Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
File:                     DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft (raw, json)
Hash identifier:          4fnt3RW9cTB0F5BGqrt6xAg7/I0FR4oQjF3EgIoi9v0=
Subject key identifier:   EC:60:A1:0B:EE:ED:2B:05:A2:1E:07:BC:E9:D8:0D:42:6F:75:7F:C0
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Certificate issuer:       /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial:       019EBEB6692CEA6F31F7F898E5511591699A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
Manifest number:          1255
Signing time:             Sat 13 Jun 2026 02:01:25 +0000
Manifest this update:     Sat 13 Jun 2026 02:01:25 +0000
Manifest next update:     Sun 14 Jun 2026 02:01:25 +0000
Files and hashes:         1: 6cANbFm-EJrK8-PMA7NyEk83u6k.roa (hash: jYdd/eqOCPnLV/a9ltPhyg+PE8hVFdwnP1KBbgFBkI8=)
                          2: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl (hash: Y0N79yPUuwAI1+Vk3ipByEclEo8p5HfNgvX9mkoJCW0=)
                          3: EuqppgZcuvBd77APj6BJDc66El0.roa (hash: Pou/5mkV9ShqmcqFaVCa6/FpNsjCyEKxq/5LPM8oRyE=)
                          4: F5f-3aC06oFfat6kysD7KzPEy7s.roa (hash: uf9RFkZjIVlqZ17DS35sOy7dY67XFR7qpT1cpxsxJnM=)
                          5: GkG94oLLyaWn0LlA7PecrXl0W9M.roa (hash: Vz1DhIY+rwizM8CF8BSBpl44BncSNC0p93dQaqvmHIk=)
                          6: HAJo40Wzweef0-HmgppS7_KBVno.roa (hash: Md/aD3NC3DChGRJq6Yp2XnMr5nwvrS2wV2tIMtwOW50=)
                          7: KLI9lQwUC5VTV4Cut0plGC56kr4.roa (hash: rUAMk0OUXXf0cF+q5isqU/kNi2S0D4fL5AOOV6b9LlQ=)
                          8: KTMyv7vLJL4RhzKJMxYv2Q04XU0.roa (hash: qlz3neHso26dPUfoq0gD9odJX4heiGA404bEQ8650r4=)
                          9: MKJ3r_4TKeocUaOcCqRhoBecjmM.roa (hash: E+tQHI9Z8HzAp+AQr7VOtuEt3TaI3sVfC37jnLib12o=)
                          10: NpomuMBzJVKQYcl-LphdVCYzfR0.roa (hash: ItHWcgevCY69vj6UIFo76di+HZvWbt6e/RbdJHhjvCE=)
                          11: OX8T0Loeee2SJyDfY3tEnifOFiY.roa (hash: WUtUuVCFbswJZDfkLKymBevKbkG13uZEO19XKdd+n8M=)
                          12: W8YNXsX9yPDFPY_juFzIPJCKU_I.roa (hash: +blIAp8nmqZRBhHxpcV2UfhK4Uk56S7wQ9UO0lHBgcA=)
                          13: YGyJEvwnW0WQ_NWAEj7vFCxCxWA.roa (hash: 2C2bEc32YpX5NyOiU/D+IWaEQi+cpjyPUf9gHuyinOg=)
                          14: ej_ULItssuJKfpG-aO3TpOCfAcM.roa (hash: MuVT+NmseLKCBtNzkD2hqoLRxqqBtVBwn/7W4rZMBJE=)
                          15: h6iTojqaXm32u7BLTwm0z2ziaCY.roa (hash: LjbU3TQQa1ApTEOwMzVmaLwPfpE+NGA0goG5pwMkhxw=)
                          16: ivG7FB0OuHZtaPx3ueruCQJm-VI.roa (hash: 5+fSISaJZ6MVlJNLKKnuDnQodZYydtzTRLt+3siDb90=)
                          17: kEEHiJ2_DoC2VfYdw5LhFhqepV0.roa (hash: wMCNRdrXjQmrhxah3XAz6wjU2Gf/YcDDzzpq9SAnAXc=)
                          18: k_yt6Ew5vZOiqYJGMvVI2kUV5V0.roa (hash: CUNe6MGDt6axlDbgIXUKB8iPiYMZNW/hw7m/AwCnfis=)
                          19: ladaJsKVTuv3YGDi38_Qd9THC0w.roa (hash: ElU3llDhKBNskVBOfdbOzFuE0cAaPwlyq6retebHVjQ=)
                          20: mHQ5lGsBLY58ZqsoI4KyEoGAaCY.roa (hash: qjy47Jf6cTEpCMuTgzO1n5sViPKiS4UbTibv345I4as=)
                          21: qABofJud5u1thFUHFuMgR1s31kI.roa (hash: piC9Su6MbkEuGjwZYHRT2b414PhCD/em2J4HZaBllmw=)
                          22: qG2nNWb8MqqDopUB1tVODEkVl6w.roa (hash: cfGFab+OgFf7ubny/5LdmUqIORuyuUqS67/jyuUGkNM=)
                          23: t0bWLuL94obKt0o74dC0nCo7fYU.roa (hash: tfVFhgnQItxhSLrWx/IEzAzrrjR+KQ0zeBMzi4U648M=)
                          24: uuHljZPCvASdL1cahmx3sk-UM6k.roa (hash: YZhlBGblOcfxdLBJ41C2ivgjxSeLyB952u1KN3aoLfw=)
                          25: w-vsZluT0kZh5IKRYyErUh6E-YI.roa (hash: vQYBg15m1Mue8LpyOtOXWxkLMHHfT9+KR8TqZPcjtHU=)
                          26: zetNVI_5RmQ_9yMT7BWp_EHTd7k.roa (hash: BSZVF8mXcpYwrxryg8NDVMtvr+dxn8y1JxLoHLq3VvQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b6:69:2c:ea:6f:31:f7:f8:98:e5:51:15:91:69:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
        Validity
            Not Before: Jun 13 02:01:25 2026 GMT
            Not After : Jun 14 02:01:25 2026 GMT
        Subject: CN=ec60a10beeed2b05a21e07bce9d80d426f757fc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:77:06:62:8f:a8:6d:a0:8b:b2:12:e8:8e:fc:
                    91:b9:a9:8e:39:93:47:ae:14:04:14:48:f3:08:ec:
                    1a:51:60:a8:cd:09:f3:f6:f5:df:10:da:5e:29:84:
                    50:46:15:7b:7c:b8:53:cf:71:3a:17:4c:f5:35:0f:
                    85:70:97:76:da:1f:f7:12:c8:26:b5:f3:62:c5:8b:
                    f9:7d:b7:8a:5b:fa:44:cc:b8:cd:b0:ae:17:42:f1:
                    a3:9a:93:79:26:b7:ae:69:fa:74:59:a8:75:1d:3f:
                    75:c5:d9:17:74:eb:ac:1d:ac:43:09:e4:74:2a:5e:
                    48:64:69:2f:60:43:36:6e:84:e7:33:f6:53:90:9a:
                    fd:9e:b6:9b:25:1d:2f:75:ac:aa:b7:95:8c:7d:0a:
                    6b:40:10:c2:eb:fa:21:30:b7:66:ec:2b:a2:30:e9:
                    43:99:7e:99:da:70:6d:f3:03:59:04:b2:98:65:70:
                    37:12:54:4f:f8:89:88:52:6a:b3:67:a3:76:14:df:
                    a1:fb:4a:89:1b:43:83:64:0a:65:36:ba:3f:9f:9e:
                    e3:c3:7a:7b:7b:78:5e:8c:05:12:b6:01:ca:3a:31:
                    e7:d2:5e:1e:d6:4e:56:b1:5c:e8:8d:9c:07:6f:a9:
                    1e:9a:2c:a5:f8:f1:1d:6d:d5:ca:f8:bf:b3:cd:4d:
                    b3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:60:A1:0B:EE:ED:2B:05:A2:1E:07:BC:E9:D8:0D:42:6F:75:7F:C0
            X509v3 Authority Key Identifier:
                keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:cc:14:3a:54:50:ab:0f:6c:5a:b4:82:2b:d0:e6:b8:89:8c:
         ea:55:af:f3:e9:6d:b4:ef:6e:31:2d:8d:a5:0f:f6:e7:fb:00:
         68:51:49:4c:7d:ad:3a:c9:3d:6a:e8:f3:4b:cf:b3:b9:8a:3d:
         d7:89:59:17:60:f0:ea:70:b1:b7:81:e8:2f:52:73:56:20:a5:
         f8:90:1f:b9:79:fc:cd:02:28:d9:ea:5c:aa:ae:3b:08:35:b8:
         e3:68:e5:01:f1:8f:e5:14:45:b8:23:14:8a:dd:3e:fe:b3:1f:
         ea:b7:79:45:37:69:a4:78:ee:aa:90:14:9c:34:3a:7d:62:17:
         66:9d:1c:65:d8:57:75:ea:8b:10:b6:40:81:0e:05:6e:70:22:
         93:28:8a:6e:46:05:e4:9f:c4:f2:75:1a:6c:f5:36:74:58:95:
         0e:c5:e9:7c:de:f6:0b:5c:99:48:f3:6f:04:a5:ce:8f:ca:73:
         45:58:bf:15:47:b0:87:b5:be:38:13:b6:39:d9:59:56:c1:cf:
         be:90:ce:a7:fa:29:ee:aa:9c:e9:c1:ef:fa:cc:cb:67:c5:0d:
         02:6a:9b:86:4f:7f:ce:2f:b1:5a:4a:20:cb:25:b3:2e:53:79:
         19:db:99:d6:51:81:f2:39:2c:24:8e:95:66:7d:e4:b1:a4:af:
         ce:f1:dc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:26:16 2026 by rpki-client