Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/5f72bc-caf4-4edf-9432-ec2c19eb67f6/1/0jh3jxNJtXVBjBnjg9BXGuvuot8.mft
File:                     0jh3jxNJtXVBjBnjg9BXGuvuot8.mft (raw, json)
Hash identifier:          wovEW/hY3FdadOqw+0+sgTcWKrn+tGRCUOntv4i8Sh8=
Subject key identifier:   6E:13:E2:54:50:61:D5:12:FD:40:70:34:4C:CD:3D:A9:F6:76:3D:81
Authority key identifier: D2:38:77:8F:13:49:B5:75:41:8C:19:E3:83:D0:57:1A:EB:EE:A2:DF
Certificate issuer:       /CN=d238778f1349b575418c19e383d0571aebeea2df
Certificate serial:       019EC111D2A38F48494E815CE24B89ED47BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0jh3jxNJtXVBjBnjg9BXGuvuot8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/5f72bc-caf4-4edf-9432-ec2c19eb67f6/1/0jh3jxNJtXVBjBnjg9BXGuvuot8.mft
Manifest number:          6E
Signing time:             Sat 13 Jun 2026 13:00:31 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:31 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:31 +0000
Files and hashes:         1: 0jh3jxNJtXVBjBnjg9BXGuvuot8.crl (hash: VGYOvg5YzrLgFHeD7Guv0kbZlNNYqQYCoCNxg3rolr0=)
                          2: Ja7890_tG369n2EpikrlxKOH7eo.roa (hash: dUDn7iA585Me0xPD3yCTHJGFysgJ0UVLXEuuoAzLUoE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/5f72bc-caf4-4edf-9432-ec2c19eb67f6/1/0jh3jxNJtXVBjBnjg9BXGuvuot8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/5f72bc-caf4-4edf-9432-ec2c19eb67f6/1/0jh3jxNJtXVBjBnjg9BXGuvuot8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0jh3jxNJtXVBjBnjg9BXGuvuot8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:11:d2:a3:8f:48:49:4e:81:5c:e2:4b:89:ed:47:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d238778f1349b575418c19e383d0571aebeea2df
        Validity
            Not Before: Jun 13 13:00:31 2026 GMT
            Not After : Jun 14 13:00:31 2026 GMT
        Subject: CN=6e13e2545061d512fd4070344ccd3da9f6763d81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d7:ef:8c:35:1c:57:3f:8e:d1:22:b9:f5:df:
                    5a:48:12:45:b2:75:4f:04:ff:65:0c:3c:b5:6a:dd:
                    67:a6:c9:ca:69:a3:8a:6c:09:47:aa:f3:a7:d6:5e:
                    39:96:10:0d:87:c6:6a:12:67:9c:d6:e3:c4:59:62:
                    9b:6b:69:d6:3c:c1:40:8e:26:81:63:f1:ac:2e:bc:
                    f2:45:37:6e:7a:32:0a:c2:15:67:4c:f6:86:1d:d1:
                    76:5c:be:93:9e:54:10:33:3b:1b:8a:46:a8:de:0e:
                    2f:3f:c6:d2:b3:cf:65:1b:ef:95:6e:1d:a5:6f:b3:
                    6a:1d:e0:3b:b9:0d:68:e4:b6:e7:e0:19:58:71:3d:
                    a5:20:d8:2c:f4:43:65:6b:b9:93:bd:e2:0c:1a:33:
                    ce:dd:40:8a:da:8d:a0:d8:08:f1:f3:3d:42:28:59:
                    b1:8e:93:ba:c5:ca:b6:30:06:14:64:c1:93:43:d4:
                    1d:26:d5:09:b1:b2:0c:a6:81:d6:fa:6e:a3:53:7b:
                    49:7c:25:32:9b:71:ba:27:b1:c6:41:47:34:45:6e:
                    6d:a1:46:7a:8b:71:5a:40:70:8d:22:19:14:20:9c:
                    2a:bb:2b:ba:a2:8f:8a:ec:ef:0c:68:e7:c7:28:3e:
                    e2:3f:b4:c4:b1:e4:52:0b:8f:c9:99:69:f9:25:79:
                    e3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:13:E2:54:50:61:D5:12:FD:40:70:34:4C:CD:3D:A9:F6:76:3D:81
            X509v3 Authority Key Identifier:
                keyid:D2:38:77:8F:13:49:B5:75:41:8C:19:E3:83:D0:57:1A:EB:EE:A2:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jh3jxNJtXVBjBnjg9BXGuvuot8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5f72bc-caf4-4edf-9432-ec2c19eb67f6/1/0jh3jxNJtXVBjBnjg9BXGuvuot8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5f72bc-caf4-4edf-9432-ec2c19eb67f6/1/0jh3jxNJtXVBjBnjg9BXGuvuot8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:e7:32:17:cc:0a:dc:68:4c:82:1e:d9:dc:d3:86:91:c2:f6:
         ed:c1:73:8e:89:63:e0:99:17:87:6b:e3:b4:bc:01:50:9b:2d:
         9f:4d:13:5f:1d:ea:89:a9:73:14:dd:67:3c:b7:48:97:bc:72:
         38:a6:1b:55:9b:8b:3a:6e:0f:4e:e8:41:dd:28:8a:13:bf:c1:
         e2:a1:01:3c:06:8c:54:53:30:ce:e9:59:05:2b:66:dc:11:47:
         90:1f:a8:43:92:a7:07:fb:74:95:af:39:d5:dd:8e:b0:9b:95:
         a9:b5:72:b9:1e:ad:ad:47:f5:a5:7f:9e:e6:ff:87:4b:0d:da:
         36:3b:c8:1e:da:44:5c:b5:23:0b:96:95:19:58:48:f1:1e:2a:
         c5:e2:08:d2:53:54:92:e9:05:11:6f:03:06:30:e6:76:d1:70:
         57:45:8d:67:f9:4b:e7:fc:37:0e:12:07:34:7e:66:fb:01:da:
         34:72:be:44:2e:ba:37:91:9f:97:7b:f2:a7:52:b6:14:84:6e:
         0d:d1:a2:c1:20:bd:e2:d3:32:bb:e4:0e:23:8c:4c:b2:5b:2a:
         e6:c1:22:96:f7:2a:00:4c:f1:16:00:22:90:55:80:29:52:7d:
         48:b6:7d:b7:24:84:18:e9:6c:a6:d6:fd:4c:a5:83:09:07:3a:
         8f:7b:71:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BEdKjj0hJToFc4kuJ7Ue+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMzg3NzhmMTM0OWI1NzU0MThjMTllMzgzZDA1NzFhZWJl
ZWEyZGYwHhcNMjYwNjEzMTMwMDMxWhcNMjYwNjE0MTMwMDMxWjAzMTEwLwYDVQQD
Eyg2ZTEzZTI1NDUwNjFkNTEyZmQ0MDcwMzQ0Y2NkM2RhOWY2NzYzZDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tfvjDUcVz+O0SK59d9aSBJFsnVP
BP9lDDy1at1npsnKaaOKbAlHqvOn1l45lhANh8ZqEmec1uPEWWKba2nWPMFAjiaB
Y/GsLrzyRTduejIKwhVnTPaGHdF2XL6TnlQQMzsbikao3g4vP8bSs89lG++Vbh2l
b7NqHeA7uQ1o5Lbn4BlYcT2lINgs9ENla7mTveIMGjPO3UCK2o2g2Ajx8z1CKFmx
jpO6xcq2MAYUZMGTQ9QdJtUJsbIMpoHW+m6jU3tJfCUym3G6J7HGQUc0RW5toUZ6
i3FaQHCNIhkUIJwquyu6oo+K7O8MaOfHKD7iP7TEseRSC4/JmWn5JXnj8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4T4lRQYdUS/UBwNEzNPan2dj2BMB8GA1UdIwQY
MBaAFNI4d48TSbV1QYwZ44PQVxrr7qLfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGpoM2p4Tkp0WFZCakJuamc5QlhHdXZ1b3Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS81ZjcyYmMtY2FmNC00ZWRmLTk0MzIt
ZWMyYzE5ZWI2N2Y2LzEvMGpoM2p4Tkp0WFZCakJuamc5QlhHdXZ1b3Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS81ZjcyYmMtY2FmNC00ZWRmLTk0MzItZWMyYzE5ZWI2N2Y2
LzEvMGpoM2p4Tkp0WFZCakJuamc5QlhHdXZ1b3Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvucyF8wK
3GhMgh7Z3NOGkcL27cFzjolj4JkXh2vjtLwBUJstn00TXx3qialzFN1nPLdIl7xy
OKYbVZuLOm4PTuhB3SiKE7/B4qEBPAaMVFMwzulZBStm3BFHkB+oQ5KnB/t0la85
1d2OsJuVqbVyuR6trUf1pX+e5v+HSw3aNjvIHtpEXLUjC5aVGVhI8R4qxeII0lNU
kukFEW8DBjDmdtFwV0WNZ/lL5/w3DhIHNH5m+wHaNHK+RC66N5Gfl3vyp1K2FIRu
DdGiwSC94tMyu+QOI4xMslsq5sEilvcqAEzxFgAikFWAKVJ9SLZ9tySEGOlsptb9
TKWDCQc6j3tx+g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:39:05 2026 by rpki-client