Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
File:                     1-qTuqG-fPm54gbS42hmh0nJehxA.mft (raw, json)
Hash identifier:          ckY5Y6sGc91E5pB+5wrTUflYCChLG3Z9/kbRLj0AVuE=
Subject key identifier:   B5:54:DB:00:09:7F:A0:E6:D2:CC:40:2C:D2:DC:5C:7F:7B:16:15:B3
Authority key identifier: FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10
Certificate issuer:       /CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710
Certificate serial:       019EBEECF0318B5B04855E88457628134499
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
Manifest number:          1959
Signing time:             Sat 13 Jun 2026 03:00:59 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:59 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:59 +0000
Files and hashes:         1: 1-qTuqG-fPm54gbS42hmh0nJehxA.crl (hash: OmFYuXPuQ6GbIlzseT6dfGJ38PYxe5GxZtm/IPuGOnI=)
                          2: DeMSqglNgnRimF4pLlzh1FBEhnA.roa (hash: 4oE04OONKgwG5O+fZ1H47RApbnAL6oA0WTInP838z0I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:f0:31:8b:5b:04:85:5e:88:45:76:28:13:44:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710
        Validity
            Not Before: Jun 13 03:00:59 2026 GMT
            Not After : Jun 14 03:00:59 2026 GMT
        Subject: CN=b554db00097fa0e6d2cc402cd2dc5c7f7b1615b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5c:fd:cc:da:84:da:b3:7c:ce:43:d5:01:39:
                    f7:1b:69:62:b8:8d:9b:3d:56:39:ff:fc:b7:d3:5c:
                    4d:2e:68:8d:19:e4:2e:82:1b:d2:8a:0a:a4:5b:81:
                    9e:90:86:ed:b4:14:42:86:18:90:a9:35:36:e1:c9:
                    fd:11:e7:a3:ca:81:a2:91:c9:1a:c7:2e:92:33:e6:
                    7b:df:3e:25:b4:32:9f:d7:15:60:74:b8:81:79:ba:
                    62:b5:76:7c:76:76:70:31:17:de:30:57:62:c9:f4:
                    2d:15:ad:ae:7f:b8:9f:2a:6b:e7:8d:21:b9:38:58:
                    23:aa:ce:7d:32:7d:8b:7c:eb:dd:01:ed:dd:89:66:
                    07:3b:59:f3:23:3f:17:dc:fe:ba:58:83:b6:66:60:
                    01:30:91:19:b0:09:92:d9:17:1b:bd:ac:c0:c9:13:
                    39:37:f0:81:c5:db:96:f2:15:ed:85:4b:cd:6b:dc:
                    d0:9b:48:6d:c6:b0:50:e4:fd:d5:c8:b6:dd:b0:fa:
                    d2:e3:ae:53:4d:1f:9e:9b:42:94:a8:9f:c4:5c:39:
                    c8:8d:a0:2d:90:49:2a:6a:66:ae:9d:b8:37:19:72:
                    bf:01:62:80:7e:1c:94:16:65:f5:e3:18:a6:ed:66:
                    2e:30:94:60:ff:a5:24:71:91:c9:04:e3:0d:fb:27:
                    09:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:54:DB:00:09:7F:A0:E6:D2:CC:40:2C:D2:DC:5C:7F:7B:16:15:B3
            X509v3 Authority Key Identifier:
                keyid:FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:e3:7f:bb:41:bc:8d:23:ce:40:14:5b:2b:92:d8:f7:d5:ec:
         8f:17:62:a9:f3:b4:eb:3d:14:2e:b8:8e:0b:db:9b:5f:0e:f6:
         b1:49:0c:df:d0:2f:44:45:19:09:6f:3c:62:06:77:68:48:0a:
         34:1a:83:b8:17:e1:19:b4:8d:8f:b9:60:c1:05:4a:5f:5f:da:
         5e:29:29:ee:31:16:43:f0:8f:3f:d6:94:fd:05:7d:0d:cd:ad:
         33:8b:17:17:ba:1f:5a:ea:8c:23:5b:01:2a:6e:5b:aa:dc:8d:
         02:c7:5d:e8:f1:ed:ee:1c:a3:7b:a6:93:6c:29:fb:d3:da:c0:
         8e:bc:96:52:83:5d:0a:e8:b9:b0:d4:44:64:24:39:3d:8d:86:
         e5:f1:bd:1f:a8:bc:db:f6:93:32:80:86:7e:3c:f0:05:0a:5c:
         0f:e8:71:4a:8f:29:51:60:e0:a4:a2:b9:43:0d:1c:d6:3b:fc:
         cf:4d:08:d0:4c:c6:1b:d1:60:e2:44:04:96:ef:61:52:d6:d7:
         da:50:90:d9:92:d9:b8:0b:92:02:ab:30:29:0d:0e:f7:df:ae:
         ac:07:8f:53:ab:b8:73:04:6e:df:de:b7:d2:ec:0d:f1:42:5f:
         55:e4:ce:96:1f:84:13:e0:47:33:79:4b:65:8d:36:88:8c:b4:
         34:62:fc:f8
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ6+7PAxi1sEhV6IRXYoE0SZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYTRlZWE4NmY5ZjNlNmU3ODgxYjRiOGRhMTlhMWQyNzI1
ZTg3MTAwHhcNMjYwNjEzMDMwMDU5WhcNMjYwNjE0MDMwMDU5WjAzMTEwLwYDVQQD
EyhiNTU0ZGIwMDA5N2ZhMGU2ZDJjYzQwMmNkMmRjNWM3ZjdiMTYxNWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFz9zNqE2rN8zkPVATn3G2liuI2b
PVY5//y301xNLmiNGeQughvSigqkW4GekIbttBRChhiQqTU24cn9EeejyoGikcka
xy6SM+Z73z4ltDKf1xVgdLiBebpitXZ8dnZwMRfeMFdiyfQtFa2uf7ifKmvnjSG5
OFgjqs59Mn2LfOvdAe3diWYHO1nzIz8X3P66WIO2ZmABMJEZsAmS2RcbvazAyRM5
N/CBxduW8hXthUvNa9zQm0htxrBQ5P3VyLbdsPrS465TTR+em0KUqJ/EXDnIjaAt
kEkqamaunbg3GXK/AWKAfhyUFmX14xim7WYuMJRg/6UkcZHJBOMN+ycJrwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLVU2wAJf6Dm0sxALNLcXH97FhWzMB8GA1UdIwQY
MBaAFPqk7qhvnz5ueIG0uNoZodJyXocQMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1xVHVxRy1mUG01NGdiUzQyaG1oMG5KZWh4QS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvYzJjMjg4LTZmNTYtNGM0ZC05ZGI1
LTk2ZTk5Zjc5NDI3OC8xLzEtcVR1cUctZlBtNTRnYlM0MmhtaDBuSmVoeEEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzBmL2MyYzI4OC02ZjU2LTRjNGQtOWRiNS05NmU5OWY3OTQy
NzgvMS8xLXFUdXFHLWZQbTU0Z2JTNDJobWgwbkplaHhBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz+N/
u0G8jSPOQBRbK5LY99XsjxdiqfO06z0ULriOC9ubXw72sUkM39AvREUZCW88YgZ3
aEgKNBqDuBfhGbSNj7lgwQVKX1/aXikp7jEWQ/CPP9aU/QV9Dc2tM4sXF7ofWuqM
I1sBKm5bqtyNAsdd6PHt7hyje6aTbCn709rAjryWUoNdCui5sNREZCQ5PY2G5fG9
H6i82/aTMoCGfjzwBQpcD+hxSo8pUWDgpKK5Qw0c1jv8z00I0EzGG9Fg4kQElu9h
UtbX2lCQ2ZLZuAuSAqswKQ0O99+urAePU6u4cwRu39630uwN8UJfVeTOlh+EE+BH
M3lLZY02iIy0NGL8+A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:36:08 2026 by rpki-client