Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
File:                     Tw532cb_aNymjwXfj0Z17nvcsLw.mft (raw, json)
Hash identifier:          ix8eu1yBFP9um2TSUPVYEaJkh8AYRq5yS+E9ZcKddBI=
Subject key identifier:   19:3C:23:3A:9E:F0:B6:A5:B4:19:26:8B:09:BE:02:03:D1:A3:02:2F
Authority key identifier: 4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC
Certificate issuer:       /CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
Certificate serial:       019E1E3525E8F2AE78B1A0DCC52CD4E03280
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
Manifest number:          1910
Signing time:             Tue 12 May 2026 22:01:00 +0000
Manifest this update:     Tue 12 May 2026 22:01:00 +0000
Manifest next update:     Wed 13 May 2026 22:01:00 +0000
Files and hashes:         1: 39rMz_WIR2e8L2mM9nRbVwSsWYs.asa (hash: 5o54GUaG5AJOqUjqrqNiS3NWFX9t0EEkMJIm09Gxdrg=)
                          2: 3XPbOVP5LZm9gbvbxeYXvE-UXNY.roa (hash: P5VCL1xp51uhegWvbhWmEVzPBE26QsXY7i6bNOoE28E=)
                          3: 4lw_9PAntET-B5MMVn16dO3Hcls.roa (hash: UDzY7XNVR7aRxZCWElIUyD0jHCPvLTcFxpVSeLZMRg4=)
                          4: Tw532cb_aNymjwXfj0Z17nvcsLw.crl (hash: Z0mUnXP6QBTd9p7CEuDayZqhdvagOILDzRomNnJ5Yeo=)
                          5: cqsm3cZPpf_tObwDEACdHxs7fkA.roa (hash: d+AU9b3PeXFxvtfVifLL55zjYWSVguy94TW2GQv8rLQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:25:e8:f2:ae:78:b1:a0:dc:c5:2c:d4:e0:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
        Validity
            Not Before: May 12 22:01:00 2026 GMT
            Not After : May 13 22:01:00 2026 GMT
        Subject: CN=193c233a9ef0b6a5b419268b09be0203d1a3022f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:90:f2:b7:22:30:4c:46:8f:1f:21:2b:43:e7:
                    5a:38:da:09:f5:c0:98:86:1f:30:18:96:fe:32:4a:
                    7c:e1:5a:68:c7:2b:77:c7:0f:4f:23:98:6e:57:e3:
                    ed:22:83:9a:7e:b6:0e:c6:b9:6c:65:b7:d2:bf:35:
                    4a:ed:7c:20:c7:01:60:9e:7c:b6:8e:26:17:12:66:
                    9e:f8:90:7e:65:25:03:d6:f6:1d:df:35:b0:f0:80:
                    e0:d6:15:d6:a4:00:f2:a9:2a:78:a7:13:2a:f5:48:
                    68:bd:ed:bc:49:5f:66:75:e5:58:f6:93:40:50:cc:
                    47:17:97:bf:09:90:1c:43:00:5a:ab:91:2a:76:c0:
                    cc:0f:ac:ce:45:11:c6:52:68:32:08:f6:a8:c3:fa:
                    ba:01:48:f5:29:1c:d5:a2:0f:be:9f:93:3c:e5:71:
                    45:76:1e:eb:95:88:8c:8b:3f:1a:ab:0c:7f:10:e0:
                    2d:5c:5d:ad:1d:5c:fe:e4:15:11:59:47:74:5c:06:
                    ec:dc:63:e9:72:9a:00:69:f2:f8:5d:94:5d:e8:d9:
                    27:10:3d:49:4d:8d:e1:b8:39:db:c3:af:15:0a:7a:
                    22:a6:05:75:da:72:8b:c4:27:7a:51:23:4c:d9:fe:
                    c5:47:43:23:ec:8e:07:79:2a:69:06:bd:c0:c7:39:
                    55:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:3C:23:3A:9E:F0:B6:A5:B4:19:26:8B:09:BE:02:03:D1:A3:02:2F
            X509v3 Authority Key Identifier:
                keyid:4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:b1:44:35:70:7d:cc:06:3c:5e:e4:64:69:f2:45:29:a9:7c:
         b0:c3:fa:77:cb:6b:09:ed:c7:a5:e5:dd:a2:58:05:f5:cc:b0:
         eb:4e:a4:74:1c:55:97:4b:13:56:0e:72:f6:be:10:4a:d5:df:
         af:4a:c6:4a:66:5a:4d:29:e6:da:cf:b7:6d:58:dd:43:1f:9a:
         54:67:2a:09:83:50:81:39:67:83:b5:14:37:87:bb:a1:ff:d6:
         c7:f8:fb:74:48:aa:e5:54:8b:e0:87:24:a3:0b:ab:ae:ae:f9:
         19:e5:f4:0f:5f:9c:15:81:17:36:2e:ad:62:aa:6b:2b:10:7b:
         9d:5e:c1:a2:c4:03:0a:f1:0e:29:53:8a:30:ac:13:22:e2:66:
         61:b0:1b:82:df:a3:18:21:e0:64:49:5c:a9:83:ad:74:b0:2f:
         63:cb:ba:16:b9:92:8a:57:f2:c7:42:81:1a:69:56:01:cf:2c:
         bb:9d:e3:48:79:11:e3:f8:3d:57:1a:31:3b:7c:0e:6a:7d:db:
         c6:50:48:c7:cb:2d:5a:d1:3b:b1:86:9a:53:ae:cc:73:b5:86:
         cd:04:7a:c7:95:4d:7a:30:15:9d:6c:85:d3:51:3d:2b:38:f0:
         71:91:4e:05:52:ee:1e:6d:2b:10:b5:b0:08:ce:3e:cc:31:ad:
         1d:c7:49:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNSXo8q54saDcxSzU4DKAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMGU3N2Q5YzZmZjY4ZGNhNjhmMDVkZjhmNDY3NWVlN2Jk
Y2IwYmMwHhcNMjYwNTEyMjIwMTAwWhcNMjYwNTEzMjIwMTAwWjAzMTEwLwYDVQQD
EygxOTNjMjMzYTllZjBiNmE1YjQxOTI2OGIwOWJlMDIwM2QxYTMwMjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJDytyIwTEaPHyErQ+daONoJ9cCY
hh8wGJb+Mkp84Vpoxyt3xw9PI5huV+PtIoOafrYOxrlsZbfSvzVK7XwgxwFgnny2
jiYXEmae+JB+ZSUD1vYd3zWw8IDg1hXWpADyqSp4pxMq9Uhove28SV9mdeVY9pNA
UMxHF5e/CZAcQwBaq5EqdsDMD6zORRHGUmgyCPaow/q6AUj1KRzVog++n5M85XFF
dh7rlYiMiz8aqwx/EOAtXF2tHVz+5BURWUd0XAbs3GPpcpoAafL4XZRd6NknED1J
TY3huDnbw68VCnoipgV12nKLxCd6USNM2f7FR0Mj7I4HeSppBr3AxzlV2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBk8Izqe8LaltBkmiwm+AgPRowIvMB8GA1UdIwQY
MBaAFE8Od9nG/2jcpo8F349Gde573LC8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHc1MzJjYl9hTnltandYZmowWjE3bnZjc0x3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8zZGMyMjItMTIwNi00OTIyLTg4OTAt
NDU1YjE5Zjc2NmNjLzEvVHc1MzJjYl9hTnltandYZmowWjE3bnZjc0x3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8zZGMyMjItMTIwNi00OTIyLTg4OTAtNDU1YjE5Zjc2NmNj
LzEvVHc1MzJjYl9hTnltandYZmowWjE3bnZjc0x3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVrFENXB9
zAY8XuRkafJFKal8sMP6d8trCe3HpeXdolgF9cyw606kdBxVl0sTVg5y9r4QStXf
r0rGSmZaTSnm2s+3bVjdQx+aVGcqCYNQgTlng7UUN4e7of/Wx/j7dEiq5VSL4Ick
owurrq75GeX0D1+cFYEXNi6tYqprKxB7nV7BosQDCvEOKVOKMKwTIuJmYbAbgt+j
GCHgZElcqYOtdLAvY8u6FrmSilfyx0KBGmlWAc8su53jSHkR4/g9VxoxO3wOan3b
xlBIx8stWtE7sYaaU67Mc7WGzQR6x5VNejAVnWyF01E9KzjwcZFOBVLuHm0rELWw
CM4+zDGtHcdJpQ==
-----END CERTIFICATE-----
Generated at Wed May 13 06:29:02 2026 by rpki-client