Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft
File:                     afURWpSbKIPEzDxJX_uJk97Z2F0.mft (raw, json)
Hash identifier:          tzeE2cTRA7ilgjV1cIQ5QpmK0nOUj6vy+Foo+mbHifg=
Subject key identifier:   0F:05:53:37:7F:35:7B:AB:38:98:4B:E5:DA:41:D2:5A:6B:82:A1:30
Authority key identifier: 69:F5:11:5A:94:9B:28:83:C4:CC:3C:49:5F:FB:89:93:DE:D9:D8:5D
Certificate issuer:       /CN=69f5115a949b2883c4cc3c495ffb8993ded9d85d
Certificate serial:       019EC0A3BB8DCEFF4A13B30E0DBB8337A393
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/afURWpSbKIPEzDxJX_uJk97Z2F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft
Manifest number:          0378
Signing time:             Sat 13 Jun 2026 11:00:16 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:16 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:16 +0000
Files and hashes:         1: F0NU8SzenQKyHyDow73tXbiGwdo.roa (hash: iOBS39tMhlNuj1wPQ/s8NHjEci7w9ozCqefNCKugJMg=)
                          2: afURWpSbKIPEzDxJX_uJk97Z2F0.crl (hash: QHh79rHgjtnKbujVOjSY4ExFwqLh+YVuW2mQGwUKrdQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/afURWpSbKIPEzDxJX_uJk97Z2F0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a3:bb:8d:ce:ff:4a:13:b3:0e:0d:bb:83:37:a3:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f5115a949b2883c4cc3c495ffb8993ded9d85d
        Validity
            Not Before: Jun 13 11:00:16 2026 GMT
            Not After : Jun 14 11:00:16 2026 GMT
        Subject: CN=0f0553377f357bab38984be5da41d25a6b82a130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:01:1c:a0:c9:2e:ec:ab:ab:13:cb:f2:d8:d9:
                    4d:39:a7:c2:d6:f4:28:3f:e7:02:17:88:b7:3f:18:
                    08:90:75:b2:83:40:fd:aa:5b:63:6a:d1:87:1e:b0:
                    83:df:a6:02:5c:95:b6:63:c2:9f:d8:22:e7:9f:cd:
                    87:0c:af:69:0b:9c:51:78:e4:16:a6:7f:93:a5:68:
                    07:c4:8d:27:ef:6f:79:93:cc:54:d9:12:b9:36:a8:
                    30:ea:81:76:57:6b:20:be:3c:c6:0b:05:8c:29:60:
                    de:6b:ba:04:f3:95:f0:42:df:a9:60:38:4d:e6:c8:
                    7f:f3:25:33:c7:16:e7:d5:d5:c6:ec:f7:be:18:3a:
                    f2:d6:72:34:41:4a:ba:bf:88:28:c4:84:94:c1:ed:
                    0c:18:78:2c:42:de:5c:78:5d:87:72:f3:a0:1f:d2:
                    d6:5d:fb:e6:73:6f:d2:dc:2a:de:a4:a1:48:b1:85:
                    54:a1:39:f6:52:e2:18:bd:08:a4:0d:db:c4:26:3b:
                    ce:9c:0e:13:e2:02:ef:e1:86:b9:7f:83:39:f8:04:
                    74:28:99:b3:12:9c:1f:cd:b8:46:75:a9:1c:84:20:
                    38:7b:92:7e:aa:2d:7b:1b:fb:2c:b4:22:14:77:8f:
                    df:15:4a:18:3c:80:77:b4:54:39:b3:fb:29:2d:5b:
                    d5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:05:53:37:7F:35:7B:AB:38:98:4B:E5:DA:41:D2:5A:6B:82:A1:30
            X509v3 Authority Key Identifier:
                keyid:69:F5:11:5A:94:9B:28:83:C4:CC:3C:49:5F:FB:89:93:DE:D9:D8:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afURWpSbKIPEzDxJX_uJk97Z2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:8f:04:7f:5c:a6:09:f2:e7:fd:6f:d1:a9:12:d9:c0:ab:48:
         ca:99:d3:7a:42:3a:ec:0a:d2:05:13:61:0c:8c:60:38:ff:ed:
         9b:84:df:eb:bb:19:f4:be:b3:2b:f2:e2:da:49:b8:d5:18:eb:
         a5:66:7e:36:d6:18:b1:b8:3d:a7:df:36:8a:82:38:35:99:fa:
         e1:f1:5d:d9:6a:b1:db:5c:26:01:fb:30:0c:d5:4d:09:33:e4:
         1a:29:d4:0b:f0:8b:74:1a:a1:75:0a:41:a0:d1:b4:fa:a6:ab:
         6d:3e:a9:20:22:5b:25:e6:f4:9b:2a:d7:10:59:1b:e7:71:95:
         49:fd:e5:7f:a8:1e:cb:01:15:8c:92:e8:45:36:a0:cb:33:f5:
         53:ca:6d:fb:79:b8:9d:bb:b2:7b:7b:12:38:a6:de:f2:4d:63:
         f5:2e:b2:c5:6b:b2:f5:3f:9b:6c:56:82:02:47:ce:8e:9e:62:
         4b:c8:48:01:cb:c4:89:53:11:28:4c:f5:94:96:e1:43:f7:17:
         13:53:6b:82:4f:c3:a4:81:90:66:ff:89:8b:ba:e7:6f:5d:b1:
         33:a1:27:2b:4b:d2:86:9f:f7:e2:70:92:76:d7:93:f8:1b:c8:
         d2:21:c8:fe:a5:4a:64:ad:22:e4:7e:06:94:43:59:92:ec:d9:
         41:40:93:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Ao7uNzv9KE7MODbuDN6OTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZjUxMTVhOTQ5YjI4ODNjNGNjM2M0OTVmZmI4OTkzZGVk
OWQ4NWQwHhcNMjYwNjEzMTEwMDE2WhcNMjYwNjE0MTEwMDE2WjAzMTEwLwYDVQQD
EygwZjA1NTMzNzdmMzU3YmFiMzg5ODRiZTVkYTQxZDI1YTZiODJhMTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAEcoMku7KurE8vy2NlNOafC1vQo
P+cCF4i3PxgIkHWyg0D9qltjatGHHrCD36YCXJW2Y8Kf2CLnn82HDK9pC5xReOQW
pn+TpWgHxI0n7295k8xU2RK5Nqgw6oF2V2sgvjzGCwWMKWDea7oE85XwQt+pYDhN
5sh/8yUzxxbn1dXG7Pe+GDry1nI0QUq6v4goxISUwe0MGHgsQt5ceF2HcvOgH9LW
Xfvmc2/S3CrepKFIsYVUoTn2UuIYvQikDdvEJjvOnA4T4gLv4Ya5f4M5+AR0KJmz
EpwfzbhGdakchCA4e5J+qi17G/sstCIUd4/fFUoYPIB3tFQ5s/spLVvVnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8FUzd/NXurOJhL5dpB0lprgqEwMB8GA1UdIwQY
MBaAFGn1EVqUmyiDxMw8SV/7iZPe2dhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWZVUldwU2JLSVBFekR4SlhfdUprOTdaMkYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jMDY1MzYtMDFhYS00ZTM5LTg5YjYt
YjU4NzA0ZjI4NTkxLzEvYWZVUldwU2JLSVBFekR4SlhfdUprOTdaMkYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9jMDY1MzYtMDFhYS00ZTM5LTg5YjYtYjU4NzA0ZjI4NTkx
LzEvYWZVUldwU2JLSVBFekR4SlhfdUprOTdaMkYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjo8Ef1ym
CfLn/W/RqRLZwKtIypnTekI67ArSBRNhDIxgOP/tm4Tf67sZ9L6zK/Li2km41Rjr
pWZ+NtYYsbg9p982ioI4NZn64fFd2Wqx21wmAfswDNVNCTPkGinUC/CLdBqhdQpB
oNG0+qarbT6pICJbJeb0myrXEFkb53GVSf3lf6geywEVjJLoRTagyzP1U8pt+3m4
nbuye3sSOKbe8k1j9S6yxWuy9T+bbFaCAkfOjp5iS8hIAcvEiVMRKEz1lJbhQ/cX
E1Nrgk/DpIGQZv+Ji7rnb12xM6EnK0vShp/34nCSdteT+BvI0iHI/qVKZK0i5H4G
lENZkuzZQUCTjA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:49:02 2026 by rpki-client