Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
File:                     gXyxTOQBSsMmnXDu6onIcFWxdvE.mft (raw, json)
Hash identifier:          dE5UMUlnFtFnmBV3C8kG4bYSqH+rKnfx1e4WOPxyiHA=
Subject key identifier:   A9:5A:73:4C:5F:0E:97:B1:1C:3A:23:21:A7:55:4A:61:F2:43:CB:E2
Authority key identifier: 81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1
Certificate issuer:       /CN=817cb14ce4014ac3269d70eeea89c87055b176f1
Certificate serial:       019EC1B6CBCB26955DC242A9B0D11E3A0D4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
Manifest number:          0A39
Signing time:             Sat 13 Jun 2026 16:00:42 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:42 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:42 +0000
Files and hashes:         1: gXyxTOQBSsMmnXDu6onIcFWxdvE.crl (hash: 4P0NA8Ewk16sD5uaooIMuodySt8xItehChkODr33oLE=)
                          2: qdUh2hSoqgeqIRg-X_UezX9LadQ.roa (hash: T5mdwLAzJSWrOE2roB/OPAtD4ZvRlYtzJ6Bor5XITOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b6:cb:cb:26:95:5d:c2:42:a9:b0:d1:1e:3a:0d:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=817cb14ce4014ac3269d70eeea89c87055b176f1
        Validity
            Not Before: Jun 13 16:00:42 2026 GMT
            Not After : Jun 14 16:00:42 2026 GMT
        Subject: CN=a95a734c5f0e97b11c3a2321a7554a61f243cbe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e6:02:61:c9:4c:f7:6c:fb:94:04:ea:e0:b3:
                    40:65:f4:64:d4:c9:f1:18:0d:3a:ab:6a:9d:1d:d5:
                    93:4c:d9:48:3e:11:de:44:c9:7d:85:88:e3:20:ec:
                    a3:db:8f:41:c2:d9:07:92:13:99:36:75:27:b8:8c:
                    1b:c2:f7:de:b0:88:d0:a6:48:f7:15:88:45:02:f4:
                    00:98:9a:a2:dc:76:a0:26:22:3a:f4:c3:27:34:c4:
                    e3:0e:66:b9:66:eb:0d:bf:82:85:f3:4d:10:ad:50:
                    7b:79:c3:c7:47:08:b4:a4:42:8a:e2:b6:04:ad:6f:
                    c9:94:90:20:41:31:e3:c7:1d:7b:68:3a:21:22:18:
                    53:ea:d4:9c:ca:9f:16:b3:2b:f1:96:3b:7e:e7:9b:
                    6a:06:b3:81:66:96:9f:46:1c:50:1f:1d:87:1d:5a:
                    4b:07:02:1a:bd:f2:e7:c4:70:8f:1b:4e:9d:f1:87:
                    41:58:57:0f:e4:c9:9e:c3:9b:db:3e:07:79:66:46:
                    35:c9:0b:9d:fc:87:55:65:a2:0b:f9:ae:79:9e:54:
                    3e:7d:08:f4:3e:1d:17:c5:07:9a:66:06:7f:de:04:
                    97:30:40:58:64:41:1b:72:34:5c:92:f2:a4:60:e6:
                    8a:82:70:a4:7e:68:21:02:a9:68:f0:bd:f2:2f:a9:
                    9c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:5A:73:4C:5F:0E:97:B1:1C:3A:23:21:A7:55:4A:61:F2:43:CB:E2
            X509v3 Authority Key Identifier:
                keyid:81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:b3:c0:7c:aa:19:b4:89:42:24:72:62:bb:9b:b5:36:81:2f:
         e1:a3:a4:cd:6d:76:50:dd:cf:34:22:b5:5c:ad:19:3b:b4:37:
         17:a4:43:2c:30:ad:1d:d7:bd:29:c0:b5:a7:89:ee:c7:1e:4c:
         29:9a:1b:e9:fb:22:28:c9:8f:34:eb:b6:cc:ce:7f:e8:75:9c:
         1a:0b:1a:d1:80:b6:f0:cb:67:58:af:61:4a:ca:df:2e:63:dd:
         4d:2b:22:ca:cc:ed:32:7b:20:00:63:98:e0:31:dc:33:b6:52:
         ba:07:fc:c7:fe:a0:05:c0:2e:64:54:72:af:16:23:6c:20:b7:
         5d:6d:88:49:8e:2e:b2:f1:b7:6b:a1:46:82:d9:65:13:02:e9:
         8e:b8:51:8a:39:ff:87:8a:e9:35:75:ec:ee:dd:15:1c:11:ef:
         38:e5:b6:c5:83:aa:87:31:ad:24:2d:dd:2f:9c:27:09:c5:7a:
         0b:d6:22:90:8e:a0:96:ed:dc:bc:27:49:a6:56:d7:fd:97:cc:
         1b:0a:04:7f:29:4f:d6:9e:9a:51:0c:e7:e4:f7:13:d3:55:a3:
         77:ee:45:24:e9:51:26:aa:34:11:ef:fc:e7:39:6f:2f:a0:88:
         f0:5d:df:d8:b1:78:b8:30:be:b7:b2:82:f5:c4:7c:04:97:ca:
         12:97:a2:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BtsvLJpVdwkKpsNEeOg1OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxN2NiMTRjZTQwMTRhYzMyNjlkNzBlZWVhODljODcwNTVi
MTc2ZjEwHhcNMjYwNjEzMTYwMDQyWhcNMjYwNjE0MTYwMDQyWjAzMTEwLwYDVQQD
EyhhOTVhNzM0YzVmMGU5N2IxMWMzYTIzMjFhNzU1NGE2MWYyNDNjYmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+YCYclM92z7lATq4LNAZfRk1Mnx
GA06q2qdHdWTTNlIPhHeRMl9hYjjIOyj249BwtkHkhOZNnUnuIwbwvfesIjQpkj3
FYhFAvQAmJqi3HagJiI69MMnNMTjDma5ZusNv4KF800QrVB7ecPHRwi0pEKK4rYE
rW/JlJAgQTHjxx17aDohIhhT6tScyp8Wsyvxljt+55tqBrOBZpafRhxQHx2HHVpL
BwIavfLnxHCPG06d8YdBWFcP5Mmew5vbPgd5ZkY1yQud/IdVZaIL+a55nlQ+fQj0
Ph0XxQeaZgZ/3gSXMEBYZEEbcjRckvKkYOaKgnCkfmghAqlo8L3yL6mcnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKlac0xfDpexHDojIadVSmHyQ8viMB8GA1UdIwQY
MBaAFIF8sUzkAUrDJp1w7uqJyHBVsXbxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1h5eFRPUUJTc01tblhEdTZvbkljRld4ZHZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mNmY1MDgtNGIzZS00MjJkLThmYmMt
MWEyYWJkYTFhOWU1LzEvZ1h5eFRPUUJTc01tblhEdTZvbkljRld4ZHZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9mNmY1MDgtNGIzZS00MjJkLThmYmMtMWEyYWJkYTFhOWU1
LzEvZ1h5eFRPUUJTc01tblhEdTZvbkljRld4ZHZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGLPAfKoZ
tIlCJHJiu5u1NoEv4aOkzW12UN3PNCK1XK0ZO7Q3F6RDLDCtHde9KcC1p4nuxx5M
KZob6fsiKMmPNOu2zM5/6HWcGgsa0YC28MtnWK9hSsrfLmPdTSsiysztMnsgAGOY
4DHcM7ZSugf8x/6gBcAuZFRyrxYjbCC3XW2ISY4usvG3a6FGgtllEwLpjrhRijn/
h4rpNXXs7t0VHBHvOOW2xYOqhzGtJC3dL5wnCcV6C9YikI6glu3cvCdJplbX/ZfM
GwoEfylP1p6aUQzn5PcT01Wjd+5FJOlRJqo0Ee/85zlvL6CI8F3f2LF4uDC+t7KC
9cR8BJfKEpeiaw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:45:32 2026 by rpki-client