Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft
File:                     DloI_DRpD1LbDCt-R-jlOIMUWpg.mft (raw, json)
Hash identifier:          vDFnAlUjOP8ZJ/rOI9xGGzV3z/k7vWanCqrNrjkx10w=
Subject key identifier:   84:FD:5B:EA:6E:A7:F2:61:2B:EE:8C:BB:B6:6C:49:ED:66:A4:DA:A4
Authority key identifier: 0E:5A:08:FC:34:69:0F:52:DB:0C:2B:7E:47:E8:E5:38:83:14:5A:98
Certificate issuer:       /CN=0e5a08fc34690f52db0c2b7e47e8e53883145a98
Certificate serial:       019ED42B58102C9A8B295B66FC7E09E4B5C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DloI_DRpD1LbDCt-R-jlOIMUWpg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft
Manifest number:          0476
Signing time:             Wed 17 Jun 2026 06:01:10 +0000
Manifest this update:     Wed 17 Jun 2026 06:01:10 +0000
Manifest next update:     Thu 18 Jun 2026 06:01:10 +0000
Files and hashes:         1: DloI_DRpD1LbDCt-R-jlOIMUWpg.crl (hash: m8v7H93mHhVqXRf44PFfRoneN6G77PTlvgdf0r1Oz4U=)
                          2: LOtYNSOIJLqn8y7bAA6r24saOkk.asa (hash: jnFWZlKsQlmviLgHTcWDoVumAZhReG7QINLCGxqwiGo=)
                          3: ZHi1ZhCdWfH9BoGN5VcU78t29bk.roa (hash: SRJcc4sRWkIGgmHfVj6UPyJviHaRkjxeQWqok2u9PGk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DloI_DRpD1LbDCt-R-jlOIMUWpg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:2b:58:10:2c:9a:8b:29:5b:66:fc:7e:09:e4:b5:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e5a08fc34690f52db0c2b7e47e8e53883145a98
        Validity
            Not Before: Jun 17 06:01:10 2026 GMT
            Not After : Jun 18 06:01:10 2026 GMT
        Subject: CN=84fd5bea6ea7f2612bee8cbbb66c49ed66a4daa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f0:5a:53:15:32:b9:b8:8b:7f:b4:5b:3e:d5:
                    7c:c1:2f:04:44:63:80:a9:d2:d5:01:de:b2:0b:6e:
                    d2:9e:15:28:57:98:66:c5:7f:42:81:37:44:52:a0:
                    67:9d:88:08:1c:f1:d8:8b:27:4f:ef:22:9a:f9:69:
                    94:8a:69:3c:97:32:61:82:13:15:fd:34:c4:e4:6e:
                    b6:a7:74:17:ca:5c:06:1c:7e:3a:8e:dc:b0:4b:a9:
                    d9:39:0c:06:18:2c:70:e0:32:b1:a0:2a:99:ba:6b:
                    a0:b4:b5:ea:e6:59:da:87:86:f0:26:58:5f:6d:26:
                    d1:fb:a3:8c:ad:dc:64:d5:89:4c:03:bb:a7:46:f4:
                    31:7f:68:b9:d2:41:56:8d:f6:1f:51:ba:d7:7f:28:
                    59:35:eb:f9:c0:46:6c:9b:7c:7a:9a:09:c0:d4:63:
                    ad:89:a9:23:73:98:67:56:06:ef:70:6f:5f:d5:40:
                    04:73:09:88:f1:9a:de:4d:d9:0b:15:18:6f:44:a0:
                    e2:ad:86:8c:56:49:de:ce:0a:8f:7d:6b:a3:70:79:
                    d1:12:17:82:d0:35:27:d4:dd:73:3a:14:1a:8a:26:
                    1a:81:fa:3c:cc:d5:a0:4a:cc:bf:a7:99:19:a7:42:
                    d3:87:2f:b7:d8:95:92:f9:2d:24:6c:78:2b:b0:c1:
                    cb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:FD:5B:EA:6E:A7:F2:61:2B:EE:8C:BB:B6:6C:49:ED:66:A4:DA:A4
            X509v3 Authority Key Identifier:
                keyid:0E:5A:08:FC:34:69:0F:52:DB:0C:2B:7E:47:E8:E5:38:83:14:5A:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DloI_DRpD1LbDCt-R-jlOIMUWpg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:3c:d7:b2:90:ff:ec:e2:72:85:30:24:eb:c9:64:5c:07:13:
         4c:4c:52:0b:68:f7:80:1e:b0:b0:35:e5:d5:08:38:80:d3:81:
         07:36:00:43:90:18:f4:1d:71:ee:6b:c0:b8:d9:fb:ac:b9:6c:
         7c:c7:06:63:84:f9:f7:d5:ad:52:af:44:61:b3:ac:ee:1c:55:
         34:85:18:55:0b:71:75:23:c5:0a:d4:74:1a:ff:e6:d2:4d:93:
         8f:0e:6c:11:1c:69:10:80:28:7d:d8:df:b3:81:25:d1:c5:ef:
         11:d6:e7:2f:32:7b:8f:27:c4:17:1c:6e:0e:5e:e7:72:6e:cf:
         e0:81:c7:6a:51:a8:87:ae:06:c5:50:6b:25:d6:a3:8c:7d:5d:
         83:62:70:37:6b:97:85:92:34:34:74:26:ef:3c:d0:81:59:55:
         4a:ed:90:21:a9:60:3c:16:e3:ed:74:97:61:53:df:f1:51:a8:
         1c:d8:73:16:6c:96:00:1d:c5:d5:95:fd:ab:82:bb:1d:fa:68:
         25:db:02:2b:b3:31:92:d6:fe:03:d5:03:07:b3:5a:83:d8:7b:
         d3:c5:9f:b4:1b:73:5b:98:e8:b2:a8:82:11:3e:57:55:78:6b:
         96:dd:ea:3d:fb:fa:54:fb:73:0a:eb:1c:ee:75:38:b5:97:11:
         a0:38:e7:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7UK1gQLJqLKVtm/H4J5LXGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNWEwOGZjMzQ2OTBmNTJkYjBjMmI3ZTQ3ZThlNTM4ODMx
NDVhOTgwHhcNMjYwNjE3MDYwMTEwWhcNMjYwNjE4MDYwMTEwWjAzMTEwLwYDVQQD
Eyg4NGZkNWJlYTZlYTdmMjYxMmJlZThjYmJiNjZjNDllZDY2YTRkYWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvBaUxUyubiLf7RbPtV8wS8ERGOA
qdLVAd6yC27SnhUoV5hmxX9CgTdEUqBnnYgIHPHYiydP7yKa+WmUimk8lzJhghMV
/TTE5G62p3QXylwGHH46jtywS6nZOQwGGCxw4DKxoCqZumugtLXq5lnah4bwJlhf
bSbR+6OMrdxk1YlMA7unRvQxf2i50kFWjfYfUbrXfyhZNev5wEZsm3x6mgnA1GOt
iakjc5hnVgbvcG9f1UAEcwmI8ZreTdkLFRhvRKDirYaMVknezgqPfWujcHnREheC
0DUn1N1zOhQaiiYagfo8zNWgSsy/p5kZp0LThy+32JWS+S0kbHgrsMHLzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIT9W+pup/JhK+6Mu7ZsSe1mpNqkMB8GA1UdIwQY
MBaAFA5aCPw0aQ9S2wwrfkfo5TiDFFqYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGxvSV9EUnBEMUxiREN0LVItamxPSU1VV3BnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMTc4NDktN2NjZi00ODE1LWJjNjkt
YTc3ZjBiMzIxNDRlLzEvRGxvSV9EUnBEMUxiREN0LVItamxPSU1VV3BnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMTc4NDktN2NjZi00ODE1LWJjNjktYTc3ZjBiMzIxNDRl
LzEvRGxvSV9EUnBEMUxiREN0LVItamxPSU1VV3BnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGTzXspD/
7OJyhTAk68lkXAcTTExSC2j3gB6wsDXl1Qg4gNOBBzYAQ5AY9B1x7mvAuNn7rLls
fMcGY4T599WtUq9EYbOs7hxVNIUYVQtxdSPFCtR0Gv/m0k2Tjw5sERxpEIAofdjf
s4El0cXvEdbnLzJ7jyfEFxxuDl7ncm7P4IHHalGoh64GxVBrJdajjH1dg2JwN2uX
hZI0NHQm7zzQgVlVSu2QIalgPBbj7XSXYVPf8VGoHNhzFmyWAB3F1ZX9q4K7Hfpo
JdsCK7Mxktb+A9UDB7Nag9h708WftBtzW5josqiCET5XVXhrlt3qPfv6VPtzCusc
7nU4tZcRoDjntQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 08:55:57 2026 by rpki-client