Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
File:                     X1mAEy0ZPicO0e_grShJ_oqw12w.mft (raw, json)
Hash identifier:          xej2twi7DRRsKcco/o4BwFTdMwI9dEC2kUzq9OpKkVY=
Subject key identifier:   A0:8B:14:28:F7:E1:89:5E:03:69:2E:49:DC:C1:52:76:B2:EB:33:5E
Authority key identifier: 5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
Certificate issuer:       /CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Certificate serial:       019EC0DB5909A798E10C37A4AD42A68A6C95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
Manifest number:          1961
Signing time:             Sat 13 Jun 2026 12:01:01 +0000
Manifest this update:     Sat 13 Jun 2026 12:01:01 +0000
Manifest next update:     Sun 14 Jun 2026 12:01:01 +0000
Files and hashes:         1: 6-Ew-si9J0hf6ZarrCVeQjfqjE4.roa (hash: ljHxNRtveUXCickR/eyPdSx4OKRRH+YbhLZnTAcXkXg=)
                          2: I2tNxhGFF35MT6ATAQ34a1mldMA.roa (hash: aCwLuTKx+lT5TRi4XqsraXtHCM8YuZl8sxF9wyX0Vvo=)
                          3: JCTQgcUELCWna8Z80DBMEn0zGk0.roa (hash: aQm1A8aMpcGmR9Y0OhWPfstPmLBs4VFn6LiSckCGnCs=)
                          4: X1mAEy0ZPicO0e_grShJ_oqw12w.crl (hash: +lns4RdgPx34OVD/NI9akvVXrp90mTx8SxXYLDFvoR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:59:09:a7:98:e1:0c:37:a4:ad:42:a6:8a:6c:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
        Validity
            Not Before: Jun 13 12:01:01 2026 GMT
            Not After : Jun 14 12:01:01 2026 GMT
        Subject: CN=a08b1428f7e1895e03692e49dcc15276b2eb335e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5a:c0:c3:34:0f:37:77:54:91:70:c0:37:d3:
                    99:9a:a1:84:e9:d7:ad:ca:08:f4:82:fa:7f:44:1d:
                    e1:ef:93:cd:db:58:34:43:0a:15:9d:33:89:4a:65:
                    1b:00:36:3c:ca:3c:6e:c2:ca:0c:41:58:e6:47:b3:
                    df:3c:ef:a9:ff:2b:c3:02:a4:0d:1b:db:7c:ea:b5:
                    5b:d7:3d:66:fc:72:32:57:9c:70:93:fe:d7:84:05:
                    8d:7c:7a:8a:10:39:a5:1d:29:20:06:7f:9f:45:34:
                    d7:e7:2f:ca:7a:5c:4f:ca:92:ca:0c:69:10:20:a5:
                    f2:67:74:69:62:8b:76:55:78:66:f9:db:09:f9:f4:
                    36:ab:3b:df:8e:ef:3c:a1:ab:96:7c:06:7e:8f:6c:
                    b2:02:f9:e4:ab:52:05:12:a3:0c:cb:f4:00:15:5d:
                    65:80:74:b2:af:3a:8d:a1:1a:ed:1d:f3:3c:ac:55:
                    bb:8d:db:e7:fd:2a:89:a4:07:10:63:7e:8d:4e:fa:
                    d5:32:00:b1:25:d0:9a:40:e9:53:87:c0:35:3a:3b:
                    6b:47:a2:c4:81:82:71:8f:28:98:ed:59:01:34:9a:
                    6e:f9:2b:55:d5:75:05:fe:60:f5:f6:d8:28:24:41:
                    87:6d:9b:4c:d0:e9:79:13:1a:7b:4f:8b:9b:ec:d5:
                    e4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:8B:14:28:F7:E1:89:5E:03:69:2E:49:DC:C1:52:76:B2:EB:33:5E
            X509v3 Authority Key Identifier:
                keyid:5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:7e:0e:47:ef:82:44:2b:74:cf:93:b4:45:fd:b9:00:1f:51:
         de:28:57:5f:f3:ed:e5:32:c7:5c:8b:41:95:fc:85:70:44:0d:
         f4:93:17:39:1e:93:8e:64:ac:ee:36:f1:87:a4:02:5b:3d:55:
         ac:e6:9e:d9:97:80:c4:1d:ce:b4:f7:e1:ce:44:76:5c:ba:4c:
         7e:92:20:b2:90:66:5e:e2:b3:36:eb:62:ec:b7:d3:2f:0e:df:
         96:10:e6:12:9f:b5:2d:20:53:0f:67:a6:57:85:eb:c2:60:a0:
         9d:3f:9e:c8:a5:d8:4f:0c:9f:be:82:e6:26:02:42:ff:85:e2:
         e0:c5:6a:19:35:40:17:c4:ac:aa:b4:d7:5d:a7:15:86:03:10:
         77:84:ee:fd:a4:18:31:40:4e:61:ba:aa:19:88:a8:63:d6:1b:
         32:c8:47:40:23:45:6d:17:ee:b9:2b:46:e0:9b:34:ac:9e:c6:
         ec:d3:08:30:be:db:fa:ef:9d:91:25:fc:4a:08:26:46:43:81:
         8b:83:f7:2e:27:ba:c5:19:ba:ba:51:54:5d:f1:c9:35:73:ad:
         cd:cf:06:55:74:05:6b:8d:49:b0:2c:37:82:12:23:12:8e:ec:
         82:53:95:69:37:74:6c:dd:0c:6d:f3:a0:90:dc:86:9a:6a:ac:
         e5:61:0e:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7A21kJp5jhDDekrUKmimyVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNTk4MDEzMmQxOTNlMjcwZWQxZWZlMGFkMjg0OWZlOGFi
MGQ3NmMwHhcNMjYwNjEzMTIwMTAxWhcNMjYwNjE0MTIwMTAxWjAzMTEwLwYDVQQD
EyhhMDhiMTQyOGY3ZTE4OTVlMDM2OTJlNDlkY2MxNTI3NmIyZWIzMzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFrAwzQPN3dUkXDAN9OZmqGE6det
ygj0gvp/RB3h75PN21g0QwoVnTOJSmUbADY8yjxuwsoMQVjmR7PfPO+p/yvDAqQN
G9t86rVb1z1m/HIyV5xwk/7XhAWNfHqKEDmlHSkgBn+fRTTX5y/KelxPypLKDGkQ
IKXyZ3RpYot2VXhm+dsJ+fQ2qzvfju88oauWfAZ+j2yyAvnkq1IFEqMMy/QAFV1l
gHSyrzqNoRrtHfM8rFW7jdvn/SqJpAcQY36NTvrVMgCxJdCaQOlTh8A1OjtrR6LE
gYJxjyiY7VkBNJpu+StV1XUF/mD19tgoJEGHbZtM0Ol5Exp7T4ub7NXkwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCLFCj34YleA2kuSdzBUnay6zNeMB8GA1UdIwQY
MBaAFF9ZgBMtGT4nDtHv4K0oSf6KsNdsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDFtQUV5MFpQaWNPMGVfZ3JTaEpfb3F3MTJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hYThhYzgtMTNiOC00MTk3LWJlNTYt
MWUxZGU5MWE5ODdjLzEvWDFtQUV5MFpQaWNPMGVfZ3JTaEpfb3F3MTJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9hYThhYzgtMTNiOC00MTk3LWJlNTYtMWUxZGU5MWE5ODdj
LzEvWDFtQUV5MFpQaWNPMGVfZ3JTaEpfb3F3MTJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKH4OR++C
RCt0z5O0Rf25AB9R3ihXX/Pt5TLHXItBlfyFcEQN9JMXOR6TjmSs7jbxh6QCWz1V
rOae2ZeAxB3OtPfhzkR2XLpMfpIgspBmXuKzNuti7LfTLw7flhDmEp+1LSBTD2em
V4XrwmCgnT+eyKXYTwyfvoLmJgJC/4Xi4MVqGTVAF8SsqrTXXacVhgMQd4Tu/aQY
MUBOYbqqGYioY9YbMshHQCNFbRfuuStG4Js0rJ7G7NMIML7b+u+dkSX8SggmRkOB
i4P3Lie6xRm6ulFUXfHJNXOtzc8GVXQFa41JsCw3ghIjEo7sglOVaTd0bN0MbfOg
kNyGmmqs5WEOWw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:26:30 2026 by rpki-client