Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft
File:                     ccFpDvV6_P-uc725k0MJ-LcOu2E.mft (raw, json)
Hash identifier:          pTIq0jdUBwKUA8Uyz92halb0vy4YdXRh4d2E7nHNVWg=
Subject key identifier:   B6:A2:4A:79:9F:0F:56:CA:CD:F0:1C:BD:D0:F8:DC:38:45:63:1A:8F
Authority key identifier: 71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61
Certificate issuer:       /CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
Certificate serial:       019EBF2348827578C05CBC7796F638FC1196
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft
Manifest number:          18AE
Signing time:             Sat 13 Jun 2026 04:00:20 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:20 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:20 +0000
Files and hashes:         1: 6sfcsooGMCFXO1kWatFbvvr1zLA.roa (hash: QdFq68T0MyS7t2slIEEx1ooDTbclHUWKKj4eUylZI2c=)
                          2: NpiHnYFexffpXlY55BYzjfAHv4w.roa (hash: KMdyac6MZ5qBRRQr/k2XUi4yNROOCzI2aVOuefuG2aA=)
                          3: WrWzBEncYcxkc-a46XxrWRG30y4.roa (hash: 3BGfxi0WT8XUNNL8UKXsVqPQk7yH3Dfp1aLhOELVb1Q=)
                          4: XXFvo0LwN5fFxfFhs7wIa9afeec.roa (hash: SfaEqekBPYoxq/TIPc/MEtTssLDFzyVZM05mRJ5aA7A=)
                          5: ccFpDvV6_P-uc725k0MJ-LcOu2E.crl (hash: sFrwoA88WqQbyrUe7dhzRVa+kZmz+51hwzZyP5UGheg=)
                          6: vjwSSPjssAJWg17wdB8nOax9NPg.roa (hash: +Skus1QTMfLkZcv6BWomJpA4+khM7/pNQ8k90KcyWes=)
                          7: ywS_DWFhfGT_5zoyX1YZLjOr-0I.roa (hash: NiPKJPuTp/RkYFR2X2m2JVeorjDmkEEV8OJgWiusFQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:48:82:75:78:c0:5c:bc:77:96:f6:38:fc:11:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
        Validity
            Not Before: Jun 13 04:00:20 2026 GMT
            Not After : Jun 14 04:00:20 2026 GMT
        Subject: CN=b6a24a799f0f56cacdf01cbdd0f8dc3845631a8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:60:18:ba:13:0a:ce:6b:c9:dd:41:43:76:5a:
                    c4:8d:fa:17:c6:04:80:4b:d4:09:c8:5b:37:42:61:
                    4f:2a:d1:e6:7e:1e:7f:d8:0d:ff:51:3c:95:18:25:
                    09:df:ba:b9:95:57:c4:cf:9b:b7:13:85:d2:f8:c3:
                    bb:ff:9a:40:63:f5:07:44:05:16:a1:7b:b3:16:da:
                    88:6f:ca:e5:fc:c2:18:e9:0f:1d:8a:81:d6:ef:17:
                    61:2c:46:88:66:3b:87:4c:dc:b6:a5:50:b0:ab:ca:
                    64:84:61:fb:81:57:b7:b1:07:5a:e8:f0:e9:87:e2:
                    48:13:9f:f4:2b:c1:89:4f:15:cb:3d:b1:0b:94:97:
                    d1:f0:80:72:8a:17:31:de:5a:8b:a8:f4:b8:bf:5b:
                    bf:15:40:ae:90:75:9e:34:20:1d:6a:36:13:d3:98:
                    c8:84:2a:85:70:fb:ba:64:a9:ab:7c:39:c7:a8:c2:
                    c1:35:ff:37:7c:ab:45:1b:cb:f5:f4:6e:31:46:b7:
                    8b:59:57:9a:ff:df:09:31:0b:0e:9f:72:78:24:81:
                    49:2a:8c:76:cd:09:91:86:28:b0:f9:49:d6:01:e2:
                    32:05:26:d2:3a:96:f4:3f:dd:f6:ea:d1:0c:64:41:
                    2a:b6:63:d7:22:32:24:c5:df:51:2b:52:0a:73:09:
                    3c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A2:4A:79:9F:0F:56:CA:CD:F0:1C:BD:D0:F8:DC:38:45:63:1A:8F
            X509v3 Authority Key Identifier:
                keyid:71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:c7:f8:f9:d8:c3:01:fd:7f:87:d0:0a:21:ee:3c:5b:53:57:
         fc:23:e8:40:7e:76:0a:84:99:bd:16:0d:f1:78:dd:9f:b3:7e:
         91:e7:df:62:e2:e3:a0:f0:80:b8:55:18:0b:3f:6e:5d:3b:e1:
         53:d5:e4:87:11:62:dd:91:7a:b6:5e:6b:ee:e1:8d:db:36:93:
         58:40:9b:3d:18:57:4e:77:79:2a:6c:45:74:23:00:a9:be:97:
         03:eb:58:4f:7b:09:2a:13:c3:ca:19:f0:a2:41:d8:c2:11:4f:
         3a:71:4e:fa:d0:57:9c:cf:65:37:32:85:73:df:f7:ef:66:dc:
         f0:f9:ef:7e:4d:8e:8f:db:62:5a:8f:5e:e6:8c:57:e4:27:53:
         47:25:c6:65:d3:4a:1c:25:8e:96:55:d2:85:30:59:5e:8e:0d:
         e5:8e:5e:5a:ed:de:ce:b3:44:dc:da:c9:ce:43:ea:8b:70:65:
         83:63:f0:03:11:f1:02:d5:20:5f:54:73:57:a6:02:3f:bf:38:
         74:28:87:6b:a4:9c:a2:b0:09:f9:18:bd:b6:a4:c8:16:6a:fd:
         75:19:25:44:8c:14:2e:c0:de:32:66:96:71:c0:59:05:f5:3a:
         e3:0b:da:2a:be:69:80:0c:3a:29:96:9b:f5:d8:bb:ae:9c:86:
         e9:a2:aa:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/I0iCdXjAXLx3lvY4/BGWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxYzE2OTBlZjU3YWZjZmZhZTczYmRiOTkzNDMwOWY4Yjcw
ZWJiNjEwHhcNMjYwNjEzMDQwMDIwWhcNMjYwNjE0MDQwMDIwWjAzMTEwLwYDVQQD
EyhiNmEyNGE3OTlmMGY1NmNhY2RmMDFjYmRkMGY4ZGMzODQ1NjMxYThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52AYuhMKzmvJ3UFDdlrEjfoXxgSA
S9QJyFs3QmFPKtHmfh5/2A3/UTyVGCUJ37q5lVfEz5u3E4XS+MO7/5pAY/UHRAUW
oXuzFtqIb8rl/MIY6Q8dioHW7xdhLEaIZjuHTNy2pVCwq8pkhGH7gVe3sQda6PDp
h+JIE5/0K8GJTxXLPbELlJfR8IByihcx3lqLqPS4v1u/FUCukHWeNCAdajYT05jI
hCqFcPu6ZKmrfDnHqMLBNf83fKtFG8v19G4xRreLWVea/98JMQsOn3J4JIFJKox2
zQmRhiiw+UnWAeIyBSbSOpb0P9326tEMZEEqtmPXIjIkxd9RK1IKcwk8qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaiSnmfD1bKzfAcvdD43DhFYxqPMB8GA1UdIwQY
MBaAFHHBaQ71evz/rnO9uZNDCfi3DrthMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2NGcER2VjZfUC11YzcyNWswTUotTGNPdTJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85YzcwZTktM2RmMy00YmM3LTgyZTYt
MDA2ZTliYjhlZDU5LzEvY2NGcER2VjZfUC11YzcyNWswTUotTGNPdTJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS85YzcwZTktM2RmMy00YmM3LTgyZTYtMDA2ZTliYjhlZDU5
LzEvY2NGcER2VjZfUC11YzcyNWswTUotTGNPdTJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHsf4+djD
Af1/h9AKIe48W1NX/CPoQH52CoSZvRYN8Xjdn7N+keffYuLjoPCAuFUYCz9uXTvh
U9XkhxFi3ZF6tl5r7uGN2zaTWECbPRhXTnd5KmxFdCMAqb6XA+tYT3sJKhPDyhnw
okHYwhFPOnFO+tBXnM9lNzKFc9/372bc8Pnvfk2Oj9tiWo9e5oxX5CdTRyXGZdNK
HCWOllXShTBZXo4N5Y5eWu3ezrNE3NrJzkPqi3Blg2PwAxHxAtUgX1RzV6YCP784
dCiHa6ScorAJ+Ri9tqTIFmr9dRklRIwULsDeMmaWccBZBfU64wvaKr5pgAw6KZab
9di7rpyG6aKq8A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:12:11 2026 by rpki-client