Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft
File:                     _zFJJHOnjG_p9Tn5-n0iUlYKK34.mft (raw, json)
Hash identifier:          fv8Eygr0gQHeopEquYW5QO9BrSOGwUFtBKG9x3bBvK0=
Subject key identifier:   A1:E7:69:E5:FA:6E:58:7A:0A:E6:09:39:A0:37:B1:6D:4C:6E:82:16
Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
Certificate issuer:       /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Certificate serial:       019EBF5A9066747867498CCAFD818C8F96C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft
Manifest number:          1922
Signing time:             Sat 13 Jun 2026 05:00:43 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:43 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:43 +0000
Files and hashes:         1: EXzeT1cNVQGrjDsUzW2UlqVdii0.roa (hash: 2mlpTBow4YOyuDssqjl1WEJ92MzDwM1udN0xfPDqww0=)
                          2: KaSYpHw3cgGmrc-y_KSdFLRvQjg.roa (hash: ngPn6nZOVUPCBtCKw0ufmBalbahdWHN3HV67pN56iBs=)
                          3: Krcq7ZeGH2Lmub3dy5F_WRkHwYE.asa (hash: btWWldiqWlNfihUeJ1u/kiPDZiSycBx+qnGB18Pzzk0=)
                          4: OmEoVv1hXlPAq7CNGemEHtoyCq8.roa (hash: 6Oxl07RE77xSOspyGrQX/nCyx5aobEqs28whvRim2nM=)
                          5: S3iUaJCc_acwdYntYs5xpD57Hbs.roa (hash: tcMMYIuMQX8llmY4X5nBERI+tJvSh0Ywu4Hfd+8wVHo=)
                          6: XEuJUbSaH7V7TR9Hm3H838oW62M.roa (hash: 6F0LWMrDhYqS4VjPhiF+6R/mdAzINXaIxftWMKZVOpA=)
                          7: XSUEp2ewELHmYwH52rXsSNXdWOw.roa (hash: YFKsQwoEE2JksK5/us9CiKgJv/xGESxAM1454M2S6rE=)
                          8: Y4Ju69pl9WjiYV9lWp9audfApt8.roa (hash: Gl1GkwHB6Z8deSvqoRDw7UqcxI8zxJVnp+wWJEZz2jc=)
                          9: _bgOMIgl5YD22GLFhIayF5W0H98.roa (hash: YVz2Tfwx8C1mKqc7gEOvJyA8kHNkiPYcjmBTfZn3ppo=)
                          10: _zFJJHOnjG_p9Tn5-n0iUlYKK34.crl (hash: hlZoe/ZnNNiv2cIjVauq4BODNKTv+wmkgwWdGhd72qc=)
                          11: gdXy00VXftWIDW180JVG0J7ko64.roa (hash: Mqi2FwypjABIeq2Jh4oC6KTGiPlkVF54aa5+tKkk1yo=)
                          12: i447kXV0W4Fpt-iPvHlJibEh4qE.roa (hash: rFvI0GyPBU1XtWp0i4L0CFa9xuzoPkzXxFcU9z+mJ4g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:90:66:74:78:67:49:8c:ca:fd:81:8c:8f:96:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
        Validity
            Not Before: Jun 13 05:00:43 2026 GMT
            Not After : Jun 14 05:00:43 2026 GMT
        Subject: CN=a1e769e5fa6e587a0ae60939a037b16d4c6e8216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e0:08:4e:f9:7d:24:23:fe:42:26:1e:0b:bf:
                    e7:70:30:0d:aa:9a:59:23:92:78:4e:7b:fa:9e:d8:
                    5a:7d:71:0d:29:5f:2f:5f:3a:6c:94:5e:c9:00:a4:
                    c7:fe:5a:68:e0:e6:9a:4a:29:4e:21:7b:20:9d:7c:
                    f6:98:57:1a:1f:8f:b2:65:21:db:b0:10:92:fa:0d:
                    9f:88:93:46:17:36:90:7b:38:38:4d:74:34:4f:8f:
                    4e:4c:64:ef:9a:03:22:8b:ef:74:86:74:72:32:96:
                    a8:5b:98:6c:3d:dc:2b:6d:90:ab:79:34:72:97:15:
                    e0:09:e4:47:b1:56:ae:0b:e3:c8:53:60:9f:ea:81:
                    03:eb:35:53:c0:70:1b:33:be:67:6d:6b:f3:8f:90:
                    7a:90:5e:e9:66:e5:2f:80:0a:ff:ab:08:52:84:22:
                    0b:96:ed:4c:74:c1:d0:d1:09:9c:03:e1:9c:db:1d:
                    c1:82:76:e9:ae:5a:2f:01:1e:7c:c8:ea:e5:82:25:
                    ef:d8:91:45:4d:63:6e:bf:a4:33:32:23:e1:2b:5d:
                    c0:ed:70:4c:83:90:7f:55:da:76:fc:49:d6:6a:6a:
                    52:e7:16:7b:84:fa:15:aa:45:bb:9a:65:f2:72:18:
                    9a:23:5c:36:2d:b8:b1:f5:ed:0d:3e:76:49:ba:d9:
                    2f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E7:69:E5:FA:6E:58:7A:0A:E6:09:39:A0:37:B1:6D:4C:6E:82:16
            X509v3 Authority Key Identifier:
                keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:7b:71:28:8a:39:c3:bf:4c:9c:c5:09:ae:e5:14:54:55:5c:
         7a:40:fe:c0:63:d0:f5:07:b8:c8:0c:b9:49:f5:a6:73:83:69:
         80:55:e9:70:33:86:7e:af:94:be:7a:cc:b1:60:23:65:af:29:
         a2:c5:65:54:95:55:a0:aa:ed:8a:a0:61:6e:eb:0e:5d:d7:db:
         5f:42:9e:db:5c:26:cd:dc:32:8c:84:e6:63:3c:cb:39:b8:2b:
         68:b5:5b:b2:72:b5:e5:27:6c:f1:dc:04:82:e5:0d:32:ae:94:
         60:e4:36:aa:6a:1c:97:df:78:14:4a:75:52:38:b4:de:a7:5d:
         86:fd:5f:ad:b7:eb:ab:23:af:a0:1e:16:62:21:bf:fe:d2:a1:
         d1:3d:d2:a1:e6:c5:3e:02:e4:c7:ba:46:b7:aa:35:65:1d:e4:
         61:3e:37:6a:f1:12:3a:9c:7a:17:bc:45:22:4f:c3:8b:ac:ae:
         a8:0d:9d:e7:a2:ca:b4:b2:c9:63:df:7a:16:ff:c8:92:a9:32:
         f0:7d:2c:fb:fc:75:b1:a9:f4:bd:1a:ae:c1:50:e5:4a:ba:30:
         25:55:f7:ac:50:33:e8:89:07:c6:69:c4:9c:57:8f:6f:e6:5c:
         75:27:bf:36:ac:70:a6:82:bb:df:14:97:07:17:84:67:74:97:
         b9:c9:9b:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WpBmdHhnSYzK/YGMj5bBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMzE0OTI0NzNhNzhjNmZlOWY1MzlmOWZhN2QyMjUyNTYw
YTJiN2UwHhcNMjYwNjEzMDUwMDQzWhcNMjYwNjE0MDUwMDQzWjAzMTEwLwYDVQQD
EyhhMWU3NjllNWZhNmU1ODdhMGFlNjA5MzlhMDM3YjE2ZDRjNmU4MjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuAITvl9JCP+QiYeC7/ncDANqppZ
I5J4Tnv6nthafXENKV8vXzpslF7JAKTH/lpo4OaaSilOIXsgnXz2mFcaH4+yZSHb
sBCS+g2fiJNGFzaQezg4TXQ0T49OTGTvmgMii+90hnRyMpaoW5hsPdwrbZCreTRy
lxXgCeRHsVauC+PIU2Cf6oED6zVTwHAbM75nbWvzj5B6kF7pZuUvgAr/qwhShCIL
lu1MdMHQ0QmcA+Gc2x3BgnbprlovAR58yOrlgiXv2JFFTWNuv6QzMiPhK13A7XBM
g5B/Vdp2/EnWampS5xZ7hPoVqkW7mmXychiaI1w2Lbix9e0NPnZJutkvYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHnaeX6blh6CuYJOaA3sW1MboIWMB8GA1UdIwQY
MBaAFP8xSSRzp4xv6fU5+fp9IlJWCit+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDct
NzNmZDNiYzE5YWE3LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDctNzNmZDNiYzE5YWE3
LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbHtxKIo5
w79MnMUJruUUVFVcekD+wGPQ9Qe4yAy5SfWmc4NpgFXpcDOGfq+UvnrMsWAjZa8p
osVlVJVVoKrtiqBhbusOXdfbX0Ke21wmzdwyjITmYzzLObgraLVbsnK15Sds8dwE
guUNMq6UYOQ2qmocl994FEp1Uji03qddhv1frbfrqyOvoB4WYiG//tKh0T3SoebF
PgLkx7pGt6o1ZR3kYT43avESOpx6F7xFIk/Di6yuqA2d56LKtLLJY996Fv/Ikqky
8H0s+/x1san0vRquwVDlSrowJVX3rFAz6IkHxmnEnFePb+ZcdSe/NqxwpoK73xSX
BxeEZ3SXucmbzw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:54:38 2026 by rpki-client