Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
File:                     tgqsEEN2t53WgpCRlHt3nJia9os.mft (raw, json)
Hash identifier:          Ol1cqPoZRn5ncEKq+JDASoJAmmoPR/05iiPfp+bOADE=
Subject key identifier:   B2:52:85:06:E4:96:77:88:49:FA:8F:C4:62:A0:1F:4C:D1:51:3F:A1
Authority key identifier: B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B
Certificate issuer:       /CN=b60aac104376b79dd6829091947b779c989af68b
Certificate serial:       019EC0DBC954CCF1E07FFA42F2291437D98E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
Manifest number:          156C
Signing time:             Sat 13 Jun 2026 12:01:29 +0000
Manifest this update:     Sat 13 Jun 2026 12:01:29 +0000
Manifest next update:     Sun 14 Jun 2026 12:01:29 +0000
Files and hashes:         1: qpaxq7ZhsWj2r4DwD72krm1lajU.roa (hash: MqKBfCOBRTEgrXSIFmc+vLs4pABsdPRMHJhH8wTcfXk=)
                          2: tgqsEEN2t53WgpCRlHt3nJia9os.crl (hash: 9VxGNZ6uQ7igo6bsqHyq3hOn97FdJkMRmIE0CuXmcZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 12:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:c9:54:cc:f1:e0:7f:fa:42:f2:29:14:37:d9:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b60aac104376b79dd6829091947b779c989af68b
        Validity
            Not Before: Jun 13 12:01:29 2026 GMT
            Not After : Jun 14 12:01:29 2026 GMT
        Subject: CN=b2528506e496778849fa8fc462a01f4cd1513fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bf:05:16:02:84:f3:30:1c:d6:8d:a1:9c:e5:
                    eb:cc:aa:1a:92:a0:0b:40:dd:4b:91:be:d5:f7:a0:
                    9c:aa:7f:31:3b:1a:38:5c:ff:fd:f4:30:ce:48:2b:
                    8c:dd:e8:20:00:56:3e:bc:21:c0:d2:09:70:8d:b2:
                    7d:b8:53:9e:4f:ca:dc:31:56:fb:a9:fc:fd:9e:2c:
                    f6:33:4f:56:60:41:a4:3d:78:f6:5a:c2:a1:bc:c1:
                    47:7d:02:38:a9:32:08:39:79:d2:cb:5d:fd:a7:82:
                    78:20:45:1b:e0:bb:f8:6f:42:34:0e:a4:79:19:d5:
                    78:29:e7:d0:24:09:04:4a:59:63:de:f0:d8:ac:8d:
                    72:ef:75:70:d1:9d:d8:09:e7:90:78:35:bf:1c:80:
                    46:4b:30:47:05:56:25:81:bd:eb:73:6c:3c:ef:13:
                    d6:2a:67:aa:8e:bc:08:28:eb:58:cd:d3:83:42:da:
                    e8:82:72:f3:53:4c:71:63:06:44:e1:f2:01:c8:6a:
                    ae:cc:0a:3b:67:ce:9e:c4:20:72:8a:69:5c:ac:59:
                    0d:ff:a1:8a:3a:e1:a4:f4:b9:ee:6e:c9:be:bb:1b:
                    10:ec:64:5a:2a:82:00:a4:71:1f:12:a1:35:5c:cb:
                    9f:6b:a3:ed:19:5e:e5:d6:12:37:6e:ab:9c:52:5d:
                    61:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:52:85:06:E4:96:77:88:49:FA:8F:C4:62:A0:1F:4C:D1:51:3F:A1
            X509v3 Authority Key Identifier:
                keyid:B6:0A:AC:10:43:76:B7:9D:D6:82:90:91:94:7B:77:9C:98:9A:F6:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgqsEEN2t53WgpCRlHt3nJia9os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eabb9a-9a07-4867-970b-2b1da624f7bc/1/tgqsEEN2t53WgpCRlHt3nJia9os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:f0:71:22:e5:7d:e6:30:cb:55:a5:a8:0c:34:0a:d3:c3:b0:
         59:4f:fb:60:5b:f9:1d:c5:cc:20:de:03:31:cc:24:f9:24:e7:
         8a:b4:14:7d:29:39:da:65:87:0a:ee:ce:8d:59:71:aa:8f:19:
         d0:02:b6:80:60:eb:8f:03:5d:02:1b:40:f7:25:45:b7:57:3a:
         38:34:f4:b6:6a:de:ba:89:6e:17:75:b9:d1:a3:42:a7:90:ae:
         49:4c:1a:99:1f:01:81:f6:39:ee:9f:44:dd:68:e2:34:23:c8:
         b1:5c:d1:f7:8b:e9:e6:9a:0d:0f:af:01:63:07:ae:9f:b2:e3:
         ff:cd:68:5a:3f:52:9b:7e:7b:60:57:de:85:b7:d0:94:ef:5d:
         92:b1:ab:56:d3:bd:78:70:1b:88:df:10:a9:6b:26:9e:d3:8c:
         1a:6e:2f:ae:5c:f4:03:f3:78:28:a8:a6:6a:f9:6f:b9:95:75:
         68:8f:de:50:1a:08:9e:6d:6f:4f:be:4e:58:15:9b:7d:b9:b8:
         da:1a:60:b5:b9:b4:56:7c:40:96:b1:a7:fe:4e:e7:dc:37:2c:
         6e:25:4e:8b:fd:e3:8a:fd:59:73:66:8f:da:80:66:e9:3b:c9:
         38:73:e4:17:b9:0d:a7:20:2f:7d:9b:dd:2e:25:71:41:74:ad:
         e9:ce:b3:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7A28lUzPHgf/pC8ikUN9mOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MGFhYzEwNDM3NmI3OWRkNjgyOTA5MTk0N2I3NzljOTg5
YWY2OGIwHhcNMjYwNjEzMTIwMTI5WhcNMjYwNjE0MTIwMTI5WjAzMTEwLwYDVQQD
EyhiMjUyODUwNmU0OTY3Nzg4NDlmYThmYzQ2MmEwMWY0Y2QxNTEzZmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnb8FFgKE8zAc1o2hnOXrzKoakqAL
QN1Lkb7V96Ccqn8xOxo4XP/99DDOSCuM3eggAFY+vCHA0glwjbJ9uFOeT8rcMVb7
qfz9niz2M09WYEGkPXj2WsKhvMFHfQI4qTIIOXnSy139p4J4IEUb4Lv4b0I0DqR5
GdV4KefQJAkESllj3vDYrI1y73Vw0Z3YCeeQeDW/HIBGSzBHBVYlgb3rc2w87xPW
KmeqjrwIKOtYzdODQtrognLzU0xxYwZE4fIByGquzAo7Z86exCByimlcrFkN/6GK
OuGk9Lnubsm+uxsQ7GRaKoIApHEfEqE1XMufa6PtGV7l1hI3bqucUl1hxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJShQbklneISfqPxGKgH0zRUT+hMB8GA1UdIwQY
MBaAFLYKrBBDdred1oKQkZR7d5yYmvaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGdxc0VFTjJ0NTNXZ3BDUmxIdDNuSmlhOW9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9lYWJiOWEtOWEwNy00ODY3LTk3MGIt
MmIxZGE2MjRmN2JjLzEvdGdxc0VFTjJ0NTNXZ3BDUmxIdDNuSmlhOW9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9lYWJiOWEtOWEwNy00ODY3LTk3MGItMmIxZGE2MjRmN2Jj
LzEvdGdxc0VFTjJ0NTNXZ3BDUmxIdDNuSmlhOW9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJPBxIuV9
5jDLVaWoDDQK08OwWU/7YFv5HcXMIN4DMcwk+STnirQUfSk52mWHCu7OjVlxqo8Z
0AK2gGDrjwNdAhtA9yVFt1c6ODT0tmreuoluF3W50aNCp5CuSUwamR8BgfY57p9E
3WjiNCPIsVzR94vp5poND68BYweun7Lj/81oWj9Sm357YFfehbfQlO9dkrGrVtO9
eHAbiN8QqWsmntOMGm4vrlz0A/N4KKimavlvuZV1aI/eUBoInm1vT75OWBWbfbm4
2hpgtbm0VnxAlrGn/k7n3DcsbiVOi/3jiv1Zc2aP2oBm6TvJOHPkF7kNpyAvfZvd
LiVxQXSt6c6zBQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:29:16 2026 by rpki-client