Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
File:                     tTAFYZaI77r_0G4QikO98gZD4NY.mft (raw, json)
Hash identifier:          v5hWutQnA7YEtDc9xyzjosMZzQEuGVKavn+5l/2m//w=
Subject key identifier:   8D:A2:DC:F3:6E:04:FC:EE:9C:7F:CE:CC:E4:F6:E5:CC:33:E6:4F:66
Authority key identifier: B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
Certificate issuer:       /CN=b53005619688efbaffd06e108a43bdf20643e0d6
Certificate serial:       019E4F8F572FFF52CC69BA8AE82BA846800E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
Manifest number:          1926
Signing time:             Fri 22 May 2026 12:00:54 +0000
Manifest this update:     Fri 22 May 2026 12:00:54 +0000
Manifest next update:     Sat 23 May 2026 12:00:54 +0000
Files and hashes:         1: ExGpRunqaEGx1C87iYbOQskR5uw.roa (hash: RiaEfvnW4XKOfGx9ToOnBoSA9Vrw+toQDu46/ctYlAQ=)
                          2: SH-0mJS__xq0Nrwordyx2eNpy6E.roa (hash: MFyq3HcX0V4paZzyvO44VehUzFoDp8T3DaYSoMIBwAg=)
                          3: eUXXUdsIFWgmK4QDPBj079S1krA.roa (hash: tLqc3PNhBtm/slptj0WlzHoHZqeLEYUFaZxJp22uQOY=)
                          4: tTAFYZaI77r_0G4QikO98gZD4NY.crl (hash: Y3gkB5x4xai7v0dvgnYRWVhZ77n4fL49wPprNwuK7DI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 May 2026 08:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:4f:8f:57:2f:ff:52:cc:69:ba:8a:e8:2b:a8:46:80:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b53005619688efbaffd06e108a43bdf20643e0d6
        Validity
            Not Before: May 22 12:00:54 2026 GMT
            Not After : May 23 12:00:54 2026 GMT
        Subject: CN=8da2dcf36e04fcee9c7fcecce4f6e5cc33e64f66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:33:32:77:b6:29:5f:83:fd:6a:84:d4:7c:6c:
                    c9:b6:15:d2:39:54:27:25:e0:4e:7f:5c:0f:f4:e8:
                    4f:88:54:e1:40:4d:ee:4f:9f:1a:4b:26:64:d6:7d:
                    83:47:56:a2:d7:1c:65:07:de:1e:d6:37:c9:ee:eb:
                    3c:58:6d:5b:09:5b:db:48:08:65:be:38:ca:d0:e1:
                    d7:e8:39:9a:fb:a9:58:f7:ad:8b:6d:34:88:e5:9c:
                    71:fa:fc:aa:c3:a0:c3:d4:c1:c0:97:96:3e:7b:09:
                    b4:9b:00:5a:0b:b8:ae:2a:90:10:d5:76:a8:75:3e:
                    c2:97:00:cf:c9:6f:80:f2:00:4b:8e:2c:b7:53:59:
                    d3:31:57:58:ec:7e:72:75:7c:c4:38:88:8e:1f:2b:
                    ab:76:7c:25:b5:6e:f8:17:fc:93:d6:df:91:85:cc:
                    2a:61:5b:ad:a1:f6:f5:ee:c7:5a:bb:01:7a:d8:86:
                    f8:c3:e0:1f:72:ac:1a:85:6b:d6:0f:8f:25:90:6d:
                    fe:0b:0d:5f:14:83:8b:17:1a:64:cf:e1:d3:fc:2a:
                    e4:61:19:35:11:c7:c1:77:55:14:34:94:6a:9c:b2:
                    91:95:9c:7f:14:b3:bc:b8:12:ce:4c:69:74:a8:9d:
                    0b:ef:18:21:6f:ca:ef:6c:e0:c9:74:af:ae:f0:bd:
                    f1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A2:DC:F3:6E:04:FC:EE:9C:7F:CE:CC:E4:F6:E5:CC:33:E6:4F:66
            X509v3 Authority Key Identifier:
                keyid:B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:07:63:62:98:ab:52:ce:0e:f5:9d:6f:ea:91:5a:a0:60:30:
         68:18:2c:3f:73:2a:17:ca:ed:74:f7:71:0e:a3:d1:05:e5:ac:
         19:86:2f:f1:d5:0f:96:1b:74:3a:d4:12:99:48:90:f3:81:02:
         1b:3b:21:a8:d7:d9:a6:4c:ec:8a:56:a1:e7:8d:02:cb:d8:2e:
         e0:45:c2:67:b3:0c:86:f6:25:cd:60:e3:44:b8:a0:48:3e:b2:
         d8:ab:d6:8d:d0:ae:69:2e:c4:05:04:cf:0a:be:68:45:27:bd:
         d6:4e:b3:b7:7f:33:26:77:9a:0d:2f:09:17:b1:d8:63:34:3d:
         38:c8:eb:aa:e7:6e:78:cf:d7:03:4a:12:cc:6e:bc:39:3c:83:
         f4:66:7f:b2:01:1f:e5:98:06:a9:6a:83:eb:a5:79:f3:4d:46:
         16:5a:70:9f:69:34:37:56:34:95:d2:b2:9f:bf:7a:e1:4f:99:
         c3:0f:a2:12:ec:56:a4:8b:a9:2a:43:03:e8:49:f6:fe:18:ae:
         83:de:6a:34:09:45:2f:63:4d:1b:2c:c8:05:ad:a6:ab:01:2d:
         2e:5f:2f:85:2f:ca:59:d8:8b:b6:bf:7a:13:a9:a2:c1:3d:72:
         c8:26:4d:be:3f:29:ec:df:4d:cf:ab:92:ab:3e:60:fd:b0:4a:
         a2:1e:95:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:11:49 2026 by rpki-client