Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
File:                     Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft (raw, json)
Hash identifier:          tCMTWK+5hf4wOj+e1wgy7rxmeqjDXpe/yOEKGnmyO8k=
Subject key identifier:   B8:A1:14:23:F9:FD:E5:4B:E9:A7:47:4A:46:F4:CC:FC:F4:3B:AE:3A
Authority key identifier: 4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA
Certificate issuer:       /CN=4e69b402b67d75936f45dc8bc54b86814e0636ba
Certificate serial:       019FABD121242CAF15DDCED1996BF3BCA1EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
Manifest number:          15B5
Signing time:             Wed 29 Jul 2026 03:00:37 +0000
Manifest this update:     Wed 29 Jul 2026 03:00:37 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:37 +0000
Files and hashes:         1: LwJo-ZOAga1XsMB6kJmoJhsDKi4.roa (hash: 4U3Q5m4w5gDb99Fndaz4s602DhJvC8d4654L2Zwbqhc=)
                          2: Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl (hash: o3HS31Ou3g+nyC+1MCoaR0gHpVcxiNmw8CqdIo+UlTQ=)
                          3: mazgd2rK4HfvX3Omu_5x4KeE4q0.roa (hash: VMQzYJR5enDZAjPyu/iICQfNBSPELGmMcOQZHSHcGJw=)
                          4: vMIHGFPf0heT2WpdAxKEA8H1uqY.roa (hash: Y7aS0+OiMr6KF+wJQp4D98bim2LplH1VyBIQ6kJaS6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d1:21:24:2c:af:15:dd:ce:d1:99:6b:f3:bc:a1:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e69b402b67d75936f45dc8bc54b86814e0636ba
        Validity
            Not Before: Jul 29 03:00:37 2026 GMT
            Not After : Jul 30 03:00:37 2026 GMT
        Subject: CN=b8a11423f9fde54be9a7474a46f4ccfcf43bae3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:47:d2:18:08:da:c8:41:39:fd:0a:19:a2:88:
                    0c:7a:1b:3d:38:9b:cc:e2:33:1a:99:42:cf:5c:da:
                    59:4a:29:3b:9e:90:7b:6f:a5:27:95:73:c3:64:ac:
                    07:d5:f6:ce:2c:12:09:cf:1a:c1:78:19:78:bf:2e:
                    db:b9:bb:60:bb:a8:d0:b7:d9:fc:8b:ee:46:20:8d:
                    fe:7f:ff:8d:71:80:5f:72:99:b6:fd:bb:a5:7f:3e:
                    a5:68:54:8c:62:fe:6e:13:70:93:b0:c2:d5:f1:08:
                    82:7f:f0:63:eb:17:91:f8:6c:8a:53:9b:ae:01:20:
                    82:51:d5:31:cb:88:91:2a:3a:35:a3:04:5d:4f:4d:
                    6b:dd:e1:bf:57:57:c5:4d:93:55:3b:c1:8d:e5:62:
                    fc:ce:25:7d:cb:13:b9:04:67:ba:b3:31:bd:81:29:
                    74:29:8d:c3:c3:f0:eb:a6:b6:3c:62:94:90:7e:bc:
                    52:4c:d6:41:74:5f:a7:a2:74:80:e3:26:53:9e:cc:
                    25:9a:9f:a4:08:b8:cc:d8:9a:d8:61:fa:7b:c7:cf:
                    5a:c3:37:48:c6:07:73:61:5a:a5:c7:a1:bb:8f:ce:
                    d7:46:68:df:56:61:1e:9a:b8:3a:68:71:f6:8f:3f:
                    ff:90:2b:bb:e8:33:1f:f0:a9:8f:d8:2e:b6:69:68:
                    1b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A1:14:23:F9:FD:E5:4B:E9:A7:47:4A:46:F4:CC:FC:F4:3B:AE:3A
            X509v3 Authority Key Identifier:
                keyid:4E:69:B4:02:B6:7D:75:93:6F:45:DC:8B:C5:4B:86:81:4E:06:36:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/689ab5-30d2-46a3-8c54-16b4196fa294/1/Tmm0ArZ9dZNvRdyLxUuGgU4GNro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:e1:e2:b7:9e:e7:3c:ff:f1:29:77:c4:ac:46:57:af:66:be:
         90:3d:b0:34:1d:77:cf:16:a6:db:11:d0:98:53:07:d5:fd:03:
         ff:3f:38:48:33:e0:a1:6d:ce:58:7c:7f:df:6f:2e:39:a7:b8:
         1d:87:58:aa:2e:81:d7:93:8c:5f:01:36:49:23:50:71:20:65:
         ac:44:ae:1e:00:7d:92:01:57:b6:27:7a:f7:b9:e4:f8:e9:f6:
         4d:9f:05:1b:f1:c9:9a:e8:29:2c:26:32:40:ce:c1:9c:7b:1e:
         4f:78:64:82:7e:56:de:be:db:d9:c3:41:a5:36:3f:06:fc:e6:
         30:fd:05:b3:f7:7e:ad:87:90:cd:91:9c:47:89:e3:90:89:f8:
         ad:00:d4:2c:a9:95:0e:56:e9:ee:b4:dc:ca:20:a6:04:8e:b3:
         e0:8a:d5:d9:99:c8:6d:65:c4:af:3d:3b:b2:73:8b:11:8d:e8:
         0d:b6:21:6f:7a:e5:64:19:1a:a6:f6:d4:23:4f:64:fc:62:c9:
         2a:ce:4b:e8:3d:76:8b:e8:08:68:1c:4c:84:9b:e8:8c:36:0c:
         47:b3:7a:eb:6b:00:36:37:04:5c:3f:da:d0:41:8c:3d:8a:de:
         0c:40:78:29:8a:31:d5:5f:5d:c8:10:46:5d:15:b5:21:27:37:
         72:5d:e5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:19:24 2026 by rpki-client