Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
File:                     RFJjMnSx2IapJ1f2UhnC51RuzfU.mft (raw, json)
Hash identifier:          LY1UCK7ug5Ld9E76FqjmpFnspFOQd9H4uFisy4WAfNc=
Subject key identifier:   1C:1A:11:EA:8D:0D:F1:20:86:CA:88:CE:4A:C5:8D:36:5A:EA:20:10
Authority key identifier: 44:52:63:32:74:B1:D8:86:A9:27:57:F6:52:19:C2:E7:54:6E:CD:F5
Certificate issuer:       /CN=4452633274b1d886a92757f65219c2e7546ecdf5
Certificate serial:       019EC292882C46255D2159FE33AB733580A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
Manifest number:          18ED
Signing time:             Sat 13 Jun 2026 20:00:43 +0000
Manifest this update:     Sat 13 Jun 2026 20:00:43 +0000
Manifest next update:     Sun 14 Jun 2026 20:00:43 +0000
Files and hashes:         1: RFJjMnSx2IapJ1f2UhnC51RuzfU.crl (hash: u/c7rYPYc/cyiqScxik7wGAm3Ls9TO0nmDaijuuQo5A=)
                          2: eNko5h0Tp_p7b7ugEBiQkhXOA20.roa (hash: OK0LXbnfUa5IYm60HKsaC15u0Y3K/9dXchk7SJSUYf0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:88:2c:46:25:5d:21:59:fe:33:ab:73:35:80:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4452633274b1d886a92757f65219c2e7546ecdf5
        Validity
            Not Before: Jun 13 20:00:43 2026 GMT
            Not After : Jun 14 20:00:43 2026 GMT
        Subject: CN=1c1a11ea8d0df12086ca88ce4ac58d365aea2010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6a:d6:36:af:80:97:1b:e7:80:0d:9a:05:a5:
                    d1:46:02:55:37:7b:67:49:3e:e2:be:ee:8f:04:ba:
                    80:f0:9e:42:61:1c:94:19:ad:b4:e9:34:d6:fe:c7:
                    cb:a2:a1:53:b9:1b:6f:2b:e4:f9:ce:40:59:ef:89:
                    3e:1b:55:a4:87:dc:a2:a0:7f:35:96:3d:46:9d:91:
                    32:ed:70:1e:51:4f:29:49:dd:73:ec:f7:c2:a1:34:
                    23:ab:c5:65:e4:7a:e2:b5:bf:d3:8e:5b:9d:c9:e1:
                    b9:ea:fa:6e:37:3e:e3:f9:9e:85:df:b3:3d:59:13:
                    e2:59:a8:a6:49:36:3f:6b:ee:66:47:49:b0:9b:32:
                    fc:f3:d7:29:cd:95:44:4f:ee:98:6e:dc:bf:dd:d4:
                    fb:94:63:9b:e6:37:f0:00:78:41:95:02:94:91:fc:
                    1f:53:fa:53:9f:c7:95:cc:21:d4:d7:8b:fd:59:9b:
                    cb:2e:e1:37:c6:3d:35:e0:62:6b:75:e8:8f:84:c0:
                    29:09:ca:96:1a:f5:a9:fc:35:f7:26:a6:0b:c0:b6:
                    57:d8:c7:7b:37:bc:1f:8b:57:f3:e9:0e:96:02:27:
                    92:b9:26:06:56:bf:e4:13:4b:71:5c:b7:a5:8f:dd:
                    af:8a:42:57:a0:45:48:c7:c3:cb:60:88:fb:7b:7e:
                    06:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:1A:11:EA:8D:0D:F1:20:86:CA:88:CE:4A:C5:8D:36:5A:EA:20:10
            X509v3 Authority Key Identifier:
                keyid:44:52:63:32:74:B1:D8:86:A9:27:57:F6:52:19:C2:E7:54:6E:CD:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:a5:f7:df:de:c3:fc:9d:d6:c6:ec:5d:0c:35:8b:14:fb:63:
         aa:0d:11:7e:b8:64:5f:d7:f2:91:05:b9:e4:ef:67:5c:18:b2:
         24:8b:a0:98:0a:bc:c5:e3:da:4d:ac:0e:23:7a:06:4a:f3:64:
         3d:56:e3:7a:46:da:aa:b4:5e:ff:fb:2a:01:c6:00:1e:de:6c:
         55:7f:77:42:06:a9:24:cd:1c:e3:55:b8:5f:20:37:ee:91:8e:
         0c:05:c8:ed:bd:04:9a:98:6c:b2:eb:43:d8:7b:9e:d4:d1:73:
         50:84:8f:3d:80:89:ff:a6:13:20:ad:25:af:68:6d:86:bd:20:
         35:73:51:e4:fa:f6:14:f1:43:73:de:07:ef:60:69:e4:43:9d:
         eb:73:33:63:16:e8:2a:a0:68:37:98:14:3e:27:b3:e7:c9:6a:
         e2:4a:a3:8f:50:54:77:d6:2a:64:87:d0:b7:1b:c5:4e:ea:64:
         5e:d5:3d:62:75:68:03:93:d0:ab:eb:18:19:ab:67:44:37:99:
         eb:f5:8f:15:ba:e5:e4:85:fa:e2:7f:a4:ed:58:da:bf:2f:d2:
         39:b8:de:c8:dc:48:bc:2f:05:d4:20:96:b2:0d:8f:5e:07:64:
         fc:52:d0:a6:16:26:3b:95:5a:3e:35:17:5c:ef:09:52:20:e2:
         d8:e8:77:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CkogsRiVdIVn+M6tzNYCnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTI2MzMyNzRiMWQ4ODZhOTI3NTdmNjUyMTljMmU3NTQ2
ZWNkZjUwHhcNMjYwNjEzMjAwMDQzWhcNMjYwNjE0MjAwMDQzWjAzMTEwLwYDVQQD
EygxYzFhMTFlYThkMGRmMTIwODZjYTg4Y2U0YWM1OGQzNjVhZWEyMDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWrWNq+AlxvngA2aBaXRRgJVN3tn
ST7ivu6PBLqA8J5CYRyUGa206TTW/sfLoqFTuRtvK+T5zkBZ74k+G1Wkh9yioH81
lj1GnZEy7XAeUU8pSd1z7PfCoTQjq8Vl5Hritb/TjludyeG56vpuNz7j+Z6F37M9
WRPiWaimSTY/a+5mR0mwmzL889cpzZVET+6Ybty/3dT7lGOb5jfwAHhBlQKUkfwf
U/pTn8eVzCHU14v9WZvLLuE3xj014GJrdeiPhMApCcqWGvWp/DX3JqYLwLZX2Md7
N7wfi1fz6Q6WAieSuSYGVr/kE0txXLelj92vikJXoEVIx8PLYIj7e34GEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwaEeqNDfEghsqIzkrFjTZa6iAQMB8GA1UdIwQY
MBaAFERSYzJ0sdiGqSdX9lIZwudUbs31MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZKak1uU3gySWFwSjFmMlVobkM1MVJ1emZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84ZTQ1MTgtMGRkMC00Y2JiLWJhNzgt
YmI4NmQ0YmEwMmRlLzEvUkZKak1uU3gySWFwSjFmMlVobkM1MVJ1emZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC84ZTQ1MTgtMGRkMC00Y2JiLWJhNzgtYmI4NmQ0YmEwMmRl
LzEvUkZKak1uU3gySWFwSjFmMlVobkM1MVJ1emZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABqX3397D
/J3WxuxdDDWLFPtjqg0RfrhkX9fykQW55O9nXBiyJIugmAq8xePaTawOI3oGSvNk
PVbjekbaqrRe//sqAcYAHt5sVX93QgapJM0c41W4XyA37pGODAXI7b0EmphssutD
2Hue1NFzUISPPYCJ/6YTIK0lr2hthr0gNXNR5Pr2FPFDc94H72Bp5EOd63MzYxbo
KqBoN5gUPiez58lq4kqjj1BUd9YqZIfQtxvFTupkXtU9YnVoA5PQq+sYGatnRDeZ
6/WPFbrl5IX64n+k7Vjavy/SObjeyNxIvC8F1CCWsg2PXgdk/FLQphYmO5VaPjUX
XO8JUiDi2Oh3xA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:29:59 2026 by rpki-client