Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
File:                     E3WqXjfEL33rfzsOlnC_WaKsprU.mft (raw, json)
Hash identifier:          1KIb/q3soICQUPU+PgXGvbBAm6IzYpcInBPoGlingdI=
Subject key identifier:   BA:EC:5F:51:CF:DA:15:5E:58:1C:38:51:3D:4C:49:56:59:33:D0:7A
Authority key identifier: 13:75:AA:5E:37:C4:2F:7D:EB:7F:3B:0E:96:70:BF:59:A2:AC:A6:B5
Certificate issuer:       /CN=1375aa5e37c42f7deb7f3b0e9670bf59a2aca6b5
Certificate serial:       019ED42BAC74B0CB7D3EF6BAEE5C2578C5F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
Manifest number:          0835
Signing time:             Wed 17 Jun 2026 06:01:32 +0000
Manifest this update:     Wed 17 Jun 2026 06:01:32 +0000
Manifest next update:     Thu 18 Jun 2026 06:01:32 +0000
Files and hashes:         1: E0bPvqxVf13qVW0K3FOh43rFeAA.roa (hash: L83gXrZ7ml1x6pbEKqasf9zLxkSub+uRzDvUjH/MeVU=)
                          2: E3WqXjfEL33rfzsOlnC_WaKsprU.crl (hash: 6wt5aOPoBWFRE+TiOUcUWkiz0vkSu5Gp8j82fOBZ+Ps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:2b:ac:74:b0:cb:7d:3e:f6:ba:ee:5c:25:78:c5:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1375aa5e37c42f7deb7f3b0e9670bf59a2aca6b5
        Validity
            Not Before: Jun 17 06:01:32 2026 GMT
            Not After : Jun 18 06:01:32 2026 GMT
        Subject: CN=baec5f51cfda155e581c38513d4c49565933d07a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7c:fd:9f:ba:af:5f:7d:d6:d3:02:c9:50:a3:
                    c3:6e:03:86:52:bc:92:ba:e7:b7:c2:af:21:2a:9e:
                    63:54:90:cf:ca:d1:87:83:31:72:29:fa:59:72:68:
                    23:ca:b6:eb:0c:cc:11:c6:5e:7e:09:fb:86:16:b9:
                    8b:8f:62:22:48:29:37:dd:84:ce:67:08:3d:da:1e:
                    30:71:72:89:a9:69:3a:83:fc:51:c9:4e:67:79:f3:
                    5f:4b:35:57:75:7b:92:7e:c3:30:64:f2:fd:d2:21:
                    df:58:78:54:df:30:07:5b:07:a9:69:29:9c:53:b7:
                    91:8a:de:54:90:30:41:a5:b4:71:e1:f6:36:df:d6:
                    27:39:b3:cc:f5:2d:9c:5d:bf:86:d1:da:0e:c5:32:
                    0a:1b:ef:74:29:58:89:85:e2:49:28:c7:cc:d3:b1:
                    a3:b8:ef:ce:e3:c1:e4:89:2a:a6:74:44:22:e2:74:
                    4d:86:71:e7:67:be:3e:01:c7:f1:8a:bc:74:d5:e0:
                    c3:c9:23:b1:6a:f5:8b:11:04:00:ad:0b:9a:2b:fd:
                    cf:94:92:b0:cf:10:23:b7:de:e6:43:64:86:ce:a8:
                    77:88:74:6e:ca:61:94:0d:8e:4a:0e:82:77:c3:5e:
                    ba:31:65:70:e8:c9:c9:ad:66:9a:df:d9:52:66:81:
                    f7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:EC:5F:51:CF:DA:15:5E:58:1C:38:51:3D:4C:49:56:59:33:D0:7A
            X509v3 Authority Key Identifier:
                keyid:13:75:AA:5E:37:C4:2F:7D:EB:7F:3B:0E:96:70:BF:59:A2:AC:A6:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:73:f5:5e:3a:3a:58:6b:2f:5c:eb:43:0c:71:33:e4:cd:34:
         5e:97:97:97:55:a1:fe:23:57:dd:ee:51:7f:af:46:23:d9:1f:
         18:86:8d:ef:67:16:5c:20:24:7e:5e:7d:4a:34:41:ff:fb:b0:
         22:14:d1:c6:6f:27:30:08:c9:94:e4:56:e2:00:93:a8:8f:f1:
         4c:08:f1:35:d2:56:7b:6f:cd:22:25:8c:11:fd:4f:31:ac:69:
         d9:53:e1:c2:00:2e:4e:64:35:0d:4d:8a:a4:77:84:71:c4:23:
         d0:45:ef:2e:4d:9c:a4:52:cd:79:df:ed:b8:26:89:a2:9f:94:
         57:75:58:95:5d:f3:80:1f:e8:a1:26:c8:b3:33:65:18:9c:39:
         2a:8d:22:e0:54:a2:3c:76:73:98:3b:f7:6b:fe:32:c7:5e:de:
         eb:5c:6d:32:39:7e:d1:8c:d9:11:15:d9:6b:f1:e1:0c:b5:15:
         86:05:3a:d6:75:01:6b:a3:fc:38:33:17:d8:f8:35:b7:1f:07:
         38:5e:20:5f:e3:e8:0b:17:70:56:fe:ff:6a:12:e2:04:df:65:
         80:68:9f:d4:f6:b2:08:77:9e:e4:5c:40:0f:78:e9:b2:f0:1a:
         f9:be:2f:6a:f8:52:97:88:d7:9f:d3:67:12:2b:36:5f:7e:56:
         9f:45:5d:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7UK6x0sMt9Pva67lwleMX0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNzVhYTVlMzdjNDJmN2RlYjdmM2IwZTk2NzBiZjU5YTJh
Y2E2YjUwHhcNMjYwNjE3MDYwMTMyWhcNMjYwNjE4MDYwMTMyWjAzMTEwLwYDVQQD
EyhiYWVjNWY1MWNmZGExNTVlNTgxYzM4NTEzZDRjNDk1NjU5MzNkMDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHz9n7qvX33W0wLJUKPDbgOGUryS
uue3wq8hKp5jVJDPytGHgzFyKfpZcmgjyrbrDMwRxl5+CfuGFrmLj2IiSCk33YTO
Zwg92h4wcXKJqWk6g/xRyU5nefNfSzVXdXuSfsMwZPL90iHfWHhU3zAHWwepaSmc
U7eRit5UkDBBpbRx4fY239YnObPM9S2cXb+G0doOxTIKG+90KViJheJJKMfM07Gj
uO/O48HkiSqmdEQi4nRNhnHnZ74+Acfxirx01eDDySOxavWLEQQArQuaK/3PlJKw
zxAjt97mQ2SGzqh3iHRuymGUDY5KDoJ3w166MWVw6MnJrWaa39lSZoH3ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrsX1HP2hVeWBw4UT1MSVZZM9B6MB8GA1UdIwQY
MBaAFBN1ql43xC996387DpZwv1mirKa1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTNXcVhqZkVMMzNyZnpzT2xuQ19XYUtzcHJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZTk3ZGQtZTcyMS00MTkyLWI4YjQt
ZDRiNzI1ZDA2NzZjLzEvRTNXcVhqZkVMMzNyZnpzT2xuQ19XYUtzcHJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kZTk3ZGQtZTcyMS00MTkyLWI4YjQtZDRiNzI1ZDA2NzZj
LzEvRTNXcVhqZkVMMzNyZnpzT2xuQ19XYUtzcHJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADHP1Xjo6
WGsvXOtDDHEz5M00XpeXl1Wh/iNX3e5Rf69GI9kfGIaN72cWXCAkfl59SjRB//uw
IhTRxm8nMAjJlORW4gCTqI/xTAjxNdJWe2/NIiWMEf1PMaxp2VPhwgAuTmQ1DU2K
pHeEccQj0EXvLk2cpFLNed/tuCaJop+UV3VYlV3zgB/ooSbIszNlGJw5Ko0i4FSi
PHZzmDv3a/4yx17e61xtMjl+0YzZERXZa/HhDLUVhgU61nUBa6P8ODMX2Pg1tx8H
OF4gX+PoCxdwVv7/ahLiBN9lgGif1PayCHee5FxAD3jpsvAa+b4vavhSl4jXn9Nn
Eis2X35Wn0Vdxg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:25:52 2026 by rpki-client