Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft
File:                     wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft (raw, json)
Hash identifier:          syXXVWBkn1SpWzTdEshAC6zhNtbx6De9EbvUUjpnemQ=
Subject key identifier:   89:BD:AB:4E:FA:E7:80:22:0E:4B:99:4C:FB:D2:31:9A:60:B3:90:10
Authority key identifier: C0:DE:BC:88:50:B6:90:F1:23:27:96:91:1B:FE:3C:4C:9A:A8:67:DC
Certificate issuer:       /CN=c0debc8850b690f1232796911bfe3c4c9aa867dc
Certificate serial:       019EC29265520D85DD92C07D9DC14F2328D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft
Manifest number:          0661
Signing time:             Sat 13 Jun 2026 20:00:34 +0000
Manifest this update:     Sat 13 Jun 2026 20:00:34 +0000
Manifest next update:     Sun 14 Jun 2026 20:00:34 +0000
Files and hashes:         1: 0lgng2rjDy26wvLpufoJ44YGSa8.roa (hash: Sp2gMQIGghJdGnoU3YO/ErS7zVxVldScly14Bqy0M6k=)
                          2: wN68iFC2kPEjJ5aRG_48TJqoZ9w.crl (hash: QSQhp6aDzeQS6Gn8POVa3FhYB9ak1B6/sJGM3tOfSgg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:65:52:0d:85:dd:92:c0:7d:9d:c1:4f:23:28:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0debc8850b690f1232796911bfe3c4c9aa867dc
        Validity
            Not Before: Jun 13 20:00:34 2026 GMT
            Not After : Jun 14 20:00:34 2026 GMT
        Subject: CN=89bdab4efae780220e4b994cfbd2319a60b39010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:00:9c:df:32:e4:57:7d:d0:6a:ff:8b:d6:3c:
                    7c:59:27:cf:50:99:f9:78:c1:1e:92:5e:2c:48:cd:
                    d2:68:fa:91:5a:5b:78:7b:5f:e9:5b:70:a7:a5:88:
                    5c:d7:39:21:3f:81:a5:a5:a1:09:70:e9:33:ba:cc:
                    d1:df:a1:d9:a5:84:13:40:4b:21:32:b7:53:94:10:
                    c1:de:21:2c:78:7f:82:bf:88:6b:2c:5f:3d:9a:b5:
                    4f:73:0e:25:10:70:93:48:f1:22:9f:87:9a:72:75:
                    04:ee:cb:3d:ef:05:b8:f8:27:a4:10:77:33:16:3a:
                    fb:d6:34:64:79:a8:13:0c:1b:98:59:e2:21:8e:64:
                    03:15:74:90:b1:28:d1:22:1e:35:f1:5a:d9:16:1d:
                    e4:54:4a:e3:28:ff:4d:3d:82:fb:6b:4d:13:d4:e4:
                    a8:ad:20:38:d3:f4:a5:34:f0:7b:8b:16:52:aa:7e:
                    bd:ad:d3:e1:1d:f8:de:f1:8f:88:dd:5b:db:f3:64:
                    5e:a0:a9:19:fc:57:e1:16:0f:d7:d5:45:cf:36:3e:
                    37:ac:91:5b:d8:46:29:3f:34:4f:59:b3:06:af:eb:
                    07:ff:1e:4b:95:20:e9:41:22:c2:71:9f:50:6b:98:
                    e4:ab:22:96:a2:ef:56:20:f6:05:38:c6:e3:57:cf:
                    75:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:BD:AB:4E:FA:E7:80:22:0E:4B:99:4C:FB:D2:31:9A:60:B3:90:10
            X509v3 Authority Key Identifier:
                keyid:C0:DE:BC:88:50:B6:90:F1:23:27:96:91:1B:FE:3C:4C:9A:A8:67:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:e2:95:73:13:2c:36:27:79:03:7d:c4:f1:ea:6d:55:80:d6:
         83:4c:84:9b:64:74:b7:04:07:64:cc:a4:b7:85:72:e1:ba:77:
         f0:58:86:aa:3c:e6:9b:2c:03:02:a9:79:aa:30:f7:b9:5e:49:
         93:c8:37:24:de:62:7c:7d:a2:26:5a:ef:a8:89:40:19:4e:ed:
         51:78:b6:6d:8d:88:0b:86:f1:f5:fb:72:a2:ab:ac:5d:fc:a8:
         7a:f3:d9:d4:22:dc:42:35:68:a8:8d:9d:6c:d0:b4:7b:82:a9:
         28:41:10:4d:cd:ce:b9:90:1e:01:8e:5f:c3:16:f0:c5:fe:f6:
         21:35:b9:b8:f0:3a:a6:e5:4e:e2:67:da:fc:d1:32:2b:06:e3:
         dc:f8:47:d8:79:75:57:1a:36:4c:ff:50:04:2b:5c:16:c3:57:
         35:54:05:15:a8:60:74:a2:d6:b2:6c:e2:40:47:b1:21:a6:e8:
         44:84:24:20:05:3a:77:12:4c:2b:7b:2b:50:f1:11:f0:20:ed:
         4a:ee:40:da:62:d4:a6:11:5c:9f:a9:27:b5:cb:35:0b:1c:dd:
         aa:97:3c:88:48:b3:c5:ce:b2:11:81:17:90:1a:af:ad:0d:43:
         f6:98:58:65:d5:34:4d:fa:35:40:88:e9:18:0c:a1:06:79:b3:
         b8:a5:a6:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CkmVSDYXdksB9ncFPIyjQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZGViYzg4NTBiNjkwZjEyMzI3OTY5MTFiZmUzYzRjOWFh
ODY3ZGMwHhcNMjYwNjEzMjAwMDM0WhcNMjYwNjE0MjAwMDM0WjAzMTEwLwYDVQQD
Eyg4OWJkYWI0ZWZhZTc4MDIyMGU0Yjk5NGNmYmQyMzE5YTYwYjM5MDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQCc3zLkV33Qav+L1jx8WSfPUJn5
eMEekl4sSM3SaPqRWlt4e1/pW3CnpYhc1zkhP4GlpaEJcOkzuszR36HZpYQTQEsh
MrdTlBDB3iEseH+Cv4hrLF89mrVPcw4lEHCTSPEin4eacnUE7ss97wW4+CekEHcz
Fjr71jRkeagTDBuYWeIhjmQDFXSQsSjRIh418VrZFh3kVErjKP9NPYL7a00T1OSo
rSA40/SlNPB7ixZSqn69rdPhHfje8Y+I3Vvb82ReoKkZ/FfhFg/X1UXPNj43rJFb
2EYpPzRPWbMGr+sH/x5LlSDpQSLCcZ9Qa5jkqyKWou9WIPYFOMbjV8910wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIm9q07654AiDkuZTPvSMZpgs5AQMB8GA1UdIwQY
MBaAFMDevIhQtpDxIyeWkRv+PEyaqGfcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd042OGlGQzJrUEVqSjVhUkdfNDhUSnFvWjl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9lM2NhNzEtMzZmMC00YzUyLWJjMDEt
YzZhYzRkZDdjOGU0LzEvd042OGlGQzJrUEVqSjVhUkdfNDhUSnFvWjl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9lM2NhNzEtMzZmMC00YzUyLWJjMDEtYzZhYzRkZDdjOGU0
LzEvd042OGlGQzJrUEVqSjVhUkdfNDhUSnFvWjl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+KVcxMs
Nid5A33E8eptVYDWg0yEm2R0twQHZMykt4Vy4bp38FiGqjzmmywDAql5qjD3uV5J
k8g3JN5ifH2iJlrvqIlAGU7tUXi2bY2IC4bx9ftyoqusXfyoevPZ1CLcQjVoqI2d
bNC0e4KpKEEQTc3OuZAeAY5fwxbwxf72ITW5uPA6puVO4mfa/NEyKwbj3PhH2Hl1
Vxo2TP9QBCtcFsNXNVQFFahgdKLWsmziQEexIaboRIQkIAU6dxJMK3srUPER8CDt
Su5A2mLUphFcn6kntcs1Cxzdqpc8iEizxc6yEYEXkBqvrQ1D9phYZdU0Tfo1QIjp
GAyhBnmzuKWm9g==
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:09:18 2026 by rpki-client