Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
File:                     mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft (raw, json)
Hash identifier:          vOsV+l6/tDu3nHATUvacmhmXmba6tMpWLDyT2I16vZw=
Subject key identifier:   7F:03:6A:BD:03:9F:8F:63:4E:CB:4E:A9:53:23:4B:A1:02:DF:F9:09
Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
Certificate issuer:       /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Certificate serial:       019EC224ECE4B2EB93F2B7FD54DFF7E05B6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
Manifest number:          134D
Signing time:             Sat 13 Jun 2026 18:01:00 +0000
Manifest this update:     Sat 13 Jun 2026 18:01:00 +0000
Manifest next update:     Sun 14 Jun 2026 18:01:00 +0000
Files and hashes:         1: 5z8L94SxohW89feZF-x7UUHOUGw.roa (hash: J9U9SwJZOAhHbw/+dwZT4u/bEO014TJ7Spfz6aawrAo=)
                          2: 60ZuDyr70onvZz7b_VP-SDmx33E.roa (hash: twz5MCkaRcivByRDA9QCyxItgQZO9OCdluDvL7eF7Ro=)
                          3: BlrqBtWblMfctvze6Z4e1h26Vg0.roa (hash: mrpfN/u4KNrOk9l0nXYVVF7vi+rRmvUj9lVXmfONvc8=)
                          4: NHjW7dPsyIq0Ra6kfJvb1FDPOrc.roa (hash: eNPkOFpshNdBId/GwxgDcZ/1OocRZllruwGL/l+cxaA=)
                          5: TmO2qs3CJ7nD3brN-Xezi1R7_Eo.roa (hash: r53OH2xwFa4qKn9FoyBvVY4gvGfnLfCBjSGuWq2Tb+U=)
                          6: e9W3bqM-9Cf9J8NK5NJYdPxtNqQ.roa (hash: fhBttHfpH+r5wDlnd1XHbP4VIUk5mx77G0HB40PrGrc=)
                          7: mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl (hash: xD6yEsX7LGaFr1v1KHfja9lCXgx7X751DG6hxVFICRE=)
                          8: vLogJj6NuTRQtmEXSY4brF-qnBY.roa (hash: zohFkXr1VCR5q6x1R2Xx5enwasHpy8O1g/gJdKkByho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:ec:e4:b2:eb:93:f2:b7:fd:54:df:f7:e0:5b:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
        Validity
            Not Before: Jun 13 18:01:00 2026 GMT
            Not After : Jun 14 18:01:00 2026 GMT
        Subject: CN=7f036abd039f8f634ecb4ea953234ba102dff909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fe:31:5e:df:97:0f:b2:ac:b1:5f:9a:7c:bc:
                    37:b8:af:42:c3:9e:fc:fd:8d:bb:28:4c:27:52:31:
                    d8:48:7e:81:c1:f5:6d:40:60:98:2a:4e:f3:72:8d:
                    1d:30:40:33:6f:62:9e:4b:96:c7:55:4b:94:9d:2f:
                    f3:9f:d7:e0:e1:9c:01:8d:42:55:23:7d:60:d0:a3:
                    4c:78:f6:c5:87:a4:ff:d5:f9:06:c8:f0:84:be:ac:
                    c2:d1:43:c2:2c:96:dc:88:9e:9d:c3:be:54:a9:f6:
                    76:1a:dd:f5:b7:ae:92:2c:02:17:cc:b5:6e:2c:4b:
                    54:9e:16:dd:d4:fb:6e:db:0c:7e:2c:a7:2e:90:3b:
                    45:71:be:2e:0a:c6:90:d0:b4:b7:09:9d:7d:5d:42:
                    39:34:6f:59:1a:eb:c4:f4:7b:65:10:64:4e:b0:51:
                    43:8f:18:e7:90:ce:f6:59:06:28:88:b1:f8:7e:6b:
                    38:e6:c1:e4:19:fe:50:c3:30:7e:25:c4:2c:5c:95:
                    05:a0:e3:58:11:62:d1:fa:8a:2b:c1:d9:bc:77:22:
                    1b:30:70:79:a7:10:7d:bc:cc:3b:ec:1c:a6:1c:c6:
                    40:b8:e2:05:3c:38:ae:fb:6b:d3:41:c1:9a:46:fb:
                    b0:d3:70:7d:ca:6e:41:50:44:c7:80:62:93:19:e0:
                    0c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:03:6A:BD:03:9F:8F:63:4E:CB:4E:A9:53:23:4B:A1:02:DF:F9:09
            X509v3 Authority Key Identifier:
                keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:96:0c:5a:09:d1:3a:b7:9a:cb:cd:a6:01:80:00:44:36:ae:
         a4:b8:10:d0:82:a0:5f:5a:3d:40:27:9d:d6:cd:e0:78:59:56:
         5c:8c:cf:39:33:3a:1b:a7:fc:80:ed:20:cc:c8:78:8e:d6:e5:
         f3:2e:53:3d:0b:09:de:ba:46:7f:4f:54:07:9a:30:24:95:44:
         31:48:26:c9:9a:5b:f3:77:6c:a2:dc:4a:64:4b:8b:66:0c:30:
         80:d7:21:1c:60:3b:9e:0d:29:76:74:33:cb:d0:5a:5b:e0:b0:
         33:4e:77:cd:3f:ff:46:8c:74:9d:e2:8b:96:e7:15:96:04:fa:
         a3:e8:31:96:2a:7d:64:bd:ca:85:be:ea:22:9b:22:09:f2:89:
         63:cf:63:b5:6f:30:3d:fa:3e:91:fb:65:c5:00:cc:86:e2:09:
         fa:04:fc:af:0e:cb:16:96:ff:49:42:bf:43:3a:d9:ac:ae:e3:
         97:9b:74:f2:3c:0d:93:54:84:21:ff:a7:af:c9:99:04:6f:2c:
         0e:bc:7c:61:4b:c5:48:34:5b:43:18:87:c9:c7:55:6c:b2:52:
         a5:07:8a:e8:c5:91:71:a4:6e:8a:4a:10:c0:87:60:95:18:ed:
         b0:f2:d0:d1:38:f1:50:43:56:fb:88:d3:c6:09:e8:b2:22:dd:
         6d:c2:30:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CJOzksuuT8rf9VN/34FtuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZmVlN2NiZDhlNzhkMWYxNGE0NTNhMDRiOTE2ZjdjMTU4
MWQyMDQwHhcNMjYwNjEzMTgwMTAwWhcNMjYwNjE0MTgwMTAwWjAzMTEwLwYDVQQD
Eyg3ZjAzNmFiZDAzOWY4ZjYzNGVjYjRlYTk1MzIzNGJhMTAyZGZmOTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf4xXt+XD7KssV+afLw3uK9Cw578
/Y27KEwnUjHYSH6BwfVtQGCYKk7zco0dMEAzb2KeS5bHVUuUnS/zn9fg4ZwBjUJV
I31g0KNMePbFh6T/1fkGyPCEvqzC0UPCLJbciJ6dw75UqfZ2Gt31t66SLAIXzLVu
LEtUnhbd1Ptu2wx+LKcukDtFcb4uCsaQ0LS3CZ19XUI5NG9ZGuvE9HtlEGROsFFD
jxjnkM72WQYoiLH4fms45sHkGf5QwzB+JcQsXJUFoONYEWLR+oorwdm8dyIbMHB5
pxB9vMw77BymHMZAuOIFPDiu+2vTQcGaRvuw03B9ym5BUETHgGKTGeAMPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH8Dar0Dn49jTstOqVMjS6EC3/kJMB8GA1UdIwQY
MBaAFJn+58vY540fFKRToEuRb3wVgdIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWY3bnk5am5qUjhVcEZPZ1M1RnZmQldCMGdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wZGQ0Y2ItMWY3Mi00MGVkLWE2NTct
MWMyMmVmZjcyODE4LzEvbWY3bnk5am5qUjhVcEZPZ1M1RnZmQldCMGdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8wZGQ0Y2ItMWY3Mi00MGVkLWE2NTctMWMyMmVmZjcyODE4
LzEvbWY3bnk5am5qUjhVcEZPZ1M1RnZmQldCMGdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwpYMWgnR
Oreay82mAYAARDaupLgQ0IKgX1o9QCed1s3geFlWXIzPOTM6G6f8gO0gzMh4jtbl
8y5TPQsJ3rpGf09UB5owJJVEMUgmyZpb83dsotxKZEuLZgwwgNchHGA7ng0pdnQz
y9BaW+CwM053zT//Rox0neKLlucVlgT6o+gxlip9ZL3Khb7qIpsiCfKJY89jtW8w
Pfo+kftlxQDMhuIJ+gT8rw7LFpb/SUK/QzrZrK7jl5t08jwNk1SEIf+nr8mZBG8s
Drx8YUvFSDRbQxiHycdVbLJSpQeK6MWRcaRuikoQwIdglRjtsPLQ0TjxUENW+4jT
xgnosiLdbcIwpA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:30:08 2026 by rpki-client