Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
File:                     0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft (raw, json)
Hash identifier:          W/8aGdd65o0WKG4sHXCLm22AKjYQd1lG32uMznTRdnY=
Subject key identifier:   88:E3:D1:EE:59:C4:42:0C:30:71:BB:F6:4C:2D:40:0E:5A:97:3C:ED
Authority key identifier: D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8
Certificate issuer:       /CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8
Certificate serial:       019EBFC86CA62A485CA4D8533D79522DE81E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
Manifest number:          05DF
Signing time:             Sat 13 Jun 2026 07:00:43 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:43 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:43 +0000
Files and hashes:         1: 0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl (hash: Gm9qMcy3jAMt984cPXPVWd5pTD/fIHwSeYKKdlyieOk=)
                          2: v795sY2U8jhvRzL8MVmYlvFz9_s.roa (hash: Hn47sYXDYoB/4A+t0th2lMVq06CbmCPSmHDsJlsUcW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:6c:a6:2a:48:5c:a4:d8:53:3d:79:52:2d:e8:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d04850f8069df62dc5155c02ed1e62bf51cedbc8
        Validity
            Not Before: Jun 13 07:00:43 2026 GMT
            Not After : Jun 14 07:00:43 2026 GMT
        Subject: CN=88e3d1ee59c4420c3071bbf64c2d400e5a973ced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7c:c0:26:b9:01:73:de:d2:38:8a:2b:a4:df:
                    fc:ee:f1:ef:39:50:34:dc:30:fb:72:85:db:42:35:
                    e6:f8:1c:0d:45:9f:31:09:0e:3b:4f:a5:5a:1d:13:
                    40:8d:5e:f0:f1:1d:ca:b9:93:4c:e1:3b:5a:62:17:
                    0c:37:bc:d0:15:5c:08:62:ce:54:af:2a:87:47:2a:
                    af:69:4d:3c:dc:11:c0:5c:b2:5f:20:c9:a9:06:66:
                    c0:17:11:76:c3:16:78:e2:55:03:4c:bd:61:04:83:
                    06:2d:59:7a:1e:3e:0b:6e:bf:fb:cc:91:f4:2e:cc:
                    bc:5f:cc:2b:77:53:58:fb:fe:a6:1d:d3:42:b4:ad:
                    53:37:eb:05:d0:b8:2a:83:82:ca:f0:54:d4:c3:2c:
                    80:49:5a:be:6d:86:04:7e:2d:02:43:52:2a:a8:b0:
                    0f:56:92:1c:78:b3:6a:02:54:26:42:f5:6c:5c:38:
                    32:b2:1c:6f:45:72:56:39:08:c0:ed:91:32:b0:2c:
                    64:0e:98:d6:2b:16:a3:25:60:e2:7f:e4:00:93:eb:
                    f0:65:36:ed:d7:fb:e7:42:f0:b0:58:ac:84:09:bb:
                    10:74:1b:35:9b:0b:8b:ee:e4:4a:17:ec:86:d2:8d:
                    e5:02:d9:c6:e1:16:90:df:bd:01:5f:e5:b0:58:f8:
                    72:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E3:D1:EE:59:C4:42:0C:30:71:BB:F6:4C:2D:40:0E:5A:97:3C:ED
            X509v3 Authority Key Identifier:
                keyid:D0:48:50:F8:06:9D:F6:2D:C5:15:5C:02:ED:1E:62:BF:51:CE:DB:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EhQ-Aad9i3FFVwC7R5iv1HO28g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d097d3-d4ba-4130-8e96-ad95ebfaaae2/1/0EhQ-Aad9i3FFVwC7R5iv1HO28g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:fc:04:e2:50:6a:14:a9:7b:47:19:4e:a1:53:2a:39:d4:10:
         27:29:eb:5e:9d:dc:af:c8:ab:23:c7:24:ee:45:14:38:48:51:
         6a:fd:ff:a4:85:01:60:cf:fb:f1:59:80:a4:07:6d:72:4e:1a:
         60:97:3e:a9:9b:fe:49:33:61:07:70:ba:22:61:98:ba:ad:44:
         bc:7d:1e:28:2d:58:95:0e:e6:10:58:c4:3f:4e:34:60:e4:44:
         8d:cd:30:17:69:7f:c4:1f:3e:c4:fc:81:8e:50:5f:f7:d7:1a:
         f4:22:87:bc:4b:f0:1e:23:48:ed:1f:a9:84:d1:53:81:67:e7:
         5c:dd:11:80:85:ce:c1:6d:f4:55:4c:76:c6:bf:34:ef:12:d1:
         65:29:83:da:73:40:c5:16:2f:0e:a4:a2:e0:21:00:0d:c1:ec:
         b1:c9:18:0b:94:13:e2:6e:7d:7e:db:71:8e:04:aa:45:7d:ae:
         4a:1c:08:1b:4c:2c:5f:ac:30:c3:04:62:aa:64:d0:33:46:06:
         f8:db:90:58:36:9e:3d:dd:a0:93:2b:cd:37:1c:f4:bf:95:47:
         3b:d8:ab:c0:12:6e:35:57:46:77:ed:74:19:c6:c0:0c:b9:ca:
         91:bc:55:5e:64:e1:bb:7d:99:bb:a3:23:49:6e:52:ca:1a:2b:
         44:e0:c0:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/yGymKkhcpNhTPXlSLegeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNDg1MGY4MDY5ZGY2MmRjNTE1NWMwMmVkMWU2MmJmNTFj
ZWRiYzgwHhcNMjYwNjEzMDcwMDQzWhcNMjYwNjE0MDcwMDQzWjAzMTEwLwYDVQQD
Eyg4OGUzZDFlZTU5YzQ0MjBjMzA3MWJiZjY0YzJkNDAwZTVhOTczY2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXzAJrkBc97SOIorpN/87vHvOVA0
3DD7coXbQjXm+BwNRZ8xCQ47T6VaHRNAjV7w8R3KuZNM4TtaYhcMN7zQFVwIYs5U
ryqHRyqvaU083BHAXLJfIMmpBmbAFxF2wxZ44lUDTL1hBIMGLVl6Hj4Lbr/7zJH0
Lsy8X8wrd1NY+/6mHdNCtK1TN+sF0Lgqg4LK8FTUwyyASVq+bYYEfi0CQ1IqqLAP
VpIceLNqAlQmQvVsXDgyshxvRXJWOQjA7ZEysCxkDpjWKxajJWDif+QAk+vwZTbt
1/vnQvCwWKyECbsQdBs1mwuL7uRKF+yG0o3lAtnG4RaQ370BX+WwWPhylQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjj0e5ZxEIMMHG79kwtQA5alzztMB8GA1UdIwQY
MBaAFNBIUPgGnfYtxRVcAu0eYr9RztvIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEVoUS1BYWQ5aTNGRlZ3QzdSNWl2MUhPMjhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kMDk3ZDMtZDRiYS00MTMwLThlOTYt
YWQ5NWViZmFhYWUyLzEvMEVoUS1BYWQ5aTNGRlZ3QzdSNWl2MUhPMjhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9kMDk3ZDMtZDRiYS00MTMwLThlOTYtYWQ5NWViZmFhYWUy
LzEvMEVoUS1BYWQ5aTNGRlZ3QzdSNWl2MUhPMjhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAffwE4lBq
FKl7RxlOoVMqOdQQJynrXp3cr8irI8ck7kUUOEhRav3/pIUBYM/78VmApAdtck4a
YJc+qZv+STNhB3C6ImGYuq1EvH0eKC1YlQ7mEFjEP040YOREjc0wF2l/xB8+xPyB
jlBf99ca9CKHvEvwHiNI7R+phNFTgWfnXN0RgIXOwW30VUx2xr807xLRZSmD2nNA
xRYvDqSi4CEADcHssckYC5QT4m59fttxjgSqRX2uShwIG0wsX6wwwwRiqmTQM0YG
+NuQWDaePd2gkyvNNxz0v5VHO9irwBJuNVdGd+10GcbADLnKkbxVXmThu32Zu6Mj
SW5SyhorRODAbA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:19:14 2026 by rpki-client