Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
File:                     tGS0UjqJcrni9GpPShY06XAnrt8.mft (raw, json)
Hash identifier:          es5VosqRaC0+Zf6NbCLoq60QIkGPNifURSDYFmADnPM=
Subject key identifier:   0D:3E:89:70:03:FE:FD:7A:23:3D:90:8A:2E:7B:D5:96:DB:C3:E0:05
Authority key identifier: B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF
Certificate issuer:       /CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf
Certificate serial:       019E20C89B4D8273C6E14D737841CA3EA065
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
Manifest number:          08D2
Signing time:             Wed 13 May 2026 10:01:18 +0000
Manifest this update:     Wed 13 May 2026 10:01:18 +0000
Manifest next update:     Thu 14 May 2026 10:01:18 +0000
Files and hashes:         1: 9Bk2DNR2uYMUyRc1vkqhEEQ_U7I.roa (hash: stlOV3eHfF1Tw/j9xaX8GJThoN6iWH1T13ESnbBJcL8=)
                          2: hB5bKIzKCvcbl8ogbaBmur_bdIs.roa (hash: Uyup6v2aW5b2Hld6LVCK6C+h9+vlfo2ENPD8ezX9qzQ=)
                          3: tGS0UjqJcrni9GpPShY06XAnrt8.crl (hash: aQK/PLWOXtb10k667nCR6Ikvu+PbswRPirzlQKP83Pw=)
                          4: ybJz7bnKGkBBxiMObl5o-Qmd4SE.roa (hash: JhVcV+03zxVD2R4ZSByn4pLYKVYrGi9gl0bLGuBHrWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:c8:9b:4d:82:73:c6:e1:4d:73:78:41:ca:3e:a0:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf
        Validity
            Not Before: May 13 10:01:18 2026 GMT
            Not After : May 14 10:01:18 2026 GMT
        Subject: CN=0d3e897003fefd7a233d908a2e7bd596dbc3e005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c4:02:45:ac:4d:76:fc:96:93:ba:46:38:75:
                    3d:e9:d2:27:55:fb:be:13:5d:25:f2:74:a1:0f:3b:
                    f2:61:3f:a8:32:ae:dc:88:77:b5:d9:8e:68:d9:09:
                    91:81:14:3f:99:88:39:43:06:0a:89:42:38:7f:06:
                    b5:33:f8:05:96:2e:70:e4:b9:36:e2:b0:af:40:45:
                    c3:b3:38:42:6b:e5:51:12:0a:8e:9a:9f:da:47:07:
                    e4:35:0e:11:64:12:c7:9e:39:6d:dd:06:d5:1a:f1:
                    dd:81:9d:a4:cd:1b:8f:50:6b:95:b1:ea:34:c4:6b:
                    fb:48:32:0e:14:24:73:74:7c:39:18:46:45:19:52:
                    19:55:da:8e:54:fb:67:15:f1:b7:af:61:da:59:ca:
                    aa:c6:84:cb:64:e5:4c:d4:4b:e2:b4:34:3b:cb:23:
                    4c:e9:75:83:57:38:f5:f1:16:9a:4f:55:e0:e0:b8:
                    5e:17:96:63:62:ab:8a:18:85:9d:d5:e9:11:31:f5:
                    34:20:06:1a:70:69:cd:1c:ca:dd:8a:7d:63:0b:aa:
                    25:14:6b:6c:3e:93:d5:27:4a:b7:71:27:67:45:31:
                    d5:12:e4:16:10:7a:de:58:b6:5a:0a:12:b6:ef:f4:
                    0e:9a:c4:21:5c:6b:b6:0b:82:14:6e:89:8d:eb:6d:
                    28:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3E:89:70:03:FE:FD:7A:23:3D:90:8A:2E:7B:D5:96:DB:C3:E0:05
            X509v3 Authority Key Identifier:
                keyid:B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:58:56:9e:71:e1:41:b3:94:cc:f1:c1:4e:94:73:ff:25:e2:
         72:62:a4:ca:0b:dc:8c:9d:12:d2:af:a6:e9:ff:54:dd:72:67:
         54:ec:8c:28:28:9c:bc:b4:99:ae:da:cb:b8:fd:4b:d8:58:f7:
         71:24:14:6e:18:ae:11:07:62:2c:81:74:35:e1:67:3c:07:eb:
         e8:7b:cb:3c:e7:1d:32:24:a4:96:a0:24:71:e0:b7:d7:31:7a:
         c9:8c:40:0a:0c:4b:8f:da:e7:49:19:2b:f3:3a:e2:3f:f8:e5:
         8d:54:50:e7:ef:9a:75:36:10:35:12:a4:ec:48:0f:f8:bf:ec:
         8d:6e:cb:a9:a5:76:6e:a8:bb:90:08:65:53:8e:b3:06:3f:fd:
         4f:e4:ab:8c:dd:f7:0a:fb:8c:d4:37:2c:77:88:04:3b:da:5a:
         2f:26:85:bc:b1:39:ea:99:09:c2:d4:08:e4:a5:7d:7f:c6:3f:
         5b:5c:23:6c:f1:61:34:98:c4:07:d6:d5:ba:32:44:1e:94:80:
         f1:b6:01:38:66:ed:32:8b:ca:0f:73:cc:da:ed:b2:c1:24:4d:
         b3:8a:7d:0b:b5:95:52:d5:19:02:e9:1e:3a:53:e5:d4:14:08:
         a3:8d:96:db:e4:01:7a:ed:b6:28:2c:ba:ae:fd:20:b8:6e:15:
         bb:67:65:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gyJtNgnPG4U1zeEHKPqBlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NjRiNDUyM2E4OTcyYjllMmY0NmE0ZjRhMTYzNGU5NzAy
N2FlZGYwHhcNMjYwNTEzMTAwMTE4WhcNMjYwNTE0MTAwMTE4WjAzMTEwLwYDVQQD
EygwZDNlODk3MDAzZmVmZDdhMjMzZDkwOGEyZTdiZDU5NmRiYzNlMDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsQCRaxNdvyWk7pGOHU96dInVfu+
E10l8nShDzvyYT+oMq7ciHe12Y5o2QmRgRQ/mYg5QwYKiUI4fwa1M/gFli5w5Lk2
4rCvQEXDszhCa+VREgqOmp/aRwfkNQ4RZBLHnjlt3QbVGvHdgZ2kzRuPUGuVseo0
xGv7SDIOFCRzdHw5GEZFGVIZVdqOVPtnFfG3r2HaWcqqxoTLZOVM1EvitDQ7yyNM
6XWDVzj18RaaT1Xg4LheF5ZjYquKGIWd1ekRMfU0IAYacGnNHMrdin1jC6olFGts
PpPVJ0q3cSdnRTHVEuQWEHreWLZaChK27/QOmsQhXGu2C4IUbomN620owQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0+iXAD/v16Iz2Qii571Zbbw+AFMB8GA1UdIwQY
MBaAFLRktFI6iXK54vRqT0oWNOlwJ67fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEdTMFVqcUpjcm5pOUdwUFNoWTA2WEFucnQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jN2NhZjMtZWIwOC00NTU2LWE1Yjct
ZmM2ZTc3ODg0MDU0LzEvdEdTMFVqcUpjcm5pOUdwUFNoWTA2WEFucnQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9jN2NhZjMtZWIwOC00NTU2LWE1YjctZmM2ZTc3ODg0MDU0
LzEvdEdTMFVqcUpjcm5pOUdwUFNoWTA2WEFucnQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJVhWnnHh
QbOUzPHBTpRz/yXicmKkygvcjJ0S0q+m6f9U3XJnVOyMKCicvLSZrtrLuP1L2Fj3
cSQUbhiuEQdiLIF0NeFnPAfr6HvLPOcdMiSklqAkceC31zF6yYxACgxLj9rnSRkr
8zriP/jljVRQ5++adTYQNRKk7EgP+L/sjW7LqaV2bqi7kAhlU46zBj/9T+SrjN33
CvuM1Dcsd4gEO9paLyaFvLE56pkJwtQI5KV9f8Y/W1wjbPFhNJjEB9bVujJEHpSA
8bYBOGbtMovKD3PM2u2ywSRNs4p9C7WVUtUZAukeOlPl1BQIo42W2+QBeu22KCy6
rv0guG4Vu2dlFQ==
-----END CERTIFICATE-----
Generated at Wed May 13 15:34:50 2026 by rpki-client