Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft
File:                     97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft (raw, json)
Hash identifier:          mr0dK3fRMYFmLisBHnf0Sex+gbwNH956Mq+czchepkg=
Subject key identifier:   5D:D2:CF:14:BA:82:3E:4A:C5:20:A5:C8:56:B4:03:33:9E:F2:C4:0E
Authority key identifier: F7:B7:C2:E8:45:3E:D4:C0:92:9C:75:04:BA:F0:46:04:31:59:D1:05
Certificate issuer:       /CN=f7b7c2e8453ed4c0929c7504baf046043159d105
Certificate serial:       019EC06E1EF803921A1815B9CD9FC6D4795B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft
Manifest number:          18EC
Signing time:             Sat 13 Jun 2026 10:01:42 +0000
Manifest this update:     Sat 13 Jun 2026 10:01:42 +0000
Manifest next update:     Sun 14 Jun 2026 10:01:42 +0000
Files and hashes:         1: 97fC6EU-1MCSnHUEuvBGBDFZ0QU.crl (hash: Uek4PIfTdRLATrZJdSTtwBDedMH+uOc57nmgnL5AXBM=)
                          2: iEGrmEBr_XYHG10FFaz1pHlElzU.roa (hash: Cm2PlN0NZyKWye3mjv4O21ycHAo7BA8ZMRSr0N03Zos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6e:1e:f8:03:92:1a:18:15:b9:cd:9f:c6:d4:79:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7b7c2e8453ed4c0929c7504baf046043159d105
        Validity
            Not Before: Jun 13 10:01:42 2026 GMT
            Not After : Jun 14 10:01:42 2026 GMT
        Subject: CN=5dd2cf14ba823e4ac520a5c856b403339ef2c40e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:94:b1:10:7a:fb:c0:c2:f3:ce:07:31:14:ff:
                    24:a4:dc:5e:d9:63:d7:78:bf:ba:34:9e:fa:59:b8:
                    34:98:f7:60:89:eb:61:b0:20:1d:31:72:42:15:b4:
                    c0:30:28:02:34:a1:50:24:20:8e:78:f2:46:6c:50:
                    63:c6:8a:07:2b:88:30:43:4a:31:e9:27:02:90:71:
                    ac:e6:49:a4:da:c5:f7:3a:81:25:f7:c1:1b:db:13:
                    0f:96:17:9a:77:f6:bc:50:98:5e:7b:9c:74:60:93:
                    05:31:25:b7:09:0a:47:87:98:e9:33:8e:72:5c:18:
                    3e:27:bb:7b:68:51:ff:d1:c5:e6:09:7a:2e:bc:ac:
                    d4:e0:1e:9a:8a:92:d2:40:65:10:6f:dc:84:6d:8d:
                    c7:c0:dd:3c:cc:58:10:6c:81:da:25:78:a8:b2:0e:
                    40:6d:82:7f:64:00:1f:fd:a0:89:de:ea:44:70:d9:
                    12:fa:fe:d2:2f:51:26:c0:28:d4:99:68:0f:e1:d8:
                    fb:6b:8c:89:ce:49:8b:cb:ea:90:f1:bf:48:b8:8f:
                    ff:95:c9:7d:16:ae:37:2b:a7:e6:76:bc:df:2c:51:
                    9e:25:41:83:91:82:47:06:c6:cc:c1:ac:0f:07:29:
                    13:1f:3a:d2:14:84:d1:e2:60:12:b9:7d:95:fc:45:
                    43:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D2:CF:14:BA:82:3E:4A:C5:20:A5:C8:56:B4:03:33:9E:F2:C4:0E
            X509v3 Authority Key Identifier:
                keyid:F7:B7:C2:E8:45:3E:D4:C0:92:9C:75:04:BA:F0:46:04:31:59:D1:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:55:0d:e1:29:40:ed:5b:3c:c6:0d:0d:c9:57:0a:14:51:f7:
         76:57:99:9c:81:f6:0d:af:77:bb:ad:97:b2:af:5b:c4:1a:f9:
         fa:ae:10:0d:88:d4:bc:4c:a8:b8:76:94:ec:a7:81:29:3e:f5:
         ea:c2:b0:9f:9e:7a:19:ad:08:94:d7:b8:f2:cf:e9:9d:49:0a:
         ab:c8:1c:00:07:a4:7c:1a:17:44:0e:c8:88:f0:35:f8:5b:32:
         1a:cc:29:1d:f2:60:9a:36:e8:47:32:8a:f6:48:b7:bf:68:be:
         5e:73:cd:11:4e:84:ea:02:09:90:c6:17:24:54:aa:88:a4:6b:
         e4:e3:c6:69:68:21:c4:27:f9:bd:21:64:ff:da:14:1a:2d:45:
         15:a0:67:ce:00:04:33:31:d3:c9:fd:e2:29:a4:0f:36:55:5e:
         ce:57:2a:cc:f5:65:f7:16:f3:39:5a:17:74:9a:64:26:bf:4c:
         e6:b3:cc:6f:16:b1:65:84:56:a9:43:37:a3:bc:54:3b:e9:da:
         cd:6a:1f:c7:9e:3d:83:f2:bc:b8:aa:0e:f9:e5:ac:78:56:14:
         83:6b:7b:7b:e2:72:33:25:8b:f5:18:c6:32:4c:de:c0:74:87:
         e2:3a:84:31:52:87:b1:88:2a:1d:fe:9a:c9:84:7b:a2:e8:01:
         d1:36:f9:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Abh74A5IaGBW5zZ/G1HlbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YjdjMmU4NDUzZWQ0YzA5MjljNzUwNGJhZjA0NjA0MzE1
OWQxMDUwHhcNMjYwNjEzMTAwMTQyWhcNMjYwNjE0MTAwMTQyWjAzMTEwLwYDVQQD
Eyg1ZGQyY2YxNGJhODIzZTRhYzUyMGE1Yzg1NmI0MDMzMzllZjJjNDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJSxEHr7wMLzzgcxFP8kpNxe2WPX
eL+6NJ76Wbg0mPdgiethsCAdMXJCFbTAMCgCNKFQJCCOePJGbFBjxooHK4gwQ0ox
6ScCkHGs5kmk2sX3OoEl98Eb2xMPlhead/a8UJhee5x0YJMFMSW3CQpHh5jpM45y
XBg+J7t7aFH/0cXmCXouvKzU4B6aipLSQGUQb9yEbY3HwN08zFgQbIHaJXiosg5A
bYJ/ZAAf/aCJ3upEcNkS+v7SL1EmwCjUmWgP4dj7a4yJzkmLy+qQ8b9IuI//lcl9
Fq43K6fmdrzfLFGeJUGDkYJHBsbMwawPBykTHzrSFITR4mASuX2V/EVD9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF3SzxS6gj5KxSClyFa0AzOe8sQOMB8GA1UdIwQY
MBaAFPe3wuhFPtTAkpx1BLrwRgQxWdEFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTdmQzZFVS0xTUNTbkhVRXV2QkdCREZaMFFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82NjE2NzktYWMyNS00M2VlLTljYmYt
OGNmMjU0YjQ4Nzk0LzEvOTdmQzZFVS0xTUNTbkhVRXV2QkdCREZaMFFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC82NjE2NzktYWMyNS00M2VlLTljYmYtOGNmMjU0YjQ4Nzk0
LzEvOTdmQzZFVS0xTUNTbkhVRXV2QkdCREZaMFFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIVUN4SlA
7Vs8xg0NyVcKFFH3dleZnIH2Da93u62Xsq9bxBr5+q4QDYjUvEyouHaU7KeBKT71
6sKwn556Ga0IlNe48s/pnUkKq8gcAAekfBoXRA7IiPA1+FsyGswpHfJgmjboRzKK
9ki3v2i+XnPNEU6E6gIJkMYXJFSqiKRr5OPGaWghxCf5vSFk/9oUGi1FFaBnzgAE
MzHTyf3iKaQPNlVezlcqzPVl9xbzOVoXdJpkJr9M5rPMbxaxZYRWqUM3o7xUO+na
zWofx549g/K8uKoO+eWseFYUg2t7e+JyMyWL9RjGMkzewHSH4jqEMVKHsYgqHf6a
yYR7ougB0Tb5Tg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:04:17 2026 by rpki-client