Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
File:                     cOKzQXw5wP47u7xNUj7UN7KcWhw.mft (raw, json)
Hash identifier:          QQm0y8N77nBwDaTWI3STRXEk/7oqRJSRYH4tcGYwS6Q=
Subject key identifier:   DC:0B:52:70:F3:15:A5:6F:4E:4E:1B:1B:A5:44:55:5B:FE:5E:7A:F6
Authority key identifier: 70:E2:B3:41:7C:39:C0:FE:3B:BB:BC:4D:52:3E:D4:37:B2:9C:5A:1C
Certificate issuer:       /CN=70e2b3417c39c0fe3bbbbc4d523ed437b29c5a1c
Certificate serial:       019EBFFEE60A98906BAEA16D35CF17E28ADF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
Manifest number:          18EC
Signing time:             Sat 13 Jun 2026 08:00:13 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:13 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:13 +0000
Files and hashes:         1: 4zn72bRe20a9LWBauf9Jwg2zBPE.roa (hash: wXzhbicfsNgTz8LgBL2cOtIn+bE67CUdF+iypRz7TNw=)
                          2: cOKzQXw5wP47u7xNUj7UN7KcWhw.crl (hash: qB6M1QsapuxAX10tshAgosTXq/mvIxwLhRKkdpmrucA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:fe:e6:0a:98:90:6b:ae:a1:6d:35:cf:17:e2:8a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70e2b3417c39c0fe3bbbbc4d523ed437b29c5a1c
        Validity
            Not Before: Jun 13 08:00:13 2026 GMT
            Not After : Jun 14 08:00:13 2026 GMT
        Subject: CN=dc0b5270f315a56f4e4e1b1ba544555bfe5e7af6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1a:06:b9:ff:fc:0c:e9:5b:59:0c:0c:8f:3d:
                    84:f2:7a:27:de:e9:31:60:65:d9:2c:82:23:c3:8c:
                    06:77:9d:01:95:07:4d:f7:3b:62:13:71:f7:a2:bf:
                    ff:e8:4c:e3:ea:a7:f3:42:57:6a:7b:09:61:6f:7f:
                    d1:f0:d2:8b:7a:28:d2:db:c1:80:7d:f8:61:e8:a3:
                    ee:f3:cc:20:5b:6d:bc:31:92:78:2f:88:7a:21:1b:
                    5f:db:4b:77:a2:07:af:70:a6:2c:af:ab:1c:e0:15:
                    9a:49:02:e4:1a:d8:13:40:e8:a6:8a:9e:d5:89:2e:
                    ee:fe:f3:9c:7a:67:77:e4:91:32:ae:ef:50:2d:eb:
                    e1:10:7f:22:2f:38:c8:b8:30:fd:33:8a:ef:74:20:
                    74:85:54:81:7e:58:91:a6:92:29:5e:f7:24:bb:08:
                    67:6a:57:8d:5b:80:00:c0:c5:96:b9:89:9b:95:07:
                    4f:73:25:ba:d8:a3:e9:98:54:88:8d:93:07:d6:7e:
                    f3:04:48:ba:8d:22:09:db:d1:f5:b0:26:43:7b:58:
                    00:8a:02:d8:1f:7c:44:b5:ad:21:72:c4:88:f9:c4:
                    a2:15:67:85:ab:f5:b4:db:ff:06:5c:9d:f9:4d:f6:
                    90:0f:fa:b6:f7:1e:f1:44:e3:0d:70:a0:36:78:b3:
                    81:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:0B:52:70:F3:15:A5:6F:4E:4E:1B:1B:A5:44:55:5B:FE:5E:7A:F6
            X509v3 Authority Key Identifier:
                keyid:70:E2:B3:41:7C:39:C0:FE:3B:BB:BC:4D:52:3E:D4:37:B2:9C:5A:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:26:cf:18:9e:2d:76:6b:a1:62:eb:80:49:99:be:cd:aa:60:
         02:dc:fb:e3:a2:21:d4:5d:06:dc:0d:50:54:9d:94:0c:62:8f:
         1a:d9:10:60:b5:ec:f3:84:e5:41:17:fe:ac:93:84:e9:64:05:
         37:76:1c:31:be:d6:66:f9:ad:2d:fc:06:67:be:60:8c:37:b1:
         56:9e:50:1a:8a:db:e1:d4:00:b9:c4:c8:f3:67:4f:f3:b6:f7:
         a2:31:a8:0c:8d:7d:f6:a3:19:10:ac:37:82:95:7b:78:67:ca:
         8c:32:26:c5:16:6c:83:2d:22:0f:9b:0f:67:5d:b7:7f:56:a3:
         dc:0c:19:d9:bb:44:01:54:3d:7f:70:3e:04:ae:28:0d:4e:90:
         ed:0c:5d:5b:82:8b:29:69:01:1f:56:5c:9f:00:b7:7d:48:5a:
         89:7a:05:b6:29:f9:34:60:6c:14:49:02:b9:30:44:3f:04:f2:
         a5:8a:33:93:87:d0:78:71:d3:17:c1:0a:e2:23:f2:0f:c7:e4:
         b1:b7:05:ea:b5:be:5c:e7:f6:49:29:71:24:e7:23:69:ef:be:
         68:7f:50:f5:4d:e0:1e:e4:d7:c8:03:0b:fa:cc:08:dc:ee:fc:
         ac:fa:00:f4:ab:0e:46:e8:58:2b:89:25:2e:90:f0:2d:96:43:
         aa:ee:85:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6//uYKmJBrrqFtNc8X4orfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZTJiMzQxN2MzOWMwZmUzYmJiYmM0ZDUyM2VkNDM3YjI5
YzVhMWMwHhcNMjYwNjEzMDgwMDEzWhcNMjYwNjE0MDgwMDEzWjAzMTEwLwYDVQQD
EyhkYzBiNTI3MGYzMTVhNTZmNGU0ZTFiMWJhNTQ0NTU1YmZlNWU3YWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRoGuf/8DOlbWQwMjz2E8non3ukx
YGXZLIIjw4wGd50BlQdN9ztiE3H3or//6Ezj6qfzQldqewlhb3/R8NKLeijS28GA
ffhh6KPu88wgW228MZJ4L4h6IRtf20t3ogevcKYsr6sc4BWaSQLkGtgTQOimip7V
iS7u/vOcemd35JEyru9QLevhEH8iLzjIuDD9M4rvdCB0hVSBfliRppIpXvckuwhn
aleNW4AAwMWWuYmblQdPcyW62KPpmFSIjZMH1n7zBEi6jSIJ29H1sCZDe1gAigLY
H3xEta0hcsSI+cSiFWeFq/W02/8GXJ35TfaQD/q29x7xROMNcKA2eLOBzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNwLUnDzFaVvTk4bG6VEVVv+Xnr2MB8GA1UdIwQY
MBaAFHDis0F8OcD+O7u8TVI+1DeynFocMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY09LelFYdzV3UDQ3dTd4TlVqN1VON0tjV2h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC84NzYwYWQtNjJjOS00ODNmLWJkMmYt
ZGMzYjYzMmU5ZTJiLzEvY09LelFYdzV3UDQ3dTd4TlVqN1VON0tjV2h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC84NzYwYWQtNjJjOS00ODNmLWJkMmYtZGMzYjYzMmU5ZTJi
LzEvY09LelFYdzV3UDQ3dTd4TlVqN1VON0tjV2h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAybPGJ4t
dmuhYuuASZm+zapgAtz746Ih1F0G3A1QVJ2UDGKPGtkQYLXs84TlQRf+rJOE6WQF
N3YcMb7WZvmtLfwGZ75gjDexVp5QGorb4dQAucTI82dP87b3ojGoDI199qMZEKw3
gpV7eGfKjDImxRZsgy0iD5sPZ123f1aj3AwZ2btEAVQ9f3A+BK4oDU6Q7QxdW4KL
KWkBH1ZcnwC3fUhaiXoFtin5NGBsFEkCuTBEPwTypYozk4fQeHHTF8EK4iPyD8fk
sbcF6rW+XOf2SSlxJOcjae++aH9Q9U3gHuTXyAML+swI3O78rPoA9KsORuhYK4kl
LpDwLZZDqu6FzQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:51:50 2026 by rpki-client