Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
File:                     Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft (raw, json)
Hash identifier:          siLgZz4pYBQ2ePoHvzhRpPB2bFq5AXWzLL57hgfdJEE=
Subject key identifier:   F0:9D:47:03:CF:9F:CA:A3:D4:0C:E4:E6:FD:09:3E:CA:81:5C:B5:68
Authority key identifier: 4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA
Certificate issuer:       /CN=4e69b402b67d75936f45dc8bc54b86814e0636ba
Certificate serial:       019E314E6F2E6D560A4C90DDADA6DC875453
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
Manifest number:          14F1
Signing time:             Sat 16 May 2026 15:01:24 +0000
Manifest this update:     Sat 16 May 2026 15:01:24 +0000
Manifest next update:     Sun 17 May 2026 15:01:24 +0000
Files and hashes:         1: LwJo-ZOAga1XsMB6kJmoJhsDKi4.roa (hash: 4U3Q5m4w5gDb99Fndaz4s602DhJvC8d4654L2Zwbqhc=)
                          2: Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl (hash: CCUY9qf3p+3mRsdfxzRBFwrTrUMnPeJUoz6PUVYLEvs=)
                          3: mazgd2rK4HfvX3Omu_5x4KeE4q0.roa (hash: VMQzYJR5enDZAjPyu/iICQfNBSPELGmMcOQZHSHcGJw=)
                          4: vMIHGFPf0heT2WpdAxKEA8H1uqY.roa (hash: Y7aS0+OiMr6KF+wJQp4D98bim2LplH1VyBIQ6kJaS6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4e:6f:2e:6d:56:0a:4c:90:dd:ad:a6:dc:87:54:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e69b402b67d75936f45dc8bc54b86814e0636ba
        Validity
            Not Before: May 16 15:01:24 2026 GMT
            Not After : May 17 15:01:24 2026 GMT
        Subject: CN=f09d4703cf9fcaa3d40ce4e6fd093eca815cb568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ed:52:42:d7:83:f7:55:ef:18:a4:c1:aa:38:
                    c7:ce:3d:a8:d3:4c:4b:bf:48:ca:72:35:bd:56:72:
                    e9:a0:e0:e4:60:ff:8c:a3:bb:f1:b4:bc:ad:e0:ac:
                    00:91:74:b4:24:45:64:d1:20:80:26:b4:cd:e9:85:
                    37:d8:41:55:b5:b9:93:3f:af:49:20:03:f5:4d:31:
                    57:f2:74:86:eb:e9:d4:25:b0:23:40:82:0b:af:0a:
                    b9:cc:e7:1d:9a:3e:08:eb:e7:0c:b8:99:aa:c1:a0:
                    e8:56:74:d3:b4:0d:bb:fa:92:d2:ed:1c:f3:c2:0b:
                    53:c7:02:16:d9:57:47:cb:63:4b:37:09:70:5e:72:
                    35:43:37:3f:ff:3a:04:53:f0:3d:2a:c3:95:bc:d2:
                    c7:26:b0:1a:06:34:2d:0a:4a:4b:86:8d:4c:c7:56:
                    e8:1a:5f:32:6a:6b:7d:23:4d:3e:57:6f:ca:de:6b:
                    0b:19:91:f0:e1:f3:07:69:6d:1a:d0:58:8a:7e:d9:
                    aa:f3:ec:16:e4:17:fb:01:10:cc:ab:17:68:3d:b0:
                    4c:48:e3:65:fe:2c:ad:c6:94:3f:f3:5b:43:e1:44:
                    b0:be:09:28:d8:82:b8:ec:ce:d4:f1:9d:f5:9b:15:
                    8c:04:b5:c5:ac:1c:27:e4:f3:07:4a:bf:57:6e:c5:
                    13:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:9D:47:03:CF:9F:CA:A3:D4:0C:E4:E6:FD:09:3E:CA:81:5C:B5:68
            X509v3 Authority Key Identifier:
                keyid:4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:f3:23:bf:41:b8:22:d9:e2:21:8e:13:dc:57:0c:a5:41:2f:
         96:2d:dc:8b:89:26:7e:74:3e:c7:fc:2d:7a:5b:0b:18:4f:61:
         fb:b3:e2:6b:a5:d7:80:1e:24:0e:64:0f:4a:d0:d6:21:49:15:
         8f:1d:47:2c:cb:9c:d3:4f:91:60:30:29:85:4a:c9:8c:2b:1d:
         f9:5f:1d:5d:d0:64:e9:bf:04:ce:9c:73:20:fc:dd:e6:3d:9b:
         2f:8d:e9:aa:37:e5:da:f0:58:10:e4:e4:87:e9:42:8f:13:da:
         f0:f6:be:1f:48:5a:aa:8f:a6:02:91:94:f6:15:37:8c:81:d8:
         af:d3:c6:f7:61:dd:e8:72:44:04:57:df:c5:d9:bc:43:c8:3b:
         67:1f:57:65:17:17:4a:a6:05:b7:e3:6f:38:c8:2d:a7:02:e5:
         8e:28:8c:0f:12:e7:47:6f:da:97:bb:b0:57:fe:a0:82:98:12:
         e0:31:fd:5f:96:e6:47:d7:94:8c:2e:2c:52:c4:05:14:c1:de:
         69:33:34:4d:21:e1:0f:de:ea:cd:49:6a:82:c5:48:6b:76:db:
         6d:be:b9:e5:16:ac:27:ea:ca:cb:9c:18:4b:85:c4:dc:57:95:
         93:5f:d5:8b:5d:a7:3a:12:5e:1c:15:5c:0d:ff:16:fa:2a:74:
         40:8b:42:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:20:36 2026 by rpki-client