc0ZTk0YzJlOGMy
MjIwMmQwHhcNMjYwNTEyMTcwMDU4WhcNMjYwNTEzMTcwMDU4WjAzMTEwLwYDVQQD
EyhiYmU3Y2Q3OWUwMmVjYThkNzdmN2QzMmE5ZjkxNmYyMWRmNjRlN2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPf555/+oPjoZOkFdtzxvk4Z8PCC
9t/Lhz0CrRhLDAR5mfYz9Upg6NFYINiQ3tSlvtaJPA0iXdDUyUhsdMNA9l6jftFL
nqihPgLniTWW/8cx2Fch6Ava1c7dNjdRHLL1Q69qr6+s2D/E0g6MysuEWoh68Bga
MkqN9Ap2TR8FeiARSLTHbUY0TVB7POfhkRXK28HcO+S9oDvs9gqbcof8GPn/x69h
pfZRqEGdEIR60m6FdO2CxzUiGQmB2AcEjVHZEJyq+zF9Nh0Ekr6JMntOUpmFE7x+
KCw+TLXMJBhTduvZtCMVH6HDRfp5U6Kvh4RqIV7Fu4QOIJDvwHDBW0KbFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvnzXngLsqNd/fTKp+RbyHfZOeuMB8GA1UdIwQY
MBaAFE13zNepRBXfxozMqHTpTC6MIiAtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFhmTTE2bEVGZF9Hak15b2RPbE1Mb3dpSUMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kNjA4YjgtNTAxZi00OTFmLWEyZjIt
MTBlNTdmNTZhMTdhLzEvVFhmTTE2bEVGZF9Hak15b2RPbE1Mb3dpSUMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9kNjA4YjgtNTAxZi00OTFmLWEyZjItMTBlNTdmNTZhMTdh
LzEvVFhmTTE2bEVGZF9Hak15b2RPbE1Mb3dpSUMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhXFlzsRP
coH9/XwloTXQNVaqHT5Wond6rFYz2LEhr0uQK3BIPgJqJ+2ttKL5llLlwxRcDU12
yRfl0cc3GbEc0c1Pb+PKsYGiXIqGkjPGk4SlTGj6UJCx9KDlmW2hehmFieneHkox
GYGakH5Rmq4Owdv187GfDqbCDVLPaMyhgoTr7GLqjaAt6O+rvCYlOfMbhk3ljdUG
cmz835jZDS8sBETLRLC3IpG1SYYW/Jro2RFAsdzn8l9I31si1BheIM9F7YpwlnaV
o6T9OyaNCZu62v8cBEspdtYvmGYY+h8sXspA8x1cgmg3U0HpIsmq1ke3pS/mhPK7
yASS8fU+eaGllA==
-----END CERTIFICATE-----
Generated at Wed May 13 03:46:19 2026 by rpki-client