Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
File:                     tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft (raw, json)
Hash identifier:          5g1oq/OBTSHmzlHnn20LGNtc8eFslruUpEH4CDxVmJE=
Subject key identifier:   30:5E:FF:A1:03:5D:C6:D4:D3:7B:EA:D0:42:B9:F8:E2:F4:61:0E:A7
Authority key identifier: B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
Certificate issuer:       /CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Certificate serial:       019EC148EE10DB837467F2B80010FD141422
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
Manifest number:          0CB5
Signing time:             Sat 13 Jun 2026 14:00:42 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:42 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:42 +0000
Files and hashes:         1: BOgwaBfeVQSIIpapc527zkUmHqU.roa (hash: nrw7ZZfH7PdSf3N6nWnSJG5fTiZauLCGIT/x1kU9vbo=)
                          2: iMohY32XGfMe49GauUZuk8wSe_o.roa (hash: g/W9WUEJtZqHaB3GKVuuSkkBsgjFZgj3NGrp3JQbfpw=)
                          3: taAXT03F3M3JAGdGzCZ9PUX6syw.roa (hash: fgpH3fuH0sJY/Yp9V/TwIQ+R+Yd9bAUVli6dhikUJko=)
                          4: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl (hash: ElPpDR7fsGd6CmvPQ8hxCslGw1x+7/1R9/JJ9uHpb7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:48:ee:10:db:83:74:67:f2:b8:00:10:fd:14:14:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
        Validity
            Not Before: Jun 13 14:00:42 2026 GMT
            Not After : Jun 14 14:00:42 2026 GMT
        Subject: CN=305effa1035dc6d4d37bead042b9f8e2f4610ea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f0:e5:4a:80:24:86:db:26:9a:f1:da:42:c6:
                    80:48:4c:de:15:c2:01:5c:fb:69:dd:bc:3a:ba:47:
                    3b:c6:f2:f7:e9:81:f8:bb:a7:60:8c:d0:86:d1:54:
                    c3:5f:26:24:a3:cf:84:82:59:15:4d:0b:7b:43:7b:
                    dc:42:18:85:7b:c9:af:ee:b0:75:5a:a6:36:79:09:
                    e0:48:20:8f:57:8b:09:1e:36:a1:f7:0a:ba:9e:08:
                    ca:92:4e:b9:c6:72:50:5e:03:bd:a3:81:7f:4a:3d:
                    51:36:b3:81:26:cd:c0:bf:bd:3f:97:3c:73:aa:28:
                    65:b3:0c:8a:26:f3:ae:4b:30:92:00:8b:36:35:bf:
                    45:a9:96:b1:93:8d:fe:3b:d6:83:ed:5c:a4:85:b6:
                    88:fa:c1:3e:d0:ac:c4:81:67:25:7d:11:a0:9a:56:
                    17:9d:2b:70:19:86:19:b8:ea:77:d4:db:37:de:d2:
                    74:bb:a9:30:09:1b:c2:bd:76:92:e1:ca:a4:df:a8:
                    f1:40:ed:21:34:d3:bb:49:af:92:ab:91:a8:fb:b2:
                    aa:af:e6:58:a6:27:77:24:48:c4:47:4f:09:b2:fa:
                    1c:96:19:19:a5:fa:c1:a0:ef:fe:da:d3:cb:c5:15:
                    c9:f0:c1:57:57:b1:77:99:f9:72:74:2d:0d:10:46:
                    16:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:5E:FF:A1:03:5D:C6:D4:D3:7B:EA:D0:42:B9:F8:E2:F4:61:0E:A7
            X509v3 Authority Key Identifier:
                keyid:B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:0d:5d:06:72:73:bb:a9:97:4b:29:79:a8:d2:56:56:d8:87:
         25:58:a3:d1:c5:a9:37:19:33:79:d4:9c:96:5a:20:50:82:48:
         1c:6e:79:6b:62:f2:85:76:53:9c:39:fa:32:69:31:f0:6e:e8:
         f6:bc:ae:ca:ad:b2:a4:cf:e3:cd:09:48:69:76:d7:61:48:79:
         03:85:c8:39:2e:3e:fb:5f:e1:94:1b:cf:12:64:8d:de:b7:bb:
         99:69:e6:23:2a:1c:b1:e2:19:6b:22:d9:0f:f8:25:f8:0e:f8:
         ca:34:53:ad:81:3b:be:a0:a7:38:9b:f4:0b:c0:ba:6d:95:aa:
         fc:75:1e:59:de:16:eb:63:bf:07:0b:01:02:01:09:b2:72:de:
         0e:2d:63:3b:9a:e1:66:26:08:13:36:7f:68:41:19:61:c0:7a:
         af:e0:a9:b1:51:0e:3f:4d:57:cb:98:2d:2b:95:d8:4f:94:1e:
         3e:9d:d6:f8:4c:c8:72:6d:52:03:cd:c5:24:39:cc:18:84:22:
         5b:2b:15:4e:c2:e6:9e:13:21:a2:2e:96:e1:68:fc:83:79:ba:
         c3:08:bd:97:bb:a0:24:1e:af:e6:8e:d9:9c:fe:6e:78:f9:9d:
         ac:eb:54:d1:a8:f4:bf:8d:80:57:5c:cf:de:87:19:2f:4f:2b:
         a8:87:e1:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BSO4Q24N0Z/K4ABD9FBQiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YzdkODFlYzRjNDA1NWM2NzNmZjU3MWNjYWQwN2MzYTY5
OTEwNWUwHhcNMjYwNjEzMTQwMDQyWhcNMjYwNjE0MTQwMDQyWjAzMTEwLwYDVQQD
EygzMDVlZmZhMTAzNWRjNmQ0ZDM3YmVhZDA0MmI5ZjhlMmY0NjEwZWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PDlSoAkhtsmmvHaQsaASEzeFcIB
XPtp3bw6ukc7xvL36YH4u6dgjNCG0VTDXyYko8+EglkVTQt7Q3vcQhiFe8mv7rB1
WqY2eQngSCCPV4sJHjah9wq6ngjKkk65xnJQXgO9o4F/Sj1RNrOBJs3Av70/lzxz
qihlswyKJvOuSzCSAIs2Nb9FqZaxk43+O9aD7VykhbaI+sE+0KzEgWclfRGgmlYX
nStwGYYZuOp31Ns33tJ0u6kwCRvCvXaS4cqk36jxQO0hNNO7Sa+Sq5Go+7Kqr+ZY
pid3JEjER08JsvoclhkZpfrBoO/+2tPLxRXJ8MFXV7F3mflydC0NEEYW6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBe/6EDXcbU03vq0EK5+OL0YQ6nMB8GA1UdIwQY
MBaAFLXH2B7ExAVcZz/1ccytB8OmmRBeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGNmWUhzVEVCVnhuUF9WeHpLMEh3NmFaRUY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi82NzJhMmYtYWMyYi00NjMxLWFiM2Qt
YzJiYzE0NTFmMjcxLzEvdGNmWUhzVEVCVnhuUF9WeHpLMEh3NmFaRUY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi82NzJhMmYtYWMyYi00NjMxLWFiM2QtYzJiYzE0NTFmMjcx
LzEvdGNmWUhzVEVCVnhuUF9WeHpLMEh3NmFaRUY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfw1dBnJz
u6mXSyl5qNJWVtiHJVij0cWpNxkzedScllogUIJIHG55a2LyhXZTnDn6Mmkx8G7o
9ryuyq2ypM/jzQlIaXbXYUh5A4XIOS4++1/hlBvPEmSN3re7mWnmIyocseIZayLZ
D/gl+A74yjRTrYE7vqCnOJv0C8C6bZWq/HUeWd4W62O/BwsBAgEJsnLeDi1jO5rh
ZiYIEzZ/aEEZYcB6r+CpsVEOP01Xy5gtK5XYT5QePp3W+EzIcm1SA83FJDnMGIQi
WysVTsLmnhMhoi6W4Wj8g3m6wwi9l7ugJB6v5o7ZnP5uePmdrOtU0aj0v42AV1zP
3ocZL08rqIfhbw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:57:54 2026 by rpki-client