Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
File:                     TzvVbotU5tonu-ZiLaxny_Aqgeo.mft (raw, json)
Hash identifier:          KGo8n1uCvBsiR8PVI8fyzEo39ICKXJ4WGFBYv95IkNY=
Subject key identifier:   29:7C:06:33:89:61:B4:A2:26:2D:38:D6:64:64:53:59:F4:01:58:32
Authority key identifier: 4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA
Certificate issuer:       /CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
Certificate serial:       019E1D9039173EF96560297DEB1E8D65E992
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
Manifest number:          1908
Signing time:             Tue 12 May 2026 19:00:51 +0000
Manifest this update:     Tue 12 May 2026 19:00:51 +0000
Manifest next update:     Wed 13 May 2026 19:00:51 +0000
Files and hashes:         1: 6h3DLRd0aoO08FWkuvK-DIL1TAI.roa (hash: QbNhinBRvnYOWmudxD6YkQ5YvTv3wj3nF5VH2568D0c=)
                          2: TzvVbotU5tonu-ZiLaxny_Aqgeo.crl (hash: kjQQBmUsxjkKILK/j3CzazIeMNBF2trmcN0D0jz7dvM=)
                          3: kzYQmwQKzbuQvS3iB2mDUlnw91Y.roa (hash: bz4ecHp+kkkRf1WW8soaqZgJTcHf8FiOXW+H4gSzf48=)
                          4: lv8af-jyuveaHC9x_OKdx2NgSxI.roa (hash: qC6P7LJylLpMoNR/tNemeZF9+aw6XACba3yU1fASXaI=)
                          5: wMLINqfRL31emUgeWzPrQ7en_WU.roa (hash: 28WktakjRSH95PtqAXbEMoIgPvxQiYsWki+RGQe70G0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:39:17:3e:f9:65:60:29:7d:eb:1e:8d:65:e9:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
        Validity
            Not Before: May 12 19:00:51 2026 GMT
            Not After : May 13 19:00:51 2026 GMT
        Subject: CN=297c06338961b4a2262d38d664645359f4015832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:27:ee:33:51:14:6c:f9:f2:e7:0c:77:55:87:
                    d8:d4:59:9d:5b:6a:3d:4e:30:c2:47:7f:6c:08:1b:
                    a5:8a:91:66:13:b1:11:44:e7:d7:ac:11:a4:1c:44:
                    2d:3f:68:ff:72:71:00:ae:57:c2:5a:e3:18:02:31:
                    6b:2a:c1:2e:4e:c0:ee:1c:50:9a:95:84:4d:98:55:
                    bd:71:e6:bf:0e:0a:d5:b6:96:97:5b:0b:54:45:c3:
                    3f:f8:2b:e5:d4:63:01:47:78:7f:23:de:de:7a:32:
                    f3:53:9c:c4:ef:52:05:29:c9:aa:d7:53:82:24:14:
                    ed:9f:0f:c6:ed:ce:45:63:92:14:37:09:f6:44:5e:
                    27:2d:19:7f:75:30:9f:9d:1c:78:4d:40:94:fe:be:
                    9f:d0:72:0a:4a:bb:de:aa:cc:9e:bf:cd:5f:ab:bb:
                    aa:6a:05:cf:58:67:6b:b9:c5:91:2a:64:82:e2:dd:
                    31:2c:51:85:1d:e0:33:ff:7b:5e:59:6a:ff:63:7f:
                    c9:e2:05:8b:d7:f4:a6:c8:d0:a1:1c:df:68:7e:db:
                    65:c7:bb:48:6a:73:66:c3:9d:85:40:32:27:6f:38:
                    cf:96:68:b9:63:85:df:7e:67:a6:ca:c9:97:e1:bb:
                    6e:d3:87:3e:dd:ec:ce:4d:a2:2b:9d:61:9a:87:b5:
                    ab:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:7C:06:33:89:61:B4:A2:26:2D:38:D6:64:64:53:59:F4:01:58:32
            X509v3 Authority Key Identifier:
                keyid:4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:9a:83:d8:a7:69:81:84:9f:a9:dd:8e:46:40:85:c2:f3:fa:
         b7:6c:e3:1a:60:b3:42:36:81:a7:eb:2d:93:f1:44:a1:25:49:
         a7:22:94:62:d6:79:44:d2:a2:63:18:8e:8f:0c:9c:3b:76:83:
         14:ac:b5:0e:72:3a:de:6f:2e:b3:d4:51:a1:37:4e:20:d7:47:
         49:3b:15:2b:4b:23:c7:28:40:79:92:78:3f:0e:ee:bd:ef:a4:
         e9:97:21:04:6f:06:da:1b:2f:6c:4f:a2:ad:18:84:67:38:41:
         53:74:2b:cd:ed:13:c8:b3:54:cc:f7:50:53:35:1f:55:88:71:
         c2:53:51:47:77:62:5f:18:50:f8:f1:2f:c3:ba:59:39:84:ee:
         45:6d:31:29:8c:bd:4a:88:9a:6a:0e:a6:7d:41:30:08:04:56:
         b9:18:ee:b6:6a:b1:f7:13:f1:17:60:8c:91:85:4e:a2:32:40:
         a7:11:ed:06:6b:f3:8f:c8:07:eb:53:70:65:51:d8:45:99:b6:
         e3:b8:63:bc:c5:4a:45:59:39:6c:19:f2:a6:f9:c4:d6:23:8e:
         46:30:bb:02:53:e2:9f:47:e4:d6:21:0a:db:8e:a8:9d:f8:7a:
         10:35:a0:33:04:fd:50:75:70:03:58:8a:ca:46:ff:d8:4f:8e:
         61:b6:db:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkDkXPvllYCl96x6NZemSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmM2JkNTZlOGI1NGU2ZGEyN2JiZTY2MjJkYWM2N2NiZjAy
YTgxZWEwHhcNMjYwNTEyMTkwMDUxWhcNMjYwNTEzMTkwMDUxWjAzMTEwLwYDVQQD
EygyOTdjMDYzMzg5NjFiNGEyMjYyZDM4ZDY2NDY0NTM1OWY0MDE1ODMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSfuM1EUbPny5wx3VYfY1FmdW2o9
TjDCR39sCBulipFmE7ERROfXrBGkHEQtP2j/cnEArlfCWuMYAjFrKsEuTsDuHFCa
lYRNmFW9cea/DgrVtpaXWwtURcM/+Cvl1GMBR3h/I97eejLzU5zE71IFKcmq11OC
JBTtnw/G7c5FY5IUNwn2RF4nLRl/dTCfnRx4TUCU/r6f0HIKSrveqsyev81fq7uq
agXPWGdrucWRKmSC4t0xLFGFHeAz/3teWWr/Y3/J4gWL1/SmyNChHN9ofttlx7tI
anNmw52FQDInbzjPlmi5Y4XffmemysmX4btu04c+3ezOTaIrnWGah7WrVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCl8BjOJYbSiJi041mRkU1n0AVgyMB8GA1UdIwQY
MBaAFE871W6LVObaJ7vmYi2sZ8vwKoHqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHp2VmJvdFU1dG9udS1aaUxheG55X0FxZ2VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS82ZmUxNDktOGE3Mi00N2ZkLTg3MzUt
N2RjNWJkZGY5MWI1LzEvVHp2VmJvdFU1dG9udS1aaUxheG55X0FxZ2VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS82ZmUxNDktOGE3Mi00N2ZkLTg3MzUtN2RjNWJkZGY5MWI1
LzEvVHp2VmJvdFU1dG9udS1aaUxheG55X0FxZ2VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnpqD2Kdp
gYSfqd2ORkCFwvP6t2zjGmCzQjaBp+stk/FEoSVJpyKUYtZ5RNKiYxiOjwycO3aD
FKy1DnI63m8us9RRoTdOINdHSTsVK0sjxyhAeZJ4Pw7uve+k6ZchBG8G2hsvbE+i
rRiEZzhBU3Qrze0TyLNUzPdQUzUfVYhxwlNRR3diXxhQ+PEvw7pZOYTuRW0xKYy9
Soiaag6mfUEwCARWuRjutmqx9xPxF2CMkYVOojJApxHtBmvzj8gH61NwZVHYRZm2
47hjvMVKRVk5bBnypvnE1iOORjC7AlPin0fk1iEK246onfh6EDWgMwT9UHVwA1iK
ykb/2E+OYbbbLA==
-----END CERTIFICATE-----
Generated at Wed May 13 07:04:46 2026 by rpki-client