Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft
File:                     TXfM16lEFd_GjMyodOlMLowiIC0.mft (raw, json)
Hash identifier:          sWNzLyeRhjaFb+piTSOY42ZJzS14CSlfPVf9HPszUPE=
Subject key identifier:   5C:39:88:59:56:86:26:90:A6:58:FC:AF:C7:59:EB:84:42:02:12:D6
Authority key identifier: 4D:77:CC:D7:A9:44:15:DF:C6:8C:CC:A8:74:E9:4C:2E:8C:22:20:2D
Certificate issuer:       /CN=4d77ccd7a94415dfc68ccca874e94c2e8c22202d
Certificate serial:       019EEDB50C1D7BDBF1AED9708F30DE3B58D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft
Manifest number:          1971
Signing time:             Mon 22 Jun 2026 05:02:05 +0000
Manifest this update:     Mon 22 Jun 2026 05:02:05 +0000
Manifest next update:     Tue 23 Jun 2026 05:02:05 +0000
Files and hashes:         1: Na30MdB5zwEKr_r0SUKu8zdQTw4.roa (hash: xfnkXnSAbtguyfEj9MIvTb5o3BtX77AXLc2VZsYQIqg=)
                          2: TXfM16lEFd_GjMyodOlMLowiIC0.crl (hash: 0XZGbZUs2kGDudg31Lnsvck41alThnIlbE63sVqaClE=)
                          3: gVi39EeTsdnoO7eTwDanhGM1H0I.roa (hash: DtiliU1JGliSpHI+PJT+vAy9Sc5gsRSb35eDO6PM7lY=)
                          4: iCDdGA_7tQsgfDibWuYcU70NfTs.roa (hash: BwHpqgb+51nQjkzwTsIhaODzLjTxX1oHWG2GvyC+9Qw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Jun 2026 05:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ed:b5:0c:1d:7b:db:f1:ae:d9:70:8f:30:de:3b:58:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d77ccd7a94415dfc68ccca874e94c2e8c22202d
        Validity
            Not Before: Jun 22 05:02:05 2026 GMT
            Not After : Jun 23 05:02:05 2026 GMT
        Subject: CN=5c39885956862690a658fcafc759eb84420212d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:13:03:34:bc:f1:97:06:60:b0:09:5a:e6:7e:
                    d9:4e:b4:04:95:03:f2:ea:0e:64:26:48:70:00:21:
                    e7:2a:cb:16:8e:fa:08:e2:d5:63:c8:b7:fd:d4:1d:
                    31:bf:1c:79:12:ae:0f:3e:81:6f:5d:81:0a:17:c1:
                    a4:de:29:ca:ca:a5:62:16:21:0a:ba:c2:06:91:6e:
                    9b:c9:a2:4d:c3:10:57:2c:a2:bc:b7:45:a4:32:38:
                    4a:80:ba:d6:33:cb:9a:eb:e6:03:29:c0:f7:bb:d2:
                    85:f3:84:19:e6:69:76:b6:96:54:b6:ae:09:56:c5:
                    ee:d8:45:83:b3:35:61:01:c0:79:36:37:a6:b3:39:
                    85:d0:96:aa:b3:ee:55:36:6c:e1:e3:0b:bf:eb:e2:
                    9e:3a:a3:f8:4b:13:38:43:e2:5b:7b:88:63:53:59:
                    65:ef:c7:fa:e4:f2:79:d7:ec:d3:a8:10:f1:4c:1b:
                    4a:0c:ed:75:b9:22:15:bc:eb:35:3c:3e:51:2a:8c:
                    e7:a1:0e:75:bc:ae:50:53:ab:c0:a7:68:38:e8:0a:
                    c2:f7:ad:25:c5:10:50:f1:9e:c4:59:9e:2c:4b:ce:
                    48:c1:31:51:82:f8:0d:43:3d:1c:30:09:9d:d0:9c:
                    74:f9:1d:ed:6f:42:9e:f5:d8:9b:8e:cd:67:7c:f5:
                    91:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:39:88:59:56:86:26:90:A6:58:FC:AF:C7:59:EB:84:42:02:12:D6
            X509v3 Authority Key Identifier:
                keyid:4D:77:CC:D7:A9:44:15:DF:C6:8C:CC:A8:74:E9:4C:2E:8C:22:20:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:89:6e:cc:34:46:b5:69:d4:30:5c:74:fd:d4:69:e4:2c:14:
         a6:18:b0:ad:fb:b5:45:b7:2a:6b:4a:5f:93:6b:e4:65:8f:7e:
         d1:88:32:5e:08:55:57:74:25:dc:54:59:02:43:40:00:20:ee:
         14:ec:47:8e:7b:bd:7e:62:43:17:38:31:ea:80:58:61:67:1a:
         72:69:21:ae:c6:89:fc:3e:78:59:a2:3b:22:7c:c9:ea:b1:19:
         14:cc:fd:ca:a2:b9:59:a3:c1:67:66:10:23:76:4f:dc:f6:6c:
         cb:93:df:03:75:c7:a4:f6:32:e7:35:2e:95:f3:30:75:78:7a:
         ae:f0:d3:f9:fe:11:f0:13:17:0d:f8:1d:5d:be:54:93:7e:2e:
         16:38:9b:1e:29:76:ee:2c:06:c1:e0:46:b5:d0:66:b3:14:51:
         34:40:e2:4c:cd:bc:9e:98:bd:9b:68:fe:5c:b9:ca:b8:b9:93:
         17:ea:17:fc:c7:c6:51:5c:9d:ed:2d:c6:b9:49:e9:fc:23:c4:
         7d:57:99:f4:7f:d1:cc:cf:75:28:69:9a:85:fa:ba:2c:4f:b4:
         81:42:0a:0a:99:dd:d2:10:39:0d:f0:14:64:b1:b1:52:50:5d:
         6d:df:a1:29:dd:3b:48:7e:74:e6:a2:d0:a0:47:6f:4b:67:e1:
         a6:54:84:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ttQwde9vxrtlwjzDeO1jQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNzdjY2Q3YTk0NDE1ZGZjNjhjY2NhODc0ZTk0YzJlOGMy
MjIwMmQwHhcNMjYwNjIyMDUwMjA1WhcNMjYwNjIzMDUwMjA1WjAzMTEwLwYDVQQD
Eyg1YzM5ODg1OTU2ODYyNjkwYTY1OGZjYWZjNzU5ZWI4NDQyMDIxMmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BMDNLzxlwZgsAla5n7ZTrQElQPy
6g5kJkhwACHnKssWjvoI4tVjyLf91B0xvxx5Eq4PPoFvXYEKF8Gk3inKyqViFiEK
usIGkW6byaJNwxBXLKK8t0WkMjhKgLrWM8ua6+YDKcD3u9KF84QZ5ml2tpZUtq4J
VsXu2EWDszVhAcB5NjemszmF0Jaqs+5VNmzh4wu/6+KeOqP4SxM4Q+Jbe4hjU1ll
78f65PJ51+zTqBDxTBtKDO11uSIVvOs1PD5RKoznoQ51vK5QU6vAp2g46ArC960l
xRBQ8Z7EWZ4sS85IwTFRgvgNQz0cMAmd0Jx0+R3tb0Ke9dibjs1nfPWROwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFw5iFlWhiaQplj8r8dZ64RCAhLWMB8GA1UdIwQY
MBaAFE13zNepRBXfxozMqHTpTC6MIiAtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFhmTTE2bEVGZF9Hak15b2RPbE1Mb3dpSUMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kNjA4YjgtNTAxZi00OTFmLWEyZjIt
MTBlNTdmNTZhMTdhLzEvVFhmTTE2bEVGZF9Hak15b2RPbE1Mb3dpSUMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9kNjA4YjgtNTAxZi00OTFmLWEyZjItMTBlNTdmNTZhMTdh
LzEvVFhmTTE2bEVGZF9Hak15b2RPbE1Mb3dpSUMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQIluzDRG
tWnUMFx0/dRp5CwUphiwrfu1Rbcqa0pfk2vkZY9+0YgyXghVV3Ql3FRZAkNAACDu
FOxHjnu9fmJDFzgx6oBYYWcacmkhrsaJ/D54WaI7InzJ6rEZFMz9yqK5WaPBZ2YQ
I3ZP3PZsy5PfA3XHpPYy5zUulfMwdXh6rvDT+f4R8BMXDfgdXb5Uk34uFjibHil2
7iwGweBGtdBmsxRRNEDiTM28npi9m2j+XLnKuLmTF+oX/MfGUVyd7S3GuUnp/CPE
fVeZ9H/RzM91KGmahfq6LE+0gUIKCpnd0hA5DfAUZLGxUlBdbd+hKd07SH505qLQ
oEdvS2fhplSEsg==
-----END CERTIFICATE-----
Generated at Mon Jun 22 11:46:48 2026 by rpki-client