Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft
File:                     5hwHyVFIjwTLOw_TOK-E135Gv1I.mft (raw, json)
Hash identifier:          flFriz8naeyHEmT/1KwW6KGaJ6AcDWV1wBKMWyWwB28=
Subject key identifier:   5C:CA:8E:0E:6F:5D:13:1B:ED:42:71:C5:08:C1:70:64:49:15:9A:23
Authority key identifier: E6:1C:07:C9:51:48:8F:04:CB:3B:0F:D3:38:AF:84:D7:7E:46:BF:52
Certificate issuer:       /CN=e61c07c951488f04cb3b0fd338af84d77e46bf52
Certificate serial:       019F189DF37C797ECC753DFC25309839A22B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft
Manifest number:          1991
Signing time:             Tue 30 Jun 2026 13:00:32 +0000
Manifest this update:     Tue 30 Jun 2026 13:00:32 +0000
Manifest next update:     Wed 01 Jul 2026 13:00:32 +0000
Files and hashes:         1: 5hwHyVFIjwTLOw_TOK-E135Gv1I.crl (hash: 2G+6BxIxJQgzozfn6EYcFSagJ7zxwggY7GEpKQ8fwpA=)
                          2: A34_GTeXqKfeFieH-K6SMhQYDeM.roa (hash: kMGUuf+bmu2QhGj0B3VWZCeUdZ8iNJFffakS/R7WXBo=)
                          3: aZZsOIYuWQNX6KZ6wMS1a5w6xsQ.roa (hash: sOa0dIn7uqNOrAivXJIEeikXKxFSaK1g51TxfgbbJB8=)
                          4: gJS4W1OlZX4qhqCfciLkY8-A4Yo.roa (hash: t2Rys77KJN1dnN93Baik0czPJYwk4ZAeQlLRAbQNSRg=)
                          5: j_fEcmRawhfQ335R07nuk6I9mKM.roa (hash: sLXREARPQv68UDdJgDz8RPpaZ0LxhTnDeQMZPazHH7g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9d:f3:7c:79:7e:cc:75:3d:fc:25:30:98:39:a2:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e61c07c951488f04cb3b0fd338af84d77e46bf52
        Validity
            Not Before: Jun 30 13:00:32 2026 GMT
            Not After : Jul  1 13:00:32 2026 GMT
        Subject: CN=5cca8e0e6f5d131bed4271c508c1706449159a23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:03:a2:25:5c:d7:7b:75:d7:bf:d9:c5:17:a8:
                    5b:b0:44:7d:21:8b:15:5d:bc:55:f6:86:f3:23:30:
                    39:0e:e7:42:5e:57:a9:57:71:77:4d:e5:49:a0:8a:
                    f9:99:fd:90:6b:95:b9:c6:54:35:20:dd:d2:b8:d4:
                    17:1e:f1:d4:1e:3f:3b:4d:ca:07:bc:ac:22:18:28:
                    f1:b1:ae:1f:44:e6:b6:f1:3b:cf:d2:80:4c:83:ec:
                    d1:80:5b:2c:39:53:d7:ef:a2:05:3f:67:3c:21:b5:
                    11:d8:e6:1b:eb:e9:c8:15:ec:25:d3:bc:4a:7e:79:
                    8d:7f:01:3d:24:ef:fb:ab:e5:75:42:60:34:b0:4a:
                    c6:e0:b8:0a:6a:f7:94:8a:a4:d1:99:2d:48:b3:03:
                    1e:e2:de:79:75:f2:e8:0b:3d:d1:2e:d7:bc:35:e4:
                    c5:8f:68:70:e7:d2:e4:d4:c3:f7:86:53:80:6c:c1:
                    d1:c3:d9:d6:f0:38:59:72:78:0a:e3:fb:a4:b3:ff:
                    b6:92:b7:45:99:b8:26:06:5e:6a:7d:51:57:00:64:
                    fe:44:5f:1d:08:70:fd:ec:42:fc:ac:e8:bd:8c:63:
                    d6:f6:99:c9:5f:30:85:b3:ae:c1:69:58:4e:6d:47:
                    05:d3:6d:6b:7a:c8:fe:4b:4e:af:e4:52:f1:b5:12:
                    37:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:CA:8E:0E:6F:5D:13:1B:ED:42:71:C5:08:C1:70:64:49:15:9A:23
            X509v3 Authority Key Identifier:
                keyid:E6:1C:07:C9:51:48:8F:04:CB:3B:0F:D3:38:AF:84:D7:7E:46:BF:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:ba:3f:49:79:9c:cb:40:dd:4c:23:24:33:91:70:75:8f:bf:
         c7:cd:b5:6d:dd:02:24:cd:9a:c3:53:48:05:df:de:31:22:5c:
         d6:f7:dd:73:1e:e0:11:3e:83:69:cf:88:e4:25:e4:e6:c2:43:
         b9:64:b1:6c:fa:a0:f7:2e:bf:a7:7b:41:6e:c0:35:b3:dd:8c:
         92:81:20:e1:d1:5f:f8:76:b9:20:dc:ee:dc:c4:55:40:e0:7b:
         5b:4c:03:81:93:cd:ad:21:8a:57:5b:bd:15:ec:d7:6c:51:2a:
         ff:18:04:99:a2:41:04:f0:24:cf:36:8f:95:b9:00:35:a4:ec:
         0d:d5:9d:85:8e:e5:ed:42:b1:f6:61:50:43:90:dc:79:fe:09:
         37:11:39:64:2a:aa:3f:7f:c1:93:c3:e9:25:dc:43:2e:22:da:
         6d:a1:ff:94:2a:79:cf:8a:35:23:e6:cf:3f:3a:05:e3:41:fc:
         e9:ec:92:ba:7d:9f:e2:0d:39:3d:e1:5a:37:94:d7:6d:6c:4d:
         e1:05:4b:ec:a6:dd:d4:05:99:73:da:8e:86:d0:b1:e5:85:73:
         34:df:f4:3d:ec:51:05:a3:19:6f:35:8a:b0:b4:f7:ab:92:12:
         2b:4e:d5:66:65:f2:95:dc:c8:5e:5e:c3:76:94:09:1b:cd:c2:
         79:d4:47:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YnfN8eX7MdT38JTCYOaIrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MWMwN2M5NTE0ODhmMDRjYjNiMGZkMzM4YWY4NGQ3N2U0
NmJmNTIwHhcNMjYwNjMwMTMwMDMyWhcNMjYwNzAxMTMwMDMyWjAzMTEwLwYDVQQD
Eyg1Y2NhOGUwZTZmNWQxMzFiZWQ0MjcxYzUwOGMxNzA2NDQ5MTU5YTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwOiJVzXe3XXv9nFF6hbsER9IYsV
XbxV9obzIzA5DudCXlepV3F3TeVJoIr5mf2Qa5W5xlQ1IN3SuNQXHvHUHj87TcoH
vKwiGCjxsa4fROa28TvP0oBMg+zRgFssOVPX76IFP2c8IbUR2OYb6+nIFewl07xK
fnmNfwE9JO/7q+V1QmA0sErG4LgKaveUiqTRmS1IswMe4t55dfLoCz3RLte8NeTF
j2hw59Lk1MP3hlOAbMHRw9nW8DhZcngK4/uks/+2krdFmbgmBl5qfVFXAGT+RF8d
CHD97EL8rOi9jGPW9pnJXzCFs67BaVhObUcF021resj+S06v5FLxtRI3tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFzKjg5vXRMb7UJxxQjBcGRJFZojMB8GA1UdIwQY
MBaAFOYcB8lRSI8EyzsP0zivhNd+Rr9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWh3SHlWRklqd1RMT3dfVE9LLUUxMzVHdjFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yZGJhNWMtOWE5MC00MDUyLWExZWIt
NmE4NDc3Y2I2YzJhLzEvNWh3SHlWRklqd1RMT3dfVE9LLUUxMzVHdjFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8yZGJhNWMtOWE5MC00MDUyLWExZWItNmE4NDc3Y2I2YzJh
LzEvNWh3SHlWRklqd1RMT3dfVE9LLUUxMzVHdjFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbo/SXmc
y0DdTCMkM5FwdY+/x821bd0CJM2aw1NIBd/eMSJc1vfdcx7gET6Dac+I5CXk5sJD
uWSxbPqg9y6/p3tBbsA1s92MkoEg4dFf+Ha5INzu3MRVQOB7W0wDgZPNrSGKV1u9
FezXbFEq/xgEmaJBBPAkzzaPlbkANaTsDdWdhY7l7UKx9mFQQ5Dcef4JNxE5ZCqq
P3/Bk8PpJdxDLiLabaH/lCp5z4o1I+bPPzoF40H86eySun2f4g05PeFaN5TXbWxN
4QVL7Kbd1AWZc9qOhtCx5YVzNN/0PexRBaMZbzWKsLT3q5ISK07VZmXyldzIXl7D
dpQJG83CedRHuQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:52 2026 by rpki-client