Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
File:                     TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft (raw, json)
Hash identifier:          Blf3dm9AcSl23SEFijjtJlJvRzyC5TAvvrj2Ltcxolw=
Subject key identifier:   5D:7D:09:E6:00:8E:ED:63:C5:04:D9:43:A3:8A:43:27:E4:23:63:4B
Authority key identifier: 4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8
Certificate issuer:       /CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
Certificate serial:       019E30E00FBD6A02C3A63FFD7E81DA13BBB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
Manifest number:          190F
Signing time:             Sat 16 May 2026 13:00:50 +0000
Manifest this update:     Sat 16 May 2026 13:00:50 +0000
Manifest next update:     Sun 17 May 2026 13:00:50 +0000
Files and hashes:         1: 1-yMlj_lfkJoYBfYvpMydeDjmgSM.roa (hash: K/sPdE3c5W5fRpAqOLm5bFgaW4DKI4EBlPvEPl32aOM=)
                          2: RItX9BG6Bl_mx3MTjyJm8l3wLw4.roa (hash: ozz/LMoGDHWxs5USbAIdVcdqDkAaVci0RWqFGYt8Lgg=)
                          3: TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl (hash: J/+LzQZ2hrYTGU2SfreMuJN3BwqN+ox4BZFSxLSvDEk=)
                          4: tCb5DC6zfb4vzHPOix2UvW9ndS4.roa (hash: ntxgYvCvFvJADG1N43LItMS9Zjg6jG20YT8FEIvxIu8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:0f:bd:6a:02:c3:a6:3f:fd:7e:81:da:13:bb:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
        Validity
            Not Before: May 16 13:00:50 2026 GMT
            Not After : May 17 13:00:50 2026 GMT
        Subject: CN=5d7d09e6008eed63c504d943a38a4327e423634b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2b:5d:a4:0a:44:e0:84:e8:2b:3c:31:b0:96:
                    0b:b4:e3:75:fc:84:d2:d9:5b:ca:18:4b:c6:81:f2:
                    0d:09:0f:a0:08:94:e9:f3:d1:64:15:c6:06:89:72:
                    8a:c5:f1:8f:ac:63:fe:48:18:11:d2:2c:dc:47:58:
                    dc:cf:b2:da:93:b0:ab:63:ac:da:77:c1:71:62:bf:
                    6f:f7:1e:56:29:e1:9d:71:d4:01:c6:f8:fc:72:e5:
                    72:cb:36:61:a4:07:ab:4c:cf:93:79:02:bd:dd:a3:
                    3e:71:f7:e7:c9:11:31:e8:53:2a:b1:df:8f:d3:eb:
                    90:ed:7a:57:09:0c:62:6e:1a:5d:c9:61:41:ba:b8:
                    70:85:08:e1:b1:49:fb:a7:a4:54:73:01:b4:04:bc:
                    6d:19:5d:5f:a2:b9:bd:a1:55:93:28:70:21:86:42:
                    c1:af:4b:25:a5:dd:4c:47:fd:2b:e3:20:f4:32:28:
                    23:f1:c7:73:9f:de:81:e2:dd:b2:e9:64:a1:99:b5:
                    3e:ed:0f:18:8b:ab:ed:08:af:2f:b7:1b:12:77:a4:
                    ed:e1:65:11:0e:8b:4c:44:7b:47:7e:0b:91:dd:2c:
                    fb:06:79:5f:c4:e0:5f:0a:f7:f3:c8:fb:25:27:65:
                    fc:cb:8a:c5:9d:3d:2d:a8:aa:b4:d3:eb:5d:a1:e1:
                    9b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:7D:09:E6:00:8E:ED:63:C5:04:D9:43:A3:8A:43:27:E4:23:63:4B
            X509v3 Authority Key Identifier:
                keyid:4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:f8:1a:d0:7d:bc:93:5e:25:98:76:3e:e8:69:f1:a5:9c:34:
         d0:20:23:0a:61:1a:0f:00:70:56:d8:64:82:f9:1e:58:f0:32:
         7c:98:3e:67:9e:d8:09:7d:7a:8d:7d:41:8f:97:5a:2d:f8:24:
         11:4d:7f:6a:20:7e:cf:84:93:01:7d:ea:23:65:45:b3:6a:e0:
         8c:c8:4b:53:69:a0:d2:c2:4e:ad:69:26:e9:60:ee:ad:86:85:
         fa:74:b9:8f:e3:d0:f8:53:21:86:50:b2:b6:0b:87:49:5b:84:
         0b:ea:f5:0f:7a:71:93:05:e5:b9:ba:ba:7b:8d:fd:aa:fb:82:
         4f:56:9c:ab:fa:2b:84:d2:ec:62:7f:1b:68:9b:af:4d:7b:1d:
         ac:31:04:b2:af:82:f4:a4:b8:a4:60:0d:db:e8:64:d6:f5:55:
         27:99:d4:0c:dd:94:c9:72:02:af:06:d8:a7:63:95:24:92:b9:
         dc:c8:ba:6f:df:10:a5:a3:83:f8:88:2f:9f:d9:ee:c0:fa:b0:
         a3:25:b4:f1:a7:7e:e5:44:c3:ea:28:e6:b8:8f:72:15:4c:bf:
         31:5b:f3:dd:d6:ea:f9:0e:e0:e4:f4:ff:ca:3d:50:f4:5d:a4:
         d2:e4:69:20:fa:d3:c9:fa:6b:59:19:2d:bd:1f:33:89:d5:db:
         e3:de:b8:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w4A+9agLDpj/9foHaE7u5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYzM5MWRjNjE1ZmQ0YTNhZDEwYzBmMmFiOGIwYTUwNmQw
MzllZDgwHhcNMjYwNTE2MTMwMDUwWhcNMjYwNTE3MTMwMDUwWjAzMTEwLwYDVQQD
Eyg1ZDdkMDllNjAwOGVlZDYzYzUwNGQ5NDNhMzhhNDMyN2U0MjM2MzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5StdpApE4IToKzwxsJYLtON1/ITS
2VvKGEvGgfINCQ+gCJTp89FkFcYGiXKKxfGPrGP+SBgR0izcR1jcz7Lak7CrY6za
d8FxYr9v9x5WKeGdcdQBxvj8cuVyyzZhpAerTM+TeQK93aM+cffnyREx6FMqsd+P
0+uQ7XpXCQxibhpdyWFBurhwhQjhsUn7p6RUcwG0BLxtGV1form9oVWTKHAhhkLB
r0slpd1MR/0r4yD0Migj8cdzn96B4t2y6WShmbU+7Q8Yi6vtCK8vtxsSd6Tt4WUR
DotMRHtHfguR3Sz7BnlfxOBfCvfzyPslJ2X8y4rFnT0tqKq00+tdoeGbuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF19CeYAju1jxQTZQ6OKQyfkI2NLMB8GA1UdIwQY
MBaAFE3DkdxhX9SjrRDA8quLClBtA57YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGNPUjNHRmYxS090RU1EeXE0c0tVRzBEbnRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kNjZhNTgtZmRmNS00OTFlLWI1MTEt
ZmQyOTE1ZDRjZDVhLzEvVGNPUjNHRmYxS090RU1EeXE0c0tVRzBEbnRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9kNjZhNTgtZmRmNS00OTFlLWI1MTEtZmQyOTE1ZDRjZDVh
LzEvVGNPUjNHRmYxS090RU1EeXE0c0tVRzBEbnRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhPga0H28
k14lmHY+6GnxpZw00CAjCmEaDwBwVthkgvkeWPAyfJg+Z57YCX16jX1Bj5daLfgk
EU1/aiB+z4STAX3qI2VFs2rgjMhLU2mg0sJOrWkm6WDurYaF+nS5j+PQ+FMhhlCy
tguHSVuEC+r1D3pxkwXlubq6e439qvuCT1acq/orhNLsYn8baJuvTXsdrDEEsq+C
9KS4pGAN2+hk1vVVJ5nUDN2UyXICrwbYp2OVJJK53Mi6b98QpaOD+Igvn9nuwPqw
oyW08ad+5UTD6ijmuI9yFUy/MVvz3dbq+Q7g5PT/yj1Q9F2k0uRpIPrTyfprWRkt
vR8zidXb4964Dw==
-----END CERTIFICATE-----
Generated at Sat May 16 20:19:44 2026 by rpki-client