Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
File:                     TS-f1cihTNyfMcRYXNYNtXz_tMI.mft (raw, json)
Hash identifier:          uAqfx8GOvjcnlvx5kwsEbLOzn/qQaYrW8GYLO9fTfn8=
Subject key identifier:   9E:4D:11:0D:96:A9:BD:5B:A4:27:0E:24:3A:BF:74:9F:82:57:87:86
Authority key identifier: 4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2
Certificate issuer:       /CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2
Certificate serial:       019E90CA0FBA9EE35086642B514BB1234D33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
Manifest number:          1005
Signing time:             Thu 04 Jun 2026 04:00:21 +0000
Manifest this update:     Thu 04 Jun 2026 04:00:21 +0000
Manifest next update:     Fri 05 Jun 2026 04:00:21 +0000
Files and hashes:         1: 1-PcZA739O5jfsTyXtX2e6TIscS4.roa (hash: 8TW2rD12HBFWQAtxdbCJfapV59e5j+ulrB4BqMjg04I=)
                          2: 3bJDocgywntndtsfu_qK9cHpMt8.roa (hash: yNfaNNmmyD1SlEI3Ljm5OugJbl2m1Klcep+P5DT4G+s=)
                          3: O7SMXsiP2jcDC8ds3aHzihHcVV4.roa (hash: dRUITjUibnbbNquhA0z/5LyEKxqqyfiN2wuu/O3f8z4=)
                          4: TS-f1cihTNyfMcRYXNYNtXz_tMI.crl (hash: Axe73kkSWvusAZIwYLm/qn0xPTOlGkekWlL/Vzg0gU0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 04:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:90:ca:0f:ba:9e:e3:50:86:64:2b:51:4b:b1:23:4d:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2
        Validity
            Not Before: Jun  4 04:00:21 2026 GMT
            Not After : Jun  5 04:00:21 2026 GMT
        Subject: CN=9e4d110d96a9bd5ba4270e243abf749f82578786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c8:48:5a:2b:46:4c:33:4f:8f:22:8f:8f:22:
                    05:5c:da:b9:a5:25:8d:d1:5b:fb:c3:96:bd:9f:7e:
                    c0:a7:2f:69:62:12:10:0b:71:70:e3:77:ef:7c:20:
                    61:71:45:76:06:e6:29:d5:6c:a1:76:43:82:4a:29:
                    ec:be:42:b7:8b:e3:fb:e3:30:da:03:b7:10:b8:fd:
                    83:51:0f:7b:20:da:d3:fb:7a:2b:f5:cd:18:bc:b7:
                    db:a3:4a:76:97:62:47:cd:67:5d:fa:3e:4c:fa:33:
                    60:8e:34:4f:36:c0:57:3e:2c:24:2c:d4:7e:e6:08:
                    25:99:a7:15:81:55:b7:ce:8e:aa:76:0b:9d:37:37:
                    4d:94:c6:60:b1:7d:80:15:0b:9a:7e:ae:10:0d:42:
                    0c:b2:c5:22:d1:76:49:0f:20:ff:a3:5a:60:35:e0:
                    c5:50:6e:bf:e5:64:97:3d:3f:08:4b:ad:f1:6b:be:
                    c2:a6:8c:14:a6:21:84:a6:48:9f:e5:26:e7:2f:a0:
                    f5:d0:da:1a:80:69:7b:2e:4a:2a:08:53:82:d4:7f:
                    94:1b:b4:66:26:48:dd:87:98:c0:4a:bf:e3:f8:0c:
                    68:4d:e5:b5:b7:e3:62:29:5e:7b:db:ea:8d:7a:ff:
                    c6:5c:31:e7:fe:6f:6b:99:47:0f:af:75:73:7e:7f:
                    1b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:4D:11:0D:96:A9:BD:5B:A4:27:0E:24:3A:BF:74:9F:82:57:87:86
            X509v3 Authority Key Identifier:
                keyid:4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:5a:94:64:99:80:5c:b1:1c:01:10:3b:3b:17:a2:2d:35:92:
         c9:be:d2:30:6f:6b:9a:f3:9f:68:d7:47:98:fa:ca:d9:c0:7c:
         18:60:41:51:70:db:34:1a:ea:ef:32:0d:44:c4:d0:f7:37:2d:
         d4:f0:f6:ca:80:b0:cd:99:2a:07:5b:2f:fc:ee:54:84:10:9c:
         da:4b:2e:12:18:5d:67:58:03:42:19:d4:88:bc:bf:99:14:3d:
         88:0f:bc:04:03:b7:de:d9:fa:07:c1:9a:10:f7:e2:9d:c4:e0:
         58:2d:55:2b:b9:f3:91:e0:b3:92:fa:e9:26:31:ab:38:a5:6e:
         37:d2:57:d8:4d:aa:bc:2f:18:e4:26:14:d5:11:8b:a5:91:41:
         85:b1:9a:b2:60:02:80:0b:c1:0b:a4:b0:fe:4c:27:96:de:5a:
         5f:b1:0a:d9:5f:b5:12:8c:02:c6:89:d4:be:53:8e:a7:7d:26:
         c4:56:8d:72:62:45:1d:ee:d9:78:9b:82:78:60:e1:22:d4:84:
         20:8b:fb:6f:51:52:41:27:8a:50:0f:5f:74:bb:e2:bc:c2:af:
         90:ac:50:a8:fe:7d:7e:1a:61:24:8e:43:99:36:84:6f:71:50:
         a1:9f:7a:ce:b5:9a:53:50:e1:5d:69:f0:7b:85:85:05:fa:9d:
         a5:a2:f7:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6Qyg+6nuNQhmQrUUuxI00zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMmY5ZmQ1YzhhMTRjZGM5ZjMxYzQ1ODVjZDYwZGI1N2Nm
ZmI0YzIwHhcNMjYwNjA0MDQwMDIxWhcNMjYwNjA1MDQwMDIxWjAzMTEwLwYDVQQD
Eyg5ZTRkMTEwZDk2YTliZDViYTQyNzBlMjQzYWJmNzQ5ZjgyNTc4Nzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0chIWitGTDNPjyKPjyIFXNq5pSWN
0Vv7w5a9n37Apy9pYhIQC3Fw43fvfCBhcUV2BuYp1WyhdkOCSinsvkK3i+P74zDa
A7cQuP2DUQ97INrT+3or9c0YvLfbo0p2l2JHzWdd+j5M+jNgjjRPNsBXPiwkLNR+
5gglmacVgVW3zo6qdgudNzdNlMZgsX2AFQuafq4QDUIMssUi0XZJDyD/o1pgNeDF
UG6/5WSXPT8IS63xa77CpowUpiGEpkif5SbnL6D10NoagGl7LkoqCFOC1H+UG7Rm
Jkjdh5jASr/j+AxoTeW1t+NiKV572+qNev/GXDHn/m9rmUcPr3Vzfn8bGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5NEQ2Wqb1bpCcOJDq/dJ+CV4eGMB8GA1UdIwQY
MBaAFE0vn9XIoUzcnzHEWFzWDbV8/7TCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFMtZjFjaWhUTnlmTWNSWVhOWU50WHpfdE1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kYTRlNDYtMmE5My00NGE0LWI4ZTMt
YzIxMzNkZDgxYjU2LzEvVFMtZjFjaWhUTnlmTWNSWVhOWU50WHpfdE1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9kYTRlNDYtMmE5My00NGE0LWI4ZTMtYzIxMzNkZDgxYjU2
LzEvVFMtZjFjaWhUTnlmTWNSWVhOWU50WHpfdE1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB1qUZJmA
XLEcARA7OxeiLTWSyb7SMG9rmvOfaNdHmPrK2cB8GGBBUXDbNBrq7zINRMTQ9zct
1PD2yoCwzZkqB1sv/O5UhBCc2ksuEhhdZ1gDQhnUiLy/mRQ9iA+8BAO33tn6B8Ga
EPfincTgWC1VK7nzkeCzkvrpJjGrOKVuN9JX2E2qvC8Y5CYU1RGLpZFBhbGasmAC
gAvBC6Sw/kwnlt5aX7EK2V+1EowCxonUvlOOp30mxFaNcmJFHe7ZeJuCeGDhItSE
IIv7b1FSQSeKUA9fdLvivMKvkKxQqP59fhphJI5DmTaEb3FQoZ96zrWaU1DhXWnw
e4WFBfqdpaL36w==
-----END CERTIFICATE-----
Generated at Thu Jun 4 13:23:42 2026 by rpki-client