Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
File:                     TTAqLdUXpho7lSdG8u6fvkNtY0k.mft (raw, json)
Hash identifier:          fPqHIRqFDjOH0SIvaeoPi+ft4xeLHN0QOpMzxsCwkhA=
Subject key identifier:   CC:BA:68:6E:2A:7C:88:1C:64:C3:05:92:68:89:7E:2E:6D:95:53:B5
Authority key identifier: 4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
Certificate issuer:       /CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Certificate serial:       019E2A02AEE8842A5FDBE84913A0D4DEDEEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
Manifest number:          1911
Signing time:             Fri 15 May 2026 05:01:19 +0000
Manifest this update:     Fri 15 May 2026 05:01:19 +0000
Manifest next update:     Sat 16 May 2026 05:01:19 +0000
Files and hashes:         1: MKcSKQuThlhl7-lUDky950t59Bo.roa (hash: fmVr/24w+km0YFsLjQinoWMje0xwl7aW8GTMFVmYXv4=)
                          2: Nj8TjPnXMYEU1O-KPe0uF1aj5lI.roa (hash: 2REceW8NS4BgdGbGaQMtAyU9R7M7AyhHdxZZ2m9dzWY=)
                          3: TTAqLdUXpho7lSdG8u6fvkNtY0k.crl (hash: lVD3RxqquOJ20udYlT4MPNMRtqemlJFN5sSxGhApJV4=)
                          4: XIFzkJPJ71521E26Mrj2xnc0JrU.asa (hash: VlbNe+O5EvKvAXRSzSuJJZA5UZMsBVV8HUf17LLjU3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:02:ae:e8:84:2a:5f:db:e8:49:13:a0:d4:de:de:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
        Validity
            Not Before: May 15 05:01:19 2026 GMT
            Not After : May 16 05:01:19 2026 GMT
        Subject: CN=ccba686e2a7c881c64c3059268897e2e6d9553b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1f:8c:87:dc:b9:8a:bb:8a:90:cd:32:2d:a5:
                    5d:a1:3f:3b:34:d4:a6:b5:7f:44:ea:c9:49:d4:2a:
                    82:2e:57:c6:fa:db:92:16:00:1b:d2:7f:8a:a4:31:
                    2e:2b:02:89:01:2e:21:41:49:94:d2:8b:09:8a:27:
                    cd:12:33:a0:38:9c:36:7d:ad:a4:07:07:73:79:31:
                    99:19:27:fa:92:9a:e2:0e:a9:31:22:a8:18:d0:71:
                    5e:2c:b6:89:0b:52:04:46:3e:9d:f3:a0:e3:39:34:
                    c2:95:fb:69:1c:32:24:3e:25:df:75:88:ae:f0:7a:
                    27:6b:10:90:a5:8e:6b:8f:c2:71:b3:aa:7c:cf:ab:
                    1b:cc:aa:fa:0b:85:f9:4d:b3:8f:64:8f:af:07:e3:
                    13:06:74:22:9f:5a:19:84:ae:aa:bf:b3:f7:66:04:
                    55:00:2f:c8:34:11:f4:d6:fc:a8:80:33:a5:4f:ff:
                    a3:77:35:0c:64:61:ae:eb:3d:fc:7c:78:28:a9:c1:
                    23:a9:50:89:c9:40:ee:e3:04:79:7a:38:52:25:aa:
                    bc:15:b3:91:24:55:17:a3:a2:35:00:e7:bd:14:96:
                    ba:6f:8d:7e:8b:23:49:eb:25:e1:a0:dc:14:ad:78:
                    40:a5:06:1f:32:71:7e:6b:c8:57:c0:f3:2a:6f:99:
                    7c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:BA:68:6E:2A:7C:88:1C:64:C3:05:92:68:89:7E:2E:6D:95:53:B5
            X509v3 Authority Key Identifier:
                keyid:4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:fa:64:d4:1d:62:ee:1b:bb:d9:ed:18:d5:3a:8c:21:61:cc:
         16:26:ae:38:1a:32:2c:e6:08:63:a6:43:0a:e4:6f:95:8a:3c:
         ca:6a:be:9b:00:90:9b:c5:be:0f:5f:90:bc:47:1a:07:e9:2c:
         f8:2b:21:a1:bd:da:c3:e2:ba:d5:ec:c4:14:e8:c5:9e:ae:b6:
         ae:4c:46:c5:20:ad:8b:1b:03:fa:8b:f1:42:fd:ea:ae:42:92:
         44:9e:48:7b:33:0e:61:d9:ce:20:cd:be:18:a9:dc:4e:69:70:
         d7:3b:99:a9:11:52:f7:c5:cb:29:4a:c2:e6:6b:47:20:6e:0a:
         de:6a:58:a8:d0:ca:90:01:ed:36:7f:49:96:15:7b:15:3f:f0:
         3d:4c:59:0c:1e:c2:a3:21:38:a3:c3:07:71:9f:38:00:84:06:
         94:ef:c2:b9:bc:c6:58:c0:89:af:3d:29:ad:ab:82:8d:5c:72:
         40:47:f2:19:4d:b2:70:4a:59:97:2f:69:3e:6b:0d:ee:9c:73:
         db:f0:d3:a8:e9:b1:1d:d0:1b:d9:86:3d:8f:ff:33:28:a9:06:
         3f:c2:13:f5:8f:ea:5e:9e:ac:6e:e0:f2:a3:88:7f:df:58:e8:
         53:c0:37:ea:bc:f8:a9:c4:83:78:3a:2a:d3:c3:ec:56:f1:71:
         5f:05:f7:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4qAq7ohCpf2+hJE6DU3t7rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMzAyYTJkZDUxN2E2MWEzYjk1Mjc0NmYyZWU5ZmJlNDM2
ZDYzNDkwHhcNMjYwNTE1MDUwMTE5WhcNMjYwNTE2MDUwMTE5WjAzMTEwLwYDVQQD
EyhjY2JhNjg2ZTJhN2M4ODFjNjRjMzA1OTI2ODg5N2UyZTZkOTU1M2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyh+Mh9y5iruKkM0yLaVdoT87NNSm
tX9E6slJ1CqCLlfG+tuSFgAb0n+KpDEuKwKJAS4hQUmU0osJiifNEjOgOJw2fa2k
BwdzeTGZGSf6kpriDqkxIqgY0HFeLLaJC1IERj6d86DjOTTClftpHDIkPiXfdYiu
8HonaxCQpY5rj8Jxs6p8z6sbzKr6C4X5TbOPZI+vB+MTBnQin1oZhK6qv7P3ZgRV
AC/INBH01vyogDOlT/+jdzUMZGGu6z38fHgoqcEjqVCJyUDu4wR5ejhSJaq8FbOR
JFUXo6I1AOe9FJa6b41+iyNJ6yXhoNwUrXhApQYfMnF+a8hXwPMqb5l8cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMy6aG4qfIgcZMMFkmiJfi5tlVO1MB8GA1UdIwQY
MBaAFE0wKi3VF6YaO5UnRvLun75DbWNJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFRBcUxkVVhwaG83bFNkRzh1NmZ2a050WTBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mMGRkNWYtYjk3Mi00MTBiLTk5MDct
MTY2ZmI5ZGI2ZGIzLzEvVFRBcUxkVVhwaG83bFNkRzh1NmZ2a050WTBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9mMGRkNWYtYjk3Mi00MTBiLTk5MDctMTY2ZmI5ZGI2ZGIz
LzEvVFRBcUxkVVhwaG83bFNkRzh1NmZ2a050WTBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABvpk1B1i
7hu72e0Y1TqMIWHMFiauOBoyLOYIY6ZDCuRvlYo8ymq+mwCQm8W+D1+QvEcaB+ks
+Cshob3aw+K61ezEFOjFnq62rkxGxSCtixsD+ovxQv3qrkKSRJ5IezMOYdnOIM2+
GKncTmlw1zuZqRFS98XLKUrC5mtHIG4K3mpYqNDKkAHtNn9JlhV7FT/wPUxZDB7C
oyE4o8MHcZ84AIQGlO/CubzGWMCJrz0prauCjVxyQEfyGU2ycEpZly9pPmsN7pxz
2/DTqOmxHdAb2YY9j/8zKKkGP8IT9Y/qXp6sbuDyo4h/31joU8A36rz4qcSDeDoq
08PsVvFxXwX3QQ==
-----END CERTIFICATE-----
Generated at Fri May 15 07:01:17 2026 by rpki-client