Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
File:                     ti1M7HgzBZI-NJftiE8cRFtOePs.mft (raw, json)
Hash identifier:          EpLRzIokFjqEvYwcWGWWacV28ZqXPwuBl7KeAdeB3jg=
Subject key identifier:   5F:72:86:07:C0:5D:B5:D9:3C:0C:B5:24:A3:06:7F:31:82:C5:39:3C
Authority key identifier: B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
Certificate issuer:       /CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Certificate serial:       019DE4B39629BF969F7F7531AFFFA5051E2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
Manifest number:          0989
Signing time:             Fri 01 May 2026 18:01:07 +0000
Manifest this update:     Fri 01 May 2026 18:01:07 +0000
Manifest next update:     Sat 02 May 2026 18:01:07 +0000
Files and hashes:         1: 5Rn1RAOss5QRo2nXIX6C-Rbfd9o.roa (hash: FiZwjSG8YgcEqrITJJIdRm7Vzqa1sJ3XlnJTDKYCv2g=)
                          2: KGtAb2AW0M0YASRqB3QhsbsdLzI.roa (hash: qiwS5fFaCXqMzeOtWduxw1//aM7SqgaRPEME58iPEIM=)
                          3: ZsX0X8j83nFRfqZL9IrfnwTMxLg.roa (hash: X4nHEceCDxp75N1VWD8XfrlsC2PNim++24YcWl4Dids=)
                          4: kvIzttk50ypIvqgfMfZSFIXct9U.roa (hash: CPJdiTd4yiPmDnbfp5PHDpiZmVQZeyBl1ypSYm3eBYc=)
                          5: mdkFOAwMWkblGp-2mwbEq419z_I.roa (hash: CE2MgK18UC9X5aZF3fSj7NZCbOTDD1izqKPMKawtpc4=)
                          6: oBn8NIdRfMZZpm_iynqTQu6nc38.roa (hash: D3Bz4QySZ6wj7xhT4hW/fF4crmIqCiPNU7hJ9/zZtR4=)
                          7: ti1M7HgzBZI-NJftiE8cRFtOePs.crl (hash: 6lg4y/A8bEQFKurg2+8kjZPqUFWZ0Lj5GtopIfAr6Uc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 02 May 2026 17:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:e4:b3:96:29:bf:96:9f:7f:75:31:af:ff:a5:05:1e:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b62d4cec783305923e3497ed884f1c445b4e78fb
        Validity
            Not Before: May  1 18:01:07 2026 GMT
            Not After : May  2 18:01:07 2026 GMT
        Subject: CN=5f728607c05db5d93c0cb524a3067f3182c5393c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3e:13:20:13:9c:c0:90:0c:71:62:a4:e2:8b:
                    d3:ea:a2:f6:aa:29:96:dd:09:49:a5:cb:aa:9b:2a:
                    52:f7:61:a5:a0:1a:ad:6f:dd:fe:1d:be:9e:1e:c8:
                    3e:05:88:ad:8f:1a:f5:21:e9:27:c9:11:a1:27:7b:
                    1f:91:01:80:f1:8b:e8:24:60:65:f4:84:e4:9a:46:
                    0c:8f:6b:e6:89:4e:18:92:69:a6:d6:9e:da:01:fd:
                    c8:d6:12:1a:20:0d:55:81:00:b1:d4:b9:6c:73:a1:
                    95:5f:ea:d9:e2:5d:d0:54:f4:cf:f2:44:01:b4:3d:
                    bc:aa:f0:2d:1d:df:de:c3:34:09:e2:7b:86:50:3d:
                    0c:20:9e:b0:2f:7e:7d:34:60:d8:4e:a4:0b:d7:30:
                    99:07:96:43:75:b2:34:a6:9f:4e:ab:7a:0c:29:e9:
                    d5:0e:60:f5:0d:14:23:da:9c:15:e8:d1:e4:53:b7:
                    40:f1:86:bf:62:15:32:5f:4f:2f:ac:92:a0:a6:bb:
                    ab:0f:4c:32:ab:3a:9e:8c:a1:62:15:64:64:85:73:
                    bd:68:60:25:f5:79:d9:f0:78:12:0d:c3:69:e8:6e:
                    56:d0:ed:df:14:fe:e5:f3:e0:ab:78:3e:e1:37:dd:
                    fe:c4:8d:ea:aa:1c:90:3a:bc:75:f2:e7:81:02:fb:
                    26:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:72:86:07:C0:5D:B5:D9:3C:0C:B5:24:A3:06:7F:31:82:C5:39:3C
            X509v3 Authority Key Identifier:
                keyid:B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:3c:37:9c:ab:04:77:26:68:c1:37:df:31:b1:e7:98:77:c8:
         4d:96:86:23:98:18:fc:f5:6c:69:2c:69:28:7b:f7:e8:3f:d2:
         6c:b6:2a:da:20:21:db:7f:11:95:01:fd:09:d1:47:a3:24:fb:
         41:97:77:f0:1f:f2:33:ef:b4:ec:56:24:83:43:03:89:77:8a:
         b4:32:b6:2a:c2:a8:85:1c:c2:ed:87:a2:99:6b:b1:f5:a6:db:
         37:0a:75:5e:f3:20:de:b6:54:fc:45:c8:7b:a7:04:88:e2:60:
         27:77:21:c3:0a:a3:5e:1b:3c:8e:b3:04:90:0b:d6:48:8c:6c:
         5a:f1:cd:9b:dc:ce:92:a8:4c:6d:ad:54:a2:75:44:db:f8:a2:
         88:31:53:b4:29:7b:94:d0:e5:89:91:17:98:31:2e:1f:90:a5:
         09:00:e1:36:b1:d0:47:4a:1e:85:bb:0b:39:f5:aa:cd:12:b4:
         aa:12:28:06:85:44:77:c5:3b:20:45:48:e4:0a:06:64:10:54:
         a5:a4:5d:cb:dd:35:36:5a:41:13:03:7b:43:5e:1b:a2:06:4d:
         76:8d:d9:b9:01:3a:95:45:9e:70:f8:63:31:2f:52:92:c0:c2:
         c8:44:a2:90:3f:de:ee:4a:b5:9b:0b:74:32:e8:b5:35:22:a3:
         f1:6a:f0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 23:00:21 2026 by rpki-client