Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
File:                     3K-toQ4s4g4clviVu47DKlgI9j8.mft (raw, json)
Hash identifier:          9ACJ9nv6+qdcxrakL38SaRgZOr1axIICj9/m2Tmya6Y=
Subject key identifier:   42:91:01:3B:A5:A7:F6:98:03:17:C0:FD:2B:18:40:20:F8:EB:49:28
Authority key identifier: DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F
Certificate issuer:       /CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f
Certificate serial:       019EC1B7097FE1247C573F7BB99D8C4A8D37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
Manifest number:          084A
Signing time:             Sat 13 Jun 2026 16:00:58 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:58 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:58 +0000
Files and hashes:         1: 3K-toQ4s4g4clviVu47DKlgI9j8.crl (hash: QdBT0PCgxIXeaV07x6ZAcjbMN7bqPdAeLBghV20k1c8=)
                          2: TTHpThh0WFBegnNfmmfbon5C7Nk.roa (hash: XL1bQibK3g0HnLkkJsFNT1Xil79v588WbG0+6ygTsbI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b7:09:7f:e1:24:7c:57:3f:7b:b9:9d:8c:4a:8d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f
        Validity
            Not Before: Jun 13 16:00:58 2026 GMT
            Not After : Jun 14 16:00:58 2026 GMT
        Subject: CN=4291013ba5a7f6980317c0fd2b184020f8eb4928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:07:de:c4:c3:9a:7a:62:3b:d1:34:c7:aa:79:
                    cd:0a:a6:eb:99:dc:b5:93:e4:dd:18:01:dd:fb:90:
                    be:00:e5:8b:93:64:9b:bc:87:b7:0c:27:1d:3a:35:
                    0f:b3:dc:42:a2:5b:cf:3f:2a:0c:22:ce:cb:b8:6a:
                    e9:6a:c5:97:a7:00:fd:33:65:28:0b:2a:4e:36:eb:
                    b4:6b:24:b5:c5:10:e0:a8:22:c0:94:8b:91:97:b4:
                    58:df:30:9a:d0:a6:bd:76:d6:1f:60:cd:23:6f:4b:
                    c2:9a:a6:df:a8:a9:93:ac:8d:34:df:2c:af:28:a4:
                    16:04:88:f8:f9:9b:9a:bf:16:38:eb:9a:bb:5c:5d:
                    7a:5a:b5:58:1b:57:ae:2c:30:c6:ab:70:6b:43:65:
                    8b:4b:44:da:51:4a:66:54:1b:a6:fe:77:87:aa:25:
                    ac:05:a5:33:2b:5e:4b:4e:10:db:c0:26:88:f9:4a:
                    fa:54:8a:44:c7:62:7f:ea:11:e1:81:c3:15:21:53:
                    10:c6:1c:41:b2:ee:0a:60:c9:f7:72:88:38:2a:52:
                    9c:35:ba:50:26:64:9e:f0:5d:f1:a6:d6:c9:f0:bb:
                    cb:76:79:ef:2e:02:df:69:09:66:34:a2:7b:b6:52:
                    89:f2:43:d4:50:28:8a:5a:75:a6:a3:14:ce:c4:e4:
                    3a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:91:01:3B:A5:A7:F6:98:03:17:C0:FD:2B:18:40:20:F8:EB:49:28
            X509v3 Authority Key Identifier:
                keyid:DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:ef:f1:e1:67:2f:f8:8a:fe:eb:4a:58:29:86:ae:f9:7e:05:
         bc:23:cc:ba:4a:7e:6e:88:d5:43:65:be:77:4d:2c:c5:3d:02:
         bd:cd:04:89:4a:b5:b3:22:02:e6:7e:c3:8d:78:e9:0d:11:98:
         96:68:c4:85:f9:52:b5:d1:c1:28:28:2e:c1:89:76:b8:4b:d8:
         4e:fa:79:e7:5c:74:37:e0:0e:ed:30:72:96:15:f9:57:5a:6f:
         3d:22:19:5f:bb:b3:e3:f8:58:43:b8:1d:9a:cd:1f:71:fb:c9:
         dc:fb:e3:c6:28:56:7c:a3:cf:50:e7:39:73:c6:e6:6e:e8:14:
         1e:0e:a9:af:4e:c5:70:c4:2c:4d:7b:e2:02:ea:82:69:03:7f:
         eb:40:16:7f:dd:3b:48:16:22:12:16:6c:cb:22:54:bf:42:01:
         31:b7:33:cb:cc:b8:67:db:e7:ee:8c:e6:99:fc:5a:e5:8f:58:
         52:4f:62:4b:80:57:2e:0a:2a:5c:ea:5d:a9:d1:91:f4:33:2e:
         bd:6f:82:cb:63:80:46:cc:6d:ae:0d:0f:b0:6e:c6:16:b0:ee:
         59:8f:49:59:2c:11:c4:4e:d0:d8:58:f0:49:a6:e3:cb:b4:cf:
         fb:60:7a:69:72:76:c1:30:72:86:0b:05:35:f0:fb:d8:9c:d2:
         f5:fe:d9:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Btwl/4SR8Vz97uZ2MSo03MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYWZhZGExMGUyY2UyMGUxYzk2Zjg5NWJiOGVjMzJhNTgw
OGY2M2YwHhcNMjYwNjEzMTYwMDU4WhcNMjYwNjE0MTYwMDU4WjAzMTEwLwYDVQQD
Eyg0MjkxMDEzYmE1YTdmNjk4MDMxN2MwZmQyYjE4NDAyMGY4ZWI0OTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwfexMOaemI70TTHqnnNCqbrmdy1
k+TdGAHd+5C+AOWLk2SbvIe3DCcdOjUPs9xColvPPyoMIs7LuGrpasWXpwD9M2Uo
CypONuu0ayS1xRDgqCLAlIuRl7RY3zCa0Ka9dtYfYM0jb0vCmqbfqKmTrI003yyv
KKQWBIj4+ZuavxY465q7XF16WrVYG1euLDDGq3BrQ2WLS0TaUUpmVBum/neHqiWs
BaUzK15LThDbwCaI+Ur6VIpEx2J/6hHhgcMVIVMQxhxBsu4KYMn3cog4KlKcNbpQ
JmSe8F3xptbJ8LvLdnnvLgLfaQlmNKJ7tlKJ8kPUUCiKWnWmoxTOxOQ6tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKRATulp/aYAxfA/SsYQCD460koMB8GA1UdIwQY
MBaAFNyvraEOLOIOHJb4lbuOwypYCPY/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0stdG9RNHM0ZzRjbHZpVnU0N0RLbGdJOWo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81ZDYyMzQtMTczNS00YmYwLTg1MDQt
YTY2Zjg0ZWRiZDZkLzEvM0stdG9RNHM0ZzRjbHZpVnU0N0RLbGdJOWo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS81ZDYyMzQtMTczNS00YmYwLTg1MDQtYTY2Zjg0ZWRiZDZk
LzEvM0stdG9RNHM0ZzRjbHZpVnU0N0RLbGdJOWo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1+/x4Wcv
+Ir+60pYKYau+X4FvCPMukp+bojVQ2W+d00sxT0Cvc0EiUq1syIC5n7DjXjpDRGY
lmjEhflStdHBKCguwYl2uEvYTvp551x0N+AO7TBylhX5V1pvPSIZX7uz4/hYQ7gd
ms0fcfvJ3PvjxihWfKPPUOc5c8bmbugUHg6pr07FcMQsTXviAuqCaQN/60AWf907
SBYiEhZsyyJUv0IBMbczy8y4Z9vn7ozmmfxa5Y9YUk9iS4BXLgoqXOpdqdGR9DMu
vW+Cy2OARsxtrg0PsG7GFrDuWY9JWSwRxE7Q2FjwSabjy7TP+2B6aXJ2wTByhgsF
NfD72JzS9f7ZdQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:31:20 2026 by rpki-client