Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
File:                     tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft (raw, json)
Hash identifier:          fFw0WeFr5D5caEz5uwSeNSJZ3Cw4dz55tGHsWO+pM0Q=
Subject key identifier:   4F:88:16:01:DC:B5:E5:AC:40:CB:56:34:14:71:EA:B5:1B:0A:E2:29
Authority key identifier: B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
Certificate issuer:       /CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Certificate serial:       019EBB7DC1B68542B9E4A68B2A1CF219F622
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
Manifest number:          16DB
Signing time:             Fri 12 Jun 2026 11:00:41 +0000
Manifest this update:     Fri 12 Jun 2026 11:00:41 +0000
Manifest next update:     Sat 13 Jun 2026 11:00:41 +0000
Files and hashes:         1: 7zP-vrGMSLLfqRfiE-wgv93MQnc.roa (hash: RFbWknjP21J0ZtXdcY+/jqdLrNcb7a87Mqd1uXals1g=)
                          2: GmKON0n4q41F09JbkIeSWlYg2vg.roa (hash: MA8HRllJQ5XTGjB4uhWUi8OdDfPzCM6iy7P4PReIInE=)
                          3: tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl (hash: fOq+cMJ94u0I6n6uOU+Vj6sueESLrSyCRrXSFmr9TqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 11:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bb:7d:c1:b6:85:42:b9:e4:a6:8b:2a:1c:f2:19:f6:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
        Validity
            Not Before: Jun 12 11:00:41 2026 GMT
            Not After : Jun 13 11:00:41 2026 GMT
        Subject: CN=4f881601dcb5e5ac40cb56341471eab51b0ae229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a8:f4:7a:40:d3:14:82:bb:29:97:7b:4e:6f:
                    88:a5:f7:5a:58:79:6e:57:61:51:d2:a6:f9:f4:b5:
                    31:66:f4:f4:9f:aa:85:93:1e:33:be:45:e2:26:5a:
                    fd:d5:48:81:68:1d:e8:c6:a2:53:d3:61:f4:29:7c:
                    bb:97:84:47:1f:97:03:4f:2c:12:5b:a6:d4:cc:aa:
                    39:57:08:0d:73:48:e3:7b:e0:4d:1b:6a:59:6f:2b:
                    b0:81:ad:57:c5:9c:5c:92:4d:e0:24:b3:e1:f4:d3:
                    33:3b:38:b9:c2:94:5c:f4:fa:4b:fe:aa:97:ac:f2:
                    ff:86:be:f4:2f:b2:d7:9a:ea:23:2f:30:e7:c7:5c:
                    84:45:c4:31:be:3d:a2:bf:9c:24:eb:94:8a:e2:e9:
                    aa:4f:1b:9d:c8:db:ad:34:59:33:6a:5b:a0:1e:61:
                    ee:5e:14:d9:30:d5:89:ec:2d:66:73:38:2a:69:17:
                    1d:73:b6:5e:23:6b:a1:d6:7c:d0:36:ac:0f:ac:72:
                    4d:08:93:cd:1d:9f:54:05:e6:29:d5:40:43:2e:bb:
                    58:1c:bb:e8:bd:80:11:95:80:86:8d:96:01:68:70:
                    9f:3e:5c:1a:cf:1e:23:b3:bf:3b:8e:22:7e:2e:33:
                    7b:04:35:52:9e:7e:ca:03:17:f0:87:b3:74:18:d0:
                    5e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:88:16:01:DC:B5:E5:AC:40:CB:56:34:14:71:EA:B5:1B:0A:E2:29
            X509v3 Authority Key Identifier:
                keyid:B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:29:e2:bd:6e:c7:3b:c5:06:a0:7e:45:9a:eb:59:6c:43:90:
         11:cc:56:2e:16:10:5f:a3:ed:f8:ee:d8:dd:0e:65:a2:01:4d:
         8d:b2:a2:28:80:c6:6e:8c:ec:93:09:89:10:36:d7:a2:a9:c8:
         01:05:be:8f:15:84:47:f6:06:2c:32:f3:fb:59:ec:0c:be:f7:
         aa:93:f7:c8:68:33:a8:dd:97:db:5e:af:29:82:91:d4:9b:56:
         45:58:69:b0:92:01:3a:d8:12:24:66:91:1f:65:f8:22:b7:4b:
         b5:c6:d7:3b:14:8a:79:c3:03:b6:8c:15:64:04:46:1b:47:ca:
         b2:2c:93:14:bd:c3:f6:6c:45:ab:19:2a:9e:4e:50:e9:fa:e8:
         54:50:b4:ae:5a:4b:96:b9:39:a0:f2:14:23:df:2c:f3:85:e3:
         8f:5b:da:e0:fe:95:35:78:f3:a1:83:86:c8:2e:82:ee:53:3a:
         ca:fb:3e:c1:9d:95:d0:a4:84:da:7a:f3:33:99:d1:54:91:66:
         d0:46:db:d3:e8:02:56:69:0f:d5:76:ca:f3:e4:4b:d8:5c:ae:
         54:c9:bd:6c:12:a8:7e:70:49:a8:f2:75:ca:4e:0d:4e:53:63:
         51:1c:38:bd:bb:a5:fa:15:8a:af:e0:5f:32:01:d7:65:57:74:
         f6:d0:a4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 18:22:47 2026 by rpki-client