Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
File:                     ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft (raw, json)
Hash identifier:          zU8XL2NRpTJ7tkHTX6NKxmEFGyBzG/xGRyd6Kvq804s=
Subject key identifier:   D0:7B:CB:38:9C:5C:C4:5C:33:EE:3B:19:7F:B9:84:12:FE:38:9E:7C
Authority key identifier: B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26
Certificate issuer:       /CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426
Certificate serial:       019F13E63418208C9B3D8DB508A740765FCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
Manifest number:          085B
Signing time:             Mon 29 Jun 2026 15:01:21 +0000
Manifest this update:     Mon 29 Jun 2026 15:01:21 +0000
Manifest next update:     Tue 30 Jun 2026 15:01:21 +0000
Files and hashes:         1: Ypj1u0D-dKP25bpDr5b37lFIWLY.roa (hash: sZTi+uNahtkDx1CWD+fSQJ3e4s6S3VqVHfRHxysjxvE=)
                          2: b9kuA0hkVfgLPA4Lc4cA836L2-E.roa (hash: povqVvttDiHt8q334Li7LCjGzju+n8q9oUqyQtA71DQ=)
                          3: ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl (hash: IBCIw83RFAQNk2hOMcZiFKj2un6zmtbYH/M00xpjjqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 14:12:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:13:e6:34:18:20:8c:9b:3d:8d:b5:08:a7:40:76:5f:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426
        Validity
            Not Before: Jun 29 15:01:21 2026 GMT
            Not After : Jun 30 15:01:21 2026 GMT
        Subject: CN=d07bcb389c5cc45c33ee3b197fb98412fe389e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:27:fd:43:76:b5:54:69:80:24:d5:29:76:7d:
                    64:73:cf:9e:a9:16:a8:7b:13:c9:c8:a8:77:fb:4e:
                    08:fe:5a:05:0e:65:96:2f:48:01:a7:8f:c2:d9:2c:
                    8b:9e:91:d4:ba:86:b7:ac:e2:ae:c1:1c:e5:fd:d7:
                    12:a9:62:c8:6b:f7:a6:c4:a8:e7:54:14:c1:46:0c:
                    6c:c3:44:c0:41:e5:84:7e:9d:1a:2f:23:46:5f:6b:
                    65:30:54:84:df:9d:1c:f0:ed:5a:56:c9:29:c9:c1:
                    b1:09:bb:b6:42:1c:e0:b2:9b:cd:c0:b2:2b:c9:28:
                    73:5f:c2:b7:ed:22:57:ec:90:b3:ea:ab:fe:e2:97:
                    3b:8e:f6:2f:99:e7:3e:cf:67:e9:9f:aa:03:a2:26:
                    f6:6d:0c:71:b3:3d:eb:5c:ab:90:65:7f:1f:26:32:
                    ac:b6:88:08:59:b8:80:03:4f:e3:a9:79:65:99:80:
                    26:09:65:d9:6d:c6:66:1c:12:a7:cf:8e:99:1f:b2:
                    75:0e:8b:83:81:78:13:7e:e8:e6:af:03:b8:49:e7:
                    c0:91:ba:1c:4b:1d:2b:eb:06:42:f1:ae:75:b9:ec:
                    bb:4d:4b:dd:db:3e:65:51:ed:e6:58:69:49:63:b8:
                    2b:fd:04:35:91:a5:d5:68:51:1c:f2:ef:81:1a:99:
                    61:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7B:CB:38:9C:5C:C4:5C:33:EE:3B:19:7F:B9:84:12:FE:38:9E:7C
            X509v3 Authority Key Identifier:
                keyid:B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:b8:ea:b3:4b:d0:4f:16:61:f2:d6:b3:70:10:42:f7:b5:49:
         5d:a8:e7:cb:8e:fc:5a:16:39:69:b7:c3:ac:82:93:51:a8:2b:
         52:53:b3:c8:4f:07:a8:7e:3a:aa:6a:4c:fc:94:22:2d:a2:47:
         3a:a6:cc:a1:ac:72:41:7f:df:eb:d7:bb:53:23:4d:97:ef:d7:
         0e:91:4e:3e:a7:48:f8:e0:a4:42:70:26:8d:3d:73:d2:54:c2:
         08:11:c0:ed:44:80:12:61:c4:ce:b7:07:92:eb:47:da:9b:61:
         d6:65:be:8a:44:84:37:fa:3a:82:90:e1:af:91:76:4e:ff:98:
         7e:1a:45:2c:e8:1f:78:17:d6:d9:8a:c1:97:fc:e3:71:28:7c:
         2e:bd:63:7a:48:52:90:09:2d:7e:f8:61:5d:f8:1f:c8:42:37:
         c7:62:ca:64:f1:69:f8:c2:3e:38:92:19:1b:25:ac:cf:70:8b:
         99:62:44:b8:c2:a1:b0:cb:a8:a0:e2:71:f4:19:9d:bd:d2:e4:
         46:74:b3:f3:6b:e0:73:5f:13:f1:66:80:bb:14:51:2b:02:75:
         ec:df:80:5d:01:24:30:f4:86:7f:74:4f:b9:3a:40:ae:87:d8:
         53:11:ed:5f:7f:af:93:49:c3:3f:9b:7e:75:3b:f7:06:98:4c:
         84:02:d7:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8T5jQYIIybPY21CKdAdl/PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ZDdmMzY4ZmExY2Y1YjFhYWFhNzZiMGYxZjIzYzA2NzUw
YTg0MjYwHhcNMjYwNjI5MTUwMTIxWhcNMjYwNjMwMTUwMTIxWjAzMTEwLwYDVQQD
EyhkMDdiY2IzODljNWNjNDVjMzNlZTNiMTk3ZmI5ODQxMmZlMzg5ZTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyf9Q3a1VGmAJNUpdn1kc8+eqRao
exPJyKh3+04I/loFDmWWL0gBp4/C2SyLnpHUuoa3rOKuwRzl/dcSqWLIa/emxKjn
VBTBRgxsw0TAQeWEfp0aLyNGX2tlMFSE350c8O1aVskpycGxCbu2QhzgspvNwLIr
yShzX8K37SJX7JCz6qv+4pc7jvYvmec+z2fpn6oDoib2bQxxsz3rXKuQZX8fJjKs
togIWbiAA0/jqXllmYAmCWXZbcZmHBKnz46ZH7J1DouDgXgTfujmrwO4SefAkboc
Sx0r6wZC8a51uey7TUvd2z5lUe3mWGlJY7gr/QQ1kaXVaFEc8u+BGplhgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNB7yzicXMRcM+47GX+5hBL+OJ58MB8GA1UdIwQY
MBaAFLbX82j6HPWxqqp2sPHyPAZ1CoQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHRmemFQb2M5YkdxcW5hdzhmSThCblVLaENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS82ZDE1ZjQtODZhMi00NmQ5LWIzZWQt
MDhhZWRjMmYyNjM5LzEvdHRmemFQb2M5YkdxcW5hdzhmSThCblVLaENZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS82ZDE1ZjQtODZhMi00NmQ5LWIzZWQtMDhhZWRjMmYyNjM5
LzEvdHRmemFQb2M5YkdxcW5hdzhmSThCblVLaENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhbjqs0vQ
TxZh8tazcBBC97VJXajny478WhY5abfDrIKTUagrUlOzyE8HqH46qmpM/JQiLaJH
OqbMoaxyQX/f69e7UyNNl+/XDpFOPqdI+OCkQnAmjT1z0lTCCBHA7USAEmHEzrcH
kutH2pth1mW+ikSEN/o6gpDhr5F2Tv+YfhpFLOgfeBfW2YrBl/zjcSh8Lr1jekhS
kAktfvhhXfgfyEI3x2LKZPFp+MI+OJIZGyWsz3CLmWJEuMKhsMuooOJx9BmdvdLk
RnSz82vgc18T8WaAuxRRKwJ17N+AXQEkMPSGf3RPuTpArofYUxHtX3+vk0nDP5t+
dTv3BphMhALX+A==
-----END CERTIFICATE-----
Generated at Mon Jun 29 22:38:43 2026 by rpki-client