Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.mft
File:                     TBN-znNflLMWcSERPY_aTWvzuIg.mft (raw, json)
Hash identifier:          LlB4QdAZbrfg4N9zI5C1ac/kH20BMIFJLi33r0QbJZA=
Subject key identifier:   A1:82:A5:F2:4E:D3:7E:B5:3B:68:64:7D:C1:95:50:F9:83:F8:19:92
Authority key identifier: 4C:13:7E:CE:73:5F:94:B3:16:71:21:11:3D:8F:DA:4D:6B:F3:B8:88
Certificate issuer:       /CN=4c137ece735f94b3167121113d8fda4d6bf3b888
Certificate serial:       019EC06DE5E01102B11EBDB9936234E7BA5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TBN-znNflLMWcSERPY_aTWvzuIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.mft
Manifest number:          FF
Signing time:             Sat 13 Jun 2026 10:01:28 +0000
Manifest this update:     Sat 13 Jun 2026 10:01:28 +0000
Manifest next update:     Sun 14 Jun 2026 10:01:28 +0000
Files and hashes:         1: 2ZBsXbCU5rMtEsQWxt1XYURH2I4.asa (hash: JRezVq/F+weQjLBxYG86li7cHkKnykOs/59enczYXBE=)
                          2: TBN-znNflLMWcSERPY_aTWvzuIg.crl (hash: X0203ijama7sUAWZSeU+eOY3AYhKZc1oNg0GKYUiPKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TBN-znNflLMWcSERPY_aTWvzuIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:e5:e0:11:02:b1:1e:bd:b9:93:62:34:e7:ba:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c137ece735f94b3167121113d8fda4d6bf3b888
        Validity
            Not Before: Jun 13 10:01:28 2026 GMT
            Not After : Jun 14 10:01:28 2026 GMT
        Subject: CN=a182a5f24ed37eb53b68647dc19550f983f81992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bf:a4:99:a4:9c:dc:f9:72:fb:fa:0f:c5:de:
                    cf:d5:7f:be:f4:59:3a:c7:f6:4f:58:71:c2:25:aa:
                    84:b3:81:cb:ae:f3:93:8d:c3:97:46:39:c5:15:56:
                    34:50:88:13:19:93:c3:bd:8f:66:a6:72:03:25:33:
                    7e:fa:af:5e:e9:8f:9f:89:b6:c4:84:cd:6e:b8:fb:
                    cf:c8:00:3e:02:98:c5:16:54:a5:36:ee:f2:b7:6e:
                    2b:c2:96:e5:86:b1:42:28:bc:e3:bd:b2:8f:8e:7b:
                    44:6e:38:5b:a3:7f:d7:6a:0f:b7:a6:c6:45:2f:83:
                    ec:a7:cf:3e:ce:b3:53:66:7b:13:c6:3d:89:9d:c7:
                    9d:fb:d0:ca:e7:de:28:3c:57:c1:db:f9:cf:26:bb:
                    8d:50:c4:d0:0d:28:90:4f:2e:df:88:6c:f9:04:c8:
                    ff:2d:16:a8:66:96:21:30:de:f3:7d:2f:89:b3:01:
                    5f:5f:ed:b7:04:2d:5e:59:e0:b9:1f:a4:b5:f2:36:
                    3b:d3:8c:a0:1f:76:6a:8a:7d:1c:30:6d:da:26:94:
                    db:48:48:ac:1e:09:f9:5f:ea:ef:ba:b2:1e:6e:49:
                    21:a3:93:10:1c:9a:ab:9e:78:30:86:62:35:8b:9a:
                    86:b6:9f:e3:7e:0e:df:f4:04:ed:58:f6:96:10:94:
                    96:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:82:A5:F2:4E:D3:7E:B5:3B:68:64:7D:C1:95:50:F9:83:F8:19:92
            X509v3 Authority Key Identifier:
                keyid:4C:13:7E:CE:73:5F:94:B3:16:71:21:11:3D:8F:DA:4D:6B:F3:B8:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBN-znNflLMWcSERPY_aTWvzuIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3b2fb1-1178-4872-b8b0-2ef22564a400/1/TBN-znNflLMWcSERPY_aTWvzuIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:4a:e8:5f:01:1c:d9:db:e6:fd:39:fc:88:8f:1c:c2:09:20:
         c5:47:f2:2d:2b:7e:f1:7f:4b:e9:36:4b:a0:3f:ee:67:2d:ce:
         4e:ea:96:e4:f6:41:78:df:30:2f:d5:da:83:c1:e9:32:8b:75:
         83:00:02:c5:6a:60:ae:01:de:56:25:a7:36:e4:b1:e0:4e:68:
         ca:2d:a0:a5:9a:ad:25:b7:b5:76:cf:02:e9:ff:60:86:90:5f:
         0e:c7:e1:41:b6:96:c9:34:7a:18:b6:d6:c6:22:85:0f:ee:d4:
         0e:a0:98:1b:44:19:7a:a1:e0:78:f0:26:b1:d1:0e:d4:3f:9a:
         4d:98:1b:ea:84:ce:17:40:a4:c3:ba:f2:ef:70:b7:8f:d1:9b:
         ff:1d:60:8c:94:de:81:a4:1f:13:f6:29:43:cc:9e:9d:fa:a5:
         1b:f0:eb:39:11:a7:34:a9:3a:9d:fe:36:99:84:65:c2:ca:2f:
         53:d1:c9:94:61:82:a6:bc:c9:a5:69:45:1a:5d:84:c3:05:7a:
         ef:07:7b:70:06:39:d8:02:04:16:3a:5e:38:10:c1:8f:c6:92:
         33:ca:ef:fe:88:92:db:f1:64:03:bc:9b:e7:a2:da:4d:d7:b9:
         dd:23:40:d0:90:44:7a:86:bd:6e:8a:0a:f1:68:7d:ce:e6:22:
         7c:03:44:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7AbeXgEQKxHr25k2I057pdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMTM3ZWNlNzM1Zjk0YjMxNjcxMjExMTNkOGZkYTRkNmJm
M2I4ODgwHhcNMjYwNjEzMTAwMTI4WhcNMjYwNjE0MTAwMTI4WjAzMTEwLwYDVQQD
EyhhMTgyYTVmMjRlZDM3ZWI1M2I2ODY0N2RjMTk1NTBmOTgzZjgxOTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmr+kmaSc3Ply+/oPxd7P1X++9Fk6
x/ZPWHHCJaqEs4HLrvOTjcOXRjnFFVY0UIgTGZPDvY9mpnIDJTN++q9e6Y+fibbE
hM1uuPvPyAA+ApjFFlSlNu7yt24rwpblhrFCKLzjvbKPjntEbjhbo3/Xag+3psZF
L4Psp88+zrNTZnsTxj2Jnced+9DK594oPFfB2/nPJruNUMTQDSiQTy7fiGz5BMj/
LRaoZpYhMN7zfS+JswFfX+23BC1eWeC5H6S18jY704ygH3Zqin0cMG3aJpTbSEis
Hgn5X+rvurIebkkho5MQHJqrnngwhmI1i5qGtp/jfg7f9ATtWPaWEJSW/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGCpfJO0361O2hkfcGVUPmD+BmSMB8GA1UdIwQY
MBaAFEwTfs5zX5SzFnEhET2P2k1r87iIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEJOLXpuTmZsTE1XY1NFUlBZX2FUV3Z6dUlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8zYjJmYjEtMTE3OC00ODcyLWI4YjAt
MmVmMjI1NjRhNDAwLzEvVEJOLXpuTmZsTE1XY1NFUlBZX2FUV3Z6dUlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8zYjJmYjEtMTE3OC00ODcyLWI4YjAtMmVmMjI1NjRhNDAw
LzEvVEJOLXpuTmZsTE1XY1NFUlBZX2FUV3Z6dUlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtUroXwEc
2dvm/Tn8iI8cwgkgxUfyLSt+8X9L6TZLoD/uZy3OTuqW5PZBeN8wL9Xag8HpMot1
gwACxWpgrgHeViWnNuSx4E5oyi2gpZqtJbe1ds8C6f9ghpBfDsfhQbaWyTR6GLbW
xiKFD+7UDqCYG0QZeqHgePAmsdEO1D+aTZgb6oTOF0Ckw7ry73C3j9Gb/x1gjJTe
gaQfE/YpQ8yenfqlG/DrORGnNKk6nf42mYRlwsovU9HJlGGCprzJpWlFGl2EwwV6
7wd7cAY52AIEFjpeOBDBj8aSM8rv/oiS2/FkA7yb56LaTde53SNA0JBEeoa9booK
8Wh9zuYifANEVQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:22:08 2026 by rpki-client