Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
File:                     TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft (raw, json)
Hash identifier:          tPTZSGUaDa5Nml1yJI2WcJDaLDYvSoampNpxVJ0r9lg=
Subject key identifier:   E2:B6:66:E6:11:C9:DA:59:B0:30:8E:68:ED:82:0C:DB:1D:55:4B:D7
Authority key identifier: 4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1
Certificate issuer:       /CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
Certificate serial:       019E1F7F009ED3944700EE9473DF694ACB01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
Manifest number:          09C7
Signing time:             Wed 13 May 2026 04:01:17 +0000
Manifest this update:     Wed 13 May 2026 04:01:17 +0000
Manifest next update:     Thu 14 May 2026 04:01:17 +0000
Files and hashes:         1: 5cyx45wBsDWUW4HLBveZ_qT2fcI.roa (hash: 8zrBvmy9ZVUIH/JDFlTLI0bEMjkf56i51k/bt1Lb1pQ=)
                          2: BGnZrxh766n-RwiVyZM8GwNTqh0.roa (hash: /zWDyCDhQQVXOZUHRipaDLFDgbYWX/UYPO8XJtBp0uE=)
                          3: JI6F6sKwmFDB-S9XODKhAA660AM.roa (hash: /b/qNAizl4V5sFYHPlaPbBReehGSPPstai3HlyE9iGo=)
                          4: OB0voxOvgqvD6w4CwDmCo19dJlY.roa (hash: 9mhFY39YjN1Cc/funyTGbxD0WJvEdMakoR8u2Fsujz0=)
                          5: TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl (hash: rAVwqgef22xGjrCwDBlXCI6mNexQZYNaqbnr9XLFu/4=)
                          6: X14l7kvlYYBF3EHNWSg-svsFuOQ.roa (hash: Y9BNprLjsgal1cKXYYlZbO0fiea/j/rMdHY3dC/wqFY=)
                          7: sGobVjVtmpTG3eIQoRngSBlxcMU.roa (hash: UMoTBGpuj0hrOh47PvNUlOhwfEbv/t4MSoG5XZ2RuSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7f:00:9e:d3:94:47:00:ee:94:73:df:69:4a:cb:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
        Validity
            Not Before: May 13 04:01:17 2026 GMT
            Not After : May 14 04:01:17 2026 GMT
        Subject: CN=e2b666e611c9da59b0308e68ed820cdb1d554bd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:73:b8:0e:7b:42:01:d8:59:b0:92:81:80:a1:
                    40:6e:5b:15:50:a1:c5:f7:79:65:99:78:34:31:09:
                    db:87:57:9e:f2:c6:e0:77:ee:b5:1d:71:c2:35:dc:
                    30:0b:f3:d7:e1:de:84:04:ae:34:b3:70:08:a5:1c:
                    9d:b8:e4:10:be:86:4d:70:63:01:0e:35:0f:cf:2b:
                    b0:bd:11:fb:e7:40:b1:6b:73:cb:fb:42:db:80:a9:
                    36:33:f3:22:f3:b3:c7:a5:b6:f7:48:b9:a3:7b:a7:
                    9b:66:5e:54:de:f1:11:08:9b:ec:55:76:7a:98:04:
                    aa:20:4d:f2:58:71:83:7b:f2:9b:2b:bb:40:49:8d:
                    47:8a:1b:3e:38:c8:fa:81:a1:6e:b3:35:b9:a2:c1:
                    bb:82:ed:93:98:f7:52:c8:b2:b9:1a:97:e9:de:64:
                    56:37:ee:be:30:59:d9:9e:39:30:d4:11:15:2c:b1:
                    ba:f9:18:40:38:d9:c0:d8:01:8a:57:29:4e:e4:06:
                    bd:33:e8:d7:1a:65:e6:50:cd:53:96:e2:df:4f:fb:
                    8f:3a:19:fb:a6:15:7d:3f:ce:24:f8:e7:51:3e:09:
                    2e:50:9d:58:00:41:a8:4f:d4:d3:dd:5f:e5:38:7f:
                    10:84:84:8c:3c:df:01:0b:a0:9f:2a:5f:20:24:87:
                    78:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B6:66:E6:11:C9:DA:59:B0:30:8E:68:ED:82:0C:DB:1D:55:4B:D7
            X509v3 Authority Key Identifier:
                keyid:4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:56:10:15:01:40:f1:11:ae:50:aa:ff:66:f8:ab:60:95:c1:
         ad:f3:5a:0a:37:6b:9c:02:59:7e:67:4c:cf:ec:89:94:39:5a:
         5e:8e:ef:01:ce:c5:ec:22:0b:73:45:31:bb:ca:02:15:7d:49:
         ea:63:b9:e2:70:53:67:5e:60:db:91:ed:81:f2:80:2f:d3:1b:
         dd:6b:35:57:b2:5b:26:a7:c5:c8:30:0b:ee:4e:58:d9:62:c1:
         aa:2d:8c:d7:75:06:28:99:1c:de:bc:e1:2e:44:94:df:4b:da:
         1a:54:28:88:c7:14:5f:df:21:6e:8a:53:3c:4f:c2:f0:8e:0a:
         ed:9e:60:3a:ce:99:dc:ac:f1:20:fc:f3:62:81:5d:aa:af:fa:
         88:db:e7:b2:48:04:f2:3e:68:0d:f4:5c:31:eb:c6:94:5a:9d:
         88:aa:f5:9f:55:87:57:04:02:35:c3:19:09:4c:b8:99:6a:3e:
         8f:70:1f:c7:40:c8:01:48:cb:79:7c:93:e9:cf:2a:8c:c6:5e:
         12:0f:d2:bd:77:23:49:ee:c4:e2:80:19:bd:b4:e9:e8:f9:13:
         01:b8:b0:11:3f:b0:72:cc:74:c3:90:2f:48:1a:59:b9:df:fd:
         b6:50:5a:ac:fd:14:40:04:5e:17:a4:9f:38:e4:b2:f2:e7:7d:
         ed:12:48:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:06:23 2026 by rpki-client