Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
File:                     TRMSiBUQNXRBfKenBBLaOrO4RRE.mft (raw, json)
Hash identifier:          gKeqrBK9b7gWcuAF6xbxBIHD2JhJxRas/SDumj+nJDM=
Subject key identifier:   DE:CA:42:AF:3F:60:05:FB:7E:74:ED:CF:6F:61:00:C6:20:6C:29:AF
Authority key identifier: 4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11
Certificate issuer:       /CN=4d13128815103574417ca7a70412da3ab3b84511
Certificate serial:       019E209169B37A52018CA488F00E89A4088F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
Manifest number:          190B
Signing time:             Wed 13 May 2026 09:01:01 +0000
Manifest this update:     Wed 13 May 2026 09:01:01 +0000
Manifest next update:     Thu 14 May 2026 09:01:01 +0000
Files and hashes:         1: TRMSiBUQNXRBfKenBBLaOrO4RRE.crl (hash: J5J4YC8oWsciOjy9r7xHLIbWk3F+8p/pqFHnCvwy8QI=)
                          2: mGlCacge7YnUjqIQY4CvKFnqpx4.roa (hash: AVo0MRQRTy6CdeGacGKP+5uMUkB7HT3z+0JrAGp0xWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:91:69:b3:7a:52:01:8c:a4:88:f0:0e:89:a4:08:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d13128815103574417ca7a70412da3ab3b84511
        Validity
            Not Before: May 13 09:01:01 2026 GMT
            Not After : May 14 09:01:01 2026 GMT
        Subject: CN=deca42af3f6005fb7e74edcf6f6100c6206c29af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:98:2c:c1:3b:40:42:d8:b2:a6:7c:45:e1:88:
                    c5:8d:9f:77:b5:1b:a2:35:2a:8e:dc:00:fb:f0:13:
                    70:b9:cc:4b:4e:f5:e2:0e:c8:53:f7:4a:33:f0:8a:
                    9c:2a:4c:08:d8:1c:16:8c:cb:1b:cd:8e:68:f1:8d:
                    5c:c4:63:e6:94:69:d9:ed:30:03:75:a2:d8:2c:2b:
                    6a:22:18:23:dc:1a:a9:3e:33:f9:f9:64:4b:33:84:
                    fe:3a:bc:4a:e6:bf:92:93:ea:0c:24:df:46:25:de:
                    32:82:f9:32:44:a2:b8:27:e3:ca:e2:3d:51:99:69:
                    93:5b:05:58:65:a9:8a:8d:7d:8b:ef:02:84:eb:2b:
                    4d:ce:24:f8:5f:0c:63:70:21:b7:46:09:5f:f4:a3:
                    f9:56:d4:19:f4:f8:9c:4d:4e:63:43:25:5d:8b:bb:
                    f5:c2:f0:0f:61:32:fd:71:2d:cd:82:f4:17:d1:9c:
                    b7:ad:85:22:12:b4:67:7c:c9:27:26:09:5c:4b:b2:
                    7e:00:71:37:08:bb:6f:7e:bf:fc:cf:57:4b:b0:3d:
                    e2:d6:9e:e3:c8:7c:3f:16:f2:6d:f1:00:87:22:0f:
                    7e:0a:a5:df:16:42:ac:af:4b:09:27:e2:5a:0d:8f:
                    65:72:d2:ec:e6:6a:80:f1:64:1c:bc:bb:3e:94:23:
                    19:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:CA:42:AF:3F:60:05:FB:7E:74:ED:CF:6F:61:00:C6:20:6C:29:AF
            X509v3 Authority Key Identifier:
                keyid:4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:2d:4e:1c:87:d6:99:5e:a7:83:f2:e4:e3:ff:c2:7e:fb:18:
         f6:23:e2:8d:5b:40:62:16:4b:d7:19:ac:ca:26:71:08:c7:0d:
         aa:cc:6e:95:e2:ee:71:49:58:50:b2:ea:84:a5:06:5f:d6:88:
         ad:fd:2b:12:34:73:51:3e:c3:6e:d9:76:48:4f:48:2c:4c:fc:
         00:c6:dd:f6:9c:80:a2:a9:0f:15:b3:fe:8f:70:89:42:3f:89:
         56:3c:67:9b:cc:88:de:2b:fa:49:04:2a:b0:1d:57:c5:5f:7b:
         c9:40:33:4f:8a:44:e4:bb:9d:2b:f3:6c:0c:6c:0a:98:bb:d3:
         f5:c5:2a:c4:85:d7:37:be:f1:9f:ee:af:fe:5e:2c:a4:a9:ad:
         3c:55:dc:ec:7d:44:68:71:23:f2:10:ba:5f:b6:1a:7e:ef:fc:
         93:d4:20:6b:8e:d0:19:0b:c3:e7:d2:f7:35:77:7a:d6:a6:6e:
         75:eb:b6:34:bf:df:03:d3:eb:14:3a:d1:c0:4e:50:d3:89:d9:
         bd:59:47:ba:4a:24:ee:c7:39:94:72:03:9d:73:71:91:42:09:
         f8:9b:2e:1b:f2:ce:56:c6:fa:ec:d5:6e:79:4e:90:50:4d:a7:
         74:75:2d:c0:a4:11:f1:57:77:f1:2e:00:8c:c7:85:29:09:17:
         53:3e:ec:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gkWmzelIBjKSI8A6JpAiPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMTMxMjg4MTUxMDM1NzQ0MTdjYTdhNzA0MTJkYTNhYjNi
ODQ1MTEwHhcNMjYwNTEzMDkwMTAxWhcNMjYwNTE0MDkwMTAxWjAzMTEwLwYDVQQD
EyhkZWNhNDJhZjNmNjAwNWZiN2U3NGVkY2Y2ZjYxMDBjNjIwNmMyOWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppgswTtAQtiypnxF4YjFjZ93tRui
NSqO3AD78BNwucxLTvXiDshT90oz8IqcKkwI2BwWjMsbzY5o8Y1cxGPmlGnZ7TAD
daLYLCtqIhgj3BqpPjP5+WRLM4T+OrxK5r+Sk+oMJN9GJd4ygvkyRKK4J+PK4j1R
mWmTWwVYZamKjX2L7wKE6ytNziT4XwxjcCG3Rglf9KP5VtQZ9PicTU5jQyVdi7v1
wvAPYTL9cS3NgvQX0Zy3rYUiErRnfMknJglcS7J+AHE3CLtvfr/8z1dLsD3i1p7j
yHw/FvJt8QCHIg9+CqXfFkKsr0sJJ+JaDY9lctLs5mqA8WQcvLs+lCMZVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7KQq8/YAX7fnTtz29hAMYgbCmvMB8GA1UdIwQY
MBaAFE0TEogVEDV0QXynpwQS2jqzuEURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFJNU2lCVVFOWFJCZktlbkJCTGFPck80UlJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9mYWZmYzItOTUxNy00ZDE4LTg5OTMt
ZjU1ZWE0OGNlNzVhLzEvVFJNU2lCVVFOWFJCZktlbkJCTGFPck80UlJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9mYWZmYzItOTUxNy00ZDE4LTg5OTMtZjU1ZWE0OGNlNzVh
LzEvVFJNU2lCVVFOWFJCZktlbkJCTGFPck80UlJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlS1OHIfW
mV6ng/Lk4//CfvsY9iPijVtAYhZL1xmsyiZxCMcNqsxuleLucUlYULLqhKUGX9aI
rf0rEjRzUT7Dbtl2SE9ILEz8AMbd9pyAoqkPFbP+j3CJQj+JVjxnm8yI3iv6SQQq
sB1XxV97yUAzT4pE5LudK/NsDGwKmLvT9cUqxIXXN77xn+6v/l4spKmtPFXc7H1E
aHEj8hC6X7Yafu/8k9Qga47QGQvD59L3NXd61qZudeu2NL/fA9PrFDrRwE5Q04nZ
vVlHukok7sc5lHIDnXNxkUIJ+JsuG/LOVsb67NVueU6QUE2ndHUtwKQR8Vd38S4A
jMeFKQkXUz7sRA==
-----END CERTIFICATE-----
Generated at Wed May 13 13:21:55 2026 by rpki-client