Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/77c34c-e460-405f-954e-f641422121d2/1/G1ODFvaFKl08opH096J6zyr3ibg.mft
File:                     G1ODFvaFKl08opH096J6zyr3ibg.mft (raw, json)
Hash identifier:          GJnCM89ud5QVFjIzZ4jNf1GswKLYT7KdTI90FuFRDWI=
Subject key identifier:   63:EB:29:E6:7F:32:DB:5E:6D:47:AE:FB:96:D7:19:01:48:8D:78:D8
Authority key identifier: 1B:53:83:16:F6:85:2A:5D:3C:A2:91:F4:F7:A2:7A:CF:2A:F7:89:B8
Certificate issuer:       /CN=1b538316f6852a5d3ca291f4f7a27acf2af789b8
Certificate serial:       019EC25BA62C7D77CA5288A06BCF4C8A6334
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G1ODFvaFKl08opH096J6zyr3ibg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/77c34c-e460-405f-954e-f641422121d2/1/G1ODFvaFKl08opH096J6zyr3ibg.mft
Manifest number:          012F
Signing time:             Sat 13 Jun 2026 19:00:46 +0000
Manifest this update:     Sat 13 Jun 2026 19:00:46 +0000
Manifest next update:     Sun 14 Jun 2026 19:00:46 +0000
Files and hashes:         1: 3Vfs46JpS4OIv6juqlsavP8vJjY.asa (hash: sB2s+Xl9S1p4i5AWfMPlsofSMh8d6xFVYKGmtBeEpqw=)
                          2: G1ODFvaFKl08opH096J6zyr3ibg.crl (hash: iCCH/if7DukaDXCbzJepc5mdMrGpIFMjmjhF+dmJRSo=)
                          3: pO4-6JRTb_iUQ3eGXntbc3yEu38.roa (hash: 1+fcU0cN2SSHn14oJqXDeRbJ3y0/io2Qni1kI8nGGxM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/77c34c-e460-405f-954e-f641422121d2/1/G1ODFvaFKl08opH096J6zyr3ibg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/77c34c-e460-405f-954e-f641422121d2/1/G1ODFvaFKl08opH096J6zyr3ibg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G1ODFvaFKl08opH096J6zyr3ibg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5b:a6:2c:7d:77:ca:52:88:a0:6b:cf:4c:8a:63:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b538316f6852a5d3ca291f4f7a27acf2af789b8
        Validity
            Not Before: Jun 13 19:00:46 2026 GMT
            Not After : Jun 14 19:00:46 2026 GMT
        Subject: CN=63eb29e67f32db5e6d47aefb96d71901488d78d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:94:9d:58:fb:3a:78:55:57:54:83:46:e7:ad:
                    5e:04:ff:c9:9a:58:f4:c6:00:07:f3:79:1d:d5:65:
                    dd:93:7f:46:b3:3c:36:83:2f:c8:e4:9d:09:2e:8f:
                    7a:d5:50:9c:08:0b:67:43:5b:22:d9:06:53:0e:69:
                    b3:10:1b:82:57:3b:ea:1e:2b:12:da:c3:3e:58:43:
                    87:d3:86:77:6c:4c:a0:80:f1:e2:c6:ee:45:4f:0c:
                    f1:17:b9:a8:ae:9d:6b:33:fe:52:bd:b9:ab:32:06:
                    3e:43:37:93:40:8e:02:4c:c0:e1:ac:1b:8c:ec:e0:
                    90:2d:b3:2c:85:bf:7e:4a:55:35:d5:b8:e9:15:c6:
                    9a:26:9e:85:fd:58:32:c2:48:8e:66:b0:6c:a0:a9:
                    b0:6f:78:9a:f9:c4:0a:f6:21:5d:e3:11:68:9c:39:
                    a9:e5:1e:22:96:86:d7:c6:9a:64:58:b1:cc:2d:1c:
                    84:86:1e:c1:51:cd:cb:07:50:cc:2c:9e:10:2b:0c:
                    06:76:7b:ab:34:6b:8c:4e:3d:c6:27:23:5a:6a:21:
                    71:86:cc:ec:e0:57:fd:34:3c:21:5c:21:03:85:74:
                    28:24:36:2a:5d:19:dc:ac:e3:e6:bc:a7:77:c0:0b:
                    00:46:ba:14:14:50:9b:e5:d2:60:70:2d:16:df:98:
                    2d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:EB:29:E6:7F:32:DB:5E:6D:47:AE:FB:96:D7:19:01:48:8D:78:D8
            X509v3 Authority Key Identifier:
                keyid:1B:53:83:16:F6:85:2A:5D:3C:A2:91:F4:F7:A2:7A:CF:2A:F7:89:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1ODFvaFKl08opH096J6zyr3ibg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/77c34c-e460-405f-954e-f641422121d2/1/G1ODFvaFKl08opH096J6zyr3ibg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/77c34c-e460-405f-954e-f641422121d2/1/G1ODFvaFKl08opH096J6zyr3ibg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:b4:e6:f8:4c:e4:42:7a:14:7d:3f:c4:bf:a9:ba:b8:18:4d:
         72:fa:f2:05:df:b7:82:ea:a0:eb:26:ef:e6:06:78:5a:4c:ec:
         80:ff:2e:bf:0e:62:1f:ba:20:ad:53:b3:ea:1a:54:06:74:06:
         e0:c6:70:70:2f:49:73:41:73:41:fe:e6:2c:46:80:4e:f2:c4:
         62:a8:e0:02:3f:f2:30:39:e8:21:a0:fd:60:b4:1f:cf:1f:58:
         af:c6:81:ea:ee:fc:3c:57:e3:f7:37:d9:c0:be:2d:e7:76:84:
         8b:68:7a:8b:aa:8b:d3:9d:4d:32:df:a1:f4:b2:ca:31:bc:26:
         d6:d1:37:8c:43:bf:28:6d:6f:79:02:4e:48:d9:80:e0:a6:1b:
         ec:8c:38:a5:04:a2:52:4c:16:b6:05:f2:26:25:5c:8e:eb:e2:
         e7:fc:e8:8d:7e:d5:2a:82:8a:6a:e1:ab:ec:3d:ee:3b:3c:87:
         f6:37:a3:5b:cd:e3:f2:02:f9:6b:9c:2d:0f:0d:eb:26:47:5b:
         cb:29:8c:2a:96:78:4c:91:5d:78:82:72:24:a4:ee:2c:64:24:
         ab:7b:9a:84:d8:78:0b:c5:65:fd:bf:64:29:5a:34:da:6f:88:
         40:86:b7:d7:1c:f5:54:a4:16:c7:61:80:72:ca:ce:61:e7:6a:
         09:ea:88:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CW6YsfXfKUoiga89MimM0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNTM4MzE2ZjY4NTJhNWQzY2EyOTFmNGY3YTI3YWNmMmFm
Nzg5YjgwHhcNMjYwNjEzMTkwMDQ2WhcNMjYwNjE0MTkwMDQ2WjAzMTEwLwYDVQQD
Eyg2M2ViMjllNjdmMzJkYjVlNmQ0N2FlZmI5NmQ3MTkwMTQ4OGQ3OGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZSdWPs6eFVXVING561eBP/Jmlj0
xgAH83kd1WXdk39Gszw2gy/I5J0JLo961VCcCAtnQ1si2QZTDmmzEBuCVzvqHisS
2sM+WEOH04Z3bEyggPHixu5FTwzxF7morp1rM/5SvbmrMgY+QzeTQI4CTMDhrBuM
7OCQLbMshb9+SlU11bjpFcaaJp6F/VgywkiOZrBsoKmwb3ia+cQK9iFd4xFonDmp
5R4ilobXxppkWLHMLRyEhh7BUc3LB1DMLJ4QKwwGdnurNGuMTj3GJyNaaiFxhszs
4Ff9NDwhXCEDhXQoJDYqXRncrOPmvKd3wAsARroUFFCb5dJgcC0W35gtvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPrKeZ/MttebUeu+5bXGQFIjXjYMB8GA1UdIwQY
MBaAFBtTgxb2hSpdPKKR9Peies8q94m4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzFPREZ2YUZLbDA4b3BIMDk2SjZ6eXIzaWJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC83N2MzNGMtZTQ2MC00MDVmLTk1NGUt
ZjY0MTQyMjEyMWQyLzEvRzFPREZ2YUZLbDA4b3BIMDk2SjZ6eXIzaWJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC83N2MzNGMtZTQ2MC00MDVmLTk1NGUtZjY0MTQyMjEyMWQy
LzEvRzFPREZ2YUZLbDA4b3BIMDk2SjZ6eXIzaWJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXrTm+Ezk
QnoUfT/Ev6m6uBhNcvryBd+3guqg6ybv5gZ4WkzsgP8uvw5iH7ogrVOz6hpUBnQG
4MZwcC9Jc0FzQf7mLEaATvLEYqjgAj/yMDnoIaD9YLQfzx9Yr8aB6u78PFfj9zfZ
wL4t53aEi2h6i6qL051NMt+h9LLKMbwm1tE3jEO/KG1veQJOSNmA4KYb7Iw4pQSi
UkwWtgXyJiVcjuvi5/zojX7VKoKKauGr7D3uOzyH9jejW83j8gL5a5wtDw3rJkdb
yymMKpZ4TJFdeIJyJKTuLGQkq3uahNh4C8Vl/b9kKVo02m+IQIa31xz1VKQWx2GA
csrOYedqCeqIzw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:04:08 2026 by rpki-client