Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
File:                     1TVDIcElQ2AUXq8l9pk4uN80ezE.mft (raw, json)
Hash identifier:          P1R//atEh616wrQRV5FLfPl7NJ2blwWdnBDO0HPL/Jo=
Subject key identifier:   A0:16:F9:A7:04:E0:39:A6:CB:84:74:B0:80:26:71:53:2B:93:61:83
Authority key identifier: D5:35:43:21:C1:25:43:60:14:5E:AF:25:F6:99:38:B8:DF:34:7B:31
Certificate issuer:       /CN=d5354321c1254360145eaf25f69938b8df347b31
Certificate serial:       019EBEECDAE477F854BA46F6E56EBAD64A46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
Manifest number:          0E5B
Signing time:             Sat 13 Jun 2026 03:00:53 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:53 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:53 +0000
Files and hashes:         1: 1TVDIcElQ2AUXq8l9pk4uN80ezE.crl (hash: 5YB0ASqXPbAd/gvegRbuvhVO4GbPWz3/pL+DEphzhDg=)
                          2: yqbwyn5sfCL6hbkLZAJdRWAyPBM.roa (hash: ZWKRKB/jnik25oPS/+Y2ymZERk+OEa7DBYYnhwqGBQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:da:e4:77:f8:54:ba:46:f6:e5:6e:ba:d6:4a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5354321c1254360145eaf25f69938b8df347b31
        Validity
            Not Before: Jun 13 03:00:53 2026 GMT
            Not After : Jun 14 03:00:53 2026 GMT
        Subject: CN=a016f9a704e039a6cb8474b0802671532b936183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4d:66:66:3b:fa:6a:8c:1d:d5:e5:59:de:2e:
                    ae:70:fb:1d:b7:ad:42:db:b0:f4:d7:48:95:34:ae:
                    6a:53:96:25:7d:f3:e1:57:9b:93:e5:21:b8:31:09:
                    03:9b:50:bb:d4:6e:21:d4:3d:c0:78:6a:fc:ba:70:
                    82:18:f3:38:c9:8b:40:16:9e:ab:71:1d:05:1a:a7:
                    6a:b6:20:a0:94:6d:1c:1e:10:06:e2:c9:f5:c5:1a:
                    ca:86:ef:e4:e5:50:75:30:78:d7:eb:27:9f:ec:6e:
                    4f:b7:97:0a:4c:f7:84:5d:67:f7:3e:31:05:90:be:
                    1a:19:1c:c3:de:08:42:b9:7a:6c:b7:10:81:9f:61:
                    c0:bd:5d:b3:3c:97:d6:07:d9:f6:73:d9:63:bf:b4:
                    24:ed:71:e6:17:20:a7:70:2b:03:49:a7:ef:f7:05:
                    23:06:68:5a:d1:7b:7b:48:f9:ac:ca:3b:a8:33:14:
                    b1:4c:5d:06:38:fa:fc:20:f0:95:c0:ca:51:34:c3:
                    4f:59:df:5f:51:7d:62:63:23:0f:83:46:f1:cd:a1:
                    aa:d0:7b:83:a0:44:9d:10:ee:5d:4f:46:d8:ee:3f:
                    08:16:dc:08:5a:e3:11:fc:ca:01:01:42:95:8e:5d:
                    9b:fe:29:d1:da:b3:2e:96:90:e6:f4:96:a8:54:d4:
                    b4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:16:F9:A7:04:E0:39:A6:CB:84:74:B0:80:26:71:53:2B:93:61:83
            X509v3 Authority Key Identifier:
                keyid:D5:35:43:21:C1:25:43:60:14:5E:AF:25:F6:99:38:B8:DF:34:7B:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:da:49:35:f3:b7:27:74:bf:bc:43:30:61:12:53:68:b9:5e:
         54:51:f3:bc:9c:c7:59:a1:57:6c:df:77:f3:e0:2e:4f:af:a2:
         ed:14:cc:3f:2c:70:eb:72:17:ed:4e:26:98:c6:14:54:8a:dd:
         d5:1c:33:c0:c1:56:4e:49:81:aa:c2:d5:ea:e5:2c:a6:73:5e:
         cb:5e:d7:58:d7:5f:29:f1:72:00:28:2f:e0:5a:0b:c9:8b:2d:
         84:ae:f7:b0:95:72:13:a6:f8:c7:60:cc:7c:fd:a6:66:30:1b:
         ba:d8:1e:09:fc:b6:d5:77:e4:d9:93:5c:d3:54:fa:89:fc:54:
         e9:5f:1d:1d:43:2b:6e:20:d5:29:54:cf:b6:25:c4:72:75:f9:
         cd:ea:b3:27:f2:5a:ca:76:af:5a:06:cc:f9:a1:82:02:cd:5a:
         a5:15:ae:b9:d7:76:53:b3:47:16:19:93:4f:17:e1:84:0b:fd:
         8b:22:b9:10:5c:2c:5a:45:4a:66:7c:d0:5f:ef:de:fd:3b:46:
         ff:6d:db:74:fa:8a:c4:2e:8e:f3:29:39:f3:e7:65:67:c9:3f:
         c4:14:7c:fb:37:47:18:d0:9d:a0:7a:e0:e0:b8:18:42:5e:cd:
         f7:55:2e:a9:9f:17:db:1c:fa:da:a7:02:1c:cc:28:25:68:c1:
         a2:3e:d4:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+7Nrkd/hUukb25W661kpGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MzU0MzIxYzEyNTQzNjAxNDVlYWYyNWY2OTkzOGI4ZGYz
NDdiMzEwHhcNMjYwNjEzMDMwMDUzWhcNMjYwNjE0MDMwMDUzWjAzMTEwLwYDVQQD
EyhhMDE2ZjlhNzA0ZTAzOWE2Y2I4NDc0YjA4MDI2NzE1MzJiOTM2MTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk1mZjv6aowd1eVZ3i6ucPsdt61C
27D010iVNK5qU5YlffPhV5uT5SG4MQkDm1C71G4h1D3AeGr8unCCGPM4yYtAFp6r
cR0FGqdqtiCglG0cHhAG4sn1xRrKhu/k5VB1MHjX6yef7G5Pt5cKTPeEXWf3PjEF
kL4aGRzD3ghCuXpstxCBn2HAvV2zPJfWB9n2c9ljv7Qk7XHmFyCncCsDSafv9wUj
Bmha0Xt7SPmsyjuoMxSxTF0GOPr8IPCVwMpRNMNPWd9fUX1iYyMPg0bxzaGq0HuD
oESdEO5dT0bY7j8IFtwIWuMR/MoBAUKVjl2b/inR2rMulpDm9JaoVNS0/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKAW+acE4Dmmy4R0sIAmcVMrk2GDMB8GA1UdIwQY
MBaAFNU1QyHBJUNgFF6vJfaZOLjfNHsxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVRWREljRWxRMkFVWHE4bDlwazR1TjgwZXpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9kOWY5YTgtZGEwMS00ZDM1LTgyODQt
YjY0ZWI4ZDgzNjU4LzEvMVRWREljRWxRMkFVWHE4bDlwazR1TjgwZXpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9kOWY5YTgtZGEwMS00ZDM1LTgyODQtYjY0ZWI4ZDgzNjU4
LzEvMVRWREljRWxRMkFVWHE4bDlwazR1TjgwZXpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAddpJNfO3
J3S/vEMwYRJTaLleVFHzvJzHWaFXbN938+AuT6+i7RTMPyxw63IX7U4mmMYUVIrd
1RwzwMFWTkmBqsLV6uUspnNey17XWNdfKfFyACgv4FoLyYsthK73sJVyE6b4x2DM
fP2mZjAbutgeCfy21Xfk2ZNc01T6ifxU6V8dHUMrbiDVKVTPtiXEcnX5zeqzJ/Ja
ynavWgbM+aGCAs1apRWuudd2U7NHFhmTTxfhhAv9iyK5EFwsWkVKZnzQX+/e/TtG
/23bdPqKxC6O8yk58+dlZ8k/xBR8+zdHGNCdoHrg4LgYQl7N91UuqZ8X2xz62qcC
HMwoJWjBoj7UyQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:01:48 2026 by rpki-client