Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
File:                     hH0b6-TCPEIXuE9_2BkqslVUFag.mft (raw, json)
Hash identifier:          10MNaD92Ry1T9yki+8fE9JVkjas79FkbAfPEfdnyvA8=
Subject key identifier:   47:18:66:07:28:83:49:03:F4:E8:E2:D4:E9:09:A3:CF:85:71:AB:6F
Authority key identifier: 84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8
Certificate issuer:       /CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8
Certificate serial:       019EC17F6AD27B2EADB9E408A17D20886E19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
Manifest number:          17EF
Signing time:             Sat 13 Jun 2026 15:00:13 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:13 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:13 +0000
Files and hashes:         1: OGRlDFmxFDMmmAQ2PHIbdYfiSWM.roa (hash: Qgj5b6VYtZqA5g1js1nnLsLpvoekztlGnv5F0hfyC1k=)
                          2: hH0b6-TCPEIXuE9_2BkqslVUFag.crl (hash: MXaUK0Nrmvwv0AAwLSEE4aSbAHEISstIEam7mUJ1kC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:6a:d2:7b:2e:ad:b9:e4:08:a1:7d:20:88:6e:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8
        Validity
            Not Before: Jun 13 15:00:13 2026 GMT
            Not After : Jun 14 15:00:13 2026 GMT
        Subject: CN=4718660728834903f4e8e2d4e909a3cf8571ab6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a2:b9:da:aa:bd:8f:f8:69:03:5e:a1:77:0f:
                    7d:cd:9c:fb:f4:fe:1b:69:34:37:fa:a7:da:94:ac:
                    40:54:40:d8:30:00:2b:57:fd:f4:a1:b8:7b:81:d0:
                    bb:aa:ff:4b:b1:b3:c2:f2:a2:8c:ee:a3:af:e0:76:
                    39:aa:60:79:34:a5:ce:87:e5:e5:33:d0:65:15:77:
                    49:3a:fd:bf:4c:dc:09:d8:ec:b3:b1:21:72:81:fe:
                    ea:25:3d:49:1e:34:3e:84:56:cd:27:ec:60:7f:a3:
                    db:4d:41:ba:89:f2:64:8f:c6:2b:7f:75:a4:6f:c3:
                    82:bc:ca:b9:ae:fe:43:f9:c4:4a:aa:b0:be:6f:1d:
                    36:4a:3b:ea:97:25:13:65:5c:fc:de:b1:98:6e:2a:
                    00:81:7c:2e:2d:f5:aa:e4:37:f3:90:9a:44:27:18:
                    f8:3a:1c:52:d0:c9:ff:dd:b3:b2:9d:10:f1:70:db:
                    93:8d:a9:a6:79:50:3d:00:1c:ad:c2:10:46:62:08:
                    6f:34:0d:88:f3:d2:c1:a8:65:a0:55:af:10:17:ce:
                    9e:02:8c:22:bb:5a:d1:5c:b8:76:15:8d:45:70:7c:
                    e1:52:b3:af:e2:33:ab:1a:bf:dd:e5:f0:90:1c:c1:
                    3c:d9:b3:65:f1:32:7d:34:1b:b9:70:0e:32:1c:f0:
                    61:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:18:66:07:28:83:49:03:F4:E8:E2:D4:E9:09:A3:CF:85:71:AB:6F
            X509v3 Authority Key Identifier:
                keyid:84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:a9:49:f4:37:15:a3:0b:33:3b:ec:30:b1:44:17:96:8e:3c:
         a0:30:8b:ed:47:84:fb:e7:6f:66:33:88:78:fb:2c:37:82:42:
         34:d5:2f:33:f9:dd:b9:9a:7c:50:36:67:f6:ff:70:42:64:8c:
         bd:d7:41:fa:4e:37:4a:e3:5b:09:33:51:2a:a0:74:59:0e:6b:
         37:00:60:72:33:5d:23:75:87:88:61:75:cd:78:1c:94:e5:20:
         78:a6:69:49:ad:5e:18:7f:68:31:ed:0f:a0:e4:64:11:61:1c:
         a8:2e:c3:4d:8a:4a:e0:29:9e:08:ef:0e:8d:97:49:a3:3e:ab:
         b2:99:d9:0c:51:ca:db:93:56:84:eb:ea:2a:ad:3a:6d:c8:1b:
         5d:1c:3f:10:8b:5b:0d:65:5a:bf:ea:99:d2:42:35:f3:8f:b2:
         e9:64:5d:a6:04:b7:33:3f:58:52:be:db:97:49:69:be:59:6b:
         db:cd:90:93:95:ce:e6:14:b0:ce:14:b2:f8:3e:8a:bc:65:e6:
         89:31:87:87:a3:a6:bb:f8:77:39:92:d6:f2:11:44:6a:35:2e:
         e4:0b:05:2e:1a:99:af:9a:f0:2a:a1:4d:a2:b6:8e:93:a3:0b:
         98:3f:d7:fa:3a:a3:5a:dc:03:df:8b:13:4f:19:25:b7:18:5c:
         7a:6a:b9:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Bf2rSey6tueQIoX0giG4ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0N2QxYmViZTRjMjNjNDIxN2I4NGY3ZmQ4MTkyYWIyNTU1
NDE1YTgwHhcNMjYwNjEzMTUwMDEzWhcNMjYwNjE0MTUwMDEzWjAzMTEwLwYDVQQD
Eyg0NzE4NjYwNzI4ODM0OTAzZjRlOGUyZDRlOTA5YTNjZjg1NzFhYjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KK52qq9j/hpA16hdw99zZz79P4b
aTQ3+qfalKxAVEDYMAArV/30obh7gdC7qv9LsbPC8qKM7qOv4HY5qmB5NKXOh+Xl
M9BlFXdJOv2/TNwJ2OyzsSFygf7qJT1JHjQ+hFbNJ+xgf6PbTUG6ifJkj8Yrf3Wk
b8OCvMq5rv5D+cRKqrC+bx02SjvqlyUTZVz83rGYbioAgXwuLfWq5DfzkJpEJxj4
OhxS0Mn/3bOynRDxcNuTjammeVA9ABytwhBGYghvNA2I89LBqGWgVa8QF86eAowi
u1rRXLh2FY1FcHzhUrOv4jOrGr/d5fCQHME82bNl8TJ9NBu5cA4yHPBh+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcYZgcog0kD9Oji1OkJo8+FcatvMB8GA1UdIwQY
MBaAFIR9G+vkwjxCF7hPf9gZKrJVVBWoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEgwYjYtVENQRUlYdUU5XzJCa3FzbFZVRmFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9mODFlYWItYmMzNi00MmE2LTgyMmEt
Y2RiMWQzODU1NmJiLzEvaEgwYjYtVENQRUlYdUU5XzJCa3FzbFZVRmFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9mODFlYWItYmMzNi00MmE2LTgyMmEtY2RiMWQzODU1NmJi
LzEvaEgwYjYtVENQRUlYdUU5XzJCa3FzbFZVRmFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnqlJ9DcV
owszO+wwsUQXlo48oDCL7UeE++dvZjOIePssN4JCNNUvM/nduZp8UDZn9v9wQmSM
vddB+k43SuNbCTNRKqB0WQ5rNwBgcjNdI3WHiGF1zXgclOUgeKZpSa1eGH9oMe0P
oORkEWEcqC7DTYpK4CmeCO8OjZdJoz6rspnZDFHK25NWhOvqKq06bcgbXRw/EItb
DWVav+qZ0kI184+y6WRdpgS3Mz9YUr7bl0lpvllr282Qk5XO5hSwzhSy+D6KvGXm
iTGHh6Omu/h3OZLW8hFEajUu5AsFLhqZr5rwKqFNoraOk6MLmD/X+jqjWtwD34sT
Txkltxhcemq50A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:34:07 2026 by rpki-client