Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
File:                     tLC71kRVeO28e6a1v3ypNo0kF78.mft (raw, json)
Hash identifier:          CwZRiyYXhReB3TtXBhAWHCdX18CT56610PQ06YyokJc=
Subject key identifier:   CD:6D:79:DA:5D:48:FD:FE:EE:8B:19:B2:70:AA:B2:A9:2D:CA:FB:84
Authority key identifier: B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
Certificate issuer:       /CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Certificate serial:       019E1D90A2D6CEEF526D0D97CD80CC3FE6D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
Manifest number:          0F69
Signing time:             Tue 12 May 2026 19:01:18 +0000
Manifest this update:     Tue 12 May 2026 19:01:18 +0000
Manifest next update:     Wed 13 May 2026 19:01:18 +0000
Files and hashes:         1: BdxIgcii9AZbDowEljfzUYckHC8.roa (hash: ILwiF18gnTvRp3a0NE/1xK+Rukgr4WGOEG3uBi/izZY=)
                          2: FWYPQ6WC8Y-fg5sSQlXizSCkIiw.roa (hash: iqx9LdajD80FLscZZE0m7wFZ2v4e15gazl5hqYdyNRs=)
                          3: sU_POJ-9-KK9BmUg6PP2VC4cLx4.roa (hash: us+W7jv9HagK4mb3PNct2IPVT5f0kZEDdiyJO04+BcU=)
                          4: tLC71kRVeO28e6a1v3ypNo0kF78.crl (hash: n77CkH86Pb/DgFZPrCJnuCuwxhaE57TCoWZ/s0XNLsw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:a2:d6:ce:ef:52:6d:0d:97:cd:80:cc:3f:e6:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
        Validity
            Not Before: May 12 19:01:18 2026 GMT
            Not After : May 13 19:01:18 2026 GMT
        Subject: CN=cd6d79da5d48fdfeee8b19b270aab2a92dcafb84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ab:6e:db:14:89:44:74:5b:83:60:8e:76:e9:
                    86:60:85:d4:09:11:3b:bb:03:9f:f5:03:9f:ab:1f:
                    af:6d:e8:ca:27:f9:08:0b:8f:32:ee:f8:1f:c4:19:
                    43:bc:4f:15:ae:47:b9:fc:f8:4e:61:1e:b6:0c:d7:
                    d6:b6:ac:f5:ea:53:ea:b0:58:14:c1:f8:10:04:aa:
                    c7:54:25:44:9f:da:ea:18:70:f9:ff:68:9b:3f:23:
                    d6:fe:29:ef:0f:1c:c9:1e:27:2b:cd:a7:58:07:8f:
                    fc:17:78:f6:fb:e2:1a:5d:68:0c:82:76:6c:07:56:
                    2e:52:ff:9d:0c:bf:36:85:da:13:ce:7b:75:98:8e:
                    ca:02:b6:03:52:77:16:03:79:19:19:bb:b2:5d:05:
                    34:91:16:18:76:ed:19:d3:5b:bf:87:5a:54:03:c2:
                    53:7a:4f:f5:23:93:ed:ee:d0:21:07:52:bb:21:93:
                    3a:93:33:dd:c8:90:65:f5:dd:80:b0:bf:dc:a4:d6:
                    e6:70:4f:0b:b4:88:5b:1a:a4:0f:34:f8:e4:79:7f:
                    0c:71:55:7e:e9:61:46:50:80:5f:d3:a5:30:62:13:
                    91:3d:73:b8:2e:b6:3e:6e:19:57:b6:7f:37:f6:29:
                    14:0a:41:96:35:fe:14:62:8d:a4:c0:67:e9:6d:92:
                    5e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6D:79:DA:5D:48:FD:FE:EE:8B:19:B2:70:AA:B2:A9:2D:CA:FB:84
            X509v3 Authority Key Identifier:
                keyid:B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:aa:21:64:b4:4d:85:85:9f:10:2f:e9:1c:31:cb:be:36:bf:
         28:d9:43:36:be:13:e9:ba:6f:fb:88:7e:e9:5b:51:10:1e:74:
         84:02:cc:7e:94:b6:fd:2d:9f:2c:93:e7:8a:b2:56:6a:fa:0d:
         1e:42:72:62:4a:80:ce:5f:8d:37:f5:f8:39:a6:c4:d5:68:75:
         d1:79:b5:77:a1:e8:a3:fb:88:11:f1:3e:75:65:fd:28:c6:04:
         66:d9:47:45:a8:89:d4:36:e5:85:ac:0e:51:22:4e:70:1b:da:
         2d:25:ed:25:4d:38:73:cc:78:41:34:9a:27:7d:79:89:bf:a3:
         95:b3:8b:16:c2:29:d1:cd:27:29:e5:ec:4a:d6:23:1d:12:f0:
         e5:49:6d:13:dd:1b:e8:f6:79:f7:b9:9f:c9:1a:46:d7:89:6d:
         5b:01:d0:d6:3d:fa:9d:3b:7f:21:fc:c9:bf:b4:ed:9d:ef:8a:
         45:bc:9c:14:da:58:9f:b6:fd:54:5d:50:19:2f:a1:f6:53:d0:
         b9:ea:76:ff:a9:d6:3f:f3:2c:66:9d:5c:27:85:79:6a:23:3b:
         90:34:22:9a:aa:67:f2:29:52:83:e1:d8:2a:ff:f5:38:f2:d8:
         65:52:09:f8:06:a3:90:74:c8:8d:55:cc:3c:bc:54:77:5a:6b:
         04:ed:cc:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkKLWzu9SbQ2XzYDMP+bZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YjBiYmQ2NDQ1NTc4ZWRiYzdiYTZiNWJmN2NhOTM2OGQy
NDE3YmYwHhcNMjYwNTEyMTkwMTE4WhcNMjYwNTEzMTkwMTE4WjAzMTEwLwYDVQQD
EyhjZDZkNzlkYTVkNDhmZGZlZWU4YjE5YjI3MGFhYjJhOTJkY2FmYjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKtu2xSJRHRbg2COdumGYIXUCRE7
uwOf9QOfqx+vbejKJ/kIC48y7vgfxBlDvE8Vrke5/PhOYR62DNfWtqz16lPqsFgU
wfgQBKrHVCVEn9rqGHD5/2ibPyPW/invDxzJHicrzadYB4/8F3j2++IaXWgMgnZs
B1YuUv+dDL82hdoTznt1mI7KArYDUncWA3kZGbuyXQU0kRYYdu0Z01u/h1pUA8JT
ek/1I5Pt7tAhB1K7IZM6kzPdyJBl9d2AsL/cpNbmcE8LtIhbGqQPNPjkeX8McVV+
6WFGUIBf06UwYhORPXO4LrY+bhlXtn839ikUCkGWNf4UYo2kwGfpbZJemQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1tedpdSP3+7osZsnCqsqktyvuEMB8GA1UdIwQY
MBaAFLSwu9ZEVXjtvHumtb98qTaNJBe/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdExDNzFrUlZlTzI4ZTZhMXYzeXBObzBrRjc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zNTAyZmMtZDlmNy00ZmE4LWJhZjYt
NzdkNTI5YmU1M2Q3LzEvdExDNzFrUlZlTzI4ZTZhMXYzeXBObzBrRjc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8zNTAyZmMtZDlmNy00ZmE4LWJhZjYtNzdkNTI5YmU1M2Q3
LzEvdExDNzFrUlZlTzI4ZTZhMXYzeXBObzBrRjc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARaohZLRN
hYWfEC/pHDHLvja/KNlDNr4T6bpv+4h+6VtREB50hALMfpS2/S2fLJPnirJWavoN
HkJyYkqAzl+NN/X4OabE1Wh10Xm1d6Hoo/uIEfE+dWX9KMYEZtlHRaiJ1DblhawO
USJOcBvaLSXtJU04c8x4QTSaJ315ib+jlbOLFsIp0c0nKeXsStYjHRLw5UltE90b
6PZ597mfyRpG14ltWwHQ1j36nTt/IfzJv7Ttne+KRbycFNpYn7b9VF1QGS+h9lPQ
uep2/6nWP/MsZp1cJ4V5aiM7kDQimqpn8ilSg+HYKv/1OPLYZVIJ+AajkHTIjVXM
PLxUd1prBO3MHw==
-----END CERTIFICATE-----
Generated at Wed May 13 01:44:01 2026 by rpki-client