Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
File:                     aBnbgbSauhKxgQyzopnu5GMt1yA.mft (raw, json)
Hash identifier:          rJV1I7h+P0KWd+ccU4LgYsDz/2gDtWZDrEei3TuIAR8=
Subject key identifier:   6F:36:16:09:4D:F0:BE:46:E8:10:C7:31:AF:7A:13:51:50:5F:DA:B4
Authority key identifier: 68:19:DB:81:B4:9A:BA:12:B1:81:0C:B3:A2:99:EE:E4:63:2D:D7:20
Certificate issuer:       /CN=6819db81b49aba12b1810cb3a299eee4632dd720
Certificate serial:       019EC337A08235F9BD802BB205D8841E6A78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
Manifest number:          052C
Signing time:             Sat 13 Jun 2026 23:01:03 +0000
Manifest this update:     Sat 13 Jun 2026 23:01:03 +0000
Manifest next update:     Sun 14 Jun 2026 23:01:03 +0000
Files and hashes:         1: PK2HVjD3GmdLB06ij0s7w3X0wCo.roa (hash: 1RKfa7PhpjR33QDEm1HWDfBtwC3Ch5Bq/qvovHpolJ0=)
                          2: aBnbgbSauhKxgQyzopnu5GMt1yA.crl (hash: F1W5L7D4wMmDLvteNux5gUlnBjGZwFAM2BRT8bTPf+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:37:a0:82:35:f9:bd:80:2b:b2:05:d8:84:1e:6a:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6819db81b49aba12b1810cb3a299eee4632dd720
        Validity
            Not Before: Jun 13 23:01:03 2026 GMT
            Not After : Jun 14 23:01:03 2026 GMT
        Subject: CN=6f3616094df0be46e810c731af7a1351505fdab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1a:d5:88:b6:18:bc:98:36:41:ac:07:31:c9:
                    7e:f8:d1:8a:84:49:f3:2b:1a:8c:56:b2:90:65:e3:
                    a8:08:a8:b9:9f:25:b0:97:fd:73:e2:eb:9d:38:9b:
                    07:10:3d:ce:49:41:ef:a5:a9:ed:59:92:72:1e:17:
                    17:bb:0c:f5:4e:20:a4:df:39:67:de:6f:53:64:2c:
                    5a:4f:58:73:cc:94:04:c0:6a:ee:65:c7:61:60:da:
                    f7:25:4a:c8:89:73:93:15:6d:ba:c5:23:7d:c2:e8:
                    e1:e4:4d:f2:29:de:d7:3d:11:35:12:42:e7:6f:71:
                    80:e8:68:fc:19:8a:51:be:a1:89:13:a3:b1:8a:a9:
                    55:53:74:73:c0:90:76:56:be:49:b4:d4:ce:f9:20:
                    8a:84:dd:fb:b9:f3:09:9f:96:0f:1e:9a:c7:c3:93:
                    08:a3:22:80:c4:7d:9a:05:e8:8c:e4:b9:8f:40:f0:
                    70:be:96:85:92:a6:88:fa:91:41:8b:6c:4b:90:48:
                    ca:c2:0f:00:3b:09:96:a5:79:be:9f:68:94:51:56:
                    c0:34:d5:b7:4b:a7:1b:79:f3:26:37:62:f9:99:51:
                    a8:db:41:00:71:bb:e5:41:f6:59:fc:34:5a:33:be:
                    1e:56:ab:9e:dc:f3:f5:24:62:db:41:7c:44:b3:65:
                    59:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:36:16:09:4D:F0:BE:46:E8:10:C7:31:AF:7A:13:51:50:5F:DA:B4
            X509v3 Authority Key Identifier:
                keyid:68:19:DB:81:B4:9A:BA:12:B1:81:0C:B3:A2:99:EE:E4:63:2D:D7:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:b3:e4:1e:22:ef:73:a1:94:8b:68:84:e4:d9:51:0c:a9:b2:
         99:30:d3:80:12:39:66:b6:34:e1:5a:82:7e:c0:98:e2:27:40:
         a1:aa:f4:9d:97:9d:24:d6:dc:65:4d:a4:35:ed:47:0f:cb:68:
         0c:7c:05:cb:ea:a5:a4:23:4a:8e:10:4a:1a:8b:41:68:f6:54:
         cb:4e:1c:bf:f8:c1:b7:2b:b4:38:c2:f7:c9:a7:c0:e9:6a:5c:
         5b:3f:6a:d1:1f:dc:7b:83:e3:3f:8c:0b:a2:fd:86:6d:7d:74:
         3f:d7:ec:5b:0a:ac:13:33:45:15:81:93:32:5b:c1:47:b2:fa:
         cd:14:86:30:b6:bd:07:8f:4d:cd:c0:21:ab:24:ec:09:4e:60:
         88:e3:85:5b:4c:6a:9f:c1:4b:29:ee:41:71:7e:eb:6a:10:b1:
         78:d9:4d:7d:47:b9:6d:5f:67:2e:e0:01:bc:d3:f9:cc:15:9d:
         cf:cb:fb:92:63:2f:45:dd:67:7e:30:96:24:ae:a7:7a:12:38:
         4f:64:52:fb:e1:ef:90:96:27:ed:05:74:38:07:fc:fd:47:96:
         cb:a7:36:7e:33:5c:b9:21:1d:13:9a:7f:7b:1d:c5:14:ef:cb:
         1c:70:9c:5d:9c:44:d3:45:c5:e0:b0:09:c8:89:20:68:17:cd:
         be:4f:da:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DN6CCNfm9gCuyBdiEHmp4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MTlkYjgxYjQ5YWJhMTJiMTgxMGNiM2EyOTllZWU0NjMy
ZGQ3MjAwHhcNMjYwNjEzMjMwMTAzWhcNMjYwNjE0MjMwMTAzWjAzMTEwLwYDVQQD
Eyg2ZjM2MTYwOTRkZjBiZTQ2ZTgxMGM3MzFhZjdhMTM1MTUwNWZkYWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBrViLYYvJg2QawHMcl++NGKhEnz
KxqMVrKQZeOoCKi5nyWwl/1z4uudOJsHED3OSUHvpantWZJyHhcXuwz1TiCk3zln
3m9TZCxaT1hzzJQEwGruZcdhYNr3JUrIiXOTFW26xSN9wujh5E3yKd7XPRE1EkLn
b3GA6Gj8GYpRvqGJE6OxiqlVU3RzwJB2Vr5JtNTO+SCKhN37ufMJn5YPHprHw5MI
oyKAxH2aBeiM5LmPQPBwvpaFkqaI+pFBi2xLkEjKwg8AOwmWpXm+n2iUUVbANNW3
S6cbefMmN2L5mVGo20EAcbvlQfZZ/DRaM74eVque3PP1JGLbQXxEs2VZSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG82FglN8L5G6BDHMa96E1FQX9q0MB8GA1UdIwQY
MBaAFGgZ24G0mroSsYEMs6KZ7uRjLdcgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUJuYmdiU2F1aEt4Z1F5em9wbnU1R010MXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8wZTc2NmEtNzJmZS00N2QyLWE0MzUt
OTAzNWIwODM2MjQzLzEvYUJuYmdiU2F1aEt4Z1F5em9wbnU1R010MXlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8wZTc2NmEtNzJmZS00N2QyLWE0MzUtOTAzNWIwODM2MjQz
LzEvYUJuYmdiU2F1aEt4Z1F5em9wbnU1R010MXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP7PkHiLv
c6GUi2iE5NlRDKmymTDTgBI5ZrY04VqCfsCY4idAoar0nZedJNbcZU2kNe1HD8to
DHwFy+qlpCNKjhBKGotBaPZUy04cv/jBtyu0OML3yafA6WpcWz9q0R/ce4PjP4wL
ov2GbX10P9fsWwqsEzNFFYGTMlvBR7L6zRSGMLa9B49NzcAhqyTsCU5giOOFW0xq
n8FLKe5BcX7rahCxeNlNfUe5bV9nLuABvNP5zBWdz8v7kmMvRd1nfjCWJK6nehI4
T2RS++HvkJYn7QV0OAf8/UeWy6c2fjNcuSEdE5p/ex3FFO/LHHCcXZxE00XF4LAJ
yIkgaBfNvk/a9w==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:55:17 2026 by rpki-client