Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
File:                     TS-f1cihTNyfMcRYXNYNtXz_tMI.mft (raw, json)
Hash identifier:          8Hf0TCacZGLaGzAgZC8ee4uQ2Ldh+oplG38G5O3NyQ0=
Subject key identifier:   9A:DF:4D:37:5E:D3:20:7D:C7:F7:A3:E9:59:4C:30:AB:89:31:02:28
Authority key identifier: 4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2
Certificate issuer:       /CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2
Certificate serial:       019F8FB531C8CE5ACB17E8C1E72DACE08657
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
Manifest number:          1089
Signing time:             Thu 23 Jul 2026 16:00:44 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:44 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:44 +0000
Files and hashes:         1: 1-PcZA739O5jfsTyXtX2e6TIscS4.roa (hash: 8TW2rD12HBFWQAtxdbCJfapV59e5j+ulrB4BqMjg04I=)
                          2: 3bJDocgywntndtsfu_qK9cHpMt8.roa (hash: yNfaNNmmyD1SlEI3Ljm5OugJbl2m1Klcep+P5DT4G+s=)
                          3: O7SMXsiP2jcDC8ds3aHzihHcVV4.roa (hash: dRUITjUibnbbNquhA0z/5LyEKxqqyfiN2wuu/O3f8z4=)
                          4: TS-f1cihTNyfMcRYXNYNtXz_tMI.crl (hash: R+DZ1wA/ax7Lqzk9mZkQkBhhmwhoplw+F9uPdo54g/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:31:c8:ce:5a:cb:17:e8:c1:e7:2d:ac:e0:86:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2
        Validity
            Not Before: Jul 23 16:00:44 2026 GMT
            Not After : Jul 24 16:00:44 2026 GMT
        Subject: CN=9adf4d375ed3207dc7f7a3e9594c30ab89310228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:71:cb:05:bc:bf:05:d0:56:8b:bb:fe:69:74:
                    cc:b4:c4:2a:ff:72:e0:bb:ec:b9:a6:83:75:25:23:
                    9d:67:90:0a:40:dd:5d:35:24:75:5b:8e:b4:a0:8d:
                    89:5b:c2:41:59:74:12:fd:bd:e6:18:80:47:60:96:
                    ea:18:fb:e0:93:a9:d8:49:64:8d:db:fc:e9:e0:e2:
                    bf:4c:e9:0a:3f:69:5e:5f:be:7c:23:a5:e3:16:ff:
                    29:f3:3a:19:ef:8d:d7:1b:16:79:9d:80:2e:8e:ea:
                    02:d3:22:70:5a:fa:5c:c4:6a:3e:17:16:25:74:37:
                    33:99:f9:1e:bc:24:46:2d:2d:10:60:88:e2:bf:60:
                    5c:c7:7d:0c:f3:34:b6:de:e2:f6:a1:57:5d:9c:77:
                    4a:f8:c5:af:2b:5f:30:a5:ee:b5:a2:63:73:b8:02:
                    4a:64:f0:74:a6:7d:54:f6:60:a4:9f:9a:a6:89:6f:
                    b4:f8:02:9d:a9:b2:3e:5d:b9:18:da:bc:3a:a6:6d:
                    af:c9:20:dc:23:62:6d:d7:66:27:41:72:46:80:51:
                    48:a6:81:53:f9:f6:1f:cb:1e:e4:f9:6a:4f:b8:d6:
                    58:75:73:db:33:18:f0:88:e7:d3:05:ae:4f:94:11:
                    e2:0a:8d:2b:d7:eb:34:63:29:f1:b3:ff:fe:af:66:
                    80:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:DF:4D:37:5E:D3:20:7D:C7:F7:A3:E9:59:4C:30:AB:89:31:02:28
            X509v3 Authority Key Identifier:
                keyid:4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:2e:b0:d5:87:d8:8d:83:49:78:46:80:09:6d:65:fe:a2:37:
         a9:53:10:c0:67:84:9b:a0:fd:0a:75:09:db:ca:58:61:35:de:
         a7:f2:21:51:94:66:01:0b:b8:26:4f:86:3b:11:3f:8f:e0:fd:
         4f:7f:0e:63:7f:eb:9a:0f:4f:1f:23:35:23:6d:6b:6d:89:9a:
         65:ef:82:af:fa:34:91:5c:85:b9:48:d4:46:02:e7:a5:45:09:
         14:e0:ce:15:c6:46:ef:7f:05:2e:0f:58:d0:1a:36:81:a9:2c:
         0a:c9:62:3a:10:b2:bb:85:6a:65:dc:f5:32:6d:e5:e6:d0:ac:
         38:88:0f:bb:71:40:8b:ec:b7:86:c6:dc:91:a3:34:30:af:33:
         11:3a:be:45:9d:e5:fe:24:5c:e8:31:95:c4:20:c8:02:bb:cb:
         01:b2:e9:36:1f:25:62:c8:e1:73:a2:cd:8a:6b:fa:33:a4:24:
         77:0e:ea:3d:d6:8c:c2:1a:28:93:57:2c:c0:e4:74:f7:b6:87:
         4a:3b:e4:fc:99:9a:d5:41:49:1b:54:69:ed:25:3d:d9:8d:14:
         83:a7:da:2c:2c:aa:e1:3e:ef:d3:e6:a5:13:9e:7d:22:f7:ff:
         17:51:0d:be:a0:5a:3e:dd:22:16:88:46:25:53:81:0f:fa:1e:
         2d:ec:44:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PtTHIzlrLF+jB5y2s4IZXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMmY5ZmQ1YzhhMTRjZGM5ZjMxYzQ1ODVjZDYwZGI1N2Nm
ZmI0YzIwHhcNMjYwNzIzMTYwMDQ0WhcNMjYwNzI0MTYwMDQ0WjAzMTEwLwYDVQQD
Eyg5YWRmNGQzNzVlZDMyMDdkYzdmN2EzZTk1OTRjMzBhYjg5MzEwMjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3HLBby/BdBWi7v+aXTMtMQq/3Lg
u+y5poN1JSOdZ5AKQN1dNSR1W460oI2JW8JBWXQS/b3mGIBHYJbqGPvgk6nYSWSN
2/zp4OK/TOkKP2leX758I6XjFv8p8zoZ743XGxZ5nYAujuoC0yJwWvpcxGo+FxYl
dDczmfkevCRGLS0QYIjiv2Bcx30M8zS23uL2oVddnHdK+MWvK18wpe61omNzuAJK
ZPB0pn1U9mCkn5qmiW+0+AKdqbI+XbkY2rw6pm2vySDcI2Jt12YnQXJGgFFIpoFT
+fYfyx7k+WpPuNZYdXPbMxjwiOfTBa5PlBHiCo0r1+s0Yynxs//+r2aA1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJrfTTde0yB9x/ej6VlMMKuJMQIoMB8GA1UdIwQY
MBaAFE0vn9XIoUzcnzHEWFzWDbV8/7TCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFMtZjFjaWhUTnlmTWNSWVhOWU50WHpfdE1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kYTRlNDYtMmE5My00NGE0LWI4ZTMt
YzIxMzNkZDgxYjU2LzEvVFMtZjFjaWhUTnlmTWNSWVhOWU50WHpfdE1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9kYTRlNDYtMmE5My00NGE0LWI4ZTMtYzIxMzNkZDgxYjU2
LzEvVFMtZjFjaWhUTnlmTWNSWVhOWU50WHpfdE1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACy6w1YfY
jYNJeEaACW1l/qI3qVMQwGeEm6D9CnUJ28pYYTXep/IhUZRmAQu4Jk+GOxE/j+D9
T38OY3/rmg9PHyM1I21rbYmaZe+Cr/o0kVyFuUjURgLnpUUJFODOFcZG738FLg9Y
0Bo2gaksCsliOhCyu4VqZdz1Mm3l5tCsOIgPu3FAi+y3hsbckaM0MK8zETq+RZ3l
/iRc6DGVxCDIArvLAbLpNh8lYsjhc6LNimv6M6Qkdw7qPdaMwhook1cswOR097aH
Sjvk/Jma1UFJG1Rp7SU92Y0Ug6faLCyq4T7v0+alE559Ivf/F1ENvqBaPt0iFohG
JVOBD/oeLexEJw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:57:51 2026 by rpki-client