Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft
File:                     tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft (raw, json)
Hash identifier:          +sl2lXepLbZg/X6tqV58/j0sjSjQLcdYanF/XOwEblI=
Subject key identifier:   54:77:8E:53:44:BF:AB:D2:8C:EB:F3:FA:41:03:83:75:42:0A:7E:38
Authority key identifier: B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A
Certificate issuer:       /CN=b6f3db35659133315d2fcf93058dce350a4cb17a
Certificate serial:       019FA907531977433B48A360E855BE27810D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft
Manifest number:          03CE
Signing time:             Tue 28 Jul 2026 14:00:57 +0000
Manifest this update:     Tue 28 Jul 2026 14:00:57 +0000
Manifest next update:     Wed 29 Jul 2026 14:00:57 +0000
Files and hashes:         1: 1-Fy84YC95r-bQW2cLl79V6F_YT4.roa (hash: gL15S7gQEZVfvb5bxwrY+zQzlzYDYNRTFbb19+x9mOU=)
                          2: 1-Nznx-18fNZ6F7fV7FWsvpQVpSk.roa (hash: ESa0OQif8LkNT9zKRORM4Qe3nNaXNgqNLhdo7JNem/0=)
                          3: 2fYLBv1U0Aal5HtFShitrMTODDk.roa (hash: 2/V+b6fricNVBwCToj237iqhy26fLac2r/viReW4GF4=)
                          4: 3UqTULNUjwAb8aM5tZWDkdsXWeo.roa (hash: LLkvKetTDyJdMXPZuYokaJPjJ58hhOZl6BKgzGKR4fE=)
                          5: 4eZ7bkmpJQiebKtBTXoYVZg6Ldg.roa (hash: +qSceZV6AJUPDL56rity8Lx2SMr8wkGezaj/ssbWib4=)
                          6: 5A-xAaitVd-Z-3EM0tcDIKZtoa0.roa (hash: rvE7dA9kE2RGdYWQzFMr+Rr8fFZi5luB0pquTynO3s8=)
                          7: 9tWF1GqvjRro3KCeTjhlXGOeJnk.roa (hash: teh4jlkHAaykmKjheyxnAjMWR2tE22/CA39+lQwLfBY=)
                          8: AAN_C8py2EA1n7GC7uysYX9C8eI.roa (hash: YTXGhX9lVZicuBLsjZQtboD3S2P+2J1oVo6LxafsTbY=)
                          9: Aw2zWYgv8W7CwrMsEePdbTsLvok.roa (hash: wEinvm1qao+9BCRR0fnnIbv5tbDhJ2a5pDYCtrsJwPc=)
                          10: HTIxoi8WyFSrHeUOWzzUiEIhzDk.roa (hash: cd0RecHzNsbQYeDphiQhrKlq2//otbl1g44Ke+zy6bw=)
                          11: HwCEkBXkDVGb_trROXqUO3InBZs.roa (hash: 4VqvdzlCii9J+rZ10d2Ty8zbIKLGsNMqZiNczN/lH5o=)
                          12: J3Irj20a5Nlbymwp_tuM6NwpZGk.roa (hash: JOo4UjGWzNEE5RC1ZV6KYebK8zPHqC8OTRdKUFsxrbc=)
                          13: TIVfVbHfouWC6xhaqaOe2rROKk4.roa (hash: f7pxBjbhOpubYs4a19slbS3M7w5nVBiYFx5na8V322c=)
                          14: W-hqX4V_eWCdg6_rVRWyKKwNsZo.roa (hash: FbBn+Y+2aBjmifhJcGgHM6wc4kqUDt9aYkj9YzgXnQo=)
                          15: enXU2NRbrmUSLj3aNd49w6CB9kw.roa (hash: bqlmejBH4um+OhcSoaSwzujrI/A1SFNyu4se8eX8Jy8=)
                          16: fMecL_p_XorOu-OBjgfyWEuIE2g.roa (hash: E6t0K2Pr40cejujMiJaL8HUBY8+SoeQqKn7sy6Ra0fA=)
                          17: hTbfi8iyqpyBUx58enPyCnAk8B4.roa (hash: iR4m3I4+fi5SXyKVTPF8tJekzYjESRlBnoPf8B3mZQY=)
                          18: hnOMcA3FLHrspCaukH2G2BOpT8A.roa (hash: lcUqSg3j84OiYjox0KKVZ3oU4xCrQOPVs8tFQBrKuF4=)
                          19: lI-SGy6V9gbYheStfoup00TtjDg.roa (hash: j9/ph3cCY16/8Ag7j6nb1Eljp7GEHMNtLj6G3JeZuhg=)
                          20: ma_hJ5Go12WDQL6E3MOLLSFUGZg.roa (hash: ri5qcBP3AFkKJ9Kz9G4biTaRxnIVuPjswlV7TfCNoUM=)
                          21: tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl (hash: aeXFnVHFhokiSt/7hHJaaClaWi3AeDWJxZIjrhlmhfs=)
                          22: xAs-bndcqPd0AUG3p2gqYtNCwKs.roa (hash: RlwLGxg+e7W2Q6yDLdFrjAGx+ZccxU5PdajeFC3InjA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:07:53:19:77:43:3b:48:a3:60:e8:55:be:27:81:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f3db35659133315d2fcf93058dce350a4cb17a
        Validity
            Not Before: Jul 28 14:00:57 2026 GMT
            Not After : Jul 29 14:00:57 2026 GMT
        Subject: CN=54778e5344bfabd28cebf3fa41038375420a7e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7f:ec:83:52:ff:f5:6f:94:ab:a0:53:dc:fb:
                    b3:28:f7:37:46:07:41:5c:d7:5b:36:c2:63:97:e7:
                    d7:1c:4b:93:01:4a:a7:74:98:d1:27:21:c1:7e:83:
                    d5:37:38:2f:94:d4:fc:16:65:56:50:91:9b:69:f4:
                    7d:7d:26:4d:a2:32:69:6a:0c:9b:2d:7b:bc:a9:1b:
                    3a:5b:00:84:b2:6b:af:98:e4:0a:d0:1a:ca:61:f0:
                    75:8b:78:d7:db:37:49:0e:d7:bb:f7:b1:ee:02:73:
                    bc:90:5e:83:e6:f8:d8:a2:72:06:24:cf:e0:15:f1:
                    c5:aa:f2:49:9d:36:97:a1:aa:b4:33:07:1a:0f:71:
                    e7:57:73:cc:33:8e:17:e3:b4:36:af:c3:9e:5c:90:
                    00:ac:77:3c:db:33:d5:a2:54:81:36:08:8c:d0:54:
                    c5:86:f3:a8:46:6c:23:5b:df:9b:c8:1f:c1:47:1c:
                    59:d8:61:d8:0b:5f:fc:e8:26:ed:45:da:7e:df:4d:
                    4d:f2:a1:0d:e5:6d:4d:02:5e:24:36:1d:40:4c:e8:
                    86:83:f2:e6:ca:61:96:0e:26:e3:a5:c6:14:59:c7:
                    ce:2e:4d:80:0b:cc:56:d3:0e:02:a0:4a:1b:c6:d7:
                    d3:f9:47:83:f0:1a:b3:f7:bb:2a:94:ec:92:d6:93:
                    93:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:77:8E:53:44:BF:AB:D2:8C:EB:F3:FA:41:03:83:75:42:0A:7E:38
            X509v3 Authority Key Identifier:
                keyid:B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:d0:71:47:b9:b2:f8:61:7a:8e:4c:5e:6c:d6:40:c9:3b:01:
         85:8b:5b:38:52:9f:ec:7a:87:c0:db:71:89:8c:09:e2:7c:d8:
         6b:9c:36:a9:36:2f:f5:fc:60:6d:1e:64:4a:21:e4:3b:e3:3c:
         67:ff:27:dc:8c:a3:cb:e2:7b:2a:72:ed:eb:7f:94:20:15:12:
         97:4f:b9:c8:6e:46:00:1d:12:1a:68:d2:e6:6f:00:c8:c7:33:
         f1:98:37:ef:4b:19:bb:4a:77:32:f1:5d:87:4e:f7:c4:ba:a2:
         ae:10:34:f9:06:03:7e:1d:c8:1a:a8:19:13:a0:30:16:a5:d1:
         34:99:df:df:77:3a:7e:48:32:2a:78:e3:58:6d:95:0a:12:e8:
         54:6b:63:34:50:b7:42:f3:1d:db:28:d0:73:c9:6c:78:89:90:
         63:ad:ec:44:42:5b:a3:46:c0:c1:89:93:e9:93:ce:e1:cf:02:
         2b:85:23:b6:a7:ed:d3:67:86:23:5f:64:c5:79:c6:9b:77:24:
         0f:53:64:8d:fa:85:76:ae:ed:18:11:b5:1f:52:f5:11:62:c0:
         9a:f6:1e:0e:7f:90:5e:6f:c7:75:53:03:22:53:4a:0e:a3:48:
         42:9f:ed:6b:a6:b8:bb:33:b9:d3:19:1b:9c:15:8a:13:68:42:
         26:b9:02:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:17:25 2026 by rpki-client