Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
File:                     1lAD4kzs-_jowV_2N90V201_rpI.mft (raw, json)
Hash identifier:          syMI8a4uGYnKrJ5nnAgZIQjzCHIqwfhFuJtAjFjBY+o=
Subject key identifier:   39:DB:11:31:32:A8:68:CE:C3:B2:52:81:E9:04:B0:86:C4:F8:B4:F3
Authority key identifier: D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92
Certificate issuer:       /CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
Certificate serial:       019EBFC8FF97EC9985C6DD142770ACA8F4B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
Manifest number:          15ED
Signing time:             Sat 13 Jun 2026 07:01:21 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:21 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:21 +0000
Files and hashes:         1: 1lAD4kzs-_jowV_2N90V201_rpI.crl (hash: jsSMLrWYJ5mfcxNmNVsE8hSh7QEfFUcV0J2C9Z9ohKY=)
                          2: 4ZvAi-gn1pF-qrIQmhpNRfK8kj0.roa (hash: fHKVM+9R/f9S25YhWf0k6ch7xqovB3duuxyKCTErDx0=)
                          3: IWwnPa171sfGXqpY2mWfswCRM5U.roa (hash: 6A+J6jDcFtUHVF1QTU8jgrZFLP13CFzG45TXvJZuPBk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:ff:97:ec:99:85:c6:dd:14:27:70:ac:a8:f4:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
        Validity
            Not Before: Jun 13 07:01:21 2026 GMT
            Not After : Jun 14 07:01:21 2026 GMT
        Subject: CN=39db113132a868cec3b25281e904b086c4f8b4f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cb:77:0a:a0:ad:04:f8:f3:72:57:21:4d:b7:
                    98:9c:80:7c:4c:21:ac:3c:0c:e9:97:71:7c:35:d9:
                    35:ff:39:45:18:f9:9d:de:65:b3:3d:1f:27:6a:8a:
                    78:c3:6d:0b:1c:ed:29:86:d1:59:6e:73:64:37:fa:
                    45:7b:a2:23:73:3a:d3:a1:e9:9e:25:8c:25:95:3b:
                    e5:31:d9:09:62:b7:29:54:51:77:37:92:61:d8:f5:
                    39:c8:23:9c:b9:34:db:78:88:81:2e:76:a2:db:58:
                    8b:35:a7:1b:2f:53:3f:b1:7e:46:a2:ac:a9:c6:89:
                    37:ad:81:2a:e7:97:6e:8b:e2:c8:e6:df:fd:9d:62:
                    48:3c:94:03:55:cf:ea:00:00:d2:97:bf:20:50:bb:
                    09:c9:c2:8f:5c:b8:fe:2b:23:7c:d2:10:7d:58:91:
                    5c:a6:97:bb:ef:b1:2b:04:2a:bc:75:f8:4c:25:2a:
                    79:c4:59:c6:a5:14:05:b4:63:45:d1:59:88:c3:69:
                    aa:a7:8f:6f:24:c4:ea:70:ff:ed:eb:7c:74:f5:d0:
                    74:09:d7:42:a6:c2:7f:a9:ba:04:60:f5:0b:41:4e:
                    78:f1:0b:10:aa:1e:6f:30:96:e5:53:b2:26:7d:b4:
                    02:26:08:1a:d4:95:04:6c:22:87:77:3e:0b:88:07:
                    ac:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:DB:11:31:32:A8:68:CE:C3:B2:52:81:E9:04:B0:86:C4:F8:B4:F3
            X509v3 Authority Key Identifier:
                keyid:D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:34:6a:3c:52:9d:8b:43:66:6d:db:fe:dc:3d:25:f0:31:8b:
         4a:85:e9:c6:e2:88:02:8f:8c:f9:0d:18:24:24:db:82:7c:2b:
         49:30:41:d4:e2:96:c5:af:7f:1e:e4:f6:12:a4:de:5b:f4:14:
         47:72:da:bb:6e:8e:ef:c7:f5:5a:8f:1a:31:f1:fa:eb:d1:19:
         a9:b9:b5:a4:dc:2a:c8:59:49:c1:41:95:8f:4a:0c:5c:45:2e:
         2d:34:26:8d:2f:97:3c:61:70:72:dd:04:af:f7:6c:98:3d:9e:
         b7:d9:1e:8e:01:c8:41:2b:04:6a:ba:ce:84:d8:fe:86:88:b0:
         1d:a3:64:47:19:5f:1a:66:ba:46:4a:ab:d4:6e:e0:3f:71:54:
         ac:45:41:41:eb:e2:66:0b:43:a1:61:54:23:ee:5d:b6:98:b1:
         15:d7:7b:94:f7:ae:a3:75:1b:c0:67:4f:d0:6a:62:a4:26:e5:
         fd:45:28:62:a8:00:22:7a:da:d4:2b:cd:27:33:12:e3:4b:55:
         2c:dc:f5:65:14:85:9f:a2:aa:58:2c:e5:3e:23:fa:17:c9:8f:
         4f:69:5f:8c:a9:dc:64:c2:a5:99:88:99:41:4b:68:b4:5f:0c:
         c1:0b:b0:48:76:a1:70:92:6e:a0:e1:c6:09:6e:36:6f:15:33:
         6c:54:a5:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/yP+X7JmFxt0UJ3CsqPSwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NTAwM2UyNGNlY2ZiZjhlOGMxNWZmNjM3ZGQxNWRiNGQ3
ZmFlOTIwHhcNMjYwNjEzMDcwMTIxWhcNMjYwNjE0MDcwMTIxWjAzMTEwLwYDVQQD
EygzOWRiMTEzMTMyYTg2OGNlYzNiMjUyODFlOTA0YjA4NmM0ZjhiNGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMt3CqCtBPjzclchTbeYnIB8TCGs
PAzpl3F8Ndk1/zlFGPmd3mWzPR8naop4w20LHO0phtFZbnNkN/pFe6IjczrToeme
JYwllTvlMdkJYrcpVFF3N5Jh2PU5yCOcuTTbeIiBLnai21iLNacbL1M/sX5Goqyp
xok3rYEq55dui+LI5t/9nWJIPJQDVc/qAADSl78gULsJycKPXLj+KyN80hB9WJFc
ppe777ErBCq8dfhMJSp5xFnGpRQFtGNF0VmIw2mqp49vJMTqcP/t63x09dB0CddC
psJ/qboEYPULQU548QsQqh5vMJblU7ImfbQCJgga1JUEbCKHdz4LiAeszwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnbETEyqGjOw7JSgekEsIbE+LTzMB8GA1UdIwQY
MBaAFNZQA+JM7Pv46MFf9jfdFdtNf66SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWxBRDRrenMtX2pvd1ZfMk45MFYyMDFfcnBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC81NDkxMGItOWExMy00YWNlLWFiZjIt
YTIzNTFmNGU4OTE1LzEvMWxBRDRrenMtX2pvd1ZfMk45MFYyMDFfcnBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC81NDkxMGItOWExMy00YWNlLWFiZjItYTIzNTFmNGU4OTE1
LzEvMWxBRDRrenMtX2pvd1ZfMk45MFYyMDFfcnBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARjRqPFKd
i0Nmbdv+3D0l8DGLSoXpxuKIAo+M+Q0YJCTbgnwrSTBB1OKWxa9/HuT2EqTeW/QU
R3Lau26O78f1Wo8aMfH669EZqbm1pNwqyFlJwUGVj0oMXEUuLTQmjS+XPGFwct0E
r/dsmD2et9kejgHIQSsEarrOhNj+hoiwHaNkRxlfGma6Rkqr1G7gP3FUrEVBQevi
ZgtDoWFUI+5dtpixFdd7lPeuo3UbwGdP0GpipCbl/UUoYqgAInra1CvNJzMS40tV
LNz1ZRSFn6KqWCzlPiP6F8mPT2lfjKncZMKlmYiZQUtotF8MwQuwSHahcJJuoOHG
CW42bxUzbFSlwA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:31:50 2026 by rpki-client