Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
File:                     _xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft (raw, json)
Hash identifier:          E2Tc9DTTwhvKFNpHUYluaE1klhd/1GDqdhllNLJRDMA=
Subject key identifier:   A3:76:33:AB:FC:6F:E8:6F:64:40:03:15:08:B7:A1:D6:D4:54:88:1F
Authority key identifier: FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
Certificate issuer:       /CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Certificate serial:       019EC0367C6DC566D62D57943E0A3E5112EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
Manifest number:          1123
Signing time:             Sat 13 Jun 2026 09:00:56 +0000
Manifest this update:     Sat 13 Jun 2026 09:00:56 +0000
Manifest next update:     Sun 14 Jun 2026 09:00:56 +0000
Files and hashes:         1: XfPxNqw04f4ysUNycil0EQofl1M.roa (hash: JClRzQorRQbXDP0L/PC7A7JxisEaLLPV1aRUiLTnBv8=)
                          2: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl (hash: r28iHQjVTSYH+BPd3FeBvmC1T4lcTG3wMc82GLm4Z90=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:36:7c:6d:c5:66:d6:2d:57:94:3e:0a:3e:51:12:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
        Validity
            Not Before: Jun 13 09:00:56 2026 GMT
            Not After : Jun 14 09:00:56 2026 GMT
        Subject: CN=a37633abfc6fe86f6440031508b7a1d6d454881f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1b:3a:2c:a0:72:fb:e5:7f:4e:68:72:c4:6d:
                    7a:85:d4:6c:aa:c7:7f:43:1e:0e:ae:de:65:c8:e1:
                    98:e5:a9:02:b3:2c:ff:67:f3:d6:c5:3e:08:fe:4b:
                    1c:e3:e5:ce:39:7d:da:f0:0d:68:f6:e2:c6:60:0f:
                    1b:5d:48:95:07:ab:1d:06:6b:e5:04:46:bf:66:03:
                    ce:6e:33:01:65:97:7a:0e:81:bf:d4:8c:7f:c2:cd:
                    87:3d:56:de:e9:b2:8c:15:7d:e2:c8:5e:71:7a:0e:
                    03:b7:28:e5:05:b5:73:41:e9:39:bc:62:85:de:9e:
                    bd:7f:bc:a6:0c:bc:19:ba:ba:ea:9b:e3:03:f4:d5:
                    74:5e:a4:66:67:52:35:27:52:94:5e:c5:36:10:eb:
                    33:71:73:54:5c:cf:fe:62:74:98:0f:21:13:03:42:
                    fe:11:ac:47:77:6a:d5:04:c7:b6:85:af:4d:5f:15:
                    65:12:3c:ec:d5:9b:e5:69:0c:8f:45:1b:f0:c6:f4:
                    34:cb:e6:de:a7:f1:05:c0:76:00:6b:57:65:50:98:
                    8e:ee:7a:6c:87:51:2c:7c:54:ad:50:b9:67:5b:e4:
                    88:1d:9e:53:c2:60:a7:9a:13:12:2b:17:9a:09:12:
                    b4:16:09:d3:37:7c:8a:4c:65:5a:f4:9a:b3:39:de:
                    5c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:76:33:AB:FC:6F:E8:6F:64:40:03:15:08:B7:A1:D6:D4:54:88:1F
            X509v3 Authority Key Identifier:
                keyid:FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:38:83:a2:12:22:73:08:c3:21:fa:16:1a:2f:31:29:b7:b6:
         63:23:27:d5:a4:c7:5f:5e:ea:48:e5:0c:67:4c:3f:9b:c5:2a:
         cc:ff:21:16:38:03:6c:ae:9e:72:96:47:14:c8:f5:21:d3:28:
         2d:bf:1a:46:68:ea:3a:30:6c:ac:93:24:34:bd:dc:8d:4e:db:
         28:9b:57:43:79:d3:1e:2a:6e:99:77:cb:b3:03:52:43:ae:ce:
         e2:91:52:60:77:7e:e5:2b:61:93:71:4c:17:bc:35:6d:1e:15:
         84:02:72:d3:8c:e8:9a:84:7a:93:f2:22:b1:94:b1:45:4c:f8:
         23:4c:fb:bd:eb:ca:88:d1:62:ed:2a:10:8d:45:e8:2a:15:e3:
         a4:b9:4a:7c:33:cb:05:d9:02:06:85:7b:12:7d:c9:f2:05:c5:
         fa:a5:f8:27:c6:65:e2:03:84:c5:be:00:5a:61:47:57:48:69:
         44:da:c8:dc:bc:59:62:48:b2:2f:42:53:2a:45:32:22:54:7a:
         f3:fe:c6:49:f2:cb:8d:43:8b:36:c2:3f:93:84:54:c6:91:96:
         99:25:47:8b:9f:e2:f5:85:c2:86:55:bf:e6:ef:9a:81:06:19:
         31:bb:56:0b:af:b8:e9:37:54:35:fb:e3:bc:ca:d9:e4:dd:91:
         c5:38:de:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ANnxtxWbWLVeUPgo+URLqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMTNhMjFiNGU4Y2UxNGNlN2Q2NjgwYzk5MGVjNmJhMjlh
MDI3YzIwHhcNMjYwNjEzMDkwMDU2WhcNMjYwNjE0MDkwMDU2WjAzMTEwLwYDVQQD
EyhhMzc2MzNhYmZjNmZlODZmNjQ0MDAzMTUwOGI3YTFkNmQ0NTQ4ODFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxs6LKBy++V/TmhyxG16hdRsqsd/
Qx4Ort5lyOGY5akCsyz/Z/PWxT4I/ksc4+XOOX3a8A1o9uLGYA8bXUiVB6sdBmvl
BEa/ZgPObjMBZZd6DoG/1Ix/ws2HPVbe6bKMFX3iyF5xeg4DtyjlBbVzQek5vGKF
3p69f7ymDLwZurrqm+MD9NV0XqRmZ1I1J1KUXsU2EOszcXNUXM/+YnSYDyETA0L+
EaxHd2rVBMe2ha9NXxVlEjzs1ZvlaQyPRRvwxvQ0y+bep/EFwHYAa1dlUJiO7nps
h1EsfFStULlnW+SIHZ5TwmCnmhMSKxeaCRK0FgnTN3yKTGVa9JqzOd5cZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKN2M6v8b+hvZEADFQi3odbUVIgfMB8GA1UdIwQY
MBaAFP8TohtOjOFM59ZoDJkOxropoCfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3hPaUcwNk00VXpuMW1nTW1RN0d1aW1nSjhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9kNmNmZTktYzMwMS00MDc5LTg2Yjkt
N2ZiYzRlNTc5N2ExLzEvX3hPaUcwNk00VXpuMW1nTW1RN0d1aW1nSjhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9kNmNmZTktYzMwMS00MDc5LTg2YjktN2ZiYzRlNTc5N2Ex
LzEvX3hPaUcwNk00VXpuMW1nTW1RN0d1aW1nSjhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsDiDohIi
cwjDIfoWGi8xKbe2YyMn1aTHX17qSOUMZ0w/m8UqzP8hFjgDbK6ecpZHFMj1IdMo
Lb8aRmjqOjBsrJMkNL3cjU7bKJtXQ3nTHipumXfLswNSQ67O4pFSYHd+5Sthk3FM
F7w1bR4VhAJy04zomoR6k/IisZSxRUz4I0z7vevKiNFi7SoQjUXoKhXjpLlKfDPL
BdkCBoV7En3J8gXF+qX4J8Zl4gOExb4AWmFHV0hpRNrI3LxZYkiyL0JTKkUyIlR6
8/7GSfLLjUOLNsI/k4RUxpGWmSVHi5/i9YXChlW/5u+agQYZMbtWC6+46TdUNfvj
vMrZ5N2RxTje+A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:33:12 2026 by rpki-client