Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft
File:                     tYaoZDYz6YdBEai881GKCQXyhgk.mft (raw, json)
Hash identifier:          ctWO2o0uCTnKTT/C2q14MNQV9c7Oi9e//2RA/nyvYKs=
Subject key identifier:   30:F8:C7:C6:C8:10:73:27:49:53:5D:1A:60:9B:EC:E9:B1:33:8D:E0
Authority key identifier: B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09
Certificate issuer:       /CN=b586a8643633e9874111a8bcf3518a0905f28609
Certificate serial:       019E3229C4CA0E832BAF337B1A9DA42F7560
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft
Manifest number:          14BA
Signing time:             Sat 16 May 2026 19:00:58 +0000
Manifest this update:     Sat 16 May 2026 19:00:58 +0000
Manifest next update:     Sun 17 May 2026 19:00:58 +0000
Files and hashes:         1: R_zL9EhetPG627p64jnL_1AQk_k.roa (hash: /ASm15I9YtFuL/r1IrLrMNiCv/23kZabo3hMsyygvPM=)
                          2: Zx2Ej29t4Sy3ugAdSAEr8wgh-eI.roa (hash: 6qePl3E6/9bWQI3GzNjE+NBTWrA6JE82fp1zkkf+j8o=)
                          3: gPytstS2H2DCx0G35K4nAVksneE.roa (hash: I34ZNFgqBn6ft829pIhUL9qJ7ZwAtJssKpKV0YYtJmI=)
                          4: hL4U-26oJ-d8CY7a6r3Udux4pFM.roa (hash: 8nT0Nid1k0WCSq4dufjGbFyrf1TbKzMQQr3veAEfmRs=)
                          5: jJ74mpm8B1pyvT1MNhCtSe0cxRk.roa (hash: OKs2X6l4NJ7txPZTz3RUzDrNyB2I3km6f/sNQFkFGUQ=)
                          6: tYaoZDYz6YdBEai881GKCQXyhgk.crl (hash: +fdfSa8UZoxo2omlWE2iKz7xCXpmZmsIf9BhLF80GYo=)
                          7: v_CzW-gEtbdZtpCnpKHVty7BP7s.roa (hash: FK1HiNTHGuvdh1/S7hYfIVoOC1e1CT6RxRS6KDmNYRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:29:c4:ca:0e:83:2b:af:33:7b:1a:9d:a4:2f:75:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b586a8643633e9874111a8bcf3518a0905f28609
        Validity
            Not Before: May 16 19:00:58 2026 GMT
            Not After : May 17 19:00:58 2026 GMT
        Subject: CN=30f8c7c6c810732749535d1a609bece9b1338de0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:eb:15:50:6f:10:f8:69:97:be:0e:45:91:fb:
                    d0:db:51:d4:a1:97:fe:fa:35:7e:25:c9:a1:57:c5:
                    41:a7:03:77:8a:df:91:83:35:9b:1f:e4:db:c3:45:
                    48:3c:43:f6:d9:32:1e:16:3a:fd:41:ec:82:98:e1:
                    94:cf:03:85:fe:38:26:8d:73:fc:7f:0c:b1:42:32:
                    ed:24:77:94:d7:65:37:8d:0e:85:62:03:27:b0:b0:
                    e5:98:15:32:2d:f6:65:da:ae:92:eb:c8:90:14:30:
                    ba:96:23:4f:2b:e8:d3:1b:55:b6:5a:a3:ae:ea:81:
                    e3:d0:3a:9e:25:f4:62:b4:eb:80:ab:1b:81:a3:af:
                    b5:87:dc:8f:cc:30:8f:85:a2:d2:66:03:de:b7:43:
                    72:bb:5c:1e:8b:2b:a4:b3:cf:3c:8c:5b:93:f8:43:
                    e9:af:d8:a2:f2:59:77:3e:3d:49:d6:a1:ba:26:46:
                    99:99:f2:b0:09:52:56:39:5e:46:f2:3f:14:df:8a:
                    e9:b2:c4:38:02:ec:a2:3b:ee:06:f1:00:e9:54:64:
                    98:1e:fe:85:70:93:8c:34:36:56:6f:56:f1:b0:20:
                    d2:99:ba:2e:e3:1b:d1:d5:09:1e:ec:44:98:9d:0a:
                    41:46:13:b3:fd:76:84:6b:30:2f:76:05:79:e9:dc:
                    39:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F8:C7:C6:C8:10:73:27:49:53:5D:1A:60:9B:EC:E9:B1:33:8D:E0
            X509v3 Authority Key Identifier:
                keyid:B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:b3:b7:76:13:3d:6a:0b:96:29:c4:ad:dc:e3:33:ae:a4:66:
         2e:04:d6:64:6b:f3:82:67:77:9a:aa:fb:6b:46:35:50:ee:35:
         2e:56:c0:ef:38:82:64:61:7f:88:5c:20:7a:57:31:b0:b3:0f:
         16:ba:f8:50:c9:52:d9:36:19:c4:a0:6b:c4:40:2d:16:34:3d:
         e3:d2:83:7f:48:6a:d0:d7:d2:f6:2e:0a:1b:96:c7:f3:92:e2:
         0e:14:99:05:de:91:c9:2c:3d:a7:20:ac:7a:6a:1e:55:41:cb:
         7b:f0:c1:84:28:83:63:fc:2d:5c:6e:34:96:f9:75:84:0d:53:
         26:9f:c5:7f:db:19:11:6c:53:51:53:fa:e4:94:4d:10:ea:9b:
         e0:de:59:8b:36:e2:29:6f:15:b6:c3:5e:9c:f1:3f:79:1b:3a:
         e4:bf:bd:39:cb:cf:1f:f4:62:27:7e:08:2a:68:2a:28:c0:9a:
         d2:7e:e2:de:ef:73:a0:e2:1b:bb:b3:2c:cf:33:be:a9:1b:7e:
         38:0f:36:96:e0:d1:fa:5e:97:7d:ba:64:5d:5e:31:55:2f:4f:
         03:49:cd:8c:cb:86:75:8f:34:d9:a2:c3:90:ae:74:ea:ae:06:
         2a:46:58:52:2a:93:18:5b:78:29:e6:73:1c:99:b8:f6:dc:06:
         ab:a0:62:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:15:00 2026 by rpki-client