Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
File:                     F0G9doUTjcUdWmsM03gPRmtX_RM.mft (raw, json)
Hash identifier:          bA1WcssGCJaHQfJW/LbiXP8K4smi3zmibgAA/GXrH90=
Subject key identifier:   AF:79:FB:7B:1B:FE:F5:5A:42:C5:13:68:BD:AE:22:0F:81:02:62:1F
Authority key identifier: 17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13
Certificate issuer:       /CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13
Certificate serial:       019EC3A539999E22F16E44046F85F996B239
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
Manifest number:          1960
Signing time:             Sun 14 Jun 2026 01:00:45 +0000
Manifest this update:     Sun 14 Jun 2026 01:00:45 +0000
Manifest next update:     Mon 15 Jun 2026 01:00:45 +0000
Files and hashes:         1: F0G9doUTjcUdWmsM03gPRmtX_RM.crl (hash: IadyEXUB/gGjHWyew/jrb6GF5gCj7mdVKvIuURLykPU=)
                          2: bZtAv7jof-AuwEu0cxY9E17KiEM.roa (hash: GmHiN36XVNHoznaH+f5s8+gOGqjQoGIfCLxDgTEZBEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:a5:39:99:9e:22:f1:6e:44:04:6f:85:f9:96:b2:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13
        Validity
            Not Before: Jun 14 01:00:45 2026 GMT
            Not After : Jun 15 01:00:45 2026 GMT
        Subject: CN=af79fb7b1bfef55a42c51368bdae220f8102621f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:67:12:36:7c:ba:62:13:3f:54:e6:ac:ee:32:
                    b9:e7:20:da:3e:fc:8d:4f:e5:a8:8e:0a:5c:4c:a7:
                    1b:28:71:64:65:93:0d:66:d5:08:23:f9:f4:ae:3e:
                    98:6e:42:39:4e:f5:93:8f:5a:be:32:53:c0:b3:4e:
                    1d:ae:9c:62:d8:b4:b0:ae:95:30:2c:1d:b3:9b:06:
                    40:17:73:39:fd:a9:90:ad:cb:c6:b6:c2:43:38:3c:
                    6c:68:26:ab:2a:f0:c2:fc:8c:15:19:74:5a:f7:ef:
                    b0:02:d9:42:71:7d:11:b7:5c:41:5f:69:26:24:0c:
                    19:4d:ed:35:b8:5d:a6:23:80:82:b7:ff:68:74:c7:
                    f3:2f:31:ee:10:0c:24:24:e2:e7:10:53:b9:ab:db:
                    37:14:57:6b:fc:6e:8c:11:0a:97:15:1a:e7:96:2f:
                    d4:42:16:d6:25:5c:19:c3:b8:4a:1c:5c:7b:3a:d4:
                    4c:a1:79:00:05:0b:d2:00:91:64:7a:1e:73:d5:29:
                    e2:2a:d6:0d:8c:ac:70:11:0f:88:15:f2:f0:bb:17:
                    3a:58:89:60:5b:c0:50:4f:e1:55:9a:84:7f:f5:a2:
                    8b:7b:c1:dc:3e:f0:d5:6a:8a:8e:6b:8e:7d:9d:04:
                    57:07:5e:6b:45:a8:69:4c:97:bb:a6:4e:72:c0:89:
                    e5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:79:FB:7B:1B:FE:F5:5A:42:C5:13:68:BD:AE:22:0F:81:02:62:1F
            X509v3 Authority Key Identifier:
                keyid:17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:e1:4b:f6:ec:63:ba:63:11:5d:62:59:9e:e4:45:83:0f:de:
         2d:b1:25:cd:db:d2:72:d7:36:f5:3a:4f:6b:04:fd:28:1e:6b:
         9f:11:d8:98:19:81:dc:8b:b6:f2:d5:ec:fc:21:2a:de:a3:34:
         c7:90:f8:36:cc:a7:48:fc:ec:4e:77:9f:e1:95:d6:f7:c3:e2:
         1b:d9:e0:6c:96:3c:c1:be:cc:ea:26:b5:07:3c:50:d9:d1:40:
         97:1a:b3:ef:bc:2d:93:b0:5b:9e:c0:cc:f2:ae:66:9f:c1:2b:
         8a:d5:2a:96:18:e0:fe:e4:d5:72:30:6d:96:7a:88:8c:fb:45:
         5d:77:e6:fa:63:17:53:ef:fb:e2:56:71:56:2a:03:50:7d:5f:
         04:e4:8a:48:e3:fa:56:77:98:f2:5e:73:e3:a8:f8:d7:61:a9:
         55:4d:30:20:c3:63:cd:2c:f8:f6:d9:26:f6:2d:69:0e:9c:9e:
         93:f2:87:54:c5:97:55:e3:30:93:55:f5:ef:ac:79:6d:e4:7a:
         e0:b6:25:b7:ab:78:6b:9d:01:fd:24:dd:a0:aa:5d:ee:7f:42:
         00:63:a7:aa:6a:8f:ae:22:3e:4d:97:08:7d:99:84:c0:6f:26:
         34:ed:18:cb:4e:7a:42:5e:c2:a6:3d:3e:fc:51:7f:18:d3:ac:
         a4:6d:5d:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DpTmZniLxbkQEb4X5lrI5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NDFiZDc2ODUxMzhkYzUxZDVhNmIwY2QzNzgwZjQ2NmI1
N2ZkMTMwHhcNMjYwNjE0MDEwMDQ1WhcNMjYwNjE1MDEwMDQ1WjAzMTEwLwYDVQQD
EyhhZjc5ZmI3YjFiZmVmNTVhNDJjNTEzNjhiZGFlMjIwZjgxMDI2MjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WcSNny6YhM/VOas7jK55yDaPvyN
T+WojgpcTKcbKHFkZZMNZtUII/n0rj6YbkI5TvWTj1q+MlPAs04drpxi2LSwrpUw
LB2zmwZAF3M5/amQrcvGtsJDODxsaCarKvDC/IwVGXRa9++wAtlCcX0Rt1xBX2km
JAwZTe01uF2mI4CCt/9odMfzLzHuEAwkJOLnEFO5q9s3FFdr/G6MEQqXFRrnli/U
QhbWJVwZw7hKHFx7OtRMoXkABQvSAJFkeh5z1SniKtYNjKxwEQ+IFfLwuxc6WIlg
W8BQT+FVmoR/9aKLe8HcPvDVaoqOa459nQRXB15rRahpTJe7pk5ywInlfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK95+3sb/vVaQsUTaL2uIg+BAmIfMB8GA1UdIwQY
MBaAFBdBvXaFE43FHVprDNN4D0ZrV/0TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjBHOWRvVVRqY1VkV21zTTAzZ1BSbXRYX1JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9kZjI5MmQtOTU5Yi00ZWFkLTkzNDgt
MjlmMDlkODkzYWU3LzEvRjBHOWRvVVRqY1VkV21zTTAzZ1BSbXRYX1JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9kZjI5MmQtOTU5Yi00ZWFkLTkzNDgtMjlmMDlkODkzYWU3
LzEvRjBHOWRvVVRqY1VkV21zTTAzZ1BSbXRYX1JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK+FL9uxj
umMRXWJZnuRFgw/eLbElzdvSctc29TpPawT9KB5rnxHYmBmB3Iu28tXs/CEq3qM0
x5D4NsynSPzsTnef4ZXW98PiG9ngbJY8wb7M6ia1BzxQ2dFAlxqz77wtk7BbnsDM
8q5mn8EritUqlhjg/uTVcjBtlnqIjPtFXXfm+mMXU+/74lZxVioDUH1fBOSKSOP6
VneY8l5z46j412GpVU0wIMNjzSz49tkm9i1pDpyek/KHVMWXVeMwk1X176x5beR6
4LYlt6t4a50B/STdoKpd7n9CAGOnqmqPriI+TZcIfZmEwG8mNO0Yy056Ql7Cpj0+
/FF/GNOspG1dfA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:01:41 2026 by rpki-client