Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
File:                     DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft (raw, json)
Hash identifier:          ua2LGhkHtFqTqJuZZ+uIUPlrO7pw7og3Bea8M24/7S8=
Subject key identifier:   39:F5:16:A1:47:31:5A:F0:2F:CA:03:D1:B0:1A:60:84:F4:BF:E7:F8
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Certificate issuer:       /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial:       019EC0A43D05306895203C14318F93234C96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
Manifest number:          1256
Signing time:             Sat 13 Jun 2026 11:00:49 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:49 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:49 +0000
Files and hashes:         1: 6cANbFm-EJrK8-PMA7NyEk83u6k.roa (hash: jYdd/eqOCPnLV/a9ltPhyg+PE8hVFdwnP1KBbgFBkI8=)
                          2: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl (hash: fv+Zf2BhrKNTaFV1ufprgpcRnjcbj2Uzp6G8WXxQ7yo=)
                          3: EuqppgZcuvBd77APj6BJDc66El0.roa (hash: Pou/5mkV9ShqmcqFaVCa6/FpNsjCyEKxq/5LPM8oRyE=)
                          4: F5f-3aC06oFfat6kysD7KzPEy7s.roa (hash: uf9RFkZjIVlqZ17DS35sOy7dY67XFR7qpT1cpxsxJnM=)
                          5: GkG94oLLyaWn0LlA7PecrXl0W9M.roa (hash: Vz1DhIY+rwizM8CF8BSBpl44BncSNC0p93dQaqvmHIk=)
                          6: HAJo40Wzweef0-HmgppS7_KBVno.roa (hash: Md/aD3NC3DChGRJq6Yp2XnMr5nwvrS2wV2tIMtwOW50=)
                          7: KLI9lQwUC5VTV4Cut0plGC56kr4.roa (hash: rUAMk0OUXXf0cF+q5isqU/kNi2S0D4fL5AOOV6b9LlQ=)
                          8: KTMyv7vLJL4RhzKJMxYv2Q04XU0.roa (hash: qlz3neHso26dPUfoq0gD9odJX4heiGA404bEQ8650r4=)
                          9: MKJ3r_4TKeocUaOcCqRhoBecjmM.roa (hash: E+tQHI9Z8HzAp+AQr7VOtuEt3TaI3sVfC37jnLib12o=)
                          10: NpomuMBzJVKQYcl-LphdVCYzfR0.roa (hash: ItHWcgevCY69vj6UIFo76di+HZvWbt6e/RbdJHhjvCE=)
                          11: OX8T0Loeee2SJyDfY3tEnifOFiY.roa (hash: WUtUuVCFbswJZDfkLKymBevKbkG13uZEO19XKdd+n8M=)
                          12: W8YNXsX9yPDFPY_juFzIPJCKU_I.roa (hash: +blIAp8nmqZRBhHxpcV2UfhK4Uk56S7wQ9UO0lHBgcA=)
                          13: YGyJEvwnW0WQ_NWAEj7vFCxCxWA.roa (hash: 2C2bEc32YpX5NyOiU/D+IWaEQi+cpjyPUf9gHuyinOg=)
                          14: ej_ULItssuJKfpG-aO3TpOCfAcM.roa (hash: MuVT+NmseLKCBtNzkD2hqoLRxqqBtVBwn/7W4rZMBJE=)
                          15: h6iTojqaXm32u7BLTwm0z2ziaCY.roa (hash: LjbU3TQQa1ApTEOwMzVmaLwPfpE+NGA0goG5pwMkhxw=)
                          16: ivG7FB0OuHZtaPx3ueruCQJm-VI.roa (hash: 5+fSISaJZ6MVlJNLKKnuDnQodZYydtzTRLt+3siDb90=)
                          17: kEEHiJ2_DoC2VfYdw5LhFhqepV0.roa (hash: wMCNRdrXjQmrhxah3XAz6wjU2Gf/YcDDzzpq9SAnAXc=)
                          18: k_yt6Ew5vZOiqYJGMvVI2kUV5V0.roa (hash: CUNe6MGDt6axlDbgIXUKB8iPiYMZNW/hw7m/AwCnfis=)
                          19: ladaJsKVTuv3YGDi38_Qd9THC0w.roa (hash: ElU3llDhKBNskVBOfdbOzFuE0cAaPwlyq6retebHVjQ=)
                          20: mHQ5lGsBLY58ZqsoI4KyEoGAaCY.roa (hash: qjy47Jf6cTEpCMuTgzO1n5sViPKiS4UbTibv345I4as=)
                          21: qABofJud5u1thFUHFuMgR1s31kI.roa (hash: piC9Su6MbkEuGjwZYHRT2b414PhCD/em2J4HZaBllmw=)
                          22: qG2nNWb8MqqDopUB1tVODEkVl6w.roa (hash: cfGFab+OgFf7ubny/5LdmUqIORuyuUqS67/jyuUGkNM=)
                          23: t0bWLuL94obKt0o74dC0nCo7fYU.roa (hash: tfVFhgnQItxhSLrWx/IEzAzrrjR+KQ0zeBMzi4U648M=)
                          24: uuHljZPCvASdL1cahmx3sk-UM6k.roa (hash: YZhlBGblOcfxdLBJ41C2ivgjxSeLyB952u1KN3aoLfw=)
                          25: w-vsZluT0kZh5IKRYyErUh6E-YI.roa (hash: vQYBg15m1Mue8LpyOtOXWxkLMHHfT9+KR8TqZPcjtHU=)
                          26: zetNVI_5RmQ_9yMT7BWp_EHTd7k.roa (hash: BSZVF8mXcpYwrxryg8NDVMtvr+dxn8y1JxLoHLq3VvQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:3d:05:30:68:95:20:3c:14:31:8f:93:23:4c:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
        Validity
            Not Before: Jun 13 11:00:49 2026 GMT
            Not After : Jun 14 11:00:49 2026 GMT
        Subject: CN=39f516a147315af02fca03d1b01a6084f4bfe7f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4e:c0:56:0f:0f:76:f7:6a:c1:fc:04:f5:eb:
                    49:d9:3b:d3:76:b2:40:af:fb:38:5b:e5:2f:5a:79:
                    02:3f:af:29:ba:3e:e2:98:35:3f:f6:27:88:0b:04:
                    d9:63:4c:9f:c4:ed:e6:72:30:18:9a:88:22:5c:58:
                    56:0e:2c:a5:6b:35:a8:f5:bc:77:98:d9:a9:17:77:
                    11:8a:77:56:ca:8a:ba:be:bb:9a:e8:06:13:ce:bf:
                    f3:f6:fc:c5:82:c4:3b:4a:6d:0e:28:31:79:a2:f6:
                    f6:5e:fa:51:94:26:4a:ca:4c:14:f7:d2:96:6f:2f:
                    2d:0a:3a:94:35:bb:a7:32:01:cd:94:b1:10:f6:28:
                    62:bd:60:75:30:60:33:9b:ea:a1:ef:8e:36:5d:4c:
                    41:0e:34:f5:72:88:fc:e1:74:ba:38:cf:ec:9c:cd:
                    9b:69:18:38:26:47:ad:87:e6:5f:20:27:37:00:0c:
                    48:05:ad:4a:4f:e6:9e:78:20:8e:31:94:b9:e4:fb:
                    e9:18:9a:4b:55:01:cc:36:35:98:be:93:72:e6:ed:
                    3a:db:d6:69:a2:2d:f3:21:de:88:cb:dd:75:16:ce:
                    bd:17:a0:1f:bd:a2:d3:2f:0d:ec:d6:72:aa:e2:46:
                    3d:d5:19:d1:a4:9f:ee:29:a8:30:fd:54:c1:d9:4f:
                    ca:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F5:16:A1:47:31:5A:F0:2F:CA:03:D1:B0:1A:60:84:F4:BF:E7:F8
            X509v3 Authority Key Identifier:
                keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:34:1a:47:e9:e4:9f:a9:e6:d5:5f:dc:0d:b7:da:f6:7a:96:
         e0:11:23:d5:ea:21:cf:45:23:9e:f1:23:a5:3f:29:0f:91:da:
         d0:15:91:33:c3:37:67:e4:9c:42:5b:06:55:d5:dc:11:48:c3:
         c0:46:5c:8d:9b:12:d6:f5:b2:de:c1:59:06:e3:15:80:1d:56:
         2e:43:29:56:bf:81:a9:d0:0c:29:2e:2e:d0:48:13:4e:15:5d:
         a0:47:b3:40:b1:0a:8c:d2:de:77:68:7f:82:29:dd:fb:37:76:
         cf:80:57:df:8c:0f:7b:07:7f:6f:ba:17:0b:21:26:48:15:db:
         c5:a5:44:e5:8d:08:9e:49:bc:f2:c3:2a:f2:d2:06:a2:cf:02:
         65:32:f4:bd:f3:fa:6f:4b:83:68:51:2e:05:54:78:66:c4:f5:
         42:01:17:8f:7d:b8:6b:50:d6:b9:08:a0:2c:48:fe:11:8c:2b:
         5e:f4:54:4d:94:5d:01:87:be:8e:b3:5d:e2:b9:49:0c:99:cf:
         b2:32:4d:8c:9a:63:13:92:21:d7:84:7c:2a:fa:be:80:e9:3c:
         ed:b8:5d:58:d0:d2:38:45:bc:a5:21:76:28:bf:31:ab:09:00:
         c4:d6:a3:30:10:59:20:d7:29:d8:d7:6f:f8:78:1f:63:8d:39:
         b1:a6:f6:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ApD0FMGiVIDwUMY+TI0yWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl
NzM2NjQwHhcNMjYwNjEzMTEwMDQ5WhcNMjYwNjE0MTEwMDQ5WjAzMTEwLwYDVQQD
EygzOWY1MTZhMTQ3MzE1YWYwMmZjYTAzZDFiMDFhNjA4NGY0YmZlN2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmU7AVg8PdvdqwfwE9etJ2TvTdrJA
r/s4W+UvWnkCP68puj7imDU/9ieICwTZY0yfxO3mcjAYmogiXFhWDiylazWo9bx3
mNmpF3cRindWyoq6vrua6AYTzr/z9vzFgsQ7Sm0OKDF5ovb2XvpRlCZKykwU99KW
by8tCjqUNbunMgHNlLEQ9ihivWB1MGAzm+qh7442XUxBDjT1coj84XS6OM/snM2b
aRg4Jketh+ZfICc3AAxIBa1KT+aeeCCOMZS55PvpGJpLVQHMNjWYvpNy5u0629Zp
oi3zId6Iy911Fs69F6AfvaLTLw3s1nKq4kY91RnRpJ/uKagw/VTB2U/KZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDn1FqFHMVrwL8oD0bAaYIT0v+f4MB8GA1UdIwQY
MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt
OGMxNTM5NjViYWM5LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5
LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACDQaR+nk
n6nm1V/cDbfa9nqW4BEj1eohz0UjnvEjpT8pD5Ha0BWRM8M3Z+ScQlsGVdXcEUjD
wEZcjZsS1vWy3sFZBuMVgB1WLkMpVr+BqdAMKS4u0EgTThVdoEezQLEKjNLed2h/
gind+zd2z4BX34wPewd/b7oXCyEmSBXbxaVE5Y0Inkm88sMq8tIGos8CZTL0vfP6
b0uDaFEuBVR4ZsT1QgEXj324a1DWuQigLEj+EYwrXvRUTZRdAYe+jrNd4rlJDJnP
sjJNjJpjE5Ih14R8Kvq+gOk87bhdWNDSOEW8pSF2KL8xqwkAxNajMBBZINcp2Ndv
+HgfY405sab2Nw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:48:47 2026 by rpki-client