Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.mft
File:                     02JOkIx0mP22E1QnU-9Wx1zXBL0.mft (raw, json)
Hash identifier:          gr9CrG5u39ePDJdXJSmkygT47ZjHRo1vaAW6sr2tqXA=
Subject key identifier:   31:CC:4C:B4:37:C7:D8:0F:D9:82:1E:2D:C5:D5:9A:E3:13:3E:BF:08
Authority key identifier: D3:62:4E:90:8C:74:98:FD:B6:13:54:27:53:EF:56:C7:5C:D7:04:BD
Certificate issuer:       /CN=d3624e908c7498fdb613542753ef56c75cd704bd
Certificate serial:       019EBE7FCB4FFC6548D0A640D3DA1DCA23C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02JOkIx0mP22E1QnU-9Wx1zXBL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.mft
Manifest number:          0D95
Signing time:             Sat 13 Jun 2026 01:01:46 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:46 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:46 +0000
Files and hashes:         1: 02JOkIx0mP22E1QnU-9Wx1zXBL0.crl (hash: oJPVhgpBRayC89Oxbyrp+NZS8j8LMQMn0HCUPbC+C1E=)
                          2: xY4otenPhOP0H70AgN8yfipmuag.roa (hash: j8oE81MNRmqQfvzLQxhYODVo2K+D9FqNssi/KIrbHB4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/02JOkIx0mP22E1QnU-9Wx1zXBL0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:cb:4f:fc:65:48:d0:a6:40:d3:da:1d:ca:23:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3624e908c7498fdb613542753ef56c75cd704bd
        Validity
            Not Before: Jun 13 01:01:46 2026 GMT
            Not After : Jun 14 01:01:46 2026 GMT
        Subject: CN=31cc4cb437c7d80fd9821e2dc5d59ae3133ebf08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:af:e7:2f:8b:cf:ef:ce:5a:1b:3b:af:62:c4:
                    af:da:b5:6a:19:f5:36:95:3c:c3:d7:62:20:b2:84:
                    08:27:44:af:c5:65:60:d7:f2:dc:2a:d7:91:1a:31:
                    91:76:fa:80:02:d0:88:4f:a2:cd:21:90:a0:c8:09:
                    c0:1d:83:50:73:c7:15:8f:1a:ca:86:43:f9:1c:0f:
                    28:14:c3:35:a7:81:aa:fd:f7:33:c6:3a:41:10:f7:
                    66:82:0b:b2:34:db:12:6a:20:d0:b5:16:10:78:56:
                    87:db:7b:b1:01:c9:1f:42:b7:c5:c3:0c:1e:3c:de:
                    dd:37:34:5c:8f:cf:ab:9c:2c:e1:f3:ea:df:ae:6b:
                    2d:3d:5f:fe:91:50:99:22:c7:e9:8c:e1:0b:14:8d:
                    74:61:31:84:5e:7a:8c:07:6a:20:4d:df:6b:6f:d0:
                    0d:10:0b:f2:9b:c9:e8:2d:07:de:dc:c1:ed:89:61:
                    e8:c6:3a:bb:a9:25:6b:87:17:2b:50:96:02:9b:e4:
                    d2:0f:4c:29:46:7e:67:48:13:37:85:0b:f3:01:8e:
                    55:95:04:5a:5e:e4:f9:9a:4e:fe:26:9e:62:ef:74:
                    91:d4:b6:9f:b7:15:84:91:da:dc:fb:1f:6a:d1:6b:
                    00:ec:bb:db:9f:82:a8:7c:9c:50:f4:98:61:20:a3:
                    59:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:CC:4C:B4:37:C7:D8:0F:D9:82:1E:2D:C5:D5:9A:E3:13:3E:BF:08
            X509v3 Authority Key Identifier:
                keyid:D3:62:4E:90:8C:74:98:FD:B6:13:54:27:53:EF:56:C7:5C:D7:04:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02JOkIx0mP22E1QnU-9Wx1zXBL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/42ef1b-10c7-4dac-9c13-6450f1841122/1/02JOkIx0mP22E1QnU-9Wx1zXBL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:07:1b:12:7a:be:1e:c4:d9:75:70:d9:a2:65:37:6e:92:21:
         4f:0c:ae:4d:74:6b:e0:ca:06:c0:f9:9d:18:ad:74:41:e2:2e:
         3b:56:34:83:0c:8e:4f:5f:a2:c7:10:e4:02:13:08:6b:52:3f:
         87:a2:5b:f0:36:26:ed:a8:2c:ad:2e:ef:93:a2:58:9a:8f:35:
         29:e3:9a:92:a2:77:6f:cd:b9:69:2f:e3:39:9b:7f:5f:0f:19:
         ce:a5:13:60:e8:14:94:92:db:84:95:e8:53:49:31:a4:e1:59:
         95:6a:ea:ad:ef:26:5b:8a:30:b5:65:02:bf:e5:d2:ad:7c:e1:
         a9:64:09:76:1c:03:02:e5:25:bf:ad:a1:ce:04:91:b9:10:e0:
         7e:c2:45:c1:5a:1b:66:12:a6:d2:ed:9c:eb:6d:47:4e:8a:8b:
         fb:af:d8:c2:a1:93:aa:12:24:4f:66:6a:10:de:f7:a9:de:f0:
         4c:64:79:91:e7:7e:86:c5:f7:14:2e:e3:c9:2a:fa:98:dc:de:
         c7:89:04:b6:a1:34:c9:ab:3a:c6:c5:c6:9d:a1:f8:77:53:b8:
         a2:ef:84:f8:f9:38:0c:3d:61:99:69:e9:63:06:47:12:77:72:
         33:29:5c:ca:ca:b5:a5:d2:e7:a3:85:6a:50:48:c6:b0:ad:a0:
         94:ae:1d:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+f8tP/GVI0KZA09odyiPIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNjI0ZTkwOGM3NDk4ZmRiNjEzNTQyNzUzZWY1NmM3NWNk
NzA0YmQwHhcNMjYwNjEzMDEwMTQ2WhcNMjYwNjE0MDEwMTQ2WjAzMTEwLwYDVQQD
EygzMWNjNGNiNDM3YzdkODBmZDk4MjFlMmRjNWQ1OWFlMzEzM2ViZjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6/nL4vP785aGzuvYsSv2rVqGfU2
lTzD12IgsoQIJ0SvxWVg1/LcKteRGjGRdvqAAtCIT6LNIZCgyAnAHYNQc8cVjxrK
hkP5HA8oFMM1p4Gq/fczxjpBEPdmgguyNNsSaiDQtRYQeFaH23uxAckfQrfFwwwe
PN7dNzRcj8+rnCzh8+rfrmstPV/+kVCZIsfpjOELFI10YTGEXnqMB2ogTd9rb9AN
EAvym8noLQfe3MHtiWHoxjq7qSVrhxcrUJYCm+TSD0wpRn5nSBM3hQvzAY5VlQRa
XuT5mk7+Jp5i73SR1LaftxWEkdrc+x9q0WsA7Lvbn4KofJxQ9JhhIKNZoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDHMTLQ3x9gP2YIeLcXVmuMTPr8IMB8GA1UdIwQY
MBaAFNNiTpCMdJj9thNUJ1PvVsdc1wS9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDJKT2tJeDBtUDIyRTFRblUtOVd4MXpYQkwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC80MmVmMWItMTBjNy00ZGFjLTljMTMt
NjQ1MGYxODQxMTIyLzEvMDJKT2tJeDBtUDIyRTFRblUtOVd4MXpYQkwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC80MmVmMWItMTBjNy00ZGFjLTljMTMtNjQ1MGYxODQxMTIy
LzEvMDJKT2tJeDBtUDIyRTFRblUtOVd4MXpYQkwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASgcbEnq+
HsTZdXDZomU3bpIhTwyuTXRr4MoGwPmdGK10QeIuO1Y0gwyOT1+ixxDkAhMIa1I/
h6Jb8DYm7agsrS7vk6JYmo81KeOakqJ3b825aS/jOZt/Xw8ZzqUTYOgUlJLbhJXo
U0kxpOFZlWrqre8mW4owtWUCv+XSrXzhqWQJdhwDAuUlv62hzgSRuRDgfsJFwVob
ZhKm0u2c621HToqL+6/YwqGTqhIkT2ZqEN73qd7wTGR5ked+hsX3FC7jySr6mNze
x4kEtqE0yas6xsXGnaH4d1O4ou+E+Pk4DD1hmWnpYwZHEndyMylcysq1pdLno4Vq
UEjGsK2glK4dlg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:32:30 2026 by rpki-client