Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
File:                     h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft (raw, json)
Hash identifier:          M7I2RE9AydrtnvQV5sJsD0jYpR1xmFyJOqK73NXyfAk=
Subject key identifier:   14:2E:6B:15:2F:6B:46:5A:9B:77:93:31:34:E9:CC:5A:50:10:71:A8
Authority key identifier: 87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
Certificate issuer:       /CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Certificate serial:       019EC25B7D8E847E60A470F1ED151AAC464A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
Manifest number:          1717
Signing time:             Sat 13 Jun 2026 19:00:36 +0000
Manifest this update:     Sat 13 Jun 2026 19:00:36 +0000
Manifest next update:     Sun 14 Jun 2026 19:00:36 +0000
Files and hashes:         1: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl (hash: ZWx4wF64+XiheJT3sosnWbIX4gr0nh6HSaF/btG733g=)
                          2: pf2F8jqDhpJAuisFDDVK53DtP1c.roa (hash: gUPm9iAsnfZdwPMydWDH2B8Ki6HOxvfT2gKOapzDjp0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5b:7d:8e:84:7e:60:a4:70:f1:ed:15:1a:ac:46:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
        Validity
            Not Before: Jun 13 19:00:36 2026 GMT
            Not After : Jun 14 19:00:36 2026 GMT
        Subject: CN=142e6b152f6b465a9b77933134e9cc5a501071a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:48:ec:59:4c:8b:14:1d:22:92:e5:60:ef:a3:
                    58:65:b5:ca:ab:0c:2b:45:51:76:e6:7f:af:33:52:
                    fe:23:cf:e6:2f:77:e0:48:cd:9d:8f:59:dc:59:cf:
                    4b:c0:0e:40:6c:87:f3:f7:e7:c1:da:da:32:a7:aa:
                    2c:22:0d:e4:d0:f0:5a:ca:73:57:b9:5a:45:b6:3a:
                    64:45:c7:48:c6:e3:38:ed:92:15:36:af:33:18:a9:
                    92:9d:e5:96:41:d6:bb:88:b0:af:dc:e9:74:56:a2:
                    d9:62:ba:81:0d:ee:86:62:76:24:28:2c:23:6a:91:
                    01:9a:4c:3b:06:82:13:d4:4a:3b:96:b1:6a:3c:a0:
                    45:d2:0b:08:35:53:97:ef:48:95:7e:50:31:a2:a7:
                    75:a6:28:22:53:11:de:01:ed:d6:05:0b:25:7c:41:
                    2a:0c:aa:c4:af:48:4f:1f:04:06:4c:23:a7:40:81:
                    36:9d:26:86:bf:9d:90:3b:35:31:8d:f8:0f:7e:58:
                    08:75:af:d5:45:a3:4c:61:a9:0e:d3:4d:d5:02:05:
                    e7:da:e2:db:a1:6f:19:c3:e9:7e:10:4e:a9:22:57:
                    fe:cc:a5:6f:8c:30:1c:85:d5:08:d5:3c:a5:49:7b:
                    80:42:a3:88:dd:cb:b9:31:bb:89:c7:88:17:fa:2e:
                    f0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2E:6B:15:2F:6B:46:5A:9B:77:93:31:34:E9:CC:5A:50:10:71:A8
            X509v3 Authority Key Identifier:
                keyid:87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:b5:91:a8:aa:9d:c4:94:2a:1b:5c:32:81:c1:bc:ad:44:1e:
         ed:c9:bf:a0:41:66:58:3d:8d:4f:a4:e9:d6:b1:d4:ff:06:04:
         35:28:d9:18:c3:e7:16:da:ee:1a:ab:d3:52:e0:1d:87:6a:5b:
         89:e5:31:a8:93:11:7f:7a:ee:fc:23:c2:cd:a7:1c:6d:6c:c8:
         e5:36:80:4c:8e:e0:12:f7:88:c1:94:62:0d:19:aa:6f:fb:67:
         fc:72:dd:6a:bd:64:cc:96:ca:63:dc:87:e1:65:f2:2d:b5:8a:
         8f:6f:e4:f7:9f:03:05:e2:37:5f:85:d2:76:80:f1:3e:e2:19:
         ef:4f:3c:ad:5b:81:13:ff:f7:7d:ff:b7:aa:3b:78:c2:1d:28:
         ee:44:cb:0a:71:36:c5:d3:61:b2:27:aa:c6:69:ee:ed:a5:26:
         5e:01:88:7a:fd:9b:e4:62:b5:53:af:b7:3e:ac:f5:e7:a6:d7:
         9e:8d:c4:2e:5c:09:1b:76:7e:8f:41:00:ba:ac:89:cf:ac:9e:
         f5:e7:6e:30:96:a5:c3:a3:95:8d:35:2b:bf:aa:da:04:ce:19:
         fb:24:51:2c:17:ff:6b:3d:ca:8a:a9:2b:fd:00:1b:bd:7c:be:
         4d:3b:f4:d7:f7:38:82:e0:d8:94:bc:e6:86:8c:ba:72:e3:00:
         6b:cc:da:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CW32OhH5gpHDx7RUarEZKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ODUxNTQ0YTY0MjdkMmM4ZTI3OWU0Yjk0YjkyYWFmMDAw
OWVkMjcwHhcNMjYwNjEzMTkwMDM2WhcNMjYwNjE0MTkwMDM2WjAzMTEwLwYDVQQD
EygxNDJlNmIxNTJmNmI0NjVhOWI3NzkzMzEzNGU5Y2M1YTUwMTA3MWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUjsWUyLFB0ikuVg76NYZbXKqwwr
RVF25n+vM1L+I8/mL3fgSM2dj1ncWc9LwA5AbIfz9+fB2toyp6osIg3k0PBaynNX
uVpFtjpkRcdIxuM47ZIVNq8zGKmSneWWQda7iLCv3Ol0VqLZYrqBDe6GYnYkKCwj
apEBmkw7BoIT1Eo7lrFqPKBF0gsINVOX70iVflAxoqd1pigiUxHeAe3WBQslfEEq
DKrEr0hPHwQGTCOnQIE2nSaGv52QOzUxjfgPflgIda/VRaNMYakO003VAgXn2uLb
oW8Zw+l+EE6pIlf+zKVvjDAchdUI1TylSXuAQqOI3cu5MbuJx4gX+i7wuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQuaxUva0Zam3eTMTTpzFpQEHGoMB8GA1UdIwQY
MBaAFIeFFUSmQn0sjieeS5S5Kq8ACe0nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDRVVlJLWkNmU3lPSjU1TGxMa3Fyd0FKN1NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC80N2IxZmQtMzRiNi00MTk1LTg0OWYt
ODU0MzRmNjE2OWYxLzEvaDRVVlJLWkNmU3lPSjU1TGxMa3Fyd0FKN1NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC80N2IxZmQtMzRiNi00MTk1LTg0OWYtODU0MzRmNjE2OWYx
LzEvaDRVVlJLWkNmU3lPSjU1TGxMa3Fyd0FKN1NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANLWRqKqd
xJQqG1wygcG8rUQe7cm/oEFmWD2NT6Tp1rHU/wYENSjZGMPnFtruGqvTUuAdh2pb
ieUxqJMRf3ru/CPCzaccbWzI5TaATI7gEveIwZRiDRmqb/tn/HLdar1kzJbKY9yH
4WXyLbWKj2/k958DBeI3X4XSdoDxPuIZ7088rVuBE//3ff+3qjt4wh0o7kTLCnE2
xdNhsieqxmnu7aUmXgGIev2b5GK1U6+3Pqz156bXno3ELlwJG3Z+j0EAuqyJz6ye
9eduMJalw6OVjTUrv6raBM4Z+yRRLBf/az3Kiqkr/QAbvXy+TTv01/c4guDYlLzm
hoy6cuMAa8zagg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:29:19 2026 by rpki-client