Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
File:                     rr3q1PHRyN2pbRzReJ2d0-I78VM.mft (raw, json)
Hash identifier:          A+mdQF+BebOHwaAfNIEvF+zCNE2BB1eTEve8YzIgxUw=
Subject key identifier:   AF:14:8D:F8:F2:1B:0C:1D:74:11:44:EE:C0:45:8C:8D:62:97:2D:6F
Authority key identifier: AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53
Certificate issuer:       /CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153
Certificate serial:       019ED31851253387FA2591BB8B3DB9508298
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
Manifest number:          104B
Signing time:             Wed 17 Jun 2026 01:00:46 +0000
Manifest this update:     Wed 17 Jun 2026 01:00:46 +0000
Manifest next update:     Thu 18 Jun 2026 01:00:46 +0000
Files and hashes:         1: 2XECgtpjsen86VkC8yydIYPOl1c.roa (hash: BPZBQJjMYkB0nrNJVAIozX1sKQI4gxMXxsPOFyAaAE0=)
                          2: _2RVkv-dG4-YIAymCk1yOs7NK58.roa (hash: o6HUJs0cl57DuL7YAIkgRklqKfSqkx4WuloF1lwdZUE=)
                          3: rr3q1PHRyN2pbRzReJ2d0-I78VM.crl (hash: 203M4ns8AquB13k5QuB6IZzTyRNBxxgbO+WGcNExKSg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:18:51:25:33:87:fa:25:91:bb:8b:3d:b9:50:82:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153
        Validity
            Not Before: Jun 17 01:00:46 2026 GMT
            Not After : Jun 18 01:00:46 2026 GMT
        Subject: CN=af148df8f21b0c1d741144eec0458c8d62972d6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ae:31:be:a1:3e:26:b4:d7:f4:e5:f0:0c:85:
                    e7:c0:33:4f:0e:5e:66:3a:3f:5e:e1:ab:3e:ad:2d:
                    35:c3:e6:8f:52:6b:55:dc:49:b1:0b:80:0c:69:79:
                    d5:d0:c6:54:16:8c:f6:fb:aa:eb:a7:e7:a3:84:c8:
                    5a:bf:16:9f:1c:51:b5:55:ce:ad:f8:ff:4b:d3:23:
                    c1:1a:61:c4:fd:ff:8d:29:ef:63:c9:09:c3:3a:5b:
                    26:79:b6:c1:93:63:20:1a:e7:86:4d:8c:6c:ba:97:
                    7b:b4:72:9f:08:cc:0e:11:51:72:c9:90:11:0f:a8:
                    59:68:b8:c3:58:68:a9:3b:64:cf:50:f8:50:cd:fb:
                    72:ed:92:8b:05:65:02:9f:52:40:ed:37:42:32:c6:
                    81:0c:2a:ea:04:d6:16:f8:73:93:4b:bf:a7:d6:a3:
                    1a:5e:70:1f:dc:de:fe:ed:d6:1f:68:2e:8f:5c:57:
                    c9:2b:80:5a:6c:da:4a:9c:fa:2c:0f:6d:b5:76:1a:
                    12:67:f9:b4:0b:23:6d:60:ee:e8:fe:dd:c2:a7:87:
                    5a:48:48:b6:a0:e9:6a:5d:33:14:59:eb:33:4e:e0:
                    54:6a:db:bf:3a:80:eb:08:8f:e5:d9:e6:3f:5a:0c:
                    99:02:b5:5f:36:cb:91:5e:9b:d3:cc:f2:76:9f:ce:
                    96:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:14:8D:F8:F2:1B:0C:1D:74:11:44:EE:C0:45:8C:8D:62:97:2D:6F
            X509v3 Authority Key Identifier:
                keyid:AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:9f:ea:67:0a:b7:49:a1:4f:96:98:4d:a0:d6:6a:a8:8a:de:
         6f:2e:6c:f7:20:79:5b:e9:bd:32:b8:d6:1a:f6:bf:b5:05:11:
         16:73:e6:7b:d2:09:24:f9:73:33:9d:68:61:99:04:9b:57:f6:
         53:ea:d1:9f:77:73:1f:9f:d0:a6:26:14:72:ec:57:c1:ad:e9:
         36:7a:66:49:ff:5f:de:10:47:24:b4:7d:70:49:c3:b0:4b:8b:
         a7:a6:59:02:08:46:5c:67:a2:a5:9a:88:d5:d4:66:ba:37:d7:
         a5:8c:c4:d0:f5:d2:a8:41:10:dc:19:0d:e8:25:94:d5:1f:c3:
         2b:6e:ef:68:85:b5:b8:3c:0a:23:82:88:d6:5c:7f:a2:34:d1:
         81:b4:4f:5c:37:69:50:53:7f:fe:63:bd:74:1c:53:a2:59:c4:
         ae:de:b0:c3:70:51:93:b3:27:c7:c1:f4:8d:2c:b6:b9:9a:ca:
         d4:3d:2f:38:e0:1c:03:6d:63:b4:f9:96:7b:5e:a6:12:f1:de:
         85:ff:69:2d:0a:58:6f:2a:54:7c:94:08:66:0c:88:45:8c:0a:
         94:1b:c7:c6:c0:d5:22:84:48:0d:20:39:e0:38:47:5a:8e:a7:
         1c:55:d6:92:a4:78:0d:d1:25:ba:ae:00:9c:6d:cf:8b:88:d6:
         73:ef:65:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7TGFElM4f6JZG7iz25UIKYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYmRlYWQ0ZjFkMWM4ZGRhOTZkMWNkMTc4OWQ5ZGQzZTIz
YmYxNTMwHhcNMjYwNjE3MDEwMDQ2WhcNMjYwNjE4MDEwMDQ2WjAzMTEwLwYDVQQD
EyhhZjE0OGRmOGYyMWIwYzFkNzQxMTQ0ZWVjMDQ1OGM4ZDYyOTcyZDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva4xvqE+JrTX9OXwDIXnwDNPDl5m
Oj9e4as+rS01w+aPUmtV3EmxC4AMaXnV0MZUFoz2+6rrp+ejhMhavxafHFG1Vc6t
+P9L0yPBGmHE/f+NKe9jyQnDOlsmebbBk2MgGueGTYxsupd7tHKfCMwOEVFyyZAR
D6hZaLjDWGipO2TPUPhQzfty7ZKLBWUCn1JA7TdCMsaBDCrqBNYW+HOTS7+n1qMa
XnAf3N7+7dYfaC6PXFfJK4BabNpKnPosD221dhoSZ/m0CyNtYO7o/t3Cp4daSEi2
oOlqXTMUWeszTuBUatu/OoDrCI/l2eY/WgyZArVfNsuRXpvTzPJ2n86WswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8UjfjyGwwddBFE7sBFjI1ily1vMB8GA1UdIwQY
MBaAFK696tTx0cjdqW0c0XidndPiO/FTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnIzcTFQSFJ5TjJwYlJ6UmVKMmQwLUk3OFZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8yZjVmZDYtMTkwNC00ZGNhLWFiYjIt
ODgzN2NhNjllMzk2LzEvcnIzcTFQSFJ5TjJwYlJ6UmVKMmQwLUk3OFZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8yZjVmZDYtMTkwNC00ZGNhLWFiYjItODgzN2NhNjllMzk2
LzEvcnIzcTFQSFJ5TjJwYlJ6UmVKMmQwLUk3OFZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD5/qZwq3
SaFPlphNoNZqqIreby5s9yB5W+m9MrjWGva/tQURFnPme9IJJPlzM51oYZkEm1f2
U+rRn3dzH5/QpiYUcuxXwa3pNnpmSf9f3hBHJLR9cEnDsEuLp6ZZAghGXGeipZqI
1dRmujfXpYzE0PXSqEEQ3BkN6CWU1R/DK27vaIW1uDwKI4KI1lx/ojTRgbRPXDdp
UFN//mO9dBxTolnErt6ww3BRk7Mnx8H0jSy2uZrK1D0vOOAcA21jtPmWe16mEvHe
hf9pLQpYbypUfJQIZgyIRYwKlBvHxsDVIoRIDSA54DhHWo6nHFXWkqR4DdEluq4A
nG3Pi4jWc+9lnQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:47:20 2026 by rpki-client