Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
File:                     TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft (raw, json)
Hash identifier:          Ft53JyEsF7g1VQHMlOvRvoQZZDqOiNdCa+fzke8Xnjs=
Subject key identifier:   FD:DF:5B:F2:94:9D:F5:AC:96:CB:B6:5E:C9:3E:D9:B6:20:30:94:7E
Authority key identifier: 4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
Certificate issuer:       /CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Certificate serial:       019CECA6C643B3AE6DE71630778B78BEF1A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
Manifest number:          1556
Signing time:             Sat 14 Mar 2026 14:01:18 +0000
Manifest this update:     Sat 14 Mar 2026 14:01:18 +0000
Manifest next update:     Sun 15 Mar 2026 14:01:18 +0000
Files and hashes:         1: B0kfMqpAGqXnYaMTrQLvbBjvxOk.roa (hash: YEV3wXNHcOYmzWyvVh84es9QxYCJzyckUbH9jX+YQQA=)
                          2: TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl (hash: bxKggTVpb2sNPwT8/AzXXFlp9GCekKjF5Jp42fVXGoQ=)
                          3: YA-H3bfE3r6ihPzDZtgenypbPbg.roa (hash: pUTlAIWeqA52q3MAJOIPYUZ8tJQ/eIlG+BT4v4cwsGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Mar 2026 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ec:a6:c6:43:b3:ae:6d:e7:16:30:77:8b:78:be:f1:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
        Validity
            Not Before: Mar 14 14:01:18 2026 GMT
            Not After : Mar 15 14:01:18 2026 GMT
        Subject: CN=fddf5bf2949df5ac96cbb65ec93ed9b62030947e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3b:3a:40:5a:81:7d:49:20:a4:29:e8:10:09:
                    d7:d8:02:49:e1:b9:d6:de:1e:f0:2a:69:0d:dd:71:
                    af:af:b9:3c:b1:bd:6f:50:e2:81:f2:16:94:a6:f2:
                    e6:73:24:e0:ac:d8:8d:07:73:45:9c:48:38:87:b7:
                    25:0a:71:a4:d1:e5:86:bb:d7:24:fb:c8:a1:98:ab:
                    19:d9:a0:b8:dd:32:2a:0a:2b:d2:14:7f:cb:bb:69:
                    5f:5d:a9:1e:10:a5:03:31:dc:26:fb:b7:98:3d:90:
                    8a:d8:f3:17:83:a9:06:e0:08:61:70:3b:e6:38:3a:
                    75:94:98:e5:8a:9f:85:27:4b:9d:2c:0d:9f:a5:2a:
                    0b:71:60:65:56:85:19:0e:33:1e:c3:b0:79:9a:16:
                    63:4b:e4:c6:85:4c:a2:77:45:52:d6:26:b2:ed:4e:
                    98:83:cd:e9:6d:af:8f:73:de:e2:f5:92:f6:0a:f9:
                    51:2b:da:57:fb:49:71:64:3f:a1:34:ae:3f:98:64:
                    29:18:0c:f8:91:1e:d3:71:91:ff:8c:78:91:92:26:
                    e1:5d:bb:d6:34:57:fd:ed:81:7c:7c:35:57:5b:31:
                    b9:98:f7:b6:76:29:ac:68:7e:84:cb:2e:77:8a:0c:
                    0b:e8:fa:10:c9:c6:1a:02:12:0e:5d:66:53:7a:55:
                    d5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DF:5B:F2:94:9D:F5:AC:96:CB:B6:5E:C9:3E:D9:B6:20:30:94:7E
            X509v3 Authority Key Identifier:
                keyid:4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:83:a7:73:b5:0e:9f:2b:d3:cd:ec:12:d2:24:2a:7b:83:67:
         8b:f0:53:57:b9:2f:40:e8:50:20:13:86:10:09:84:6b:8b:a4:
         13:a7:4d:75:02:8f:30:3d:9e:da:26:ba:39:39:ba:3b:c2:65:
         48:b2:ee:c5:d2:c7:d7:0a:0d:59:4c:fc:5b:97:d0:98:ce:82:
         dd:e7:45:27:81:61:cf:1e:c3:21:fe:9c:35:f6:87:02:44:03:
         16:e1:a3:0d:c7:cd:66:a8:6e:15:fd:9e:0a:f9:65:37:5b:ab:
         eb:32:b7:cb:bc:42:2e:4e:e7:0b:7f:bc:3e:33:5a:54:4e:25:
         55:ec:ea:e5:fc:c8:a4:35:a2:5f:f4:7c:7d:b0:a8:30:c1:9e:
         86:4e:da:ab:29:28:91:17:e1:ba:f1:b8:69:b5:a4:33:a8:4a:
         b9:93:5e:4a:eb:35:29:c0:1b:16:9b:80:ed:fc:13:03:83:e0:
         2e:f3:d3:36:3d:c0:f2:f4:02:b5:1d:47:75:79:cf:3a:e4:c7:
         8c:05:c6:ed:fe:51:09:14:97:5a:ff:97:ee:d2:1a:fd:12:d6:
         c5:66:9a:80:64:a3:0b:55:6a:50:bd:ba:a2:8e:d4:ac:32:90:
         cb:51:34:e8:97:fa:7b:92:80:82:ab:ed:ee:a0:36:11:35:89:
         10:fa:47:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzspsZDs65t5xYwd4t4vvGhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMWIwYzQwOTY5MDgwOTU3ZmNjZWUxZmI4YTNmYjRiYjM4
YmY1ZGMwHhcNMjYwMzE0MTQwMTE4WhcNMjYwMzE1MTQwMTE4WjAzMTEwLwYDVQQD
EyhmZGRmNWJmMjk0OWRmNWFjOTZjYmI2NWVjOTNlZDliNjIwMzA5NDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ds6QFqBfUkgpCnoEAnX2AJJ4bnW
3h7wKmkN3XGvr7k8sb1vUOKB8haUpvLmcyTgrNiNB3NFnEg4h7clCnGk0eWGu9ck
+8ihmKsZ2aC43TIqCivSFH/Lu2lfXakeEKUDMdwm+7eYPZCK2PMXg6kG4AhhcDvm
ODp1lJjlip+FJ0udLA2fpSoLcWBlVoUZDjMew7B5mhZjS+TGhUyid0VS1iay7U6Y
g83pba+Pc97i9ZL2CvlRK9pX+0lxZD+hNK4/mGQpGAz4kR7TcZH/jHiRkibhXbvW
NFf97YF8fDVXWzG5mPe2dimsaH6Eyy53igwL6PoQycYaAhIOXWZTelXV0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3fW/KUnfWslsu2Xsk+2bYgMJR+MB8GA1UdIwQY
MBaAFEwbDECWkICVf8zuH7ij+0uzi/XcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEJzTVFKYVFnSlZfek80ZnVLUDdTN09MOWR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9lZTI5YTYtNjkxZC00YjBjLWFkNjMt
OTRjODI1NGJkM2I3LzEvVEJzTVFKYVFnSlZfek80ZnVLUDdTN09MOWR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9lZTI5YTYtNjkxZC00YjBjLWFkNjMtOTRjODI1NGJkM2I3
LzEvVEJzTVFKYVFnSlZfek80ZnVLUDdTN09MOWR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYoOnc7UO
nyvTzewS0iQqe4Nni/BTV7kvQOhQIBOGEAmEa4ukE6dNdQKPMD2e2ia6OTm6O8Jl
SLLuxdLH1woNWUz8W5fQmM6C3edFJ4Fhzx7DIf6cNfaHAkQDFuGjDcfNZqhuFf2e
CvllN1ur6zK3y7xCLk7nC3+8PjNaVE4lVezq5fzIpDWiX/R8fbCoMMGehk7aqyko
kRfhuvG4abWkM6hKuZNeSus1KcAbFpuA7fwTA4PgLvPTNj3A8vQCtR1HdXnPOuTH
jAXG7f5RCRSXWv+X7tIa/RLWxWaagGSjC1VqUL26oo7UrDKQy1E06Jf6e5KAgqvt
7qA2ETWJEPpHZg==
-----END CERTIFICATE-----
Generated at Sat Mar 14 19:18:29 2026 by rpki-client