Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
File:                     DDnQStg6rB3lqYzfdiQKlzYsSsY.mft (raw, json)
Hash identifier:          Bmmq34Y/L7DrwYNltZL4l/343JoW3mXQg+E/KWbc4CE=
Subject key identifier:   F7:2D:0B:1F:FF:48:DD:88:81:19:11:94:B9:33:D3:01:AD:C5:23:DC
Authority key identifier: 0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
Certificate issuer:       /CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Certificate serial:       019EC1B77E51462511D9038E7C0D23D3B6FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
Manifest number:          063E
Signing time:             Sat 13 Jun 2026 16:01:28 +0000
Manifest this update:     Sat 13 Jun 2026 16:01:28 +0000
Manifest next update:     Sun 14 Jun 2026 16:01:28 +0000
Files and hashes:         1: DDnQStg6rB3lqYzfdiQKlzYsSsY.crl (hash: gkDTE3ushSUkZdHIhMfcPOr1cvuBWV17zxC+hkWPijE=)
                          2: d-dWQuydMoCZtytzQ81CyqKGHF8.roa (hash: rHhhXAeBGXlacTL0skc5ZpbciDYSLDNez3YfIDsP5dQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b7:7e:51:46:25:11:d9:03:8e:7c:0d:23:d3:b6:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
        Validity
            Not Before: Jun 13 16:01:28 2026 GMT
            Not After : Jun 14 16:01:28 2026 GMT
        Subject: CN=f72d0b1fff48dd8881191194b933d301adc523dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1a:15:15:0a:a9:38:fd:0f:9f:22:e2:cc:ae:
                    51:35:21:96:93:16:2e:45:39:9a:86:bc:c1:19:09:
                    ff:09:2b:ad:e4:cb:35:f0:6b:b9:45:e0:64:6f:db:
                    bf:d2:47:ad:e7:2b:5e:45:b8:8b:a7:68:90:fe:76:
                    a6:17:4f:f8:c9:5f:b9:95:a6:6e:27:c1:80:82:bb:
                    3d:aa:4e:26:28:d3:f4:0e:e8:9b:96:d8:94:74:3e:
                    ce:38:2d:b3:61:df:06:68:26:39:b3:1d:ff:37:2c:
                    2f:97:0c:0a:70:51:aa:41:c8:18:79:ad:aa:78:33:
                    e6:9a:92:4b:4b:8f:81:80:80:b4:a7:2a:ab:79:cf:
                    5d:86:ba:af:00:45:d8:18:44:4b:cb:3d:f1:61:63:
                    fa:6d:97:b9:e0:7e:ad:ea:87:e1:36:d6:6d:5e:6b:
                    fd:fa:81:d4:c0:2c:a6:84:e2:08:19:b2:7c:4b:f5:
                    27:0b:7f:aa:34:72:dc:48:15:7c:8f:45:33:d0:04:
                    76:ed:b7:17:7d:ce:3a:84:9b:b4:3b:bb:fa:08:67:
                    a7:c1:a5:1e:1d:58:b6:b5:2b:39:1f:1d:76:04:a1:
                    42:07:66:84:ce:19:ae:75:a0:d4:fc:99:d0:30:bc:
                    85:98:0f:7b:4f:7d:63:71:cd:7c:25:a0:75:a9:bb:
                    bb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:2D:0B:1F:FF:48:DD:88:81:19:11:94:B9:33:D3:01:AD:C5:23:DC
            X509v3 Authority Key Identifier:
                keyid:0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:3a:fd:39:73:29:92:b8:69:ae:71:89:85:87:f6:8e:6e:96:
         72:e9:9c:55:01:d5:e2:30:34:bf:90:c3:30:5e:1c:44:b9:e3:
         c5:d0:bb:fb:83:3d:c7:84:9a:2d:15:45:27:ce:be:9d:70:73:
         1b:be:fe:23:d3:7d:96:25:fb:b6:f2:3a:a5:9e:c4:62:d5:3c:
         d4:d0:cf:f1:ec:7e:15:c9:7c:f8:12:50:4c:50:68:f1:15:0d:
         0b:0b:a5:6b:7a:51:30:a7:a8:07:09:8f:2a:14:c5:aa:a9:a6:
         0a:52:0e:29:95:38:c1:33:5c:4b:0b:82:04:ae:29:f7:f2:dc:
         0e:4f:d2:29:ea:bf:41:7b:cb:80:3a:4b:07:2a:83:dc:1f:46:
         36:94:b8:6f:53:f5:a0:fd:77:ab:7e:71:21:0d:42:fb:c7:df:
         f2:13:22:c0:eb:5d:5a:47:d6:94:e0:15:4c:6b:e1:32:de:9b:
         ae:07:d5:08:af:35:1b:01:f1:83:bf:e2:b3:bb:3d:61:81:36:
         cb:47:43:f8:3a:f8:74:50:dd:7c:c7:f3:90:1c:7f:bd:47:ba:
         43:82:1c:a3:78:85:d3:02:40:c9:5f:b3:01:a8:8e:62:60:0b:
         48:80:73:fe:76:3e:b5:52:db:a4:59:40:0c:1d:b2:f5:cb:8a:
         10:01:29:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Bt35RRiUR2QOOfA0j07b+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMzlkMDRhZDgzYWFjMWRlNWE5OGNkZjc2MjQwYTk3MzYy
YzRhYzYwHhcNMjYwNjEzMTYwMTI4WhcNMjYwNjE0MTYwMTI4WjAzMTEwLwYDVQQD
EyhmNzJkMGIxZmZmNDhkZDg4ODExOTExOTRiOTMzZDMwMWFkYzUyM2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBoVFQqpOP0PnyLizK5RNSGWkxYu
RTmahrzBGQn/CSut5Ms18Gu5ReBkb9u/0ket5yteRbiLp2iQ/namF0/4yV+5laZu
J8GAgrs9qk4mKNP0DuibltiUdD7OOC2zYd8GaCY5sx3/NywvlwwKcFGqQcgYea2q
eDPmmpJLS4+BgIC0pyqrec9dhrqvAEXYGERLyz3xYWP6bZe54H6t6ofhNtZtXmv9
+oHUwCymhOIIGbJ8S/UnC3+qNHLcSBV8j0Uz0AR27bcXfc46hJu0O7v6CGenwaUe
HVi2tSs5Hx12BKFCB2aEzhmudaDU/JnQMLyFmA97T31jcc18JaB1qbu7mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPctCx//SN2IgRkRlLkz0wGtxSPcMB8GA1UdIwQY
MBaAFAw50ErYOqwd5amM33YkCpc2LErGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRERuUVN0ZzZyQjNscVl6ZmRpUUtsellzU3NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8xZjFhZGUtZTJlNi00ZDczLTk2YTkt
NDI3NDI5ZmNkNzRjLzEvRERuUVN0ZzZyQjNscVl6ZmRpUUtsellzU3NZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8xZjFhZGUtZTJlNi00ZDczLTk2YTktNDI3NDI5ZmNkNzRj
LzEvRERuUVN0ZzZyQjNscVl6ZmRpUUtsellzU3NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKjr9OXMp
krhprnGJhYf2jm6WcumcVQHV4jA0v5DDMF4cRLnjxdC7+4M9x4SaLRVFJ86+nXBz
G77+I9N9liX7tvI6pZ7EYtU81NDP8ex+Fcl8+BJQTFBo8RUNCwula3pRMKeoBwmP
KhTFqqmmClIOKZU4wTNcSwuCBK4p9/LcDk/SKeq/QXvLgDpLByqD3B9GNpS4b1P1
oP13q35xIQ1C+8ff8hMiwOtdWkfWlOAVTGvhMt6brgfVCK81GwHxg7/is7s9YYE2
y0dD+Dr4dFDdfMfzkBx/vUe6Q4Ico3iF0wJAyV+zAaiOYmALSIBz/nY+tVLbpFlA
DB2y9cuKEAEpww==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:02:58 2026 by rpki-client