Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
File:                     _TfMjxazxsvTNGqj7WF3Hz6DrJc.mft (raw, json)
Hash identifier:          9SQVoRH/zAmdMjHH8vPuKvJ93VyqBaQqGxPQu10lTFc=
Subject key identifier:   E5:CC:59:E3:7D:75:DC:4C:9C:A1:A0:A2:F9:6D:4C:29:95:ED:B3:D8
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Certificate issuer:       /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial:       019EBF91600FC90F8EDFF670257EA0619E14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
Manifest number:          19C0
Signing time:             Sat 13 Jun 2026 06:00:36 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:36 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:36 +0000
Files and hashes:         1: 1onWddNgt-hbXxg-7fMMVDkSMv8.roa (hash: 6xbzz0JrjMO/4fz5zHo8PgQ0CyGaKVVD/UoDkWFGr1M=)
                          2: 4k3-HpRCXFW3j7_8C4stbYfFUYA.roa (hash: C8f2KuD10zOuLUQcMwm5C74B3yZTjBcW9yOV/aVWErg=)
                          3: 8MDk26A6HB8ESAemQVS635P3dlM.roa (hash: rxyUnW+DZGiT5coh/pmWc5vX6tfUq/igWAH5aJLS19c=)
                          4: Nsh_W4gT44WToqQeMBkvLdwLp7U.roa (hash: s1XEdXMI1+3uP5BkHw14NLcZMVjF5mmNtQSI8IR6ni8=)
                          5: OujepPxEWJf76CUpCTyqTjOXKpU.asa (hash: ThWY+hR9gmQ1aouAGBEnVouEZokSrfcbByNw6RJAbVQ=)
                          6: QKaa5M_Ls464BGXTJZlXMkecYvk.roa (hash: VYfsIkTwFvkSA3FB9Pu7FhpTVM9hzat73ShbqylONR8=)
                          7: Uhz_TUI3Hsi81u75mxMWZpekOT4.roa (hash: q9Go9HD9nYKVh+b76qK8j4mJsOQptkJ61FqLETJCZTU=)
                          8: Un_qTs_qUw6Cr9rSAjxMcB_qwIQ.roa (hash: /NZAsUlQyUhQsDytYI9yrui4/CAPCfbgRtz4l6TLnkU=)
                          9: Y1K-rQ-VX44rWAjvqhl_hw7Dweo.roa (hash: cEsowcsrRQw+N5wEyAbdQXCFdceUeFzwtiYgytJDtj8=)
                          10: YK5m2vQkSo1LI8ivt3P57wRJQZI.roa (hash: 6P9xMdNgw4dnF5/p7uRGxrPDX07R9HMY30HONlvwuL0=)
                          11: _TfMjxazxsvTNGqj7WF3Hz6DrJc.crl (hash: VvrUVn0ZvZyvxBWJ9c+c0YdDHiD1vIOaJ4ZFXQtVCuk=)
                          12: aKvQ03F1bR1q6-Woc8m1q6jONu8.roa (hash: LcJqfZb4sulh5jvt0J4ioSYZjOzoPCpUud+7/IHHoW8=)
                          13: eTIL1VK4_PVdXFi5gF5woEPQkG8.roa (hash: NczJzTK4m8r22rHAsuaTAYefyiahprGtNN7PoBZHmEM=)
                          14: ip7XsN0-IlSnuEP_E--FUjD8qf0.roa (hash: CO94Nw8OySvoAWy5RjY0I0/eplwWsGb3UO5iKzV120U=)
                          15: l0uiGfn0_Ao0KJi5bVUaMaNKV8Y.asa (hash: 5p613mEjLDKXtkZwHBWoFC0KynCvj30DBewuSTWYGQ0=)
                          16: nwyoORHnVLqfYrksvB0f6CfIa6k.roa (hash: e9CYwkBaqUibsyMU/gzh+rV4KhbNY883umfRTcrBM0Y=)
                          17: osuU6cABAT-z_og2fdV709jwbR4.asa (hash: ItbTyIqWcJVCMwjVvKdgJl+ZPlR3yuOKXNSj6k02k90=)
                          18: rjxf5Ppv88saIf4NMrBg7Lnjt88.asa (hash: 8f9M0wG41PE6ZfVDs5zv6PTV0f6czRl9ExFIm9zaW0o=)
                          19: t0cVkqPZjARFv36ftR5F1LXB_P8.roa (hash: aH1VNEGWBhfBG6pKNECJ5Njp4Dom+Xvfv76b48XldZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:60:0f:c9:0f:8e:df:f6:70:25:7e:a0:61:9e:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
        Validity
            Not Before: Jun 13 06:00:36 2026 GMT
            Not After : Jun 14 06:00:36 2026 GMT
        Subject: CN=e5cc59e37d75dc4c9ca1a0a2f96d4c2995edb3d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:20:ed:9c:0a:2c:33:1b:f3:a9:15:4c:d7:e2:
                    3a:40:e0:2d:96:43:cc:5e:84:7b:71:63:aa:db:43:
                    71:9b:17:b6:e0:1a:60:69:33:5e:ec:18:c4:10:a5:
                    8c:fa:ab:f0:1a:3a:99:7f:1c:22:0a:70:43:fd:40:
                    98:d0:ec:a5:75:98:d4:82:44:bf:f1:b4:9a:21:2e:
                    81:6d:5f:98:c3:46:a2:ab:99:37:8d:7d:33:a8:58:
                    a1:a2:43:69:1c:0a:68:32:b5:31:a7:fa:e0:18:b1:
                    91:ac:e5:1d:71:09:8e:ed:00:e6:65:62:3d:b8:f2:
                    ac:fd:bc:75:74:d7:64:17:42:b6:5f:67:f8:59:47:
                    a7:15:9e:e8:21:c6:45:d1:50:a9:79:51:ee:b0:4f:
                    68:45:03:ba:3c:b2:b5:b5:07:63:87:e4:3c:e3:43:
                    de:77:bc:e6:93:6f:21:a3:1b:35:f4:df:89:51:7e:
                    2a:35:91:6d:bf:39:56:7f:a8:cf:4b:4e:7c:c6:25:
                    bc:4a:f4:0e:f9:dc:16:30:28:7d:cf:7e:50:38:83:
                    0e:3a:59:9d:22:f3:c2:00:5b:46:c7:d1:e2:af:c4:
                    26:95:3c:04:e9:ae:51:84:5e:71:24:21:30:73:1b:
                    82:5c:d3:4b:b0:ad:17:81:bf:db:84:12:bd:e5:b5:
                    78:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:CC:59:E3:7D:75:DC:4C:9C:A1:A0:A2:F9:6D:4C:29:95:ED:B3:D8
            X509v3 Authority Key Identifier:
                keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:27:37:f3:5e:27:39:24:26:07:b5:59:b9:0f:48:56:a2:d3:
         b4:6f:26:72:b1:23:ca:4b:80:43:69:03:e9:d4:c6:b4:46:9c:
         15:29:e4:56:4d:94:35:d6:52:de:29:10:57:0c:24:d0:db:20:
         43:cb:9d:5d:34:3d:3c:f8:f5:14:0e:a3:8b:47:44:94:9a:34:
         ee:90:9b:5a:3d:eb:8a:d6:d9:d0:bb:fb:cd:96:80:e9:13:48:
         5d:d7:24:c9:34:88:fa:c0:a0:b2:6e:bb:2c:d1:41:36:96:f7:
         4f:76:44:80:02:00:6e:af:af:a7:50:a3:b4:cc:c0:43:ac:07:
         9e:cd:d3:21:db:85:e5:bf:ab:0e:75:7d:6f:49:7f:fa:d9:0e:
         2c:64:50:0b:f2:e5:d1:03:09:fc:e9:87:71:fb:da:e0:f0:33:
         b0:93:ab:ac:e5:32:98:38:ca:76:d7:43:2a:4a:38:65:b5:26:
         fe:e0:12:7b:06:0a:62:bc:d5:0b:c1:7e:ec:2d:1d:f7:13:18:
         d6:af:0f:5c:8f:d3:26:32:b0:a6:0e:1f:71:48:df:8b:e1:7a:
         8c:2f:dd:55:41:c7:6e:b0:09:84:14:0a:cb:c9:b1:0a:45:fc:
         d2:eb:0d:ca:77:6c:74:08:68:95:9e:91:a7:82:4c:73:c3:6c:
         30:d0:65:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/kWAPyQ+O3/ZwJX6gYZ4UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4
M2FjOTcwHhcNMjYwNjEzMDYwMDM2WhcNMjYwNjE0MDYwMDM2WjAzMTEwLwYDVQQD
EyhlNWNjNTllMzdkNzVkYzRjOWNhMWEwYTJmOTZkNGMyOTk1ZWRiM2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCDtnAosMxvzqRVM1+I6QOAtlkPM
XoR7cWOq20Nxmxe24BpgaTNe7BjEEKWM+qvwGjqZfxwiCnBD/UCY0OyldZjUgkS/
8bSaIS6BbV+Yw0aiq5k3jX0zqFihokNpHApoMrUxp/rgGLGRrOUdcQmO7QDmZWI9
uPKs/bx1dNdkF0K2X2f4WUenFZ7oIcZF0VCpeVHusE9oRQO6PLK1tQdjh+Q840Pe
d7zmk28hoxs19N+JUX4qNZFtvzlWf6jPS058xiW8SvQO+dwWMCh9z35QOIMOOlmd
IvPCAFtGx9Hir8QmlTwE6a5RhF5xJCEwcxuCXNNLsK0Xgb/bhBK95bV4oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOXMWeN9ddxMnKGgovltTCmV7bPYMB8GA1UdIwQY
MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt
N2UwNWFiNDFiNmU0LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0
LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHyc3814n
OSQmB7VZuQ9IVqLTtG8mcrEjykuAQ2kD6dTGtEacFSnkVk2UNdZS3ikQVwwk0Nsg
Q8udXTQ9PPj1FA6ji0dElJo07pCbWj3ritbZ0Lv7zZaA6RNIXdckyTSI+sCgsm67
LNFBNpb3T3ZEgAIAbq+vp1CjtMzAQ6wHns3TIduF5b+rDnV9b0l/+tkOLGRQC/Ll
0QMJ/OmHcfva4PAzsJOrrOUymDjKdtdDKko4ZbUm/uASewYKYrzVC8F+7C0d9xMY
1q8PXI/TJjKwpg4fcUjfi+F6jC/dVUHHbrAJhBQKy8mxCkX80usNyndsdAholZ6R
p4JMc8NsMNBl0Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:01:29 2026 by rpki-client