Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
File:                     SSFvXBZbgnp_1z2BB669L2PGPiQ.mft (raw, json)
Hash identifier:          S/mYIsJhVUE9tAOPNh87yveTjLlOa8Jqq9qxnn+3lFU=
Subject key identifier:   B5:AE:F6:47:A8:4F:A2:C5:74:8F:CF:B8:94:DA:4F:AE:66:02:C8:E8
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Certificate issuer:       /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial:       019EBE47EE336CA2BB545D692B8AF6B59AA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
Manifest number:          0A8E
Signing time:             Sat 13 Jun 2026 00:00:45 +0000
Manifest this update:     Sat 13 Jun 2026 00:00:45 +0000
Manifest next update:     Sun 14 Jun 2026 00:00:45 +0000
Files and hashes:         1: 5cflrPSBczVw-y9CBdznGslTCz8.roa (hash: e3Ui7ThS6C0Gj8prOOjSxh7lUAWtygpEnNw9xX2dtRk=)
                          2: 6ikDq3uU-14xeZ06o1f5sBEku08.roa (hash: 14bAM4PQevceSeTCaULI+ouG0nOTQYIq9lETR/sCBX4=)
                          3: 6zmwiCnaR_RUV1zVvXd131O-Byk.roa (hash: wivF7cNRJAl3OyL7EJY6TuKfTwqgRld3+ZHQke6SRP8=)
                          4: 8lF-x6f7B2bwP5qOnFQwpxn9L0I.roa (hash: ciLzKnjSavNPyQD1IQHv/gt0vWyFhjCiKLjRitLPEkE=)
                          5: DJA8iYfOt3bjbbEH0sfO-Yzt5D0.roa (hash: dll+XV6deSG185dIKUE72K/Hgk2Qi2c2WRrfDucz8Pg=)
                          6: DPMVT21xt_FxJ1sn3UX-_U68dhM.roa (hash: W+9Q7HyRT/GtNJeWW1rH3dBewR4z6axBBAIPrMJ0PUU=)
                          7: DbbcNPtDfL7-gagtJ1a0Eyc1Z_A.roa (hash: MbxJlm+ziQoeXoBZ7l2IXv7uYhNPhhJgV3LLj54kjMg=)
                          8: HLY3yOfkVYAqEx3IXqQjGqSe60s.roa (hash: 89cRs5OEP6GzsmQJJPOS43nhrd5JryCvGoLQgmsG8Fk=)
                          9: OGHkr0sseqVyPYMaosc0EKOfAbE.roa (hash: wHhBT3+BNkPQLV5c3JD9yLqsApNS0AOyvlFX/QBAowQ=)
                          10: QbspjSgom0qmdSedksWxw1y_dkI.roa (hash: eJ1YS4oVCoR1VNmiqp1NCkjDzMJ9GIvRJ3pjx5vZ9ic=)
                          11: SSFvXBZbgnp_1z2BB669L2PGPiQ.crl (hash: h9RpVFAgFVwWeEuS1n46vTKnssKdV1eJZhhOooZGKEQ=)
                          12: TOVytZLtGiR_loWDvv77N1q9Wfs.roa (hash: Sv4e/TvtoYqQVyB6uh9qVYGBsdkIHsts6lbRC1DO+ec=)
                          13: UcQ1Ippcic9QsMq4m2D2gO9ZpIk.roa (hash: Y4z7KLj7vfcDesQxa00pP19sxOBjnRSBjEe98F7tXaU=)
                          14: WgBBESiMNBhg0ejLbo4ygFVFK_g.roa (hash: fOGX3A1MJMqw5iFjseRV1GnR/NKzbA2c83gmI0QyUAc=)
                          15: bZJA4Zdk6OCETrYbfAEHSsuzwDE.roa (hash: IUm+Or+NvYeQ78zXKIY9OqKwxZRYHCF8Axsyp7t54Y8=)
                          16: cLp8aoUEerNehAr3h59hozd_gn0.asa (hash: H0H1PRm+pfO0EaD/QilESt/v2w81RZ9KkTdDOLHz0OM=)
                          17: q-kjvAzpx-ZYDXpOS_cviEYAaOc.roa (hash: 1g4myUSs6hufFOhffJJdUxf69ZM3/4EE4AG3+gn7wds=)
                          18: r-jH3K8gcLw126eQ4FkoGo2cj9Q.roa (hash: WprvCGc4fvgZRtpPYXPu9X3gBWvFU60j9mgBknNXAj8=)
                          19: uLmKjHdh6xVL5Ct2SX4RrNBGZlY.roa (hash: M6ZErU+xYI38Ut27LDMzp6JcZbiEl5nEdPQAb8KQF+I=)
                          20: vEQzBYHoPzDXuty_rx-5GlAJtfQ.roa (hash: s7mP1EwT7gSUHcvBRHCBoQGsDjEPpmRpeu0/iQN+vMQ=)
                          21: yaioAwQqgstiMhVwqwEHasXnYDs.roa (hash: B1OftcLanWUv1RXMYsVOlCmHJWT10XchoJjDrQXqjiM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:47:ee:33:6c:a2:bb:54:5d:69:2b:8a:f6:b5:9a:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
        Validity
            Not Before: Jun 13 00:00:45 2026 GMT
            Not After : Jun 14 00:00:45 2026 GMT
        Subject: CN=b5aef647a84fa2c5748fcfb894da4fae6602c8e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:76:fb:63:b4:d0:07:60:05:93:70:62:35:cc:
                    f4:98:ae:86:c9:78:78:d3:b8:6f:ce:c7:20:ad:1b:
                    a4:77:9c:15:4e:2c:bd:4a:4e:e8:a4:1c:29:cf:95:
                    4d:b5:40:fa:61:b1:1c:40:4c:ad:8d:10:76:5b:3c:
                    df:33:e7:1f:cb:c1:4a:0e:25:73:d6:7d:42:be:62:
                    73:37:e1:1d:ed:e8:48:2e:81:59:8a:1c:dc:30:fa:
                    67:af:2a:f7:a8:d7:78:63:61:15:cc:98:fa:57:b4:
                    f6:09:16:c7:c6:0e:08:80:6f:10:01:d4:ba:76:f3:
                    9e:6c:ff:d8:b5:e4:cd:82:ad:f1:a9:26:5c:c9:b0:
                    df:e3:64:87:44:a5:d9:45:57:b1:7c:83:61:14:10:
                    62:a1:01:53:57:0c:0b:f3:e9:e6:72:35:94:69:a3:
                    63:d7:5b:e7:b9:3e:2e:17:c1:87:14:90:be:3c:40:
                    44:59:36:16:31:e4:84:ab:c9:42:f0:c5:c3:c3:50:
                    3a:29:f6:b4:aa:db:9f:95:47:e0:a2:c5:5a:98:8a:
                    4b:56:18:57:31:a8:12:d8:9a:27:bf:ee:0e:a2:66:
                    af:f2:b2:12:f8:69:64:c4:d7:5c:ee:43:e5:cf:59:
                    9c:65:b4:e3:6f:86:41:43:8e:50:1b:7a:e0:50:a4:
                    a0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:AE:F6:47:A8:4F:A2:C5:74:8F:CF:B8:94:DA:4F:AE:66:02:C8:E8
            X509v3 Authority Key Identifier:
                keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:6d:73:8b:96:d3:62:2f:c7:5a:3a:c6:4f:a6:ca:ca:5d:a1:
         84:55:cc:42:e7:14:20:ee:0c:35:eb:f1:b0:b8:fe:d7:6e:ce:
         74:b2:9c:46:91:26:1f:a9:4e:33:62:43:e6:0e:6c:42:98:a1:
         80:16:9b:0d:02:69:15:a8:bf:e1:77:30:5d:64:ab:cd:be:96:
         e4:0f:4e:a3:7f:e4:75:5e:45:61:89:4a:07:a1:93:e5:2d:08:
         01:52:4b:3d:44:cf:91:7a:40:ea:7f:af:e8:06:06:8b:e2:53:
         50:3c:d1:13:ea:1c:cc:d8:b9:6d:0f:d6:ab:e2:a0:28:16:84:
         9c:f2:37:43:80:63:4c:4f:74:44:e7:4b:40:d4:5f:8e:33:ec:
         67:07:e3:a9:c5:8a:58:dd:32:ee:cb:56:9d:b5:5e:45:17:8e:
         8f:78:42:76:46:b5:50:fe:27:49:c8:90:2d:df:4f:92:f9:a3:
         48:75:18:01:03:5f:73:e0:2d:72:88:6a:97:70:39:70:c1:67:
         b1:8a:50:63:15:f4:39:1d:da:81:80:f8:fb:f5:0b:8d:b5:77:
         89:57:4a:6d:51:26:da:77:ac:be:90:31:63:29:03:f0:58:3e:
         56:1e:be:bf:4f:b9:01:0d:30:1b:8a:d9:7b:b7:1e:ad:e5:a5:
         6f:16:91:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+R+4zbKK7VF1pK4r2tZqjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MjE2ZjVjMTY1YjgyN2E3ZmQ3M2Q4MTA3YWViZDJmNjNj
NjNlMjQwHhcNMjYwNjEzMDAwMDQ1WhcNMjYwNjE0MDAwMDQ1WjAzMTEwLwYDVQQD
EyhiNWFlZjY0N2E4NGZhMmM1NzQ4ZmNmYjg5NGRhNGZhZTY2MDJjOGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnb7Y7TQB2AFk3BiNcz0mK6GyXh4
07hvzscgrRukd5wVTiy9Sk7opBwpz5VNtUD6YbEcQEytjRB2WzzfM+cfy8FKDiVz
1n1CvmJzN+Ed7ehILoFZihzcMPpnryr3qNd4Y2EVzJj6V7T2CRbHxg4IgG8QAdS6
dvOebP/YteTNgq3xqSZcybDf42SHRKXZRVexfINhFBBioQFTVwwL8+nmcjWUaaNj
11vnuT4uF8GHFJC+PEBEWTYWMeSEq8lC8MXDw1A6Kfa0qtuflUfgosVamIpLVhhX
MagS2Jonv+4Oomav8rIS+GlkxNdc7kPlz1mcZbTjb4ZBQ45QG3rgUKSgRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWu9keoT6LFdI/PuJTaT65mAsjoMB8GA1UdIwQY
MBaAFEkhb1wWW4J6f9c9gQeuvS9jxj4kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQt
MGRiYmMyNDllNjU3LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQtMGRiYmMyNDllNjU3
LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARm1zi5bT
Yi/HWjrGT6bKyl2hhFXMQucUIO4MNevxsLj+127OdLKcRpEmH6lOM2JD5g5sQpih
gBabDQJpFai/4XcwXWSrzb6W5A9Oo3/kdV5FYYlKB6GT5S0IAVJLPUTPkXpA6n+v
6AYGi+JTUDzRE+oczNi5bQ/Wq+KgKBaEnPI3Q4BjTE90ROdLQNRfjjPsZwfjqcWK
WN0y7stWnbVeRReOj3hCdka1UP4nSciQLd9PkvmjSHUYAQNfc+Atcohql3A5cMFn
sYpQYxX0OR3agYD4+/ULjbV3iVdKbVEm2nesvpAxYykD8Fg+Vh6+v0+5AQ0wG4rZ
e7cereWlbxaR3g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:28:37 2026 by rpki-client