Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
File:                     mBGGh_3W_4D7CYqe7vBt43f4XW4.mft (raw, json)
Hash identifier:          hQPrpGYQtmqTe/rk1Pn6GZzJUj4fR5pfdKq7tj05xEY=
Subject key identifier:   8A:8B:80:FC:EC:92:D2:69:66:3D:C2:24:71:01:05:5E:A8:46:1D:46
Authority key identifier: 98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E
Certificate issuer:       /CN=98118687fdd6ff80fb098a9eeef06de377f85d6e
Certificate serial:       019EC292CE194364402537C3CD02CDC67E54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
Manifest number:          0EB6
Signing time:             Sat 13 Jun 2026 20:01:01 +0000
Manifest this update:     Sat 13 Jun 2026 20:01:01 +0000
Manifest next update:     Sun 14 Jun 2026 20:01:01 +0000
Files and hashes:         1: 277UMnCRR7zGdjhVvQlpf_Mrq_c.roa (hash: 9NAkWSbKvGlMuPXkg4z5e3x+bsBrci205y78D304cAA=)
                          2: E-p4X1qIBG8Spe6P6zk9N3q_I2U.roa (hash: V2KNJduz45ZPpbV/yVWVdNPDTFIpJ9BIkmO53dLe+Sc=)
                          3: mBGGh_3W_4D7CYqe7vBt43f4XW4.crl (hash: h4KuF1RWTcudkltkLjufGmn76Qa/s1xo8Rbw1ykT0x8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:ce:19:43:64:40:25:37:c3:cd:02:cd:c6:7e:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98118687fdd6ff80fb098a9eeef06de377f85d6e
        Validity
            Not Before: Jun 13 20:01:01 2026 GMT
            Not After : Jun 14 20:01:01 2026 GMT
        Subject: CN=8a8b80fcec92d269663dc2247101055ea8461d46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ba:88:b2:5e:12:43:4a:73:0a:64:80:cd:0d:
                    57:85:e0:98:4c:c9:22:b9:81:46:63:02:54:61:c1:
                    88:40:45:01:d5:e1:90:dc:53:03:af:9f:4f:77:77:
                    3b:81:37:70:b1:24:a7:4d:85:43:13:62:28:79:02:
                    7d:78:2d:0b:fe:a7:af:67:62:21:eb:da:d4:73:0d:
                    33:41:cb:82:62:7f:72:3e:ac:64:b7:05:34:e4:1c:
                    ac:1e:fc:3e:04:6f:ed:a3:4a:26:01:42:d1:48:c3:
                    4d:30:09:26:d3:af:47:5d:1c:04:f7:5b:35:e3:b7:
                    a4:d1:b9:52:66:42:e8:06:4a:f0:30:cc:4b:8b:56:
                    15:d0:8a:57:7c:c2:e6:5c:06:5b:38:c5:c8:da:15:
                    ca:fc:61:6c:4a:fc:22:cc:01:b1:62:48:8d:ee:ab:
                    0d:47:10:85:21:69:c3:c9:60:f3:98:2b:2d:20:96:
                    af:7d:fe:a5:f7:23:39:71:63:cf:6f:43:97:54:90:
                    00:6f:19:f0:00:e9:ce:c4:2e:a7:85:59:d7:1a:7c:
                    5f:e4:be:78:b0:3b:67:1c:0d:80:f5:8c:bb:5c:3a:
                    97:c2:c4:9d:85:8d:5b:f2:9c:60:0a:81:6c:c1:1e:
                    af:2f:a9:30:b7:25:55:1d:b5:5f:22:5f:d2:28:d1:
                    e1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:8B:80:FC:EC:92:D2:69:66:3D:C2:24:71:01:05:5E:A8:46:1D:46
            X509v3 Authority Key Identifier:
                keyid:98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:f6:91:40:95:8c:1d:af:40:63:38:ee:98:4c:8d:a6:4f:b4:
         89:26:9c:2b:4d:ff:72:ee:a2:d7:f8:dc:4b:ef:ea:59:d0:91:
         29:4a:1e:c0:9c:ed:9d:52:df:79:34:c5:7b:8a:c7:44:e1:fe:
         84:98:9e:d4:1f:0c:04:d5:5b:44:bc:e5:09:b2:08:8c:56:95:
         12:dc:a7:20:8b:10:ca:b3:3b:09:cb:93:2b:81:2a:f5:f8:ed:
         8c:67:16:be:77:0b:af:42:0d:7c:5c:3c:c5:8a:51:46:6c:99:
         cb:6c:21:e4:ae:f4:85:e9:dc:e1:a9:d5:ab:75:a8:5c:ad:ac:
         6f:78:6e:cd:ce:0b:48:29:8b:86:2d:a8:36:e0:06:56:19:4c:
         34:3a:1a:86:c1:ea:4d:7f:07:f1:b0:24:d0:a5:10:ad:18:53:
         f1:9f:0a:5a:84:4e:f4:bd:6d:b0:4c:67:07:b6:ab:ab:9c:32:
         b5:4f:41:50:e3:08:56:b0:3f:8c:49:cb:b1:b5:dd:b6:cd:21:
         7c:88:6f:f3:1d:ce:16:77:74:c7:f5:27:1f:82:80:25:f1:bf:
         8f:bb:ee:02:72:9b:78:e7:2f:24:bf:95:28:67:92:cc:4e:52:
         bf:c2:1e:90:2f:31:03:f8:dd:46:f7:51:ba:63:26:7c:76:37:
         e0:93:42:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Cks4ZQ2RAJTfDzQLNxn5UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MTE4Njg3ZmRkNmZmODBmYjA5OGE5ZWVlZjA2ZGUzNzdm
ODVkNmUwHhcNMjYwNjEzMjAwMTAxWhcNMjYwNjE0MjAwMTAxWjAzMTEwLwYDVQQD
Eyg4YThiODBmY2VjOTJkMjY5NjYzZGMyMjQ3MTAxMDU1ZWE4NDYxZDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrqIsl4SQ0pzCmSAzQ1XheCYTMki
uYFGYwJUYcGIQEUB1eGQ3FMDr59Pd3c7gTdwsSSnTYVDE2IoeQJ9eC0L/qevZ2Ih
69rUcw0zQcuCYn9yPqxktwU05BysHvw+BG/to0omAULRSMNNMAkm069HXRwE91s1
47ek0blSZkLoBkrwMMxLi1YV0IpXfMLmXAZbOMXI2hXK/GFsSvwizAGxYkiN7qsN
RxCFIWnDyWDzmCstIJavff6l9yM5cWPPb0OXVJAAbxnwAOnOxC6nhVnXGnxf5L54
sDtnHA2A9Yy7XDqXwsSdhY1b8pxgCoFswR6vL6kwtyVVHbVfIl/SKNHhrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqLgPzsktJpZj3CJHEBBV6oRh1GMB8GA1UdIwQY
MBaAFJgRhof91v+A+wmKnu7wbeN3+F1uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUJHR2hfM1dfNEQ3Q1lxZTd2QnQ0M2Y0WFc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy81OTA4YTktMGMwZi00MGFiLWJmZDYt
NjlhZjBhNmU5ODliLzEvbUJHR2hfM1dfNEQ3Q1lxZTd2QnQ0M2Y0WFc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy81OTA4YTktMGMwZi00MGFiLWJmZDYtNjlhZjBhNmU5ODli
LzEvbUJHR2hfM1dfNEQ3Q1lxZTd2QnQ0M2Y0WFc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL/aRQJWM
Ha9AYzjumEyNpk+0iSacK03/cu6i1/jcS+/qWdCRKUoewJztnVLfeTTFe4rHROH+
hJie1B8MBNVbRLzlCbIIjFaVEtynIIsQyrM7CcuTK4Eq9fjtjGcWvncLr0INfFw8
xYpRRmyZy2wh5K70henc4anVq3WoXK2sb3huzc4LSCmLhi2oNuAGVhlMNDoahsHq
TX8H8bAk0KUQrRhT8Z8KWoRO9L1tsExnB7arq5wytU9BUOMIVrA/jEnLsbXdts0h
fIhv8x3OFnd0x/UnH4KAJfG/j7vuAnKbeOcvJL+VKGeSzE5Sv8IekC8xA/jdRvdR
umMmfHY34JNCsg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:33:47 2026 by rpki-client