Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft
File:                     pVB1uOQuRRTvSdP-ovGHJk50-y4.mft (raw, json)
Hash identifier:          76GkZvWTSwPjNxybiLLSjAYsK34AFRzwpWYqlvwMd8Q=
Subject key identifier:   DF:22:62:9F:BF:15:CB:C0:E6:F1:A3:55:22:80:3D:AB:38:12:D8:BE
Authority key identifier: A5:50:75:B8:E4:2E:45:14:EF:49:D3:FE:A2:F1:87:26:4E:74:FB:2E
Certificate issuer:       /CN=a55075b8e42e4514ef49d3fea2f187264e74fb2e
Certificate serial:       019EC1125729ADD21E66002F0E70F17D5884
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pVB1uOQuRRTvSdP-ovGHJk50-y4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft
Manifest number:          05F6
Signing time:             Sat 13 Jun 2026 13:01:04 +0000
Manifest this update:     Sat 13 Jun 2026 13:01:04 +0000
Manifest next update:     Sun 14 Jun 2026 13:01:04 +0000
Files and hashes:         1: XQv7wEz4cC45Y-u3Csa_kFWZP8A.roa (hash: Rg6Z2DsQeZ19hmYMspcAw/07/1QRuxsRYhNWi/fAiwc=)
                          2: pVB1uOQuRRTvSdP-ovGHJk50-y4.crl (hash: pbdGYVPtW7tdnm6J6JD/e7qGNggoNmfG18mKUOpYXX8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pVB1uOQuRRTvSdP-ovGHJk50-y4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:12:57:29:ad:d2:1e:66:00:2f:0e:70:f1:7d:58:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a55075b8e42e4514ef49d3fea2f187264e74fb2e
        Validity
            Not Before: Jun 13 13:01:04 2026 GMT
            Not After : Jun 14 13:01:04 2026 GMT
        Subject: CN=df22629fbf15cbc0e6f1a35522803dab3812d8be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7e:90:d5:fb:07:92:cf:e5:86:2d:0d:f0:4b:
                    84:bb:db:21:68:9d:cf:4d:89:b6:b3:85:fa:5d:62:
                    62:50:5c:c4:ea:22:5b:1b:06:cf:ed:0c:5e:da:2b:
                    06:42:b3:56:33:6f:0c:6d:f4:33:53:bc:09:9d:a3:
                    4c:08:8c:ab:16:58:e4:d4:48:b6:0a:cf:07:87:e2:
                    67:84:ba:1d:c8:be:21:18:e5:dc:87:a6:b3:e1:06:
                    54:0a:e3:13:2a:c8:74:c4:f8:6f:39:86:62:84:07:
                    12:08:23:a3:bb:52:bb:a8:bf:37:7d:3d:24:7d:92:
                    f2:04:ab:0b:9a:f9:09:4e:9b:fc:bf:33:30:de:5b:
                    09:1a:35:72:b9:f7:e2:39:9f:01:36:05:18:ab:39:
                    39:40:34:e6:b7:de:19:7b:3b:bd:59:0c:74:3f:3c:
                    e3:a4:5c:b1:a4:b4:de:ef:44:f1:6e:9e:eb:17:53:
                    28:8e:87:0e:c6:54:4c:ac:0f:12:09:94:33:91:ee:
                    72:cf:2b:25:53:b7:91:36:bb:e8:8e:f7:13:72:80:
                    64:e6:4a:8c:96:bd:37:18:0c:67:6e:8e:36:43:2a:
                    14:60:6d:43:84:6e:ad:d8:e1:90:f9:32:3f:84:7b:
                    f4:a5:06:ec:0e:59:f5:20:5c:65:dc:8e:9d:e4:65:
                    e2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:22:62:9F:BF:15:CB:C0:E6:F1:A3:55:22:80:3D:AB:38:12:D8:BE
            X509v3 Authority Key Identifier:
                keyid:A5:50:75:B8:E4:2E:45:14:EF:49:D3:FE:A2:F1:87:26:4E:74:FB:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVB1uOQuRRTvSdP-ovGHJk50-y4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:a7:0c:99:13:3a:39:af:2d:fc:c3:21:e3:af:c3:16:ed:64:
         b7:33:03:07:f9:e6:9b:ab:a3:4a:b1:e9:9e:6a:cf:86:6d:f8:
         a2:89:91:6d:d5:b9:d4:5e:5e:b1:3d:d3:a1:7a:8d:9b:54:69:
         e8:7f:c4:68:54:61:e4:fc:91:82:46:56:2d:aa:73:b5:58:f4:
         db:4d:4b:c0:b1:52:6c:4a:8c:11:84:f7:57:1d:0d:b4:41:fe:
         15:bf:87:76:71:50:cf:63:a7:79:b9:fd:68:56:91:d2:17:aa:
         c3:eb:63:3c:a8:0a:28:7e:32:cb:8f:83:0a:27:5a:1a:f8:33:
         45:84:62:2f:9b:00:47:0f:b2:df:f2:e8:db:da:e5:1a:41:7d:
         29:df:e9:ae:3e:48:38:f2:14:87:6e:3a:32:e1:9e:ff:88:68:
         97:be:e3:33:1d:89:6a:58:65:13:38:63:16:b3:e9:40:fe:a3:
         58:2e:7f:67:e9:e6:03:d2:cc:43:3d:5d:ea:3c:4c:3d:b3:13:
         66:0f:44:23:63:af:b0:d6:e0:80:4b:3c:32:a2:cc:82:c5:ab:
         17:7b:73:9c:27:2c:a6:ad:b4:56:67:49:f2:74:dc:01:49:3d:
         30:4b:4f:8a:42:c6:c8:e0:90:43:75:a5:df:82:17:fc:14:07:
         f9:78:f3:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BElcprdIeZgAvDnDxfViEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NTA3NWI4ZTQyZTQ1MTRlZjQ5ZDNmZWEyZjE4NzI2NGU3
NGZiMmUwHhcNMjYwNjEzMTMwMTA0WhcNMjYwNjE0MTMwMTA0WjAzMTEwLwYDVQQD
EyhkZjIyNjI5ZmJmMTVjYmMwZTZmMWEzNTUyMjgwM2RhYjM4MTJkOGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA036Q1fsHks/lhi0N8EuEu9shaJ3P
TYm2s4X6XWJiUFzE6iJbGwbP7Qxe2isGQrNWM28MbfQzU7wJnaNMCIyrFljk1Ei2
Cs8Hh+JnhLodyL4hGOXch6az4QZUCuMTKsh0xPhvOYZihAcSCCOju1K7qL83fT0k
fZLyBKsLmvkJTpv8vzMw3lsJGjVyuffiOZ8BNgUYqzk5QDTmt94Zezu9WQx0Pzzj
pFyxpLTe70Txbp7rF1MojocOxlRMrA8SCZQzke5yzyslU7eRNrvojvcTcoBk5kqM
lr03GAxnbo42QyoUYG1DhG6t2OGQ+TI/hHv0pQbsDln1IFxl3I6d5GXixQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8iYp+/FcvA5vGjVSKAPas4Eti+MB8GA1UdIwQY
MBaAFKVQdbjkLkUU70nT/qLxhyZOdPsuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFZCMXVPUXVSUlR2U2RQLW92R0hKazUwLXk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS85YjFmOTUtM2IxOC00ODEyLTkyNGUt
N2JmZGE2MjU0NGNlLzEvcFZCMXVPUXVSUlR2U2RQLW92R0hKazUwLXk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS85YjFmOTUtM2IxOC00ODEyLTkyNGUtN2JmZGE2MjU0NGNl
LzEvcFZCMXVPUXVSUlR2U2RQLW92R0hKazUwLXk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX6cMmRM6
Oa8t/MMh46/DFu1ktzMDB/nmm6ujSrHpnmrPhm34oomRbdW51F5esT3ToXqNm1Rp
6H/EaFRh5PyRgkZWLapztVj0201LwLFSbEqMEYT3Vx0NtEH+Fb+HdnFQz2Onebn9
aFaR0heqw+tjPKgKKH4yy4+DCidaGvgzRYRiL5sARw+y3/Lo29rlGkF9Kd/prj5I
OPIUh246MuGe/4hol77jMx2JalhlEzhjFrPpQP6jWC5/Z+nmA9LMQz1d6jxMPbMT
Zg9EI2OvsNbggEs8MqLMgsWrF3tznCcspq20VmdJ8nTcAUk9MEtPikLGyOCQQ3Wl
34IX/BQH+Xjzog==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:08:46 2026 by rpki-client