Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
File:                     taJj0Y61xUD3R4glu3LvrG8o-Cs.mft (raw, json)
Hash identifier:          RaFBiuq0QJ7ALXvybu9UF6ji81FE0BBEfD6TPRLFa1o=
Subject key identifier:   E4:25:51:4E:7D:28:6B:44:E4:44:4A:A6:95:3C:1F:33:DB:FB:08:CB
Authority key identifier: B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B
Certificate issuer:       /CN=b5a263d18eb5c540f7478825bb72efac6f28f82b
Certificate serial:       019E1E3514D9D3DB21B55E9109C7B77D93CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
Manifest number:          1897
Signing time:             Tue 12 May 2026 22:00:55 +0000
Manifest this update:     Tue 12 May 2026 22:00:55 +0000
Manifest next update:     Wed 13 May 2026 22:00:55 +0000
Files and hashes:         1: mGuGgApHSUc3pkLejONy6uxFa8I.roa (hash: 72owtSfE8WtU3O8vsf/pSLMkM235o/0ogXWxdafrLec=)
                          2: taJj0Y61xUD3R4glu3LvrG8o-Cs.crl (hash: bi/cwrYhJjOdMg4UKtx+kDjxf88pkj4KKONHR5lQJj0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:14:d9:d3:db:21:b5:5e:91:09:c7:b7:7d:93:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5a263d18eb5c540f7478825bb72efac6f28f82b
        Validity
            Not Before: May 12 22:00:55 2026 GMT
            Not After : May 13 22:00:55 2026 GMT
        Subject: CN=e425514e7d286b44e4444aa6953c1f33dbfb08cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:af:8e:36:68:e1:b0:80:cb:f1:47:4d:ba:6f:
                    ce:27:cd:34:f4:ca:fb:7e:05:b0:fe:9f:9c:3f:8e:
                    a3:de:f5:33:12:a7:bd:3f:08:4f:c6:84:c7:8e:0c:
                    5f:04:3a:45:b9:bc:af:90:99:eb:6a:53:ea:cc:6d:
                    58:a0:58:4c:b7:76:04:f8:43:c1:70:67:05:48:90:
                    00:6e:dd:58:e9:91:4c:25:8d:4e:88:f0:aa:54:2e:
                    0c:2b:6c:bd:a4:8e:76:dd:be:6f:39:c9:22:05:34:
                    2e:1f:e5:e0:bd:86:5e:05:ed:25:64:0b:bd:28:5e:
                    9a:73:5f:28:04:a5:c5:0e:a9:80:2e:50:47:1c:b8:
                    94:ec:07:81:51:28:40:b5:43:61:d0:56:e6:cc:a5:
                    56:88:7e:fe:cd:ef:52:07:e8:65:9a:52:19:5c:7c:
                    4a:06:60:42:69:d7:b5:f7:55:62:8f:67:46:00:3c:
                    a9:f6:68:a3:ff:88:76:13:1b:56:48:48:51:25:5d:
                    ae:8e:33:60:88:1d:36:f9:1c:d1:23:b9:ec:6b:a5:
                    a4:cb:66:c8:96:42:1e:b6:05:90:8e:d6:f0:07:d8:
                    cd:44:c5:4c:85:6f:8e:5b:1f:8a:9a:16:51:12:d7:
                    9c:8e:81:01:fc:8d:52:44:81:54:6a:cf:b5:9c:74:
                    2b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:25:51:4E:7D:28:6B:44:E4:44:4A:A6:95:3C:1F:33:DB:FB:08:CB
            X509v3 Authority Key Identifier:
                keyid:B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:0a:c2:d3:5c:be:87:ed:7e:6b:44:79:e1:d0:d5:8d:f5:32:
         60:f4:7f:a0:78:35:05:f5:02:9e:ac:02:bf:69:38:1d:25:d4:
         76:d2:67:3c:16:63:55:8e:bc:e5:d5:24:5a:b8:70:ef:de:db:
         43:57:41:3f:49:71:0a:63:10:e5:7c:da:9a:52:95:74:2c:ef:
         74:c4:6d:77:14:4c:5e:8a:6a:c9:38:1e:56:26:ca:62:16:c5:
         42:8c:62:63:a8:40:ce:92:4f:20:6b:13:6b:25:d3:fc:d2:4c:
         e5:35:82:e7:a2:93:44:c0:64:d5:82:8a:5b:66:93:08:14:8c:
         79:76:71:1f:f1:c3:7a:e2:5b:7f:dc:9c:9b:2a:12:c6:75:bb:
         72:7c:f9:73:2d:f4:8d:38:a6:35:50:68:e5:87:b2:62:63:14:
         bd:aa:81:1c:84:2b:b1:89:8a:91:d1:5c:46:26:50:d2:c5:23:
         97:64:6e:90:f3:33:26:13:34:dc:f5:5c:1b:db:49:bf:28:f1:
         9b:b3:cf:af:7b:6b:ff:f1:2b:66:5a:40:dc:cc:e8:93:34:40:
         d2:d6:ee:39:3c:85:ad:33:b7:28:6d:85:79:d9:fa:76:fb:de:
         4a:17:f3:5a:59:f6:51:58:23:20:e7:1d:53:10:1f:86:60:0a:
         ad:c5:57:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNRTZ09shtV6RCce3fZPPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YTI2M2QxOGViNWM1NDBmNzQ3ODgyNWJiNzJlZmFjNmYy
OGY4MmIwHhcNMjYwNTEyMjIwMDU1WhcNMjYwNTEzMjIwMDU1WjAzMTEwLwYDVQQD
EyhlNDI1NTE0ZTdkMjg2YjQ0ZTQ0NDRhYTY5NTNjMWYzM2RiZmIwOGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArq+ONmjhsIDL8UdNum/OJ8009Mr7
fgWw/p+cP46j3vUzEqe9PwhPxoTHjgxfBDpFubyvkJnralPqzG1YoFhMt3YE+EPB
cGcFSJAAbt1Y6ZFMJY1OiPCqVC4MK2y9pI523b5vOckiBTQuH+XgvYZeBe0lZAu9
KF6ac18oBKXFDqmALlBHHLiU7AeBUShAtUNh0FbmzKVWiH7+ze9SB+hlmlIZXHxK
BmBCade191Vij2dGADyp9mij/4h2ExtWSEhRJV2ujjNgiB02+RzRI7nsa6Wky2bI
lkIetgWQjtbwB9jNRMVMhW+OWx+KmhZREtecjoEB/I1SRIFUas+1nHQrSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQlUU59KGtE5ERKppU8HzPb+wjLMB8GA1UdIwQY
MBaAFLWiY9GOtcVA90eIJbty76xvKPgrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGFKajBZNjF4VUQzUjRnbHUzTHZyRzhvLUNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xZDAxNzEtMzMwNy00NTMxLWE3M2Et
MTQ2YTY5YjZkOGU0LzEvdGFKajBZNjF4VUQzUjRnbHUzTHZyRzhvLUNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8xZDAxNzEtMzMwNy00NTMxLWE3M2EtMTQ2YTY5YjZkOGU0
LzEvdGFKajBZNjF4VUQzUjRnbHUzTHZyRzhvLUNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIwrC01y+
h+1+a0R54dDVjfUyYPR/oHg1BfUCnqwCv2k4HSXUdtJnPBZjVY685dUkWrhw797b
Q1dBP0lxCmMQ5XzamlKVdCzvdMRtdxRMXopqyTgeVibKYhbFQoxiY6hAzpJPIGsT
ayXT/NJM5TWC56KTRMBk1YKKW2aTCBSMeXZxH/HDeuJbf9ycmyoSxnW7cnz5cy30
jTimNVBo5YeyYmMUvaqBHIQrsYmKkdFcRiZQ0sUjl2RukPMzJhM03PVcG9tJvyjx
m7PPr3tr//ErZlpA3MzokzRA0tbuOTyFrTO3KG2Fedn6dvveShfzWln2UVgjIOcd
UxAfhmAKrcVXFQ==
-----END CERTIFICATE-----
Generated at Wed May 13 07:32:42 2026 by rpki-client