Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
File:                     0ZMX0nI53HsNVBM74aplydwB9DQ.mft (raw, json)
Hash identifier:          co9+2OVpb+vFSIKTOxbBReo3ppKTU/gTQc/SEdUimmU=
Subject key identifier:   2C:77:56:82:90:B7:22:A0:87:4A:19:1E:95:35:EE:0A:96:91:07:75
Authority key identifier: D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34
Certificate issuer:       /CN=d19317d27239dc7b0d54133be1aa65c9dc01f434
Certificate serial:       019EBE7EBB507D27A0A50FD4605C60FC01CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
Manifest number:          149C
Signing time:             Sat 13 Jun 2026 01:00:36 +0000
Manifest this update:     Sat 13 Jun 2026 01:00:36 +0000
Manifest next update:     Sun 14 Jun 2026 01:00:36 +0000
Files and hashes:         1: 0ZMX0nI53HsNVBM74aplydwB9DQ.crl (hash: Vv9+3dPJ15agfzNxCOm3CaowiXXJnfGMxauGQjWQFZ0=)
                          2: TJgG5JgLQBCuHjTc6SCRX0Gwecs.roa (hash: sbP+Ctp1kLffFP2dFlRcWQm0kZSgtgHBUAs9I18M36w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7e:bb:50:7d:27:a0:a5:0f:d4:60:5c:60:fc:01:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d19317d27239dc7b0d54133be1aa65c9dc01f434
        Validity
            Not Before: Jun 13 01:00:36 2026 GMT
            Not After : Jun 14 01:00:36 2026 GMT
        Subject: CN=2c77568290b722a0874a191e9535ee0a96910775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ca:4e:5b:1c:13:c7:60:ee:2b:b4:32:4a:62:
                    fc:0c:f1:13:b1:03:18:70:ab:e0:92:10:0c:c2:94:
                    aa:9c:45:48:bd:3a:28:77:c7:6b:bd:14:c1:2e:b4:
                    ed:f5:cd:1c:23:c0:f6:02:5d:1c:34:f5:71:76:4b:
                    46:87:ba:ff:96:c3:14:a0:90:a0:9a:b8:27:c3:6f:
                    10:1c:e2:89:72:fa:93:a4:71:4a:73:f5:5e:ff:3d:
                    e2:e3:ac:d1:95:8b:12:c1:3e:87:71:7b:a8:11:09:
                    2d:0b:a5:5e:66:47:25:3c:3a:86:8f:fe:c1:e5:73:
                    52:ba:b3:d6:33:f0:76:26:cf:54:7a:9a:f3:69:0c:
                    80:75:87:a8:bf:0a:2d:32:59:ee:b5:29:b7:66:2b:
                    14:32:d4:8d:8f:9f:1e:dd:fb:ce:64:33:d2:af:90:
                    45:b0:dd:f0:c2:79:18:cc:87:49:68:08:e7:05:f2:
                    ba:08:58:a4:4e:f4:75:a4:59:67:fb:ea:b1:1b:88:
                    69:41:b6:fb:32:74:49:1f:c6:d1:be:49:a4:8a:6d:
                    cd:35:18:e6:28:66:e7:a6:f6:73:b9:90:26:e3:15:
                    39:47:de:fe:2d:12:a3:d4:81:bb:f0:c3:2f:36:ca:
                    ff:36:ae:5e:67:66:f8:e0:c7:82:04:6f:a4:1b:c9:
                    fe:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:77:56:82:90:B7:22:A0:87:4A:19:1E:95:35:EE:0A:96:91:07:75
            X509v3 Authority Key Identifier:
                keyid:D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:77:03:23:7f:d0:78:74:d6:b6:53:c2:fc:e5:33:3a:96:75:
         01:87:0d:87:7e:44:aa:46:88:d9:5a:0b:bd:55:c2:a9:d4:e3:
         e2:20:3f:35:a3:de:a2:6c:c9:1c:f5:a9:9a:d1:3d:fb:85:76:
         08:06:87:3e:a1:b9:89:38:f5:8e:94:f6:8e:14:23:33:4c:9b:
         42:3a:5e:24:d5:68:04:41:bc:92:c1:0c:ef:7c:ee:a1:63:1b:
         3b:96:b1:4c:11:d3:13:25:ee:ba:3b:62:04:93:5d:8b:73:03:
         1f:46:34:76:b6:c9:ce:10:1b:bf:61:fd:75:14:d7:60:13:38:
         6e:0c:b6:ea:23:d3:b3:47:6c:e0:42:8d:fb:63:37:d7:93:2a:
         5e:21:fb:5c:35:e8:84:b4:4d:2f:93:76:56:56:1f:2c:79:a7:
         96:71:28:3f:82:1b:7e:ca:e8:97:9e:59:33:c7:f7:14:29:1c:
         88:40:d7:18:53:5f:83:b4:f3:6b:68:fa:b8:82:e3:41:f4:5e:
         be:75:15:e1:2c:43:b0:ed:35:95:fc:cf:48:e0:70:da:9f:83:
         46:f0:d4:f4:3c:3b:ff:18:c7:e6:46:fd:37:f2:22:f5:27:e3:
         23:f6:66:6f:d8:5b:c3:5b:5a:28:21:36:87:a5:b4:61:04:6f:
         5e:5d:2d:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+frtQfSegpQ/UYFxg/AHNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOTMxN2QyNzIzOWRjN2IwZDU0MTMzYmUxYWE2NWM5ZGMw
MWY0MzQwHhcNMjYwNjEzMDEwMDM2WhcNMjYwNjE0MDEwMDM2WjAzMTEwLwYDVQQD
EygyYzc3NTY4MjkwYjcyMmEwODc0YTE5MWU5NTM1ZWUwYTk2OTEwNzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8pOWxwTx2DuK7QySmL8DPETsQMY
cKvgkhAMwpSqnEVIvTood8drvRTBLrTt9c0cI8D2Al0cNPVxdktGh7r/lsMUoJCg
mrgnw28QHOKJcvqTpHFKc/Ve/z3i46zRlYsSwT6HcXuoEQktC6VeZkclPDqGj/7B
5XNSurPWM/B2Js9UeprzaQyAdYeovwotMlnutSm3ZisUMtSNj58e3fvOZDPSr5BF
sN3wwnkYzIdJaAjnBfK6CFikTvR1pFln++qxG4hpQbb7MnRJH8bRvkmkim3NNRjm
KGbnpvZzuZAm4xU5R97+LRKj1IG78MMvNsr/Nq5eZ2b44MeCBG+kG8n+7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCx3VoKQtyKgh0oZHpU17gqWkQd1MB8GA1UdIwQY
MBaAFNGTF9JyOdx7DVQTO+GqZcncAfQ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFpNWDBuSTUzSHNOVkJNNzRhcGx5ZHdCOURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lNzFlMmUtOTU0Mi00ODljLTliZmYt
ZTZkOTU4OGNlN2U3LzEvMFpNWDBuSTUzSHNOVkJNNzRhcGx5ZHdCOURRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lNzFlMmUtOTU0Mi00ODljLTliZmYtZTZkOTU4OGNlN2U3
LzEvMFpNWDBuSTUzSHNOVkJNNzRhcGx5ZHdCOURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn3cDI3/Q
eHTWtlPC/OUzOpZ1AYcNh35EqkaI2VoLvVXCqdTj4iA/NaPeomzJHPWpmtE9+4V2
CAaHPqG5iTj1jpT2jhQjM0ybQjpeJNVoBEG8ksEM73zuoWMbO5axTBHTEyXuujti
BJNdi3MDH0Y0drbJzhAbv2H9dRTXYBM4bgy26iPTs0ds4EKN+2M315MqXiH7XDXo
hLRNL5N2VlYfLHmnlnEoP4Ibfsrol55ZM8f3FCkciEDXGFNfg7Tza2j6uILjQfRe
vnUV4SxDsO01lfzPSOBw2p+DRvDU9Dw7/xjH5kb9N/Ii9SfjI/Zmb9hbw1taKCE2
h6W0YQRvXl0teA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:12:26 2026 by rpki-client