Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
File:                     _TfMjxazxsvTNGqj7WF3Hz6DrJc.mft (raw, json)
Hash identifier:          Hb3iNZ7lyTnenhLQu7P7DFSdh7oJ18hVc2FHBsaxI4A=
Subject key identifier:   00:69:91:94:27:FB:23:E1:EA:73:92:9B:42:A3:4C:3B:99:77:EF:61
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Certificate issuer:       /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial:       019E1D22EE97678B13BD0A65F4977F332E4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
Manifest number:          196B
Signing time:             Tue 12 May 2026 17:01:28 +0000
Manifest this update:     Tue 12 May 2026 17:01:28 +0000
Manifest next update:     Wed 13 May 2026 17:01:28 +0000
Files and hashes:         1: 1onWddNgt-hbXxg-7fMMVDkSMv8.roa (hash: 6xbzz0JrjMO/4fz5zHo8PgQ0CyGaKVVD/UoDkWFGr1M=)
                          2: 4k3-HpRCXFW3j7_8C4stbYfFUYA.roa (hash: C8f2KuD10zOuLUQcMwm5C74B3yZTjBcW9yOV/aVWErg=)
                          3: 5UPZqCFDlJ5D1iQwuO7Whotg5SI.roa (hash: FxbZPuvP2Ml6gGQGICNHacA5M1J8tjtnjSqNFBDSXLU=)
                          4: 8MDk26A6HB8ESAemQVS635P3dlM.roa (hash: rxyUnW+DZGiT5coh/pmWc5vX6tfUq/igWAH5aJLS19c=)
                          5: Nsh_W4gT44WToqQeMBkvLdwLp7U.roa (hash: s1XEdXMI1+3uP5BkHw14NLcZMVjF5mmNtQSI8IR6ni8=)
                          6: OujepPxEWJf76CUpCTyqTjOXKpU.asa (hash: ThWY+hR9gmQ1aouAGBEnVouEZokSrfcbByNw6RJAbVQ=)
                          7: QKaa5M_Ls464BGXTJZlXMkecYvk.roa (hash: VYfsIkTwFvkSA3FB9Pu7FhpTVM9hzat73ShbqylONR8=)
                          8: Uhz_TUI3Hsi81u75mxMWZpekOT4.roa (hash: q9Go9HD9nYKVh+b76qK8j4mJsOQptkJ61FqLETJCZTU=)
                          9: Un_qTs_qUw6Cr9rSAjxMcB_qwIQ.roa (hash: /NZAsUlQyUhQsDytYI9yrui4/CAPCfbgRtz4l6TLnkU=)
                          10: Y1K-rQ-VX44rWAjvqhl_hw7Dweo.roa (hash: cEsowcsrRQw+N5wEyAbdQXCFdceUeFzwtiYgytJDtj8=)
                          11: YK5m2vQkSo1LI8ivt3P57wRJQZI.roa (hash: 6P9xMdNgw4dnF5/p7uRGxrPDX07R9HMY30HONlvwuL0=)
                          12: _TfMjxazxsvTNGqj7WF3Hz6DrJc.crl (hash: UBpgegtgKeYoxJlj8zxWXaITiObpmxDMQM8NUgZwnOs=)
                          13: aKvQ03F1bR1q6-Woc8m1q6jONu8.roa (hash: LcJqfZb4sulh5jvt0J4ioSYZjOzoPCpUud+7/IHHoW8=)
                          14: eTIL1VK4_PVdXFi5gF5woEPQkG8.roa (hash: NczJzTK4m8r22rHAsuaTAYefyiahprGtNN7PoBZHmEM=)
                          15: ip7XsN0-IlSnuEP_E--FUjD8qf0.roa (hash: CO94Nw8OySvoAWy5RjY0I0/eplwWsGb3UO5iKzV120U=)
                          16: l0uiGfn0_Ao0KJi5bVUaMaNKV8Y.asa (hash: 5p613mEjLDKXtkZwHBWoFC0KynCvj30DBewuSTWYGQ0=)
                          17: nwyoORHnVLqfYrksvB0f6CfIa6k.roa (hash: e9CYwkBaqUibsyMU/gzh+rV4KhbNY883umfRTcrBM0Y=)
                          18: osuU6cABAT-z_og2fdV709jwbR4.asa (hash: ItbTyIqWcJVCMwjVvKdgJl+ZPlR3yuOKXNSj6k02k90=)
                          19: rjxf5Ppv88saIf4NMrBg7Lnjt88.asa (hash: 8f9M0wG41PE6ZfVDs5zv6PTV0f6czRl9ExFIm9zaW0o=)
                          20: t0cVkqPZjARFv36ftR5F1LXB_P8.roa (hash: aH1VNEGWBhfBG6pKNECJ5Njp4Dom+Xvfv76b48XldZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:ee:97:67:8b:13:bd:0a:65:f4:97:7f:33:2e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
        Validity
            Not Before: May 12 17:01:28 2026 GMT
            Not After : May 13 17:01:28 2026 GMT
        Subject: CN=0069919427fb23e1ea73929b42a34c3b9977ef61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:af:72:10:f5:82:aa:f7:70:5e:90:f0:6c:e6:
                    13:e9:e7:7f:35:18:81:51:ad:d3:b9:f1:2a:c9:bf:
                    01:15:ec:cf:2f:46:08:98:b1:36:1a:8e:ad:69:ab:
                    be:69:a1:22:40:df:29:40:00:54:54:af:d6:39:a8:
                    6d:a2:7d:e1:8d:42:1c:65:a5:93:2c:d5:99:aa:de:
                    2c:b1:64:43:68:11:81:e0:28:f4:4d:d2:25:fd:55:
                    e1:db:58:e2:34:2c:d9:ee:37:fc:43:2a:87:06:50:
                    94:71:a4:8c:76:1f:45:42:09:92:fc:94:79:cb:d1:
                    cc:6b:c7:e9:16:13:47:14:8c:cd:7f:42:46:72:3c:
                    45:7a:20:a7:8a:c5:33:24:80:65:1d:1e:05:e1:b7:
                    6a:fa:69:65:b1:90:ed:5f:53:7f:ea:bf:40:a4:6d:
                    15:81:e2:e2:84:71:81:87:2d:93:6c:40:d0:bb:10:
                    50:9f:73:e1:e2:72:69:00:60:5b:02:a0:f1:eb:62:
                    fb:1d:62:8f:41:53:d0:05:b9:80:72:7b:ad:99:09:
                    43:57:90:cd:06:0b:72:28:5d:05:ca:f1:a7:09:33:
                    75:fe:fd:97:5f:f3:15:9a:99:1c:65:06:b7:66:45:
                    c7:8c:8d:00:36:07:81:4e:fc:9a:ce:53:02:1f:bb:
                    a1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:69:91:94:27:FB:23:E1:EA:73:92:9B:42:A3:4C:3B:99:77:EF:61
            X509v3 Authority Key Identifier:
                keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:cd:b8:1b:34:e6:29:8c:48:6c:c7:a4:c3:3e:f3:09:08:53:
         5d:f4:77:94:e0:7a:9c:6a:d3:ad:0f:30:a4:1b:7d:ef:f1:4e:
         e6:b9:53:c3:eb:21:9f:2e:70:b7:fe:33:0f:80:b7:b9:65:e6:
         70:68:38:c5:2a:3b:34:41:62:f1:6a:2f:80:56:04:4f:c3:88:
         2f:9a:63:0f:6d:36:46:d3:16:55:72:b0:74:f8:bf:5f:4b:6c:
         b5:48:22:ba:6a:38:38:6c:07:fe:48:cc:8b:ef:a3:2c:47:99:
         e7:5c:dd:91:25:7e:b7:ad:0f:ad:9c:cb:53:1b:07:4c:89:18:
         6b:32:00:07:e6:fd:25:f3:82:9c:8a:cf:70:55:82:5c:91:c1:
         10:80:4e:b6:9d:61:1d:9d:21:ef:30:79:49:1f:9e:b6:a0:7b:
         34:74:6f:36:2c:e1:b7:75:84:85:46:33:62:62:69:6a:38:c6:
         23:93:43:e6:b1:be:24:4b:40:e3:d5:f6:ab:00:3d:91:61:25:
         8d:d2:c6:c7:1a:67:b1:00:60:03:51:81:0a:6f:78:42:79:38:
         f7:57:81:ad:d5:51:32:7d:fe:a5:aa:1a:95:d4:ca:55:c3:07:
         51:0a:d1:1b:ae:8c:e5:e3:89:50:70:b7:dc:c4:29:3f:22:12:
         41:cf:eb:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIu6XZ4sTvQpl9Jd/My5LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4
M2FjOTcwHhcNMjYwNTEyMTcwMTI4WhcNMjYwNTEzMTcwMTI4WjAzMTEwLwYDVQQD
EygwMDY5OTE5NDI3ZmIyM2UxZWE3MzkyOWI0MmEzNGMzYjk5NzdlZjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2q9yEPWCqvdwXpDwbOYT6ed/NRiB
Ua3TufEqyb8BFezPL0YImLE2Go6taau+aaEiQN8pQABUVK/WOahton3hjUIcZaWT
LNWZqt4ssWRDaBGB4Cj0TdIl/VXh21jiNCzZ7jf8QyqHBlCUcaSMdh9FQgmS/JR5
y9HMa8fpFhNHFIzNf0JGcjxFeiCnisUzJIBlHR4F4bdq+mllsZDtX1N/6r9ApG0V
geLihHGBhy2TbEDQuxBQn3Ph4nJpAGBbAqDx62L7HWKPQVPQBbmAcnutmQlDV5DN
BgtyKF0FyvGnCTN1/v2XX/MVmpkcZQa3ZkXHjI0ANgeBTvyazlMCH7uhBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFABpkZQn+yPh6nOSm0KjTDuZd+9hMB8GA1UdIwQY
MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt
N2UwNWFiNDFiNmU0LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0
LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3M24GzTm
KYxIbMekwz7zCQhTXfR3lOB6nGrTrQ8wpBt97/FO5rlTw+shny5wt/4zD4C3uWXm
cGg4xSo7NEFi8WovgFYET8OIL5pjD202RtMWVXKwdPi/X0tstUgiumo4OGwH/kjM
i++jLEeZ51zdkSV+t60PrZzLUxsHTIkYazIAB+b9JfOCnIrPcFWCXJHBEIBOtp1h
HZ0h7zB5SR+etqB7NHRvNizht3WEhUYzYmJpajjGI5ND5rG+JEtA49X2qwA9kWEl
jdLGxxpnsQBgA1GBCm94Qnk491eBrdVRMn3+paoaldTKVcMHUQrRG66M5eOJUHC3
3MQpPyISQc/rYA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:55:10 2026 by rpki-client