Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
File:                     tFmZiZ920uLkzN_IF_mHnPrAa74.mft (raw, json)
Hash identifier:          /T9eIWxE912Rayi70zuuRiCti1wOnAp63Aw7KJl7CHU=
Subject key identifier:   71:AA:3C:56:E7:48:61:51:9F:2E:93:1A:EA:28:53:3A:34:7A:86:BE
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Certificate issuer:       /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial:       019EB5E9AB6B6DBF85D026883D0A1B4D4980
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
Manifest number:          126D
Signing time:             Thu 11 Jun 2026 09:00:50 +0000
Manifest this update:     Thu 11 Jun 2026 09:00:50 +0000
Manifest next update:     Fri 12 Jun 2026 09:00:50 +0000
Files and hashes:         1: 00yjAHUjPi78LWd5NKw2W62obOE.roa (hash: fy76k6hktxmrp/33ybyKcOrtr3l2uBboJQ/aOUgHGR4=)
                          2: 1hJj5lLq19A-j9_WZiFK8KryVh8.roa (hash: BdyFvctNzfBBkcxWw8lGFz2gTUvcnLbqttbqeJ44fGQ=)
                          3: 2O9349WO0t6H0E9ZK0f1QWi3t0Q.roa (hash: 2RhFKguLdx/frIsqfhlZq+St14nwRLDsFvzdspSUCHs=)
                          4: 3Hua7wKmQfp9JEgzSI5kFZ9qKuY.roa (hash: b4NMrJHTU6u3cjIt8gqKKQ1+s/2nFZTA+L4AbUR1Vzk=)
                          5: 5yanEvaCNGmxYIoFSwD5iS2g81s.roa (hash: aMWaHQ8wF/Y1htK9oNbLHRQFbe1aIxUDLSAfigLBhqk=)
                          6: 7SmXzQd-nWaNe8t8rqOA7438J_s.roa (hash: RMY9iFIYUbgR/WmLppHu9PswGGc4qk7Roiy4Bmlgw3s=)
                          7: 9XQ3v7NAyX7Zn1qmQQWXb2qR2dM.roa (hash: LoJHTZuUcieblT+nTohVJEnVdn7k2NrPeNKfLmUfk68=)
                          8: AWmyBfEOalcHCOLrcaFKG5HFPHE.roa (hash: Y3J3g1nZc/ySJRqWRNCSEkDtupM7uhV4dfm4QnSVJmk=)
                          9: D7WZ4U1qEm7s7ojiU0DGq7f4zXk.roa (hash: KpStMvfGgVTFEiCM6FyPOYlWTDixlJh6LN27+Q9VRF0=)
                          10: FerkNmRdMMqBAxxCWnxbdwDF0fM.roa (hash: X4J4aibstvyyZ1dw044vF6xHdgTuovNe6IxPq/bGSrQ=)
                          11: GWLPm0EaGoN4BtEyzXiiEIZ-GTE.roa (hash: w7giHRJ/Hm+CuvJmm/pIjg11UlpDd5+GD+ZEyWmk2uc=)
                          12: JDpgbDP3ZVlaaAg9RZmB7_K2p5g.roa (hash: TZQzM+v+cQ3PtbjCXkTdxt6XlCUxvw6e1kYaz42nPhM=)
                          13: JoqKm8sMA3Uu8bfvQqeKdzY6joo.roa (hash: LnpktCIb6RF6zzxK4zr5D3vSGTrAo2pAVOT0PFiTHVI=)
                          14: KKcG59VmFqQ4cXd0BBLDjoayHpI.roa (hash: I8RNIw+sEHGZn2p4ZlnQNs1qXyAS/e9dFOjjqFagY3w=)
                          15: NYFpdzDaXcX3V4z9F3MBsr4OXiM.roa (hash: KOP30jYXKpvAenVB/NmSqLSvQfOSbtUeKo+uckhdy4A=)
                          16: PFWhMbgBZhaqPNHfYgXnGPOOXnE.roa (hash: PwiWxCoxdlxNo5gJm4d2PKlnfjYXDp7nO0zHi1Y+/u0=)
                          17: PZU4IIeyEkNUYzUo959cxHqGiME.roa (hash: 4kKemKUnTaECIacGpN+OjJhGEQ9cruITFABLowf6IMg=)
                          18: a9PVmeffwqA3twgcV6t0GJNoOig.roa (hash: qpMObNCzJumJOZZ9WvveWfmJTih0CsrC0uyAIeU07CA=)
                          19: bsu95ghiIBpd9cfADiMIa9Yxj6Q.roa (hash: 16b5K9754SCIP/D165OSsKJafJ6ZtxK/WBHz3KMDFr0=)
                          20: dRaseQyu-Nph0iq6jNpjMA8utUs.roa (hash: kKdPDgXGVZIaeEXS8aAW0c5rneF486SB0MjDMgks3Fo=)
                          21: eUlwfQNbP2vIOtwAcyEsR7HEJss.roa (hash: P1z0FJdjv4KMmXfM20mE40d3OdggWf6hJHcQuPfAi3M=)
                          22: hjr9OWyFnGQkO3uJElA_CU6JvLw.roa (hash: z3JLINlts21nBvM6E0zMFfTsR5zhI/+x0jPseLU+n7M=)
                          23: lJE-9MHI0m9odS0-ez-OUf7XXOo.roa (hash: NzsXcZUGn5wcX+3FrmFWw7UtvY0O9+75hmCPmsbk3Bg=)
                          24: n-29MuA6EoenP4YOSgLg3PmvldE.roa (hash: CMzXiVlHnCrRtRBpkGbnWdoSVgd6E5RI6HPXpXpJUwE=)
                          25: rlYbXk0l-u5wDMIPld_Hf9Uw904.roa (hash: I+TrFAAS1TYsFTjE/AcxzzG+51DRpaOOwnGxLdeRA90=)
                          26: tFmZiZ920uLkzN_IF_mHnPrAa74.crl (hash: tyY32UZCs8TIR78VxvuR8lcd0H0H/B2J2jMM7mAayqM=)
                          27: trir8qL64aNBmuq7kCE6q-vw1qE.roa (hash: e1sr1CETTzxHpRTFfDyLkJVAK4EzBhmgBByIF0XK3ZI=)
                          28: uYe5oaUK8hVW2om_IAHy0X4_gSc.roa (hash: MzIlUgDKPBOByTPkQl8istY2JT1L8/f98rWrZ5ecX8k=)
                          29: vlp3GURZLMSqHZj8Wczzco6OhlM.roa (hash: Ij5GDS5A64No5muGkdmAbAJEygPPU04xdK6LicaUL0U=)
                          30: wHn4Idt9pbw0xNqo1xXnrZAME_c.roa (hash: 1V81c+Xq4YaFlhjRvvqZvgJ/aOSF31vxmGkYy8VJT/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 08:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b5:e9:ab:6b:6d:bf:85:d0:26:88:3d:0a:1b:4d:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
        Validity
            Not Before: Jun 11 09:00:50 2026 GMT
            Not After : Jun 12 09:00:50 2026 GMT
        Subject: CN=71aa3c56e74861519f2e931aea28533a347a86be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:29:24:eb:43:86:e3:4c:b5:8e:eb:f2:f5:0f:
                    2a:2e:5a:e9:7b:83:8d:b1:8f:1d:f0:d4:38:28:3d:
                    0e:0e:67:23:3a:fd:c3:aa:1a:c8:2a:8b:24:ab:e4:
                    28:a6:58:d4:d5:7e:2a:c9:d2:0d:b5:00:54:98:9c:
                    18:62:47:83:aa:a6:c7:78:17:db:09:00:5d:e0:12:
                    d3:5b:6b:00:1d:b4:23:83:8e:03:c6:2d:7c:e5:00:
                    be:3b:72:37:c0:cb:83:4c:5c:1e:38:0b:75:eb:62:
                    93:3a:9e:78:6b:1f:ad:a3:92:cc:ac:66:93:74:67:
                    9a:f4:13:bd:b5:b7:c5:ca:1d:99:9f:b5:f7:90:93:
                    37:06:ca:0b:37:bf:51:fc:1d:da:3a:88:79:6e:70:
                    9c:e1:ea:56:51:cb:a6:14:4c:38:15:28:3c:ae:2e:
                    1e:46:55:36:e6:c8:f6:c1:7a:e5:8b:1c:eb:65:62:
                    3d:1f:df:c4:ca:6a:bc:fa:3c:6c:4d:7e:ad:7b:a2:
                    ab:99:5f:9e:65:6e:fb:9c:61:c4:1d:3f:f1:50:c5:
                    27:4a:f3:bf:aa:62:9c:50:02:52:a8:b4:d3:1b:4f:
                    7f:63:1f:20:d8:1f:58:b5:2b:c3:3c:03:08:16:02:
                    58:f6:85:39:a3:e7:48:09:21:82:eb:0d:dd:a5:cd:
                    88:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AA:3C:56:E7:48:61:51:9F:2E:93:1A:EA:28:53:3A:34:7A:86:BE
            X509v3 Authority Key Identifier:
                keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:09:40:d8:72:3c:85:db:ae:b3:9b:94:2c:57:0b:e8:0c:80:
         8f:aa:d9:9c:e8:d9:cf:fb:1a:a8:33:91:03:b8:2b:ea:52:4c:
         7a:f4:4f:77:93:30:dc:7b:8f:ab:a7:95:43:33:d1:77:32:fa:
         9d:c8:93:a7:51:a1:56:92:78:ac:3e:ae:98:2f:9c:e8:db:7b:
         43:e9:a2:db:ed:35:86:1a:ec:88:82:16:25:24:dd:64:f9:37:
         3c:d3:99:a8:77:12:37:ae:ce:cd:9f:bb:73:73:69:02:13:82:
         7a:6b:ad:60:45:f7:c6:83:87:95:d8:06:41:0c:25:03:e5:be:
         4e:05:bd:55:34:8b:83:4c:a2:e4:86:28:25:21:db:74:7e:b6:
         53:d2:79:d9:ca:dc:85:2a:79:c8:73:a8:3d:3b:22:27:98:2e:
         87:a9:03:e0:46:9d:9a:c2:85:82:02:b4:d3:64:c2:f1:3d:9e:
         cf:a0:88:9b:89:b1:d7:23:6d:3d:d1:25:72:01:ae:b3:06:5e:
         fe:c4:07:0e:a2:20:4c:72:15:05:5d:c2:4a:d5:fd:ae:3e:10:
         e5:f8:db:c1:a1:d1:01:5f:ac:b2:68:5d:19:28:7b:b8:40:af:
         67:d6:b5:4c:b5:11:64:41:08:64:d2:a0:2a:84:e5:95:3b:60:
         31:69:c3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 13:08:36 2026 by rpki-client