Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
File:                     TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft (raw, json)
Hash identifier:          ijFYmIpx5GgRI1BO8zs/02S0BdEc+NgE+aPUbt3IucQ=
Subject key identifier:   A9:28:05:CC:B1:6A:21:B0:5D:CB:1D:E1:21:88:2E:58:A0:E9:A7:86
Authority key identifier: 4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1
Certificate issuer:       /CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
Certificate serial:       019E9B1751143B4FEB8F0C85431A01BF35BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
Manifest number:          0A07
Signing time:             Sat 06 Jun 2026 04:00:56 +0000
Manifest this update:     Sat 06 Jun 2026 04:00:56 +0000
Manifest next update:     Sun 07 Jun 2026 04:00:56 +0000
Files and hashes:         1: 5cyx45wBsDWUW4HLBveZ_qT2fcI.roa (hash: 8zrBvmy9ZVUIH/JDFlTLI0bEMjkf56i51k/bt1Lb1pQ=)
                          2: BGnZrxh766n-RwiVyZM8GwNTqh0.roa (hash: /zWDyCDhQQVXOZUHRipaDLFDgbYWX/UYPO8XJtBp0uE=)
                          3: JI6F6sKwmFDB-S9XODKhAA660AM.roa (hash: /b/qNAizl4V5sFYHPlaPbBReehGSPPstai3HlyE9iGo=)
                          4: OB0voxOvgqvD6w4CwDmCo19dJlY.roa (hash: 9mhFY39YjN1Cc/funyTGbxD0WJvEdMakoR8u2Fsujz0=)
                          5: TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl (hash: xABUORt3JreJPufGnLyAHu/MRKRRChXN18Psaafdhwk=)
                          6: X14l7kvlYYBF3EHNWSg-svsFuOQ.roa (hash: Y9BNprLjsgal1cKXYYlZbO0fiea/j/rMdHY3dC/wqFY=)
                          7: sGobVjVtmpTG3eIQoRngSBlxcMU.roa (hash: UMoTBGpuj0hrOh47PvNUlOhwfEbv/t4MSoG5XZ2RuSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 04:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9b:17:51:14:3b:4f:eb:8f:0c:85:43:1a:01:bf:35:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
        Validity
            Not Before: Jun  6 04:00:56 2026 GMT
            Not After : Jun  7 04:00:56 2026 GMT
        Subject: CN=a92805ccb16a21b05dcb1de121882e58a0e9a786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a4:8e:8c:d1:1e:89:7d:82:d3:34:ab:c6:47:
                    46:88:b5:2a:c8:7e:f1:ef:a0:27:40:6f:90:39:f9:
                    99:8b:d4:93:78:5b:da:c9:16:ba:26:5d:b7:03:e1:
                    c9:de:a3:a7:29:a4:50:84:c2:fb:f4:64:b2:64:f9:
                    5e:6d:be:83:b6:6d:85:f9:19:88:87:68:5d:22:12:
                    23:5a:92:97:2e:8c:f7:77:dc:f9:27:cc:f7:11:22:
                    12:1d:c8:a4:f3:08:72:87:24:af:fc:85:63:41:2f:
                    06:ec:43:b4:87:cf:21:c2:1c:fa:b4:ec:c6:61:d4:
                    a3:9b:d9:cf:55:67:d2:92:b2:33:57:72:62:91:f9:
                    a4:7a:94:11:d1:c2:e6:83:b6:25:fb:e0:24:2f:fb:
                    42:aa:36:db:67:a9:6d:f1:1e:36:b5:e4:45:44:2f:
                    b7:c8:e1:df:4f:49:67:92:07:e6:31:22:12:80:18:
                    94:b9:a2:e6:f9:c4:38:ad:bf:63:70:00:cc:e2:0c:
                    ac:de:b5:f2:81:35:80:0b:7f:cb:94:bc:69:aa:f1:
                    f8:6e:aa:7d:ab:3e:11:a0:b8:20:f6:fb:10:e8:87:
                    c4:7d:ca:38:29:a2:3f:94:10:bf:e1:a5:1a:74:e1:
                    29:97:4e:87:cf:1e:19:99:b3:28:7f:f6:c3:b4:fa:
                    aa:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:28:05:CC:B1:6A:21:B0:5D:CB:1D:E1:21:88:2E:58:A0:E9:A7:86
            X509v3 Authority Key Identifier:
                keyid:4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:11:a7:c8:66:bf:95:f6:0e:67:b6:68:84:ee:92:fe:64:f7:
         09:e8:45:e4:58:a7:b1:2d:6f:9e:0a:b4:37:c9:f9:d5:30:ae:
         83:54:9c:3f:18:53:d6:6f:91:e5:c9:82:53:63:ca:aa:fe:86:
         a1:25:60:62:a4:a4:e9:2a:26:ad:2a:76:e5:33:03:d3:bc:29:
         88:d4:c4:ca:1b:2e:a4:17:43:23:9f:2f:ff:4c:b7:fb:c5:f0:
         3c:eb:81:ea:1a:ea:37:e2:28:f0:a4:2e:7d:0e:cb:30:0e:5e:
         dd:bd:11:49:60:f4:ec:f5:a0:e9:2b:0c:d4:c5:66:92:cb:aa:
         99:9b:35:a7:09:e9:b2:d7:e9:b1:06:24:6b:17:44:41:47:cb:
         83:6d:7f:64:2f:6e:28:dc:4e:87:08:ff:7c:61:82:cf:fa:41:
         9e:ed:97:ce:90:57:0c:9c:94:d4:bd:58:9f:f5:ab:99:20:e5:
         ef:d6:37:71:aa:e9:4d:1b:2a:92:4f:83:18:54:f5:9f:4a:c1:
         00:2c:92:58:fc:df:1d:4c:75:7e:d8:8b:bd:86:35:fd:a2:53:
         e2:df:65:61:24:d0:23:aa:5d:b6:f3:bf:65:7b:53:84:aa:e6:
         6f:51:21:e2:54:9b:5d:08:bc:2c:19:13:9c:20:b6:87:2d:eb:
         3e:05:17:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6bF1EUO0/rjwyFQxoBvzW+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMzc4OWVjZjY3ZTA0Mjk4YzVlZTQ0YzY3ZDhmYjdmNWQ2
ZDk1YTEwHhcNMjYwNjA2MDQwMDU2WhcNMjYwNjA3MDQwMDU2WjAzMTEwLwYDVQQD
EyhhOTI4MDVjY2IxNmEyMWIwNWRjYjFkZTEyMTg4MmU1OGEwZTlhNzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKSOjNEeiX2C0zSrxkdGiLUqyH7x
76AnQG+QOfmZi9STeFvayRa6Jl23A+HJ3qOnKaRQhML79GSyZPlebb6Dtm2F+RmI
h2hdIhIjWpKXLoz3d9z5J8z3ESISHcik8whyhySv/IVjQS8G7EO0h88hwhz6tOzG
YdSjm9nPVWfSkrIzV3JikfmkepQR0cLmg7Yl++AkL/tCqjbbZ6lt8R42teRFRC+3
yOHfT0lnkgfmMSISgBiUuaLm+cQ4rb9jcADM4gys3rXygTWAC3/LlLxpqvH4bqp9
qz4RoLgg9vsQ6IfEfco4KaI/lBC/4aUadOEpl06Hzx4ZmbMof/bDtPqq6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkoBcyxaiGwXcsd4SGILlig6aeGMB8GA1UdIwQY
MBaAFEw3iez2fgQpjF7kTGfY+39dbZWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVERlSjdQWi1CQ21NWHVSTVo5ajdmMTF0bGFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC83ZWQ3YjEtYjhmMy00M2YzLTk2ZTMt
MWRjNTRkMWMwM2EzLzEvVERlSjdQWi1CQ21NWHVSTVo5ajdmMTF0bGFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC83ZWQ3YjEtYjhmMy00M2YzLTk2ZTMtMWRjNTRkMWMwM2Ez
LzEvVERlSjdQWi1CQ21NWHVSTVo5ajdmMTF0bGFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyxGnyGa/
lfYOZ7ZohO6S/mT3CehF5FinsS1vngq0N8n51TCug1ScPxhT1m+R5cmCU2PKqv6G
oSVgYqSk6SomrSp25TMD07wpiNTEyhsupBdDI58v/0y3+8XwPOuB6hrqN+Io8KQu
fQ7LMA5e3b0RSWD07PWg6SsM1MVmksuqmZs1pwnpstfpsQYkaxdEQUfLg21/ZC9u
KNxOhwj/fGGCz/pBnu2XzpBXDJyU1L1Yn/WrmSDl79Y3carpTRsqkk+DGFT1n0rB
ACySWPzfHUx1ftiLvYY1/aJT4t9lYSTQI6pdtvO/ZXtThKrmb1Eh4lSbXQi8LBkT
nCC2hy3rPgUXvA==
-----END CERTIFICATE-----
Generated at Sat Jun 6 12:42:41 2026 by rpki-client