Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
File:                     ToWU69x9fPfaLgA8hNhqfBr4cbw.mft (raw, json)
Hash identifier:          sqhfAMlZW0YIFeH2WMEE1MrebmrcJYALwxj8dXey2D4=
Subject key identifier:   FD:58:DD:2D:3F:91:83:E4:43:0C:23:76:CA:19:8D:30:97:84:D9:0E
Authority key identifier: 4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC
Certificate issuer:       /CN=4e8594ebdc7d7cf7da2e003c84d86a7c1af871bc
Certificate serial:       019E1DC7700FBFBC3ED1036DDBA60FFFF9E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
Manifest number:          07A9
Signing time:             Tue 12 May 2026 20:01:09 +0000
Manifest this update:     Tue 12 May 2026 20:01:09 +0000
Manifest next update:     Wed 13 May 2026 20:01:09 +0000
Files and hashes:         1: S8bTyJBZhokS15ViVs9bepd7lJY.roa (hash: 8XtBGUfQ0OE1e70++hji6820sGNOYH1fI8pCKjr4jm4=)
                          2: ToWU69x9fPfaLgA8hNhqfBr4cbw.crl (hash: YopDQlmKS3UoG+YqRx2EkTDRw9a2K0z+G0DjYa9jBIw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:70:0f:bf:bc:3e:d1:03:6d:db:a6:0f:ff:f9:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e8594ebdc7d7cf7da2e003c84d86a7c1af871bc
        Validity
            Not Before: May 12 20:01:09 2026 GMT
            Not After : May 13 20:01:09 2026 GMT
        Subject: CN=fd58dd2d3f9183e4430c2376ca198d309784d90e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7c:bb:56:6a:e1:e8:66:95:99:a9:92:88:07:
                    e9:91:33:55:fb:3f:8b:9c:91:15:96:2f:c9:83:80:
                    59:d7:53:2b:1a:7c:0b:d6:0f:b9:46:76:b9:07:a2:
                    51:0d:ff:c8:f4:3b:84:bb:1f:94:fb:4b:d6:62:9e:
                    d5:6c:71:fb:ab:66:b7:a9:ae:7d:c5:a7:8a:96:3d:
                    6d:1f:98:99:f7:71:44:b3:b6:e7:e3:ca:c5:e5:05:
                    a4:cc:57:56:77:56:6a:4a:f0:c1:08:3c:72:e1:ab:
                    5c:6a:31:50:7f:6a:f6:ef:4d:a7:cb:46:74:2e:f5:
                    53:53:6d:a6:c4:a7:c6:7f:cd:fc:2f:61:29:54:61:
                    88:cd:83:bc:c2:f3:81:0e:6a:3f:f9:72:03:66:ba:
                    8a:22:d3:c4:7f:83:21:a7:e2:24:b0:63:13:36:5a:
                    bd:e7:12:40:47:35:de:02:24:c6:9d:13:f3:5b:21:
                    35:fd:a6:d3:35:1f:fe:c8:b0:dc:c0:ad:a0:6c:fc:
                    6c:06:e0:b5:ac:bc:cb:c4:df:7e:5d:05:e1:8a:63:
                    63:a6:0d:77:14:db:14:5b:35:45:de:a0:5e:1a:33:
                    d7:8a:55:86:14:d9:d1:67:88:a1:bd:8f:c5:4d:4a:
                    1e:2c:45:9d:ad:8b:24:d9:4a:e5:fd:da:25:0c:b3:
                    69:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:58:DD:2D:3F:91:83:E4:43:0C:23:76:CA:19:8D:30:97:84:D9:0E
            X509v3 Authority Key Identifier:
                keyid:4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:85:55:64:37:f7:78:2a:56:21:c1:e3:28:9a:a5:1a:2e:2c:
         08:04:c9:14:66:38:6a:d1:06:f3:3e:d0:c2:2a:b3:61:2b:b2:
         a4:fd:70:b8:46:d2:d9:4b:e7:49:ed:cd:8a:5b:cf:8b:17:26:
         42:13:d9:5b:d5:3f:0e:b9:7f:6e:69:f4:14:4d:db:38:50:23:
         c2:8d:20:75:54:00:3a:35:d2:43:02:79:d9:ca:06:88:20:f7:
         c2:af:87:d6:95:25:71:85:26:5c:82:65:fb:88:e1:eb:a8:8a:
         0d:02:13:8d:c5:03:c7:f9:05:30:25:c4:28:9e:73:67:63:f8:
         5e:c3:98:9d:a2:4d:88:43:55:9b:4e:31:f1:76:09:ca:ee:f0:
         43:6d:7a:64:50:21:c4:df:0d:8a:08:6f:ac:80:b5:24:48:6e:
         46:0d:ba:42:3e:05:90:f1:14:f4:62:5d:65:95:b9:09:e8:3e:
         17:03:de:39:98:5f:6b:a2:ee:8d:1c:df:31:a9:54:61:8d:5d:
         cd:af:64:cd:ff:17:58:c6:c8:f5:c1:fb:15:50:cb:e0:16:18:
         63:49:89:00:00:1a:c9:60:10:c6:ad:f5:20:51:1b:d7:e2:38:
         16:20:f6:06:9e:4c:e4:67:de:6a:10:2a:aa:c8:3c:bb:56:dd:
         4a:fe:69:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dx3APv7w+0QNt26YP//nmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlODU5NGViZGM3ZDdjZjdkYTJlMDAzYzg0ZDg2YTdjMWFm
ODcxYmMwHhcNMjYwNTEyMjAwMTA5WhcNMjYwNTEzMjAwMTA5WjAzMTEwLwYDVQQD
EyhmZDU4ZGQyZDNmOTE4M2U0NDMwYzIzNzZjYTE5OGQzMDk3ODRkOTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3y7Vmrh6GaVmamSiAfpkTNV+z+L
nJEVli/Jg4BZ11MrGnwL1g+5Rna5B6JRDf/I9DuEux+U+0vWYp7VbHH7q2a3qa59
xaeKlj1tH5iZ93FEs7bn48rF5QWkzFdWd1ZqSvDBCDxy4atcajFQf2r2702ny0Z0
LvVTU22mxKfGf838L2EpVGGIzYO8wvOBDmo/+XIDZrqKItPEf4Mhp+IksGMTNlq9
5xJARzXeAiTGnRPzWyE1/abTNR/+yLDcwK2gbPxsBuC1rLzLxN9+XQXhimNjpg13
FNsUWzVF3qBeGjPXilWGFNnRZ4ihvY/FTUoeLEWdrYsk2Url/dolDLNpiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1Y3S0/kYPkQwwjdsoZjTCXhNkOMB8GA1UdIwQY
MBaAFE6FlOvcfXz32i4APITYanwa+HG8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG9XVTY5eDlmUGZhTGdBOGhOaHFmQnI0Y2J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9mZmU3ZDUtZDkxZC00OGFlLThlZTUt
Y2U5NGUzOGU4MmQ2LzEvVG9XVTY5eDlmUGZhTGdBOGhOaHFmQnI0Y2J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9mZmU3ZDUtZDkxZC00OGFlLThlZTUtY2U5NGUzOGU4MmQ2
LzEvVG9XVTY5eDlmUGZhTGdBOGhOaHFmQnI0Y2J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZoVVZDf3
eCpWIcHjKJqlGi4sCATJFGY4atEG8z7QwiqzYSuypP1wuEbS2UvnSe3NilvPixcm
QhPZW9U/Drl/bmn0FE3bOFAjwo0gdVQAOjXSQwJ52coGiCD3wq+H1pUlcYUmXIJl
+4jh66iKDQITjcUDx/kFMCXEKJ5zZ2P4XsOYnaJNiENVm04x8XYJyu7wQ216ZFAh
xN8NighvrIC1JEhuRg26Qj4FkPEU9GJdZZW5Ceg+FwPeOZhfa6LujRzfMalUYY1d
za9kzf8XWMbI9cH7FVDL4BYYY0mJAAAayWAQxq31IFEb1+I4FiD2Bp5M5GfeahAq
qsg8u1bdSv5pJg==
-----END CERTIFICATE-----
Generated at Wed May 13 02:30:43 2026 by rpki-client