Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft
File:                     TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft (raw, json)
Hash identifier:          SFQwyWq4sjCcqWMWg70ZeRrGU7ScyWVBUnAyIt70YO0=
Subject key identifier:   87:FE:FB:53:0D:75:59:86:5A:75:D4:6E:95:75:DF:C8:6F:35:B5:DD
Authority key identifier: 4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30
Certificate issuer:       /CN=4cbfd3e72d4a0396f95347336b42678f68c26430
Certificate serial:       019E1EA33BBC508DAB77FF66D06E2BD6A714
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft
Manifest number:          1918
Signing time:             Wed 13 May 2026 00:01:14 +0000
Manifest this update:     Wed 13 May 2026 00:01:14 +0000
Manifest next update:     Thu 14 May 2026 00:01:14 +0000
Files and hashes:         1: 1SNNaJd-_nZGjSy8KhTgEu_TWEY.roa (hash: DTRv2jcApfzQZK3kJVDp954M/vKt+twRMmk7r67fyZA=)
                          2: 1bQOLq12VlIMZXXolofAPH9O5cY.roa (hash: nNr1MzlTDsd5ryhxxC8zve5I9A8m7Ud69POGWpKdnLw=)
                          3: 7Z4vT_pGnwjFtMmenLcRoqmUPrc.roa (hash: 0NI8q2txBSLwYGEyadLBX2+xdl05r7JbnQBUmGMxhLc=)
                          4: IM3Sgf6n85MJ0JQ5zz3x973QECY.roa (hash: RhRSY8YyTjB3zZVDnbDfxNa5aiv4sYD92KtaLzLLg4A=)
                          5: TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl (hash: I0V3d3M71aE7nDMwk4iL2C1s1CMdHlwfblBfy2l+XFk=)
                          6: cefT8Znon0EMvLEa4jZbAItaX68.roa (hash: zuUKY/0e1yWLD2162lMycJrs/wJncsLp3x6qIl7VWD4=)
                          7: klIt1NStPul9M_ZMJsdKutacUMM.roa (hash: Bg/ud8VNM1Ut9qaDX4Qy7kRtx9Mw6PMvkK9VqDfBpa8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:3b:bc:50:8d:ab:77:ff:66:d0:6e:2b:d6:a7:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cbfd3e72d4a0396f95347336b42678f68c26430
        Validity
            Not Before: May 13 00:01:14 2026 GMT
            Not After : May 14 00:01:14 2026 GMT
        Subject: CN=87fefb530d7559865a75d46e9575dfc86f35b5dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:69:b8:e0:dc:1e:33:bc:23:5b:64:38:6b:37:
                    67:69:54:c3:79:6e:42:2c:74:92:69:55:92:43:b9:
                    76:c4:39:f2:91:85:73:be:57:cc:bf:f3:fc:43:88:
                    e4:9f:85:f9:87:90:a7:8c:e5:da:fc:48:70:ca:8c:
                    99:42:d8:30:a8:69:85:0d:33:b5:3c:86:34:4b:8d:
                    c3:16:66:b5:7b:0b:1a:f2:a3:d2:87:af:92:61:75:
                    0c:47:6a:b7:30:73:e5:db:18:21:a1:d4:de:50:b3:
                    a8:ba:e9:d7:79:96:f3:fb:70:54:f1:56:9a:ee:40:
                    8c:7b:96:3c:40:f6:34:61:4a:25:a6:ca:57:da:ec:
                    1b:d2:92:77:5b:e5:01:47:56:af:98:ce:95:12:68:
                    b9:34:49:50:fb:40:86:55:fd:5e:fa:e4:2d:5b:96:
                    08:54:67:9f:73:0a:87:67:70:bb:b1:ad:75:89:47:
                    dc:1e:4d:50:bb:0f:72:f6:d4:08:47:ef:b3:45:a4:
                    d0:dd:fe:ed:1c:35:57:3d:b5:0b:2f:a5:45:40:ce:
                    af:80:12:8c:7e:c8:ae:53:0a:7d:df:e3:d1:02:7b:
                    e2:04:90:29:1d:f4:ba:7c:86:ed:07:e7:56:aa:6d:
                    3c:72:35:62:1c:61:e2:2b:26:b1:dc:10:e5:51:86:
                    87:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:FE:FB:53:0D:75:59:86:5A:75:D4:6E:95:75:DF:C8:6F:35:B5:DD
            X509v3 Authority Key Identifier:
                keyid:4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:32:79:a0:ef:85:d4:a2:8a:5d:d9:d8:87:7a:4f:2d:fa:36:
         5d:5c:33:c6:cd:91:b4:33:1d:94:22:58:bd:9e:b6:f2:51:86:
         a8:57:64:bf:cd:53:87:98:b4:3f:41:9f:26:52:2a:36:f9:67:
         6f:61:2e:eb:9e:9a:7d:7d:3c:66:ed:32:f6:8f:0a:27:73:e9:
         ec:11:44:a1:73:c3:7d:29:8c:84:94:c0:8a:aa:28:1c:e6:f5:
         30:72:ea:c5:0f:80:b0:a2:58:6a:b4:66:a8:a3:26:90:60:9f:
         32:f5:01:e8:be:99:2b:3f:d4:ac:79:65:ec:9f:8d:5e:b0:bd:
         1b:f6:e0:49:dd:2f:98:ed:f4:ae:8a:45:0b:ec:f3:d0:6c:8d:
         dc:47:f6:8f:03:0b:5c:aa:fc:be:a0:cb:69:6e:c6:14:1f:c7:
         f8:c7:69:96:e2:77:fd:be:2a:55:a8:e8:93:06:66:08:a6:71:
         da:20:01:a8:59:c0:64:5e:f0:db:a2:d3:51:79:6b:de:94:08:
         6e:34:49:a9:0a:30:21:51:b2:c8:69:6c:ef:e7:96:08:d3:3d:
         89:44:f7:59:42:b7:4d:91:c1:26:d7:73:0b:90:a2:3f:44:c6:
         32:ac:6a:ca:1f:a3:16:cf:52:52:ea:e1:b4:a5:4d:d1:d6:9c:
         07:d9:9a:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eozu8UI2rd/9m0G4r1qcUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYmZkM2U3MmQ0YTAzOTZmOTUzNDczMzZiNDI2NzhmNjhj
MjY0MzAwHhcNMjYwNTEzMDAwMTE0WhcNMjYwNTE0MDAwMTE0WjAzMTEwLwYDVQQD
Eyg4N2ZlZmI1MzBkNzU1OTg2NWE3NWQ0NmU5NTc1ZGZjODZmMzViNWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2m44NweM7wjW2Q4azdnaVTDeW5C
LHSSaVWSQ7l2xDnykYVzvlfMv/P8Q4jkn4X5h5CnjOXa/EhwyoyZQtgwqGmFDTO1
PIY0S43DFma1ewsa8qPSh6+SYXUMR2q3MHPl2xghodTeULOouunXeZbz+3BU8Vaa
7kCMe5Y8QPY0YUolpspX2uwb0pJ3W+UBR1avmM6VEmi5NElQ+0CGVf1e+uQtW5YI
VGefcwqHZ3C7sa11iUfcHk1Quw9y9tQIR++zRaTQ3f7tHDVXPbULL6VFQM6vgBKM
fsiuUwp93+PRAnviBJApHfS6fIbtB+dWqm08cjViHGHiKyax3BDlUYaHbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIf++1MNdVmGWnXUbpV138hvNbXdMB8GA1UdIwQY
MBaAFEy/0+ctSgOW+VNHM2tCZ49owmQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVExfVDV5MUtBNWI1VTBjemEwSm5qMmpDWkRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iNTczM2ItMzg5MS00NDliLTk5NTAt
ZmY2MGUyMThlZDQxLzEvVExfVDV5MUtBNWI1VTBjemEwSm5qMmpDWkRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9iNTczM2ItMzg5MS00NDliLTk5NTAtZmY2MGUyMThlZDQx
LzEvVExfVDV5MUtBNWI1VTBjemEwSm5qMmpDWkRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhDJ5oO+F
1KKKXdnYh3pPLfo2XVwzxs2RtDMdlCJYvZ628lGGqFdkv81Th5i0P0GfJlIqNvln
b2Eu656afX08Zu0y9o8KJ3Pp7BFEoXPDfSmMhJTAiqooHOb1MHLqxQ+AsKJYarRm
qKMmkGCfMvUB6L6ZKz/UrHll7J+NXrC9G/bgSd0vmO30ropFC+zz0GyN3Ef2jwML
XKr8vqDLaW7GFB/H+MdpluJ3/b4qVajokwZmCKZx2iABqFnAZF7w26LTUXlr3pQI
bjRJqQowIVGyyGls7+eWCNM9iUT3WUK3TZHBJtdzC5CiP0TGMqxqyh+jFs9SUurh
tKVN0dacB9mamA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:34:45 2026 by rpki-client