Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
File:                     I15QLDFNUQT3xgzNaXicuEj_Xgc.mft (raw, json)
Hash identifier:          IUiyJRv/mHkoU3+q4N+Kr7lwnUa8d6b4hqBp5mjXtEI=
Subject key identifier:   18:03:4A:2C:0C:E4:F8:DC:5B:80:64:C4:5D:9F:54:88:AA:31:D0:D4
Authority key identifier: 23:5E:50:2C:31:4D:51:04:F7:C6:0C:CD:69:78:9C:B8:48:FF:5E:07
Certificate issuer:       /CN=235e502c314d5104f7c60ccd69789cb848ff5e07
Certificate serial:       019EC336EBB4FCF1B1CE6B9857DB8CE27C56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
Manifest number:          0482
Signing time:             Sat 13 Jun 2026 23:00:16 +0000
Manifest this update:     Sat 13 Jun 2026 23:00:16 +0000
Manifest next update:     Sun 14 Jun 2026 23:00:16 +0000
Files and hashes:         1: 1-D7_xDdnahTC7f8t337Uhdz6OlA.roa (hash: qFFDJacVShPrpqulz/bsVIAV83KJDAIcTEvSBVtbIe4=)
                          2: I15QLDFNUQT3xgzNaXicuEj_Xgc.crl (hash: HCsrghALMwoSY3HbnjFnPiVlt1n24xUF/0I7ZCG8muM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:36:eb:b4:fc:f1:b1:ce:6b:98:57:db:8c:e2:7c:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=235e502c314d5104f7c60ccd69789cb848ff5e07
        Validity
            Not Before: Jun 13 23:00:16 2026 GMT
            Not After : Jun 14 23:00:16 2026 GMT
        Subject: CN=18034a2c0ce4f8dc5b8064c45d9f5488aa31d0d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a1:b4:0e:d3:5f:16:e9:3d:75:b6:de:eb:fc:
                    df:22:98:ba:28:eb:a7:30:b5:ec:d1:cf:cd:5e:aa:
                    b8:5d:12:c7:11:cd:e9:d2:8f:73:d5:7b:24:c1:24:
                    86:a0:79:a5:19:99:39:8d:ba:76:92:02:d1:5b:b8:
                    c3:b3:80:62:3a:9d:88:7c:46:f9:b4:e9:cf:c6:db:
                    6e:87:8a:34:ec:f5:58:e5:dc:3c:27:ac:b0:89:7d:
                    2f:d5:3a:76:41:f7:de:53:1b:88:f1:01:7f:e7:2d:
                    57:68:21:f6:f0:cc:33:b1:33:2e:e4:43:c4:c8:66:
                    b6:21:67:e2:b4:29:13:b5:8a:77:e7:4f:ef:a2:fc:
                    09:7b:7e:53:ad:32:1a:85:03:63:28:b4:a6:13:f8:
                    87:2d:0b:50:5a:b9:89:a8:06:2d:5c:e9:88:48:02:
                    13:2d:a9:5d:56:cc:77:d2:3c:66:b2:9f:79:fe:8c:
                    bf:46:db:8c:6a:db:97:22:5c:64:f3:09:c5:b2:cf:
                    f8:3a:ef:40:77:c8:90:32:7e:da:0e:b3:60:c8:7d:
                    90:7b:4b:d2:ca:cc:91:38:74:ad:71:3e:ab:8b:9f:
                    69:55:d8:60:a4:c2:55:e3:6a:29:39:10:2b:5f:ee:
                    0f:a8:2e:fe:46:0d:e8:ae:05:08:61:ba:1d:a4:50:
                    3e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:03:4A:2C:0C:E4:F8:DC:5B:80:64:C4:5D:9F:54:88:AA:31:D0:D4
            X509v3 Authority Key Identifier:
                keyid:23:5E:50:2C:31:4D:51:04:F7:C6:0C:CD:69:78:9C:B8:48:FF:5E:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:42:3a:a2:98:3f:a2:cf:35:59:78:6a:52:54:27:ff:fe:77:
         10:00:98:b2:64:ff:a6:75:c6:1c:ef:fb:8a:bd:11:25:0d:1f:
         56:1a:9b:e7:71:3e:76:19:4b:78:cd:e1:53:f7:5d:e8:67:f8:
         33:97:a4:00:1d:f0:30:b4:b5:79:bb:fd:e0:a0:ee:51:7c:9c:
         a2:bc:29:d8:6d:a8:33:fe:c6:a4:16:b9:1a:8f:fe:03:ab:4e:
         08:f7:90:5b:96:20:bc:9c:f6:68:7b:97:b0:86:42:a4:f4:47:
         2f:d4:cc:8a:a7:c9:93:b0:9d:69:dd:d7:fd:77:cc:78:b9:fb:
         b1:8a:29:83:94:e0:78:ed:35:8a:92:08:17:b6:2a:04:4b:d6:
         34:bd:27:29:20:d8:73:e2:a4:a1:62:ea:50:aa:05:b5:c1:e7:
         bd:1a:c4:02:9a:3e:02:12:eb:96:a4:af:c7:27:77:55:8e:02:
         de:1f:11:b0:d6:73:d4:f6:82:f6:6e:d5:41:5e:80:86:ca:43:
         db:97:42:f0:f3:2b:cb:4c:c1:33:59:2d:55:a3:d6:f5:30:e9:
         75:45:63:c5:a7:60:46:54:0c:81:0f:71:cc:64:f1:bf:9e:36:
         25:03:9a:fe:22:27:3d:7a:66:3a:e9:1e:0c:51:9d:f4:78:01:
         9d:b0:f5:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DNuu0/PGxzmuYV9uM4nxWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNWU1MDJjMzE0ZDUxMDRmN2M2MGNjZDY5Nzg5Y2I4NDhm
ZjVlMDcwHhcNMjYwNjEzMjMwMDE2WhcNMjYwNjE0MjMwMDE2WjAzMTEwLwYDVQQD
EygxODAzNGEyYzBjZTRmOGRjNWI4MDY0YzQ1ZDlmNTQ4OGFhMzFkMGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KG0DtNfFuk9dbbe6/zfIpi6KOun
MLXs0c/NXqq4XRLHEc3p0o9z1XskwSSGoHmlGZk5jbp2kgLRW7jDs4BiOp2IfEb5
tOnPxttuh4o07PVY5dw8J6ywiX0v1Tp2QffeUxuI8QF/5y1XaCH28MwzsTMu5EPE
yGa2IWfitCkTtYp350/vovwJe35TrTIahQNjKLSmE/iHLQtQWrmJqAYtXOmISAIT
LaldVsx30jxmsp95/oy/RtuMatuXIlxk8wnFss/4Ou9Ad8iQMn7aDrNgyH2Qe0vS
ysyROHStcT6ri59pVdhgpMJV42opORArX+4PqC7+Rg3orgUIYbodpFA+EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgDSiwM5PjcW4BkxF2fVIiqMdDUMB8GA1UdIwQY
MBaAFCNeUCwxTVEE98YMzWl4nLhI/14HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTE1UUxERk5VUVQzeGd6TmFYaWN1RWpfWGdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mYTI0NWYtZGM3NC00OTc0LTgyZTAt
YTU2ZTY3ODQ4ZjExLzEvSTE1UUxERk5VUVQzeGd6TmFYaWN1RWpfWGdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9mYTI0NWYtZGM3NC00OTc0LTgyZTAtYTU2ZTY3ODQ4ZjEx
LzEvSTE1UUxERk5VUVQzeGd6TmFYaWN1RWpfWGdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH0I6opg/
os81WXhqUlQn//53EACYsmT/pnXGHO/7ir0RJQ0fVhqb53E+dhlLeM3hU/dd6Gf4
M5ekAB3wMLS1ebv94KDuUXycorwp2G2oM/7GpBa5Go/+A6tOCPeQW5YgvJz2aHuX
sIZCpPRHL9TMiqfJk7Cdad3X/XfMeLn7sYopg5TgeO01ipIIF7YqBEvWNL0nKSDY
c+KkoWLqUKoFtcHnvRrEApo+AhLrlqSvxyd3VY4C3h8RsNZz1PaC9m7VQV6AhspD
25dC8PMry0zBM1ktVaPW9TDpdUVjxadgRlQMgQ9xzGTxv542JQOa/iInPXpmOuke
DFGd9HgBnbD1gg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:52:12 2026 by rpki-client