Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2177e6-d3f0-4552-8b39-493fdb65ee05/1/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.mft
File:                     rVzlUwBgcP4IA3Ct-5RO0pt9lBE.mft (raw, json)
Hash identifier:          exn8qyv5qy1+aKp+f6QTAdBkW+PNp0+F+7tM9Vyzd54=
Subject key identifier:   37:8C:2D:90:57:8B:18:37:9A:3D:09:1F:04:4E:35:F0:A7:DE:90:A4
Authority key identifier: AD:5C:E5:53:00:60:70:FE:08:03:70:AD:FB:94:4E:D2:9B:7D:94:11
Certificate issuer:       /CN=ad5ce553006070fe080370adfb944ed29b7d9411
Certificate serial:       019ED386BF8CC0050513A5ABD3F2DC45A6F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/2177e6-d3f0-4552-8b39-493fdb65ee05/1/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.mft
Manifest number:          4F
Signing time:             Wed 17 Jun 2026 03:01:23 +0000
Manifest this update:     Wed 17 Jun 2026 03:01:23 +0000
Manifest next update:     Thu 18 Jun 2026 03:01:23 +0000
Files and hashes:         1: Di2m4-5_QDl5Rldoh59q9lj5dCY.roa (hash: GNTOuw95a8w2YtoMmrRI/JIWU21DxcdrGmYPu8oxIao=)
                          2: rVzlUwBgcP4IA3Ct-5RO0pt9lBE.crl (hash: /ssu7lhAphpncZSrvqLOg/NUZdmBpRH/nY8OQW850kE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/2177e6-d3f0-4552-8b39-493fdb65ee05/1/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/2177e6-d3f0-4552-8b39-493fdb65ee05/1/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 03:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:86:bf:8c:c0:05:05:13:a5:ab:d3:f2:dc:45:a6:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad5ce553006070fe080370adfb944ed29b7d9411
        Validity
            Not Before: Jun 17 03:01:23 2026 GMT
            Not After : Jun 18 03:01:23 2026 GMT
        Subject: CN=378c2d90578b18379a3d091f044e35f0a7de90a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:16:88:ac:0e:36:b6:ae:c1:15:a4:75:fc:80:
                    e8:d7:cd:9a:59:be:66:4a:2b:a6:4c:be:1b:9b:ba:
                    59:73:e0:42:a5:2f:5d:3e:45:75:c5:5f:da:c7:09:
                    fe:c1:73:e0:11:cf:67:df:7e:43:7f:a0:70:b9:f1:
                    f0:7c:98:d3:a1:0b:4a:2f:8f:bb:e3:57:5f:a6:f5:
                    f6:63:d5:8e:ca:36:32:ed:38:03:9d:e0:91:c0:97:
                    9d:3e:82:b3:23:3d:cc:65:2a:68:93:88:eb:95:e1:
                    0d:6a:15:8a:82:b3:ea:c0:22:0c:ae:fa:05:ce:26:
                    eb:38:af:dd:a8:a9:d3:f7:a3:a7:65:e7:c1:c3:ff:
                    74:5a:8a:94:1b:f4:de:3a:63:1a:57:2a:13:92:42:
                    f7:7a:22:03:e2:93:60:f1:9f:00:80:1a:77:1c:25:
                    b0:f8:42:a8:cd:81:56:25:c9:23:91:3c:58:a1:a8:
                    c6:12:a5:89:67:a1:bf:30:c8:66:e9:53:5d:8e:d3:
                    cd:7a:63:11:7a:09:fc:9e:15:b5:f5:6b:fd:c6:de:
                    07:3a:ed:d5:92:d5:d2:8a:23:9c:7c:0a:63:cb:ad:
                    c5:d4:ed:04:94:37:c1:91:1e:b3:cd:5a:5b:0b:ec:
                    e6:f6:cf:5f:f4:82:2f:bf:0c:6b:4c:1c:4f:25:06:
                    6d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8C:2D:90:57:8B:18:37:9A:3D:09:1F:04:4E:35:F0:A7:DE:90:A4
            X509v3 Authority Key Identifier:
                keyid:AD:5C:E5:53:00:60:70:FE:08:03:70:AD:FB:94:4E:D2:9B:7D:94:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2177e6-d3f0-4552-8b39-493fdb65ee05/1/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2177e6-d3f0-4552-8b39-493fdb65ee05/1/rVzlUwBgcP4IA3Ct-5RO0pt9lBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:bf:60:b2:19:b4:c9:58:95:5b:54:69:a3:92:6d:f5:13:3b:
         9c:22:2c:7a:e4:69:2f:ee:16:c9:ee:f3:10:0f:82:95:f9:04:
         f5:d9:6f:f0:54:3f:8f:ce:6e:08:06:a6:e0:2c:d3:ec:bd:31:
         76:72:b7:df:c9:e5:df:89:ff:78:9c:89:7b:70:81:00:85:bb:
         50:80:ce:a8:d4:79:64:b6:68:9a:e4:06:7d:72:61:29:1c:95:
         9a:5e:f6:12:2d:b0:31:bf:d9:9f:d8:38:fc:e7:23:d3:59:2e:
         9c:66:5b:4a:c2:76:8c:1f:47:c3:05:71:61:03:30:f5:16:50:
         70:c7:54:ff:81:96:22:6d:5c:93:4e:0a:26:f7:29:ab:69:d2:
         0f:41:12:5c:90:43:e1:e5:54:3c:9d:85:18:21:70:1c:ff:82:
         4b:71:6c:5f:f5:48:73:20:d8:77:d9:04:c9:ab:d8:84:fe:3d:
         f9:90:97:5b:40:ec:30:0b:9f:74:33:47:ef:f2:df:6f:79:88:
         86:76:a9:36:89:33:5e:32:b6:b0:30:2c:12:a0:01:2b:03:a0:
         7b:93:f1:56:6f:b4:2c:a3:69:0b:21:e4:28:f7:dd:76:6f:36:
         bc:61:5e:28:98:78:7b:b7:9b:ff:bb:45:58:45:ac:88:36:c5:
         ee:69:ae:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Thr+MwAUFE6Wr0/LcRabxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkNWNlNTUzMDA2MDcwZmUwODAzNzBhZGZiOTQ0ZWQyOWI3
ZDk0MTEwHhcNMjYwNjE3MDMwMTIzWhcNMjYwNjE4MDMwMTIzWjAzMTEwLwYDVQQD
EygzNzhjMmQ5MDU3OGIxODM3OWEzZDA5MWYwNDRlMzVmMGE3ZGU5MGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxaIrA42tq7BFaR1/IDo182aWb5m
SiumTL4bm7pZc+BCpS9dPkV1xV/axwn+wXPgEc9n335Df6BwufHwfJjToQtKL4+7
41dfpvX2Y9WOyjYy7TgDneCRwJedPoKzIz3MZSpok4jrleENahWKgrPqwCIMrvoF
zibrOK/dqKnT96OnZefBw/90WoqUG/TeOmMaVyoTkkL3eiID4pNg8Z8AgBp3HCWw
+EKozYFWJckjkTxYoajGEqWJZ6G/MMhm6VNdjtPNemMRegn8nhW19Wv9xt4HOu3V
ktXSiiOcfApjy63F1O0ElDfBkR6zzVpbC+zm9s9f9IIvvwxrTBxPJQZtFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDeMLZBXixg3mj0JHwRONfCn3pCkMB8GA1UdIwQY
MBaAFK1c5VMAYHD+CANwrfuUTtKbfZQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclZ6bFV3QmdjUDRJQTNDdC01Uk8wcHQ5bEJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yMTc3ZTYtZDNmMC00NTUyLThiMzkt
NDkzZmRiNjVlZTA1LzEvclZ6bFV3QmdjUDRJQTNDdC01Uk8wcHQ5bEJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yMTc3ZTYtZDNmMC00NTUyLThiMzktNDkzZmRiNjVlZTA1
LzEvclZ6bFV3QmdjUDRJQTNDdC01Uk8wcHQ5bEJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF79gshm0
yViVW1Rpo5Jt9RM7nCIseuRpL+4Wye7zEA+ClfkE9dlv8FQ/j85uCAam4CzT7L0x
dnK338nl34n/eJyJe3CBAIW7UIDOqNR5ZLZomuQGfXJhKRyVml72Ei2wMb/Zn9g4
/Ocj01kunGZbSsJ2jB9HwwVxYQMw9RZQcMdU/4GWIm1ck04KJvcpq2nSD0ESXJBD
4eVUPJ2FGCFwHP+CS3FsX/VIcyDYd9kEyavYhP49+ZCXW0DsMAufdDNH7/Lfb3mI
hnapNokzXjK2sDAsEqABKwOge5PxVm+0LKNpCyHkKPfddm82vGFeKJh4e7eb/7tF
WEWsiDbF7mmulw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:54:42 2026 by rpki-client