Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
File:                     DG8YKAS1blCKo3LAPM63PvjCxos.mft (raw, json)
Hash identifier:          FFZ4/jHRqs33gl0mzb7rxaujqc/SKdDwGzKVr4ZTO1g=
Subject key identifier:   01:C9:66:CA:C0:ED:C3:0A:64:97:05:C2:25:45:5C:AC:82:9B:78:39
Authority key identifier: 0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B
Certificate issuer:       /CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
Certificate serial:       019EBDD9FE3EDEA454C123070ABDD006AD31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
Manifest number:          1961
Signing time:             Fri 12 Jun 2026 22:00:40 +0000
Manifest this update:     Fri 12 Jun 2026 22:00:40 +0000
Manifest next update:     Sat 13 Jun 2026 22:00:40 +0000
Files and hashes:         1: DG8YKAS1blCKo3LAPM63PvjCxos.crl (hash: MYVWyJPo7vmKI6MnlXqCq8zInD1zhm10d2BIMUoqVTU=)
                          2: anGfaLD7Sw-uBHUL7ZCjm1E0Zuo.roa (hash: odjCBhO2fg7tVXSaHs+W/QeZyJocuWu2JrcGva0i788=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:d9:fe:3e:de:a4:54:c1:23:07:0a:bd:d0:06:ad:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
        Validity
            Not Before: Jun 12 22:00:40 2026 GMT
            Not After : Jun 13 22:00:40 2026 GMT
        Subject: CN=01c966cac0edc30a649705c225455cac829b7839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ae:4c:2e:23:5e:54:bb:95:64:a1:d8:1d:34:
                    97:bd:d1:74:70:6a:1b:8d:b5:5e:10:c0:64:e4:17:
                    bb:3b:26:4f:22:5b:b9:b6:0f:d2:2a:52:8b:60:cc:
                    97:33:c6:b8:44:30:a5:ba:aa:5f:2c:9f:5f:f6:5d:
                    9b:e6:9f:9e:dc:9a:35:01:1f:3f:62:09:53:55:46:
                    a5:08:82:c4:62:c4:ed:52:ee:6f:96:2d:48:80:3a:
                    1f:78:a7:64:e0:47:c2:97:25:85:ec:17:20:73:e0:
                    3c:39:48:cc:45:3b:c6:53:00:10:17:1c:21:51:6b:
                    a7:d3:21:d6:c7:48:33:0d:e7:54:a3:da:ac:77:79:
                    c6:44:50:32:22:b6:70:57:3c:c3:5c:6a:6f:08:de:
                    25:db:69:18:89:d5:42:0a:0f:c6:a5:3b:71:7c:c7:
                    50:61:40:c6:c5:95:48:2a:2d:b4:ab:c7:05:e9:44:
                    1e:1b:1b:8e:c4:66:6e:3a:4d:a3:dc:9d:0e:81:72:
                    b8:a3:79:18:77:95:9f:0d:c6:10:a2:ce:23:b3:6a:
                    e4:8e:d6:80:fc:24:b2:24:40:f0:2e:44:f2:f3:ad:
                    3e:75:59:7e:02:3f:68:a1:58:e4:e0:71:17:55:93:
                    4c:9d:39:f9:d3:99:f1:3d:18:a1:67:5b:66:bc:44:
                    dc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C9:66:CA:C0:ED:C3:0A:64:97:05:C2:25:45:5C:AC:82:9B:78:39
            X509v3 Authority Key Identifier:
                keyid:0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:d8:e6:8b:87:f9:74:9b:5b:16:46:48:be:a5:a7:e8:de:4b:
         2f:e1:90:a4:6b:41:20:3c:a0:9d:79:b4:b9:c9:70:4b:b1:70:
         67:57:ec:80:b6:00:53:ed:63:d0:dc:4d:03:10:68:58:42:5a:
         1b:0f:7c:a0:de:0b:82:2d:6f:c0:47:dd:b9:c2:70:d5:03:ca:
         56:9c:39:5e:2a:cf:b5:94:76:f9:1b:13:14:1f:ef:94:bc:d9:
         74:aa:9c:33:8b:7c:5f:22:1e:53:07:92:80:a9:07:e5:9f:bb:
         c9:85:7c:6b:c8:53:e4:02:3b:da:87:01:4c:70:8b:3f:a7:12:
         68:cd:3e:57:85:8d:72:a7:c8:b6:09:44:b7:97:9d:41:05:8b:
         91:ce:b1:33:2a:a1:30:f2:6b:75:b2:91:e1:41:56:2b:5d:37:
         42:c3:4a:9f:bb:5f:11:e3:08:70:65:0f:f8:4e:77:b5:3f:f1:
         1d:84:e5:d3:f6:12:13:d1:d2:35:27:d3:9a:bf:6b:c8:45:5b:
         28:84:aa:1d:db:3d:54:c0:d1:38:76:eb:6f:8c:47:80:35:cf:
         17:6f:34:f3:18:27:db:95:fd:48:fa:8f:c8:ba:ae:79:e1:27:
         c7:f6:b9:7a:46:e4:40:d2:fc:cb:0b:ae:52:c5:55:a6:5e:62:
         6a:be:da:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ692f4+3qRUwSMHCr3QBq0xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNmYxODI4MDRiNTZlNTA4YWEzNzJjMDNjY2ViNzNlZjhj
MmM2OGIwHhcNMjYwNjEyMjIwMDQwWhcNMjYwNjEzMjIwMDQwWjAzMTEwLwYDVQQD
EygwMWM5NjZjYWMwZWRjMzBhNjQ5NzA1YzIyNTQ1NWNhYzgyOWI3ODM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK5MLiNeVLuVZKHYHTSXvdF0cGob
jbVeEMBk5Be7OyZPIlu5tg/SKlKLYMyXM8a4RDCluqpfLJ9f9l2b5p+e3Jo1AR8/
YglTVUalCILEYsTtUu5vli1IgDofeKdk4EfClyWF7Bcgc+A8OUjMRTvGUwAQFxwh
UWun0yHWx0gzDedUo9qsd3nGRFAyIrZwVzzDXGpvCN4l22kYidVCCg/GpTtxfMdQ
YUDGxZVIKi20q8cF6UQeGxuOxGZuOk2j3J0OgXK4o3kYd5WfDcYQos4js2rkjtaA
/CSyJEDwLkTy860+dVl+Aj9ooVjk4HEXVZNMnTn505nxPRihZ1tmvETc6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHJZsrA7cMKZJcFwiVFXKyCm3g5MB8GA1UdIwQY
MBaAFAxvGCgEtW5QiqNywDzOtz74wsaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREc4WUtBUzFibENLbzNMQVBNNjNQdmpDeG9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC82YzBlMjItZmI2MS00OWRiLWIwNjUt
OTkzY2Q4Mzg4ZmQ1LzEvREc4WUtBUzFibENLbzNMQVBNNjNQdmpDeG9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC82YzBlMjItZmI2MS00OWRiLWIwNjUtOTkzY2Q4Mzg4ZmQ1
LzEvREc4WUtBUzFibENLbzNMQVBNNjNQdmpDeG9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy9jmi4f5
dJtbFkZIvqWn6N5LL+GQpGtBIDygnXm0uclwS7FwZ1fsgLYAU+1j0NxNAxBoWEJa
Gw98oN4Lgi1vwEfducJw1QPKVpw5XirPtZR2+RsTFB/vlLzZdKqcM4t8XyIeUweS
gKkH5Z+7yYV8a8hT5AI72ocBTHCLP6cSaM0+V4WNcqfItglEt5edQQWLkc6xMyqh
MPJrdbKR4UFWK103QsNKn7tfEeMIcGUP+E53tT/xHYTl0/YSE9HSNSfTmr9ryEVb
KISqHds9VMDROHbrb4xHgDXPF2808xgn25X9SPqPyLqueeEnx/a5ekbkQNL8ywuu
UsVVpl5iar7aAA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:06:56 2026 by rpki-client