Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
File:                     h4q7KZd6ZbFAystucqskzt3U6MU.mft (raw, json)
Hash identifier:          nenh+a5CS03MbVLwwJ5ip/qmGGcOkemNy7UXMStrCik=
Subject key identifier:   50:63:AF:8A:29:BE:1E:CD:E8:8F:06:C1:C2:D2:CB:58:0D:5D:24:C1
Authority key identifier: 87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5
Certificate issuer:       /CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
Certificate serial:       019EC25BCB59EFA04D01B7F4FD5E7B69B615
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
Manifest number:          060F
Signing time:             Sat 13 Jun 2026 19:00:56 +0000
Manifest this update:     Sat 13 Jun 2026 19:00:56 +0000
Manifest next update:     Sun 14 Jun 2026 19:00:56 +0000
Files and hashes:         1: DEFfBNh248XHDVu-BwTd6VMfFV8.roa (hash: 1e5rZ3fBzGEwRGyr2Q3kLvg86EH9L/cUWkBLg+rj2hY=)
                          2: h4q7KZd6ZbFAystucqskzt3U6MU.crl (hash: RXYQebni2s3F/iFmGCbYy22jcyrkQuY2HHJEAw0B10A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5b:cb:59:ef:a0:4d:01:b7:f4:fd:5e:7b:69:b6:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
        Validity
            Not Before: Jun 13 19:00:56 2026 GMT
            Not After : Jun 14 19:00:56 2026 GMT
        Subject: CN=5063af8a29be1ecde88f06c1c2d2cb580d5d24c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:df:ca:0a:78:8b:fb:bf:00:07:e3:95:b4:93:
                    15:0c:b1:0b:c2:50:2f:bd:a5:48:e9:cb:ff:b5:b4:
                    38:36:ae:82:7b:95:c4:36:d5:26:e5:ee:b5:e5:90:
                    46:75:11:f4:63:b1:a8:8f:73:a7:79:c1:65:bc:c2:
                    f8:15:27:3d:33:39:20:9b:2b:44:db:65:db:3b:79:
                    52:f1:3c:50:68:2d:ce:62:a0:38:1f:91:45:46:55:
                    e7:b5:0c:40:cb:43:5b:29:88:af:20:86:cf:8c:0a:
                    5e:04:f7:d3:96:39:7b:ba:56:e3:7e:04:d9:4a:df:
                    76:81:4c:0e:ca:d5:44:0e:49:27:f9:f4:f5:63:f3:
                    4a:60:99:47:02:c7:9c:44:21:07:32:92:a2:0b:75:
                    93:a5:d4:5a:2e:b8:ed:19:99:1c:12:6d:8b:25:16:
                    69:96:96:8d:36:92:04:ab:a2:49:8c:3a:28:2b:82:
                    27:89:a4:02:12:55:77:6a:e1:64:2f:13:82:36:40:
                    b7:01:3d:db:5f:0b:61:66:45:55:77:55:b3:3e:ae:
                    b4:a2:ed:ce:d5:2b:8b:fd:07:bd:28:e1:7b:0c:89:
                    fb:21:3d:a9:d8:b0:07:71:e2:f1:09:4f:3f:62:ec:
                    a4:90:a3:58:bf:fa:4d:aa:60:1c:0b:60:1a:d7:38:
                    d5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:63:AF:8A:29:BE:1E:CD:E8:8F:06:C1:C2:D2:CB:58:0D:5D:24:C1
            X509v3 Authority Key Identifier:
                keyid:87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:86:69:f4:b5:7c:08:55:c8:8b:e0:af:8a:e9:40:ac:a6:f8:
         25:64:b6:cf:42:fa:b1:eb:4d:c0:e9:1b:9f:d3:07:a0:ce:ff:
         20:3f:a9:b5:56:c6:6c:14:c1:d1:f7:62:2d:72:c8:d6:69:63:
         b7:e9:4e:43:d4:1c:51:ac:4c:38:b8:ff:0e:24:9a:c1:86:0b:
         63:74:fb:3b:26:6b:3b:35:eb:6c:c4:0f:ce:fb:b2:6c:36:67:
         be:bd:1a:b3:b2:70:29:1f:d7:4d:4a:73:43:88:11:f8:a0:9c:
         be:29:c0:ee:13:d9:ec:d9:42:e7:8c:e9:9a:8a:ef:2b:8a:8e:
         06:af:e6:39:77:68:69:8b:a2:36:84:71:f5:2c:5b:e2:f2:ba:
         a3:f4:81:38:5b:21:93:e2:5e:f1:28:bc:e6:d2:09:f5:db:e0:
         63:85:2b:b4:e5:44:fc:33:e3:d7:3b:87:2b:39:4d:05:b2:9b:
         c1:4f:bd:72:3d:f6:8d:98:af:fb:72:0d:ed:99:99:17:a3:57:
         07:30:f0:1d:75:a1:59:9d:0a:53:c1:0c:24:c1:e0:9a:9d:a5:
         8b:e2:74:5f:29:bc:57:5e:da:e4:fb:14:66:f4:74:b2:83:1d:
         02:02:bc:da:47:28:1a:32:ca:5d:2a:47:3c:2b:ff:b1:5a:15:
         db:09:26:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CW8tZ76BNAbf0/V57abYVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3OGFiYjI5OTc3YTY1YjE0MGNhY2I2ZTcyYWIyNGNlZGRk
NGU4YzUwHhcNMjYwNjEzMTkwMDU2WhcNMjYwNjE0MTkwMDU2WjAzMTEwLwYDVQQD
Eyg1MDYzYWY4YTI5YmUxZWNkZTg4ZjA2YzFjMmQyY2I1ODBkNWQyNGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAld/KCniL+78AB+OVtJMVDLELwlAv
vaVI6cv/tbQ4Nq6Ce5XENtUm5e615ZBGdRH0Y7Goj3OnecFlvML4FSc9MzkgmytE
22XbO3lS8TxQaC3OYqA4H5FFRlXntQxAy0NbKYivIIbPjApeBPfTljl7ulbjfgTZ
St92gUwOytVEDkkn+fT1Y/NKYJlHAsecRCEHMpKiC3WTpdRaLrjtGZkcEm2LJRZp
lpaNNpIEq6JJjDooK4IniaQCElV3auFkLxOCNkC3AT3bXwthZkVVd1WzPq60ou3O
1SuL/Qe9KOF7DIn7IT2p2LAHceLxCU8/YuykkKNYv/pNqmAcC2Aa1zjV2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFBjr4opvh7N6I8GwcLSy1gNXSTBMB8GA1UdIwQY
MBaAFIeKuymXemWxQMrLbnKrJM7d1OjFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDRxN0taZDZaYkZBeXN0dWNxc2t6dDNVNk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wNmI4ZjUtMWE3Ni00NWY4LWI5N2Et
YWM4NjQ3ZDA1NThhLzEvaDRxN0taZDZaYkZBeXN0dWNxc2t6dDNVNk1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8wNmI4ZjUtMWE3Ni00NWY4LWI5N2EtYWM4NjQ3ZDA1NThh
LzEvaDRxN0taZDZaYkZBeXN0dWNxc2t6dDNVNk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgoZp9LV8
CFXIi+CviulArKb4JWS2z0L6setNwOkbn9MHoM7/ID+ptVbGbBTB0fdiLXLI1mlj
t+lOQ9QcUaxMOLj/DiSawYYLY3T7OyZrOzXrbMQPzvuybDZnvr0as7JwKR/XTUpz
Q4gR+KCcvinA7hPZ7NlC54zpmorvK4qOBq/mOXdoaYuiNoRx9Sxb4vK6o/SBOFsh
k+Je8Si85tIJ9dvgY4UrtOVE/DPj1zuHKzlNBbKbwU+9cj32jZiv+3IN7ZmZF6NX
BzDwHXWhWZ0KU8EMJMHgmp2li+J0Xym8V17a5PsUZvR0soMdAgK82kcoGjLKXSpH
PCv/sVoV2wkmDw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:24:20 2026 by rpki-client