Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft
File:                     h5kgiOdlXLE0AgypWw5X1Oba9A8.mft (raw, json)
Hash identifier:          VibaR/yvVzRRCTs/gD1AhOj08+p9lyLjyfcNX4ClmOo=
Subject key identifier:   80:B0:0F:3E:55:A4:75:20:5C:5F:1B:EE:9E:44:21:C3:5C:AE:97:B8
Authority key identifier: 87:99:20:88:E7:65:5C:B1:34:02:0C:A9:5B:0E:57:D4:E6:DA:F4:0F
Certificate issuer:       /CN=87992088e7655cb134020ca95b0e57d4e6daf40f
Certificate serial:       019ED4998C7078AB67CE58F3A978AF2132ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft
Manifest number:          1966
Signing time:             Wed 17 Jun 2026 08:01:33 +0000
Manifest this update:     Wed 17 Jun 2026 08:01:33 +0000
Manifest next update:     Thu 18 Jun 2026 08:01:33 +0000
Files and hashes:         1: h5kgiOdlXLE0AgypWw5X1Oba9A8.crl (hash: CQdJYuea2VnohxnUNdhmmEAzx7vHYtzyJn7O+0baUT4=)
                          2: uOT6tJlrkH7uNore0SwrHv6B2q8.roa (hash: sj7kmuH/7FdqL+TtQaRY1OsxURdzt9SlOSUYNlEq6iI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 08:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:99:8c:70:78:ab:67:ce:58:f3:a9:78:af:21:32:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87992088e7655cb134020ca95b0e57d4e6daf40f
        Validity
            Not Before: Jun 17 08:01:33 2026 GMT
            Not After : Jun 18 08:01:33 2026 GMT
        Subject: CN=80b00f3e55a475205c5f1bee9e4421c35cae97b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4e:ce:de:1f:9c:1c:4a:ef:86:99:69:bc:75:
                    24:fb:15:d1:3e:99:a9:85:c3:2d:a4:72:8e:26:31:
                    2d:dc:ca:3d:78:10:1d:e8:ef:44:a3:58:2d:a9:40:
                    48:82:5d:1d:8b:05:f9:7f:a1:4e:1e:19:ff:6c:72:
                    00:3d:df:20:0e:9d:b0:12:1d:41:29:65:1b:a4:e6:
                    4d:79:fa:4a:ad:41:b2:7c:6f:07:7b:a2:f0:20:ef:
                    d9:38:7e:8d:01:75:29:56:61:4d:b5:7e:89:cb:30:
                    12:a4:a1:24:aa:9b:da:8f:ed:c9:19:ea:3d:43:4b:
                    cd:92:52:91:c8:0a:a1:ef:8e:e6:9d:fb:68:7b:59:
                    7e:77:46:9e:d7:ed:4f:9f:57:37:07:b4:b7:ac:38:
                    c5:c2:78:51:85:c1:d4:8f:32:9a:d2:d1:5e:2c:6d:
                    24:42:09:94:1a:4e:7f:3e:89:de:51:7e:57:e9:9a:
                    ae:3c:1d:cd:74:40:fb:8d:68:96:dc:ba:15:25:8f:
                    5b:50:22:0c:b2:99:ff:d6:eb:aa:1e:f8:e5:92:23:
                    17:2a:aa:eb:3a:aa:01:d1:1f:5a:9d:3c:d0:50:7a:
                    fd:e5:a3:ce:0b:f3:a5:f0:2c:6a:60:1a:90:5a:bd:
                    9d:b8:95:03:ea:ec:a1:82:30:a1:0b:fb:69:fb:0e:
                    1e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B0:0F:3E:55:A4:75:20:5C:5F:1B:EE:9E:44:21:C3:5C:AE:97:B8
            X509v3 Authority Key Identifier:
                keyid:87:99:20:88:E7:65:5C:B1:34:02:0C:A9:5B:0E:57:D4:E6:DA:F4:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:b2:62:12:23:18:a3:83:73:ea:8d:2b:ee:d7:fb:1e:42:d9:
         78:0a:29:30:b5:ab:6b:f6:b7:d0:67:a6:f0:1a:a7:a3:e9:dc:
         b9:2b:0a:66:d2:e9:d0:34:6e:b1:e4:9e:3b:d4:96:7a:11:1a:
         66:da:95:34:7d:e0:68:ad:02:90:65:e2:1f:fe:91:7b:27:cd:
         d5:f8:c7:81:06:e5:d5:45:58:14:bb:47:c7:9b:da:19:77:20:
         c2:6f:74:99:65:d0:ba:da:b7:94:75:6f:ff:37:5a:c8:14:69:
         bd:c3:2a:16:08:54:8c:27:34:12:07:bd:ad:75:00:00:1a:ff:
         fc:bb:ed:3a:d5:a7:9d:87:af:56:b4:15:b1:7c:5a:2b:8c:ba:
         c9:94:c1:59:9e:7c:d1:af:a5:e0:41:06:95:5f:c9:6f:6b:c4:
         24:5f:72:ef:58:20:68:af:87:a7:bb:72:85:23:7f:36:4a:25:
         0b:76:a5:d3:19:27:3d:f3:8e:39:9e:f2:39:dd:89:5e:ce:26:
         9b:a3:cb:ca:4b:c6:da:54:e2:c7:3d:28:56:c9:a7:3c:b7:c9:
         f7:70:d1:ea:76:bd:f5:88:a8:10:a6:23:77:6a:54:97:c4:6d:
         9c:b3:bf:b7:7e:f4:7b:5b:0b:3f:11:45:af:3e:31:7a:a3:43:
         b7:d3:38:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7UmYxweKtnzljzqXivITLtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3OTkyMDg4ZTc2NTVjYjEzNDAyMGNhOTViMGU1N2Q0ZTZk
YWY0MGYwHhcNMjYwNjE3MDgwMTMzWhcNMjYwNjE4MDgwMTMzWjAzMTEwLwYDVQQD
Eyg4MGIwMGYzZTU1YTQ3NTIwNWM1ZjFiZWU5ZTQ0MjFjMzVjYWU5N2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq07O3h+cHErvhplpvHUk+xXRPpmp
hcMtpHKOJjEt3Mo9eBAd6O9Eo1gtqUBIgl0diwX5f6FOHhn/bHIAPd8gDp2wEh1B
KWUbpOZNefpKrUGyfG8He6LwIO/ZOH6NAXUpVmFNtX6JyzASpKEkqpvaj+3JGeo9
Q0vNklKRyAqh747mnftoe1l+d0ae1+1Pn1c3B7S3rDjFwnhRhcHUjzKa0tFeLG0k
QgmUGk5/PoneUX5X6ZquPB3NdED7jWiW3LoVJY9bUCIMspn/1uuqHvjlkiMXKqrr
OqoB0R9anTzQUHr95aPOC/Ol8CxqYBqQWr2duJUD6uyhgjChC/tp+w4ecwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICwDz5VpHUgXF8b7p5EIcNcrpe4MB8GA1UdIwQY
MBaAFIeZIIjnZVyxNAIMqVsOV9Tm2vQPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDVrZ2lPZGxYTEUwQWd5cFd3NVgxT2JhOUE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lMDgzMTgtMjk3NS00MTdhLWI4NjMt
ODVlYTYzYzI0NDc0LzEvaDVrZ2lPZGxYTEUwQWd5cFd3NVgxT2JhOUE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9lMDgzMTgtMjk3NS00MTdhLWI4NjMtODVlYTYzYzI0NDc0
LzEvaDVrZ2lPZGxYTEUwQWd5cFd3NVgxT2JhOUE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASLJiEiMY
o4Nz6o0r7tf7HkLZeAopMLWra/a30Gem8Bqno+ncuSsKZtLp0DRuseSeO9SWehEa
ZtqVNH3gaK0CkGXiH/6ReyfN1fjHgQbl1UVYFLtHx5vaGXcgwm90mWXQutq3lHVv
/zdayBRpvcMqFghUjCc0Ege9rXUAABr//LvtOtWnnYevVrQVsXxaK4y6yZTBWZ58
0a+l4EEGlV/Jb2vEJF9y71ggaK+Hp7tyhSN/NkolC3al0xknPfOOOZ7yOd2JXs4m
m6PLykvG2lTixz0oVsmnPLfJ93DR6na99YioEKYjd2pUl8RtnLO/t370e1sLPxFF
rz4xeqNDt9M4ag==
-----END CERTIFICATE-----
Generated at Wed Jun 17 13:01:31 2026 by rpki-client