Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
File:                     9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft (raw, json)
Hash identifier:          RQPkW/Mjpc9H8wgrlj/ilabd5eIL+P0yrTEKaYbSbkU=
Subject key identifier:   04:3B:60:FF:71:5A:8E:0E:8D:0D:B2:C5:AF:1A:B9:60:75:35:20:F3
Authority key identifier: F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
Certificate issuer:       /CN=f541d46893aaa164fe2673990d07aa6c071003c0
Certificate serial:       019EBF5AA1C50E5C5931259FE0177DB4A795
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
Manifest number:          1701
Signing time:             Sat 13 Jun 2026 05:00:48 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:48 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:48 +0000
Files and hashes:         1: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl (hash: /PYXFYyRkLeX+x1T6oBDloHadX5vRHMPkBAuV2amMmI=)
                          2: OzmaqdbQnEvHxy-Ju3BWJk8RR4A.roa (hash: yuFXsdpmAkFe7AvZipGRLoE1oL8vDwU9WfUvdebaJCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:a1:c5:0e:5c:59:31:25:9f:e0:17:7d:b4:a7:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f541d46893aaa164fe2673990d07aa6c071003c0
        Validity
            Not Before: Jun 13 05:00:48 2026 GMT
            Not After : Jun 14 05:00:48 2026 GMT
        Subject: CN=043b60ff715a8e0e8d0db2c5af1ab960753520f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1d:26:95:e0:53:6e:a6:d2:eb:13:b0:57:30:
                    cc:fe:ba:7e:3e:c3:f2:e7:56:10:dc:37:bd:cd:39:
                    61:d8:cd:16:c5:00:39:87:b6:f9:99:d2:62:d2:bb:
                    86:f7:ac:2c:63:de:45:ef:c3:79:de:0b:f1:66:2a:
                    42:2f:a5:ea:6a:6c:77:7a:e2:1e:ac:04:0c:28:ea:
                    77:c2:b7:4c:87:6c:92:96:38:a0:20:35:b0:37:79:
                    bb:bd:d3:07:27:dc:5e:4b:b4:56:5d:4e:cf:da:db:
                    41:25:ec:b4:34:6c:97:01:2a:1b:e5:24:fb:0e:82:
                    f9:1e:72:de:43:90:1f:52:2a:6a:67:6e:04:2e:c1:
                    fc:41:41:57:d1:01:46:22:ac:2e:cb:dd:c6:df:24:
                    68:de:c1:91:d0:1c:54:3c:9c:55:f7:cc:11:6a:8d:
                    a9:ea:05:d7:d2:c6:eb:56:d1:b6:57:f9:20:ee:bf:
                    2b:96:46:de:9a:af:a1:31:12:9b:b4:24:78:1a:8f:
                    83:78:80:c3:07:9c:74:36:5b:b2:2b:e7:ed:2b:12:
                    76:56:63:59:2b:e2:50:0b:f8:22:2f:1e:16:82:d5:
                    0e:e9:74:12:08:eb:66:56:a7:71:49:64:67:1a:8f:
                    46:ab:11:e4:c3:34:b8:04:d0:c4:af:5b:d0:5a:e0:
                    24:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:3B:60:FF:71:5A:8E:0E:8D:0D:B2:C5:AF:1A:B9:60:75:35:20:F3
            X509v3 Authority Key Identifier:
                keyid:F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:89:ed:8b:38:54:f8:6c:ac:73:fd:79:ac:02:63:cd:a7:78:
         94:10:bc:8b:3d:88:a1:52:82:c2:09:6f:75:2a:e2:d1:63:b4:
         8b:0d:61:41:a0:8f:95:38:f6:2d:19:60:02:a6:11:0d:78:23:
         03:20:bb:8f:ad:94:f0:d4:6a:35:e5:d6:d9:eb:ab:e5:89:f4:
         c8:92:97:4a:8b:29:3e:e6:f9:bb:83:44:f7:a0:bb:a5:3f:75:
         08:01:91:b5:58:cd:f0:18:56:e3:9c:f5:a2:a1:50:dd:e3:cd:
         aa:91:ec:d1:c3:3a:f9:04:a6:74:f0:43:97:40:20:4a:7e:cd:
         52:1a:f2:e6:5c:8d:2f:05:41:25:c2:d5:a6:27:2a:13:87:b5:
         26:9b:31:0a:aa:05:a6:31:d6:9e:84:5e:8d:c5:42:6b:37:7a:
         31:a2:b3:d4:bf:65:8e:54:ab:1a:ff:78:b7:10:83:8c:2b:9c:
         06:6c:86:65:68:5d:e1:cb:ae:cf:a5:ab:43:5f:c0:e0:e4:41:
         09:6a:39:a9:0e:d3:be:0c:05:e0:6e:6a:64:29:d6:08:23:54:
         fb:b4:bb:7f:33:a2:0f:b2:f7:67:ab:41:9c:6c:00:22:2a:63:
         a9:ec:4f:f8:19:7b:81:97:b2:bc:7b:56:cb:ac:de:4c:0c:31:
         ee:de:dc:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WqHFDlxZMSWf4Bd9tKeVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NDFkNDY4OTNhYWExNjRmZTI2NzM5OTBkMDdhYTZjMDcx
MDAzYzAwHhcNMjYwNjEzMDUwMDQ4WhcNMjYwNjE0MDUwMDQ4WjAzMTEwLwYDVQQD
EygwNDNiNjBmZjcxNWE4ZTBlOGQwZGIyYzVhZjFhYjk2MDc1MzUyMGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqB0mleBTbqbS6xOwVzDM/rp+PsPy
51YQ3De9zTlh2M0WxQA5h7b5mdJi0ruG96wsY95F78N53gvxZipCL6Xqamx3euIe
rAQMKOp3wrdMh2ySljigIDWwN3m7vdMHJ9xeS7RWXU7P2ttBJey0NGyXASob5ST7
DoL5HnLeQ5AfUipqZ24ELsH8QUFX0QFGIqwuy93G3yRo3sGR0BxUPJxV98wRao2p
6gXX0sbrVtG2V/kg7r8rlkbemq+hMRKbtCR4Go+DeIDDB5x0NluyK+ftKxJ2VmNZ
K+JQC/giLx4WgtUO6XQSCOtmVqdxSWRnGo9GqxHkwzS4BNDEr1vQWuAk6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQ7YP9xWo4OjQ2yxa8auWB1NSDzMB8GA1UdIwQY
MBaAFPVB1GiTqqFk/iZzmQ0HqmwHEAPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVVIVWFKT3FvV1QtSm5PWkRRZXFiQWNRQThBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yZTk1ZTctNTY0NC00NmYyLThmYTMt
Mzk4YzA0NTE4OWViLzEvOVVIVWFKT3FvV1QtSm5PWkRRZXFiQWNRQThBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8yZTk1ZTctNTY0NC00NmYyLThmYTMtMzk4YzA0NTE4OWVi
LzEvOVVIVWFKT3FvV1QtSm5PWkRRZXFiQWNRQThBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFIntizhU
+Gysc/15rAJjzad4lBC8iz2IoVKCwglvdSri0WO0iw1hQaCPlTj2LRlgAqYRDXgj
AyC7j62U8NRqNeXW2eur5Yn0yJKXSospPub5u4NE96C7pT91CAGRtVjN8BhW45z1
oqFQ3ePNqpHs0cM6+QSmdPBDl0AgSn7NUhry5lyNLwVBJcLVpicqE4e1JpsxCqoF
pjHWnoRejcVCazd6MaKz1L9ljlSrGv94txCDjCucBmyGZWhd4cuuz6WrQ1/A4ORB
CWo5qQ7TvgwF4G5qZCnWCCNU+7S7fzOiD7L3Z6tBnGwAIipjqexP+Bl7gZeyvHtW
y6zeTAwx7t7c8Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:39:22 2026 by rpki-client