Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
File:                     0Jp_f91UoXzl4SpBgutlJHn511g.mft (raw, json)
Hash identifier:          ahSHIkJeBvz6343N+BDD8J2JfNEZjq9la3m7OC3X3eU=
Subject key identifier:   A5:E8:F1:CC:F3:DA:74:11:9B:80:02:F5:4A:0E:1D:FF:86:93:F9:F8
Authority key identifier: D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58
Certificate issuer:       /CN=d09a7f7fdd54a17ce5e12a4182eb652479f9d758
Certificate serial:       019EBF5AC4CFAC8946AD21EF24CF508E07EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
Manifest number:          17DB
Signing time:             Sat 13 Jun 2026 05:00:57 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:57 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:57 +0000
Files and hashes:         1: 0Jp_f91UoXzl4SpBgutlJHn511g.crl (hash: CQnY2R3e2VsGZDXhcsMtPAGx3VZplsg7tFgZs9aA+B8=)
                          2: 7eWcGeApexXCyJ5zpUATMUfIfjE.roa (hash: 25j7Y9KcJOf9q796TODAMGOZw8uhZj4cuQLUqDrqWiw=)
                          3: eh5f2bSFFBPtD-itI_yMFOKVNl8.roa (hash: 1eTnOvtuGR3xM5v0Vi+oWqoLUpmMh/7COfXsHBvYGt0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:c4:cf:ac:89:46:ad:21:ef:24:cf:50:8e:07:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d09a7f7fdd54a17ce5e12a4182eb652479f9d758
        Validity
            Not Before: Jun 13 05:00:57 2026 GMT
            Not After : Jun 14 05:00:57 2026 GMT
        Subject: CN=a5e8f1ccf3da74119b8002f54a0e1dff8693f9f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:15:35:d8:66:8d:44:5e:b2:cc:da:ce:44:4a:
                    ad:87:85:53:4f:b2:52:1a:38:19:9a:4d:fe:db:0e:
                    0c:ea:56:8f:87:84:1c:79:03:be:a6:53:e7:b5:85:
                    6d:31:a9:18:12:fa:b9:66:06:ad:1b:3b:91:1d:30:
                    ae:0a:20:5f:25:f7:08:41:c8:a5:80:ed:97:99:ea:
                    07:00:c2:ab:a1:3e:58:73:30:91:ab:67:be:cd:73:
                    51:ff:7d:99:13:16:57:2e:69:7c:33:19:50:6a:61:
                    1d:9a:56:d4:da:71:74:ad:94:fa:2b:f0:d9:7d:16:
                    4b:9d:f1:4e:9c:ea:76:ac:72:70:2d:84:e6:02:08:
                    4f:51:08:81:fc:d1:12:4e:5d:94:74:d5:c1:4e:e1:
                    70:10:6f:0b:27:35:ad:27:cf:65:2c:84:ef:f8:cd:
                    02:ff:db:f6:60:7e:22:50:67:22:c6:a9:dd:e4:fc:
                    a1:44:69:49:ad:85:1e:4a:f3:c8:c3:52:4c:1f:7e:
                    d8:7d:a7:ad:e4:48:f6:16:f6:75:73:80:05:62:73:
                    83:d1:df:36:b7:7a:59:9a:94:e5:39:fd:d3:fd:bc:
                    23:87:ee:01:8e:53:6a:90:8f:05:ad:32:51:a2:97:
                    eb:2d:d5:c5:e8:01:f2:8e:34:67:24:47:fe:38:c4:
                    61:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E8:F1:CC:F3:DA:74:11:9B:80:02:F5:4A:0E:1D:FF:86:93:F9:F8
            X509v3 Authority Key Identifier:
                keyid:D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:2e:11:b9:9c:ec:1f:26:0c:da:ff:4a:2f:7d:b7:f1:a2:74:
         78:57:09:58:95:a8:66:27:1c:75:34:ca:93:c0:7e:db:35:39:
         f8:45:77:3f:6e:41:21:0f:7d:27:80:99:f1:a8:27:84:b1:2a:
         10:32:74:b8:af:2c:91:7f:fe:26:c4:4c:4f:12:de:64:c8:0a:
         fa:99:c7:e6:1f:24:49:23:e3:e8:ff:2b:07:36:74:e7:0c:ba:
         e2:af:ec:74:79:5e:d3:21:af:a0:c4:3c:32:82:f6:9f:1e:d6:
         c2:12:a6:e1:80:b6:ac:cd:b5:c6:d7:cf:17:4c:52:47:b9:d6:
         1e:c3:f2:94:20:2c:3f:fa:9c:3f:0e:96:e2:58:95:fc:29:e2:
         c5:cc:2f:96:f4:69:9c:16:87:3e:6b:75:8e:09:4c:fa:95:26:
         17:32:a9:48:55:87:cd:29:9a:dc:a0:44:b5:f4:a9:1b:fa:86:
         ea:39:8a:24:50:a1:fb:a4:41:bc:3b:40:40:c9:63:01:e3:cb:
         89:06:3e:c0:18:99:e1:55:aa:96:94:2d:4f:bd:36:24:b5:b8:
         b0:b0:ad:b8:3f:3f:3f:cd:54:1e:6a:c5:65:db:7a:9e:6c:a4:
         b9:3d:ce:61:14:7d:ef:06:d7:21:29:f1:d3:15:2f:60:41:32:
         ef:f7:93:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WsTPrIlGrSHvJM9QjgfuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOWE3ZjdmZGQ1NGExN2NlNWUxMmE0MTgyZWI2NTI0Nzlm
OWQ3NTgwHhcNMjYwNjEzMDUwMDU3WhcNMjYwNjE0MDUwMDU3WjAzMTEwLwYDVQQD
EyhhNWU4ZjFjY2YzZGE3NDExOWI4MDAyZjU0YTBlMWRmZjg2OTNmOWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxU12GaNRF6yzNrOREqth4VTT7JS
GjgZmk3+2w4M6laPh4QceQO+plPntYVtMakYEvq5ZgatGzuRHTCuCiBfJfcIQcil
gO2XmeoHAMKroT5YczCRq2e+zXNR/32ZExZXLml8MxlQamEdmlbU2nF0rZT6K/DZ
fRZLnfFOnOp2rHJwLYTmAghPUQiB/NESTl2UdNXBTuFwEG8LJzWtJ89lLITv+M0C
/9v2YH4iUGcixqnd5PyhRGlJrYUeSvPIw1JMH37Yfaet5Ej2FvZ1c4AFYnOD0d82
t3pZmpTlOf3T/bwjh+4BjlNqkI8FrTJRopfrLdXF6AHyjjRnJEf+OMRh3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXo8czz2nQRm4AC9UoOHf+Gk/n4MB8GA1UdIwQY
MBaAFNCaf3/dVKF85eEqQYLrZSR5+ddYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEpwX2Y5MVVvWHpsNFNwQmd1dGxKSG41MTFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9iM2Q5N2UtNWNjMi00NjY5LWIzNzgt
NTg3NWE0NDg5ZGJhLzEvMEpwX2Y5MVVvWHpsNFNwQmd1dGxKSG41MTFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9iM2Q5N2UtNWNjMi00NjY5LWIzNzgtNTg3NWE0NDg5ZGJh
LzEvMEpwX2Y5MVVvWHpsNFNwQmd1dGxKSG41MTFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfi4RuZzs
HyYM2v9KL3238aJ0eFcJWJWoZiccdTTKk8B+2zU5+EV3P25BIQ99J4CZ8agnhLEq
EDJ0uK8skX/+JsRMTxLeZMgK+pnH5h8kSSPj6P8rBzZ05wy64q/sdHle0yGvoMQ8
MoL2nx7WwhKm4YC2rM21xtfPF0xSR7nWHsPylCAsP/qcPw6W4liV/CnixcwvlvRp
nBaHPmt1jglM+pUmFzKpSFWHzSma3KBEtfSpG/qG6jmKJFCh+6RBvDtAQMljAePL
iQY+wBiZ4VWqlpQtT702JLW4sLCtuD8/P81UHmrFZdt6nmykuT3OYRR97wbXISnx
0xUvYEEy7/eTTw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:43:30 2026 by rpki-client