Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft
File:                     ELZc9vpeH8roz4TJcB44vftjqrM.mft (raw, json)
Hash identifier:          PM9cvUPKUNpH0JE3+cLIxwPM+3o6MJ6rdph6Hpz0Yrs=
Subject key identifier:   02:9A:F2:B0:08:40:52:A3:0C:8A:92:CE:E4:73:96:64:5B:E6:BB:D8
Authority key identifier: 10:B6:5C:F6:FA:5E:1F:CA:E8:CF:84:C9:70:1E:38:BD:FB:63:AA:B3
Certificate issuer:       /CN=10b65cf6fa5e1fcae8cf84c9701e38bdfb63aab3
Certificate serial:       019EBFC8DAE781962CBC19C4A8FFF45F5903
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ELZc9vpeH8roz4TJcB44vftjqrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft
Manifest number:          1206
Signing time:             Sat 13 Jun 2026 07:01:11 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:11 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:11 +0000
Files and hashes:         1: ELZc9vpeH8roz4TJcB44vftjqrM.crl (hash: vlOlx7FoEAeJ57ViOcMyBJxucYgYEjOjXfAvfyyfHso=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ELZc9vpeH8roz4TJcB44vftjqrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:da:e7:81:96:2c:bc:19:c4:a8:ff:f4:5f:59:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10b65cf6fa5e1fcae8cf84c9701e38bdfb63aab3
        Validity
            Not Before: Jun 13 07:01:11 2026 GMT
            Not After : Jun 14 07:01:11 2026 GMT
        Subject: CN=029af2b0084052a30c8a92cee47396645be6bbd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fb:f4:6e:34:57:f9:7a:6d:e9:f8:67:ef:2c:
                    46:4a:23:e4:5c:4b:de:da:0b:0a:34:7d:97:02:3e:
                    b4:f1:c4:27:c5:52:7e:03:77:2c:9d:9a:22:77:4f:
                    73:c3:c9:cb:5c:76:3a:1a:07:99:69:12:e3:3c:fe:
                    08:c3:51:36:af:18:dc:6d:48:53:b7:4d:cc:49:28:
                    b5:60:62:91:ff:c0:69:5c:17:1d:fa:b4:7c:e6:90:
                    62:a3:65:66:b0:42:2c:21:76:ad:1a:55:61:ac:b3:
                    27:44:70:40:6a:a0:fa:f2:a6:77:3b:ff:16:bc:46:
                    ee:24:84:e5:87:fe:86:e2:88:4d:7f:04:d0:9b:b8:
                    02:e1:98:dd:60:4c:49:68:c3:9e:c3:44:9b:c9:9f:
                    8b:37:84:3a:34:41:5f:8c:f1:ba:ef:4c:6e:36:54:
                    2b:39:b4:a5:13:f4:9c:08:6a:75:b5:9b:cf:e9:37:
                    b7:79:10:ed:71:7e:f2:5c:41:26:95:5a:1d:1e:bb:
                    b4:a1:ba:1c:25:91:a7:fb:d3:d5:c9:1f:b8:0a:4f:
                    ff:82:f4:c0:07:bd:ef:ec:5a:ac:f5:ae:e8:b1:27:
                    90:c4:03:bd:6e:4e:60:48:01:a7:b0:0c:73:c5:16:
                    71:e5:6b:6b:24:d3:38:ec:95:0d:52:7a:b8:4e:e5:
                    07:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:9A:F2:B0:08:40:52:A3:0C:8A:92:CE:E4:73:96:64:5B:E6:BB:D8
            X509v3 Authority Key Identifier:
                keyid:10:B6:5C:F6:FA:5E:1F:CA:E8:CF:84:C9:70:1E:38:BD:FB:63:AA:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ELZc9vpeH8roz4TJcB44vftjqrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:32:35:1a:36:56:15:80:d8:48:aa:76:0f:ac:24:81:47:14:
         e0:36:fd:62:d7:09:78:ee:ef:48:41:be:82:ed:eb:17:86:10:
         fe:8d:2e:10:61:75:ca:ce:4d:30:53:37:73:32:60:82:26:eb:
         9c:ab:79:36:ef:51:62:8a:b2:a8:87:52:09:4d:4f:0d:2f:0d:
         bc:a9:a4:31:d5:50:b5:7a:7c:43:7a:fe:9a:db:d4:e2:e7:69:
         9d:c1:04:39:96:52:a8:48:e9:71:42:ab:fa:5f:db:ac:70:25:
         5b:c1:82:46:ec:bd:9a:f7:16:80:98:22:9f:a8:ca:16:9e:b1:
         a3:14:e7:c1:4a:20:1a:aa:34:42:39:21:8f:af:c3:43:9e:f4:
         e9:e1:c2:e5:9a:94:5b:b4:4f:a0:3d:80:48:b0:c8:3b:1f:05:
         d3:22:e6:2a:aa:f4:c8:e0:15:03:bf:10:bf:4e:3d:a2:31:59:
         81:2d:81:e2:51:dc:d3:03:43:f3:1b:25:4a:35:e2:f0:25:98:
         7e:9c:67:1a:7a:0b:75:0d:77:20:9e:0e:6f:63:2f:b1:dd:47:
         d3:20:06:f6:88:a7:89:c2:9b:e5:81:d3:c9:4b:ff:68:54:98:
         77:ec:d5:f6:46:a9:27:ed:22:82:01:f0:54:5e:6f:5f:6f:af:
         eb:d5:65:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/yNrngZYsvBnEqP/0X1kDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYjY1Y2Y2ZmE1ZTFmY2FlOGNmODRjOTcwMWUzOGJkZmI2
M2FhYjMwHhcNMjYwNjEzMDcwMTExWhcNMjYwNjE0MDcwMTExWjAzMTEwLwYDVQQD
EygwMjlhZjJiMDA4NDA1MmEzMGM4YTkyY2VlNDczOTY2NDViZTZiYmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPv0bjRX+Xpt6fhn7yxGSiPkXEve
2gsKNH2XAj608cQnxVJ+A3csnZoid09zw8nLXHY6GgeZaRLjPP4Iw1E2rxjcbUhT
t03MSSi1YGKR/8BpXBcd+rR85pBio2VmsEIsIXatGlVhrLMnRHBAaqD68qZ3O/8W
vEbuJITlh/6G4ohNfwTQm7gC4ZjdYExJaMOew0SbyZ+LN4Q6NEFfjPG670xuNlQr
ObSlE/ScCGp1tZvP6Te3eRDtcX7yXEEmlVodHru0obocJZGn+9PVyR+4Ck//gvTA
B73v7Fqs9a7osSeQxAO9bk5gSAGnsAxzxRZx5WtrJNM47JUNUnq4TuUHqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKa8rAIQFKjDIqSzuRzlmRb5rvYMB8GA1UdIwQY
MBaAFBC2XPb6Xh/K6M+EyXAeOL37Y6qzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUxaYzl2cGVIOHJvejRUSmNCNDR2ZnRqcXJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84MDkwYzItODE4MC00ZjNmLTgxNDIt
YTIzODU1ODcyYjg2LzEvRUxaYzl2cGVIOHJvejRUSmNCNDR2ZnRqcXJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS84MDkwYzItODE4MC00ZjNmLTgxNDItYTIzODU1ODcyYjg2
LzEvRUxaYzl2cGVIOHJvejRUSmNCNDR2ZnRqcXJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKjI1GjZW
FYDYSKp2D6wkgUcU4Db9YtcJeO7vSEG+gu3rF4YQ/o0uEGF1ys5NMFM3czJggibr
nKt5Nu9RYoqyqIdSCU1PDS8NvKmkMdVQtXp8Q3r+mtvU4udpncEEOZZSqEjpcUKr
+l/brHAlW8GCRuy9mvcWgJgin6jKFp6xoxTnwUogGqo0Qjkhj6/DQ5706eHC5ZqU
W7RPoD2ASLDIOx8F0yLmKqr0yOAVA78Qv049ojFZgS2B4lHc0wND8xslSjXi8CWY
fpxnGnoLdQ13IJ4Ob2Mvsd1H0yAG9oinicKb5YHTyUv/aFSYd+zV9kapJ+0iggHw
VF5vX2+v69VloQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:09:01 2026 by rpki-client