Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
File:                     dLQqbeTgH8MSUNG74yIoEEbuYao.mft (raw, json)
Hash identifier:          mRSYDwFej8cM0+ImKLCUXD4i5WS7QsRVSvitsX0NvmU=
Subject key identifier:   64:17:03:4C:69:E4:88:02:B7:76:86:CF:0B:96:E8:79:10:B9:03:7D
Authority key identifier: 74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA
Certificate issuer:       /CN=74b42a6de4e01fc31250d1bbe322281046ee61aa
Certificate serial:       019EBF5A8221CE380AA2A431C491812B3E25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
Manifest number:          13FD
Signing time:             Sat 13 Jun 2026 05:00:40 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:40 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:40 +0000
Files and hashes:         1: 2snz2cHxMIqDrmWpyQdj5PDHUMA.roa (hash: PDvyyYGhi1AmhDsFwKXgGPleS0592sAJ/29+42mhJtU=)
                          2: ck9fph3pnGBfD51d6ySumkAZbWw.roa (hash: cePM5hzSAL7gxgiyzP8i8tA4JspwG2EEsvqQZVUTIU0=)
                          3: dLQqbeTgH8MSUNG74yIoEEbuYao.crl (hash: QXcSTgbVJ+cCASPsulPF1QvCjZY1sO2xfmxgJDYnZzU=)
                          4: zsYC7eTs7CKxZQzMiKBYtW02NU4.roa (hash: zfsiqu/7VESSfUyUGFpkJ4f5HeLFmZSKqmckIw2soSM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:82:21:ce:38:0a:a2:a4:31:c4:91:81:2b:3e:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b42a6de4e01fc31250d1bbe322281046ee61aa
        Validity
            Not Before: Jun 13 05:00:40 2026 GMT
            Not After : Jun 14 05:00:40 2026 GMT
        Subject: CN=6417034c69e48802b77686cf0b96e87910b9037d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4d:67:6f:15:85:06:85:53:dd:4c:cd:20:11:
                    65:55:e3:0d:ee:54:7f:a0:25:3e:6d:a5:a1:8d:90:
                    ff:1b:dc:ca:bd:3a:69:cf:55:3a:bb:5b:e3:e2:5e:
                    07:4f:b3:f1:fa:92:b8:50:58:8f:9b:09:4f:b8:04:
                    3f:5c:e2:05:52:9a:da:46:0d:58:e4:6f:bd:ac:20:
                    9f:ac:fc:19:d1:0e:f8:26:09:c7:f2:08:b4:b1:a6:
                    ca:d6:e9:07:13:bd:1b:2e:66:b2:53:48:ab:92:81:
                    50:e5:a5:b1:5a:99:ed:53:6b:95:61:35:48:ed:cf:
                    32:ea:a4:fc:59:e0:e6:bd:93:66:10:35:bf:df:f1:
                    ff:c1:76:02:dc:b4:ab:7c:82:e7:9a:e9:cd:9d:d8:
                    7f:bb:e2:d8:43:fd:e2:09:49:bd:4d:f3:e7:2a:8c:
                    28:e3:8f:22:f5:7a:80:ae:81:34:4a:ba:b0:21:6b:
                    db:a4:87:ab:93:c8:0b:0b:8a:e7:71:3e:0d:cd:49:
                    65:f3:27:24:87:f4:dc:3e:a4:1d:db:c4:8a:0c:2a:
                    9e:cd:f9:a8:b2:dd:05:30:e2:9d:6a:70:e9:13:2b:
                    05:28:6a:6e:c3:8a:e6:aa:f6:f0:34:0e:8d:70:df:
                    3d:4b:24:23:5c:12:bb:39:25:69:f9:f1:33:85:97:
                    7a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:17:03:4C:69:E4:88:02:B7:76:86:CF:0B:96:E8:79:10:B9:03:7D
            X509v3 Authority Key Identifier:
                keyid:74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:b9:f7:44:f7:81:2a:b5:dd:dc:98:3e:af:e5:a6:21:a0:fd:
         36:1a:b9:ae:a6:c1:6d:27:de:ba:16:7d:55:16:de:b2:90:78:
         63:24:37:83:8b:65:f8:a7:ec:7c:2b:f4:8f:e9:48:31:3e:03:
         f6:84:7c:de:08:ad:e5:1c:69:52:be:98:e5:a0:38:d9:38:98:
         61:bd:a5:55:14:67:79:e4:97:0d:fd:5d:9e:25:4b:03:7d:36:
         d3:46:d6:0a:fa:98:87:45:82:79:c3:bf:df:d4:1d:20:24:81:
         da:10:73:8d:7b:4f:99:cc:08:40:42:4b:f3:8b:39:ab:fd:6d:
         9f:72:10:d5:e1:79:22:87:ee:8a:f0:8f:de:b9:b4:08:2a:23:
         38:37:a3:6c:1b:9a:22:6c:06:3c:a8:0f:dd:ef:e2:d0:bf:ec:
         5e:93:e6:6e:bf:ac:d0:ef:d5:f7:4e:68:52:31:0f:14:9e:a5:
         4d:ad:0e:24:31:ba:86:de:7b:5d:1b:3d:6c:c4:74:5c:e8:09:
         ad:3d:87:d3:18:fb:06:7c:02:27:a9:1b:c7:8d:f3:83:27:97:
         87:57:3f:7d:d9:d9:f0:ea:ed:dd:1b:38:05:15:f2:80:d1:bb:
         47:cb:a6:81:05:93:a5:aa:11:91:3b:7d:ad:c2:dc:07:c9:47:
         62:29:03:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WoIhzjgKoqQxxJGBKz4lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YjQyYTZkZTRlMDFmYzMxMjUwZDFiYmUzMjIyODEwNDZl
ZTYxYWEwHhcNMjYwNjEzMDUwMDQwWhcNMjYwNjE0MDUwMDQwWjAzMTEwLwYDVQQD
Eyg2NDE3MDM0YzY5ZTQ4ODAyYjc3Njg2Y2YwYjk2ZTg3OTEwYjkwMzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2k1nbxWFBoVT3UzNIBFlVeMN7lR/
oCU+baWhjZD/G9zKvTppz1U6u1vj4l4HT7Px+pK4UFiPmwlPuAQ/XOIFUpraRg1Y
5G+9rCCfrPwZ0Q74JgnH8gi0sabK1ukHE70bLmayU0irkoFQ5aWxWpntU2uVYTVI
7c8y6qT8WeDmvZNmEDW/3/H/wXYC3LSrfILnmunNndh/u+LYQ/3iCUm9TfPnKowo
448i9XqAroE0SrqwIWvbpIerk8gLC4rncT4NzUll8yckh/TcPqQd28SKDCqezfmo
st0FMOKdanDpEysFKGpuw4rmqvbwNA6NcN89SyQjXBK7OSVp+fEzhZd6vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQXA0xp5IgCt3aGzwuW6HkQuQN9MB8GA1UdIwQY
MBaAFHS0Km3k4B/DElDRu+MiKBBG7mGqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZExRcWJlVGdIOE1TVU5HNzR5SW9FRWJ1WWFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9lNTU1NmMtY2ZlYS00OTcyLWFhZjgt
MTdhMWRjZGNjNmUwLzEvZExRcWJlVGdIOE1TVU5HNzR5SW9FRWJ1WWFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9lNTU1NmMtY2ZlYS00OTcyLWFhZjgtMTdhMWRjZGNjNmUw
LzEvZExRcWJlVGdIOE1TVU5HNzR5SW9FRWJ1WWFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHbn3RPeB
KrXd3Jg+r+WmIaD9Nhq5rqbBbSfeuhZ9VRbespB4YyQ3g4tl+KfsfCv0j+lIMT4D
9oR83git5RxpUr6Y5aA42TiYYb2lVRRneeSXDf1dniVLA30200bWCvqYh0WCecO/
39QdICSB2hBzjXtPmcwIQEJL84s5q/1tn3IQ1eF5IofuivCP3rm0CCojODejbBua
ImwGPKgP3e/i0L/sXpPmbr+s0O/V905oUjEPFJ6lTa0OJDG6ht57XRs9bMR0XOgJ
rT2H0xj7BnwCJ6kbx43zgyeXh1c/fdnZ8Ort3Rs4BRXygNG7R8umgQWTpaoRkTt9
rcLcB8lHYikDGg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:16:11 2026 by rpki-client