Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
File:                     tfGesN1I4bJJJJCLtbaEjMFnhUY.mft (raw, json)
Hash identifier:          bmNIxlRrocpw7Yefm92dd+zS0Vb09ijEep8suIDNq+Q=
Subject key identifier:   53:51:26:A7:6B:5E:3B:46:AF:CE:56:BE:13:86:21:EF:B0:97:83:1B
Authority key identifier: B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
Certificate issuer:       /CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Certificate serial:       019FAAF534C761AF2E97ADDABE454771196A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
Manifest number:          19D4
Signing time:             Tue 28 Jul 2026 23:00:24 +0000
Manifest this update:     Tue 28 Jul 2026 23:00:24 +0000
Manifest next update:     Wed 29 Jul 2026 23:00:24 +0000
Files and hashes:         1: FCOqF_sQRgQBJURZwz5LSyaOjJ8.roa (hash: 6lS73JUDNo7BbYfLMWtS8VyH4+hvb7PzpHKXOKKSc8o=)
                          2: S_kn4DkQroHqq7HAquDXguodEnE.roa (hash: 9xxNTgjpkgjoYZUn/S2u9DKQyLLVAn0QlTy3a/LjFvI=)
                          3: tfGesN1I4bJJJJCLtbaEjMFnhUY.crl (hash: 4RF6Wp0n1oMM1Imm5cHU/tNj0aN10fBOsDovFK3Tl6Y=)
                          4: wkBj6meKGNLkzfK8dNJpio292qU.roa (hash: fCT5GXsj0OqKgF2zl8rl9o29Q7I6qVhp6IsQiy2sl9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:34:c7:61:af:2e:97:ad:da:be:45:47:71:19:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
        Validity
            Not Before: Jul 28 23:00:24 2026 GMT
            Not After : Jul 29 23:00:24 2026 GMT
        Subject: CN=535126a76b5e3b46afce56be138621efb097831b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e2:27:9d:b8:e1:c7:70:c3:ba:d8:57:74:71:
                    b0:46:8e:28:5a:a6:75:e5:dc:97:44:24:bc:c1:d4:
                    d5:35:60:d8:98:fb:87:f9:4a:0b:e5:20:2d:ae:4c:
                    bd:33:2f:19:e8:3d:83:d0:6f:20:29:cf:dc:b3:ee:
                    ef:9f:fd:fd:fa:e1:5e:42:11:a5:17:2b:67:aa:3c:
                    33:81:b8:1d:4d:d9:6b:68:18:b9:2c:69:86:e3:09:
                    14:0a:c2:1e:54:e6:22:36:63:25:27:5d:8f:b3:c4:
                    ac:07:66:c1:2d:05:72:01:ab:8d:05:97:d7:a2:30:
                    50:e3:d9:2c:e4:6f:ed:24:6c:9b:76:2b:e2:b9:8a:
                    0c:07:5c:e8:4f:a3:a9:e2:ab:03:19:8b:5a:01:00:
                    38:ef:52:9a:0e:fc:ba:14:c6:89:f6:d9:4e:04:2e:
                    2e:55:15:71:a1:9b:38:9c:b0:42:37:e9:58:72:ef:
                    d9:ea:24:ca:a4:89:75:93:20:ff:51:c6:fa:f8:3f:
                    d2:f9:93:20:25:08:73:33:94:99:50:de:3f:bd:b6:
                    7b:4a:c0:45:27:40:e8:ac:b4:69:4c:5b:3b:d2:2f:
                    46:5b:00:e0:86:74:20:65:ec:96:43:7a:02:90:54:
                    e3:1a:7d:2e:e0:a8:85:f7:5a:9b:bf:7a:05:a8:e9:
                    08:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:51:26:A7:6B:5E:3B:46:AF:CE:56:BE:13:86:21:EF:B0:97:83:1B
            X509v3 Authority Key Identifier:
                keyid:B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:33:e1:a6:aa:46:1e:b0:35:66:c3:c6:91:c9:18:76:b9:53:
         8b:3f:e4:c6:2f:80:3f:66:a0:c3:f2:3c:e5:38:85:9f:ae:2e:
         ba:39:23:c5:d4:68:77:33:7d:fd:f9:b0:66:b0:8d:b3:de:67:
         d5:0c:73:e1:8b:e1:32:1a:6a:06:4d:57:69:04:f5:f1:3b:4f:
         ce:e0:44:7e:84:b3:13:db:c7:2d:79:f8:7f:1e:3b:3e:71:f3:
         d6:c5:63:ca:60:33:75:50:7a:74:47:0c:a1:fb:58:ed:44:64:
         55:5e:e6:20:56:ab:c5:b7:49:25:dd:4d:11:72:09:6d:83:50:
         a2:d1:7d:22:cd:fa:7d:4b:34:d5:62:64:0d:a6:21:aa:20:02:
         c5:f7:90:d0:dc:fe:54:3c:c5:97:24:d4:36:44:26:c8:ef:6c:
         27:41:e3:56:00:96:7c:1d:df:0c:cd:d4:88:e9:2f:1b:c6:93:
         74:06:28:9e:4c:88:fa:81:4c:d3:6c:0c:06:a3:3c:1e:aa:9c:
         ed:ee:eb:04:36:0f:f0:a0:42:c2:06:50:ab:90:fb:cc:ea:a4:
         77:e4:2c:34:3d:47:d8:4b:6a:19:5f:f3:99:50:9b:39:6f:a4:
         be:eb:15:be:30:41:98:a8:0f:e7:14:6e:15:bd:25:32:42:17:
         2f:50:6d:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9TTHYa8ul63avkVHcRlqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1ZjE5ZWIwZGQ0OGUxYjI0OTI0OTA4YmI1YjY4NDhjYzE2
Nzg1NDYwHhcNMjYwNzI4MjMwMDI0WhcNMjYwNzI5MjMwMDI0WjAzMTEwLwYDVQQD
Eyg1MzUxMjZhNzZiNWUzYjQ2YWZjZTU2YmUxMzg2MjFlZmIwOTc4MzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOInnbjhx3DDuthXdHGwRo4oWqZ1
5dyXRCS8wdTVNWDYmPuH+UoL5SAtrky9My8Z6D2D0G8gKc/cs+7vn/39+uFeQhGl
FytnqjwzgbgdTdlraBi5LGmG4wkUCsIeVOYiNmMlJ12Ps8SsB2bBLQVyAauNBZfX
ojBQ49ks5G/tJGybdiviuYoMB1zoT6Op4qsDGYtaAQA471KaDvy6FMaJ9tlOBC4u
VRVxoZs4nLBCN+lYcu/Z6iTKpIl1kyD/Ucb6+D/S+ZMgJQhzM5SZUN4/vbZ7SsBF
J0DorLRpTFs70i9GWwDghnQgZeyWQ3oCkFTjGn0u4KiF91qbv3oFqOkIywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNRJqdrXjtGr85WvhOGIe+wl4MbMB8GA1UdIwQY
MBaAFLXxnrDdSOGySSSQi7W2hIzBZ4VGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGZHZXNOMUk0YkpKSkpDTHRiYUVqTUZuaFVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9jZTAwMWItYTRkOC00ZjBlLTgzMWQt
MzVjNjZkN2M1MjYwLzEvdGZHZXNOMUk0YkpKSkpDTHRiYUVqTUZuaFVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9jZTAwMWItYTRkOC00ZjBlLTgzMWQtMzVjNjZkN2M1MjYw
LzEvdGZHZXNOMUk0YkpKSkpDTHRiYUVqTUZuaFVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACDPhpqpG
HrA1ZsPGkckYdrlTiz/kxi+AP2agw/I85TiFn64uujkjxdRodzN9/fmwZrCNs95n
1Qxz4YvhMhpqBk1XaQT18TtPzuBEfoSzE9vHLXn4fx47PnHz1sVjymAzdVB6dEcM
oftY7URkVV7mIFarxbdJJd1NEXIJbYNQotF9Is36fUs01WJkDaYhqiACxfeQ0Nz+
VDzFlyTUNkQmyO9sJ0HjVgCWfB3fDM3UiOkvG8aTdAYonkyI+oFM02wMBqM8Hqqc
7e7rBDYP8KBCwgZQq5D7zOqkd+QsND1H2EtqGV/zmVCbOW+kvusVvjBBmKgP5xRu
Fb0lMkIXL1Bt6A==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:03:29 2026 by rpki-client