Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
File:                     7ixIe2tr3aIheQctkqjwHo5zZjQ.mft (raw, json)
Hash identifier:          9dxz7yK/pm6AJHM7ysYJL6x5wzpnGWi+utEF5UdvEpk=
Subject key identifier:   46:0D:0C:DC:61:CD:2A:0E:36:90:E2:87:7B:15:78:02:6D:87:22:30
Authority key identifier: EE:2C:48:7B:6B:6B:DD:A2:21:79:07:2D:92:A8:F0:1E:8E:73:66:34
Certificate issuer:       /CN=ee2c487b6b6bdda22179072d92a8f01e8e736634
Certificate serial:       019EBF5B1DAA2EF7076372B541EEFF035AF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
Manifest number:          1959
Signing time:             Sat 13 Jun 2026 05:01:19 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:19 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:19 +0000
Files and hashes:         1: 7ixIe2tr3aIheQctkqjwHo5zZjQ.crl (hash: 4mOJ25046jz9nwKEPQbMD9QrIV66v4ZEqm88uSILyFE=)
                          2: _osGDzZycVvwVO8jk7tST0-kMuc.roa (hash: V5At1uVjWkeBJy6WzVu631/zeJQGqErhpfeeQ5kY2uw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5b:1d:aa:2e:f7:07:63:72:b5:41:ee:ff:03:5a:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee2c487b6b6bdda22179072d92a8f01e8e736634
        Validity
            Not Before: Jun 13 05:01:19 2026 GMT
            Not After : Jun 14 05:01:19 2026 GMT
        Subject: CN=460d0cdc61cd2a0e3690e2877b1578026d872230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c1:9f:5f:99:37:94:d4:94:36:ed:b1:db:e7:
                    31:86:1d:d6:2b:93:01:8f:5a:45:60:24:24:74:fc:
                    d1:51:cf:4b:55:1e:ac:73:09:d6:ab:28:48:1f:b7:
                    b8:fa:19:d2:ad:a0:47:6b:81:46:3a:a9:47:67:07:
                    2e:52:ae:e4:0f:c9:cf:6c:bf:40:58:74:4d:9c:0f:
                    35:9f:97:fd:d7:38:33:a1:87:c4:db:fe:11:63:37:
                    e3:22:e9:92:e3:35:9b:f7:e5:c3:c5:88:42:ef:43:
                    46:96:58:e3:07:40:4c:95:6c:3b:f9:7b:a8:8f:0a:
                    1d:28:74:e3:1c:fa:ac:13:b9:7d:cd:91:2c:38:17:
                    15:c8:5d:4a:38:a2:d1:fe:ae:17:ac:e8:67:ba:4a:
                    f6:dd:df:92:ae:91:cd:a8:4e:11:c6:3a:d2:31:8f:
                    d8:34:41:f3:97:e5:b3:12:fc:d2:66:09:dc:74:18:
                    c1:61:f0:90:ec:16:e0:b7:dc:14:a3:2c:09:7e:ae:
                    d9:e4:64:12:5e:fc:1d:01:3c:09:41:9d:e9:9b:f1:
                    d2:06:e6:5a:db:ec:45:a7:b6:96:90:19:fe:ac:c5:
                    8e:00:9e:3f:0c:eb:2e:01:08:08:f1:b3:70:25:01:
                    c8:3b:10:c7:56:6f:a6:1d:2b:d7:d2:58:24:81:35:
                    c1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:0D:0C:DC:61:CD:2A:0E:36:90:E2:87:7B:15:78:02:6D:87:22:30
            X509v3 Authority Key Identifier:
                keyid:EE:2C:48:7B:6B:6B:DD:A2:21:79:07:2D:92:A8:F0:1E:8E:73:66:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:57:d1:8e:9b:5f:d3:7c:da:3f:91:48:ae:97:1a:bb:9d:cf:
         76:4b:43:3c:31:fa:f4:f0:c8:72:a2:c2:51:5f:bd:00:80:9b:
         10:20:79:50:cb:76:9d:38:3f:8c:67:89:c0:e0:b5:80:f3:aa:
         7f:97:b7:22:e8:7b:e6:df:73:ef:0e:25:17:2e:db:62:eb:66:
         67:99:7b:4b:e8:93:6b:51:f8:c0:86:37:90:ab:d5:3a:cd:9b:
         0d:31:bc:bf:18:d6:de:31:fd:b4:90:31:8f:8e:ac:22:bb:ca:
         f4:ae:3c:52:f6:04:4e:f4:94:23:ed:90:fb:2d:e5:73:61:32:
         e2:fc:14:a1:54:ee:03:f9:33:c4:dd:44:3d:c0:66:54:46:44:
         94:86:18:d8:7a:0e:11:0d:85:e1:7c:c5:27:2f:ac:d6:00:b9:
         6d:c1:c2:18:20:5e:59:25:c7:80:ce:93:fe:bf:7b:23:87:9b:
         28:b5:c3:78:76:9c:41:30:8b:e2:67:bd:47:0a:6a:85:13:d8:
         67:84:3d:65:43:b9:88:27:69:4c:6a:3c:c9:28:4f:6e:68:24:
         2c:23:d5:18:53:50:d9:97:3a:30:67:9b:13:74:3b:2f:e0:88:
         8e:a6:2c:83:61:0d:22:b8:6d:30:b6:6e:6b:64:81:b4:67:8d:
         c2:12:5c:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/Wx2qLvcHY3K1Qe7/A1r0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMmM0ODdiNmI2YmRkYTIyMTc5MDcyZDkyYThmMDFlOGU3
MzY2MzQwHhcNMjYwNjEzMDUwMTE5WhcNMjYwNjE0MDUwMTE5WjAzMTEwLwYDVQQD
Eyg0NjBkMGNkYzYxY2QyYTBlMzY5MGUyODc3YjE1NzgwMjZkODcyMjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMGfX5k3lNSUNu2x2+cxhh3WK5MB
j1pFYCQkdPzRUc9LVR6scwnWqyhIH7e4+hnSraBHa4FGOqlHZwcuUq7kD8nPbL9A
WHRNnA81n5f91zgzoYfE2/4RYzfjIumS4zWb9+XDxYhC70NGlljjB0BMlWw7+Xuo
jwodKHTjHPqsE7l9zZEsOBcVyF1KOKLR/q4XrOhnukr23d+SrpHNqE4RxjrSMY/Y
NEHzl+WzEvzSZgncdBjBYfCQ7Bbgt9wUoywJfq7Z5GQSXvwdATwJQZ3pm/HSBuZa
2+xFp7aWkBn+rMWOAJ4/DOsuAQgI8bNwJQHIOxDHVm+mHSvX0lgkgTXBlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYNDNxhzSoONpDih3sVeAJthyIwMB8GA1UdIwQY
MBaAFO4sSHtra92iIXkHLZKo8B6Oc2Y0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2l4SWUydHIzYUloZVFjdGtxandIbzV6WmpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zZmYwMjctMzNkNC00MTlkLWFhNmIt
NGI5ODNmMWI4NGEyLzEvN2l4SWUydHIzYUloZVFjdGtxandIbzV6WmpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8zZmYwMjctMzNkNC00MTlkLWFhNmItNGI5ODNmMWI4NGEy
LzEvN2l4SWUydHIzYUloZVFjdGtxandIbzV6WmpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt1fRjptf
03zaP5FIrpcau53PdktDPDH69PDIcqLCUV+9AICbECB5UMt2nTg/jGeJwOC1gPOq
f5e3Iuh75t9z7w4lFy7bYutmZ5l7S+iTa1H4wIY3kKvVOs2bDTG8vxjW3jH9tJAx
j46sIrvK9K48UvYETvSUI+2Q+y3lc2Ey4vwUoVTuA/kzxN1EPcBmVEZElIYY2HoO
EQ2F4XzFJy+s1gC5bcHCGCBeWSXHgM6T/r97I4ebKLXDeHacQTCL4me9RwpqhRPY
Z4Q9ZUO5iCdpTGo8yShPbmgkLCPVGFNQ2Zc6MGebE3Q7L+CIjqYsg2ENIrhtMLZu
a2SBtGeNwhJclA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:14:15 2026 by rpki-client