Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
File:                     TqZcftukadCZ12qs19wmP03-xes.mft (raw, json)
Hash identifier:          jfeJqmaBWm10mhWVTn3/xD1IRZ6n3Xsfc1S1m0orvR8=
Subject key identifier:   3D:45:9B:11:CC:DC:65:E1:72:06:EF:A4:3D:E9:F0:81:98:02:4A:99
Authority key identifier: 4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB
Certificate issuer:       /CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb
Certificate serial:       019E326148CD1F1590BDD5B05CAF7F059394
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
Manifest number:          084D
Signing time:             Sat 16 May 2026 20:01:36 +0000
Manifest this update:     Sat 16 May 2026 20:01:36 +0000
Manifest next update:     Sun 17 May 2026 20:01:36 +0000
Files and hashes:         1: NE-Gskahv4yhz4NSW0eOQznOBbc.roa (hash: 2cjZe+aPFDte9rIu8wJCuhBoVs4OYpmJVxKR+K10wPw=)
                          2: QBVvQVEZlQ_FtBHlQ6LkxII5X7Y.roa (hash: is6gKcJbbow/p4d83+z8Fk6rRj/Sh2SQuegCzSpgZjg=)
                          3: RH3gRlxhVGrL9P1FAsxvNcZGcKg.roa (hash: BUrryx952cBQrnyyvdxiH2Hn6rJcg6+93M8bhY0hK8s=)
                          4: Rl7efdhYeXftFwvFAmfRH2As_rs.roa (hash: Fkewx2otKYj7NOwHTF8pWpF8lfCLVjfeAiN9uWh62QU=)
                          5: TqZcftukadCZ12qs19wmP03-xes.crl (hash: pqsFkr+ICY+jfUKrAo4ugpgZXB2rJRzBxgPIF+vSne0=)
                          6: ncCiHV5R8jHZ0soKsN7Ip4AqqnA.roa (hash: /O4pxVo1nhy254bmusK8i5RqU2c/+1dTlDhCRL7gqs4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:61:48:cd:1f:15:90:bd:d5:b0:5c:af:7f:05:93:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb
        Validity
            Not Before: May 16 20:01:36 2026 GMT
            Not After : May 17 20:01:36 2026 GMT
        Subject: CN=3d459b11ccdc65e17206efa43de9f08198024a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:69:49:66:51:76:0c:1c:b2:65:90:18:bd:4a:
                    70:0d:ae:fd:da:05:e8:33:af:c0:dc:73:56:7b:0f:
                    b8:a4:29:fc:52:d9:15:6d:8a:55:e8:da:a1:d7:0c:
                    3f:52:eb:a3:51:87:29:e4:fd:31:17:08:2c:46:5f:
                    fe:0e:fa:c2:fd:9f:cc:8f:b6:8a:30:f9:81:b0:a4:
                    06:c2:a5:08:74:31:8b:d7:1f:c0:16:48:91:5c:53:
                    59:e4:50:c8:04:54:24:42:cc:69:02:fb:4d:fa:2e:
                    a5:24:60:59:de:f0:10:6e:b3:be:93:7c:17:48:18:
                    8c:93:de:2a:c0:13:14:ee:c1:4d:c9:18:20:60:8a:
                    49:2c:a7:01:b7:3c:53:0b:a1:4f:9d:a0:22:2c:ce:
                    46:53:fa:70:5d:5c:39:f3:ed:a2:15:bd:3f:88:2a:
                    f5:db:73:bc:03:c8:f6:b5:d6:84:82:67:e3:43:a0:
                    db:66:64:18:33:69:c7:fd:97:4a:2a:b5:41:78:6c:
                    fa:a0:c0:2d:c9:53:e1:31:f3:4e:3f:5b:ef:35:6b:
                    bc:eb:8a:e2:3c:92:8e:6e:f3:37:e0:a7:27:f8:77:
                    de:6e:98:75:55:b3:26:74:d2:b3:a3:8d:e7:5d:7a:
                    f3:e9:00:cc:2c:d6:d3:e1:3a:35:b5:e5:fe:f3:75:
                    b1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:45:9B:11:CC:DC:65:E1:72:06:EF:A4:3D:E9:F0:81:98:02:4A:99
            X509v3 Authority Key Identifier:
                keyid:4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:81:b7:d6:9d:01:e4:e5:00:25:f3:b8:1e:d7:a5:cc:5e:1c:
         f6:70:ac:fe:42:dd:69:cf:3d:87:f4:47:33:bf:c2:05:73:24:
         b7:02:39:5a:42:83:0e:2b:81:35:6e:a9:2b:2c:53:f5:69:14:
         aa:6e:c1:99:50:9c:bc:4d:bd:0c:f2:7d:53:bb:86:ab:b0:64:
         74:07:70:54:7b:80:20:73:7a:b7:23:c3:c9:ef:6b:04:f9:d5:
         96:5e:01:8d:2f:46:c0:e2:1d:51:91:a5:f5:c2:89:75:a3:7f:
         31:0c:a4:e3:b3:be:20:be:ec:2d:d6:c8:7b:74:67:a9:21:fa:
         c0:c9:f6:2b:a7:5d:9c:6a:7b:28:01:d2:ae:1f:99:39:81:0e:
         fb:00:1b:a0:f3:e1:51:9b:9c:f7:8f:d7:1f:92:17:0f:ea:b4:
         db:e5:77:58:ba:85:07:61:64:04:5a:9c:9b:f1:56:ab:24:ab:
         88:f5:0c:9e:25:b5:c4:5f:92:7b:6e:75:e8:ca:1a:2e:b4:17:
         1f:d5:a8:12:95:41:a1:d7:fd:e4:1c:c1:35:66:f8:5c:69:b7:
         ab:b5:86:50:b9:03:d2:86:c3:48:ac:a0:21:3f:79:81:a4:22:
         c1:b6:ee:cc:6b:9d:04:ff:e2:20:e5:09:61:8d:20:eb:9e:ee:
         0c:3f:10:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:01:41 2026 by rpki-client