Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft
File:                     9EDl66L4v8j-j-VsyIpCiWUjkLo.mft (raw, json)
Hash identifier:          PBi9HQoM9GoR9O1dmyQyrZWdhhV1mzNHnpn7r06zPbY=
Subject key identifier:   E0:BA:E7:10:67:DD:42:1B:97:EF:27:44:68:3D:20:40:FF:62:D2:AC
Authority key identifier: F4:40:E5:EB:A2:F8:BF:C8:FE:8F:E5:6C:C8:8A:42:89:65:23:90:BA
Certificate issuer:       /CN=f440e5eba2f8bfc8fe8fe56cc88a4289652390ba
Certificate serial:       019F18676AC23B81CCA6FAAB511E20A9ACE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft
Manifest number:          11A5
Signing time:             Tue 30 Jun 2026 12:00:58 +0000
Manifest this update:     Tue 30 Jun 2026 12:00:58 +0000
Manifest next update:     Wed 01 Jul 2026 12:00:58 +0000
Files and hashes:         1: 9EDl66L4v8j-j-VsyIpCiWUjkLo.crl (hash: LkgX//8jYBGz8eCGkJ7zwAY13WcJjIYqLtYymx6rdsY=)
                          2: 9NC9VZWVXCDGXS-Gbz2sbEpud3w.roa (hash: ENTPA3eKA+o83CbO6DLdaT2bnskiGmTmI748T5YuAPs=)
                          3: E-bHCsYrW7SrEgoszTkYjWaBUl0.roa (hash: SQvcR4616bSFv3T1JdnviQPzodPyTLJ2qwgGIvoGyQQ=)
                          4: dx_EmdaCtCk3lPgY9GHpXyywHN4.roa (hash: A9UJpCPfL7hO2rNlUxE5iQopLk2eq6WPtVOcMxT85dU=)
                          5: jlFVDqu5eEvY4hcppuGoxG329Xk.roa (hash: sg7bhA6MrODM/82hHvHec0CZxFeKMYnKwUZdeRQd/VU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 12:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:67:6a:c2:3b:81:cc:a6:fa:ab:51:1e:20:a9:ac:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f440e5eba2f8bfc8fe8fe56cc88a4289652390ba
        Validity
            Not Before: Jun 30 12:00:58 2026 GMT
            Not After : Jul  1 12:00:58 2026 GMT
        Subject: CN=e0bae71067dd421b97ef2744683d2040ff62d2ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:17:82:c7:a6:f7:97:75:37:21:0f:24:8e:f5:
                    9a:c1:dd:ff:64:98:cc:3a:69:6f:b2:ff:1a:3d:e2:
                    97:87:e3:c2:3a:d3:72:67:a1:2c:ff:79:ac:24:c2:
                    94:7a:5d:06:49:4e:5a:fc:58:a1:23:0e:5f:cc:5c:
                    21:79:e4:da:87:57:0d:45:09:20:69:aa:dc:1f:8c:
                    99:d9:a6:2b:58:09:15:ee:cb:7f:38:e5:f5:fa:8c:
                    c6:4c:5f:1e:dc:44:07:d3:d6:7a:2f:9c:0b:fd:04:
                    53:10:9c:7e:e9:1c:52:a3:e2:72:bf:0b:fd:05:34:
                    a3:04:fd:59:8e:4c:8e:dd:a2:b1:74:08:c0:64:98:
                    d1:c1:45:fb:64:77:e0:15:aa:bb:76:ec:be:a2:03:
                    80:25:f0:06:de:0f:2c:e2:68:84:85:f0:b5:92:fa:
                    e7:70:e9:c5:50:98:1c:5a:33:c8:11:18:a5:3a:37:
                    5d:d7:40:dd:d8:8d:f4:a7:e5:bd:e7:49:78:ca:45:
                    fa:0c:e5:dc:be:aa:cd:45:80:18:45:ca:84:b5:f6:
                    75:57:de:0a:47:15:4a:dd:88:4e:03:cb:e4:c2:0b:
                    be:7f:92:21:c8:21:52:0f:86:44:fc:50:98:c1:31:
                    84:07:8b:04:60:7e:c3:58:66:25:e6:f7:d2:19:fd:
                    74:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:BA:E7:10:67:DD:42:1B:97:EF:27:44:68:3D:20:40:FF:62:D2:AC
            X509v3 Authority Key Identifier:
                keyid:F4:40:E5:EB:A2:F8:BF:C8:FE:8F:E5:6C:C8:8A:42:89:65:23:90:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:c8:28:d2:1d:97:8f:09:f9:b8:6e:02:c3:de:f7:3e:19:a1:
         5b:c2:3c:69:0c:09:b9:8f:c2:b6:ad:a9:96:b3:29:21:5b:9e:
         74:b3:20:c4:5e:f8:69:2d:71:98:68:44:7c:aa:ee:4e:0a:9c:
         e4:73:ed:18:56:e9:cb:4d:e1:c3:52:93:de:fa:7f:ff:9e:91:
         d2:5a:5f:2c:61:12:c8:7c:72:03:8c:95:f7:f9:96:9d:0f:4d:
         8e:42:d1:ef:c5:84:21:c5:29:a3:d9:78:f5:2e:79:ce:eb:87:
         a6:3f:e6:af:7d:ed:ab:83:d6:e9:d7:bd:c7:6c:d7:77:da:6c:
         c1:59:c8:c0:12:48:dc:0e:a4:35:5b:72:a4:3c:77:80:60:5d:
         8d:ca:69:77:4a:ae:e7:8e:66:4d:47:50:e4:d4:25:88:21:74:
         0b:38:bf:95:59:12:7e:45:ae:ec:9a:d5:65:a5:b6:43:05:81:
         6b:ca:6d:e1:96:e8:b0:c7:48:b8:bc:0e:78:12:76:14:35:34:
         24:0e:53:1f:ff:91:d6:bc:dc:a6:90:cf:a6:b4:96:bf:02:b8:
         b0:72:4a:a7:79:73:37:40:fc:e6:b8:5a:4f:5f:ae:f1:e2:36:
         ec:83:09:b6:82:b1:3e:af:b5:b5:83:a4:e2:4b:22:fe:f9:04:
         22:c5:22:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YZ2rCO4HMpvqrUR4gqazlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NDBlNWViYTJmOGJmYzhmZThmZTU2Y2M4OGE0Mjg5NjUy
MzkwYmEwHhcNMjYwNjMwMTIwMDU4WhcNMjYwNzAxMTIwMDU4WjAzMTEwLwYDVQQD
EyhlMGJhZTcxMDY3ZGQ0MjFiOTdlZjI3NDQ2ODNkMjA0MGZmNjJkMmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxeCx6b3l3U3IQ8kjvWawd3/ZJjM
Omlvsv8aPeKXh+PCOtNyZ6Es/3msJMKUel0GSU5a/FihIw5fzFwheeTah1cNRQkg
aarcH4yZ2aYrWAkV7st/OOX1+ozGTF8e3EQH09Z6L5wL/QRTEJx+6RxSo+Jyvwv9
BTSjBP1ZjkyO3aKxdAjAZJjRwUX7ZHfgFaq7duy+ogOAJfAG3g8s4miEhfC1kvrn
cOnFUJgcWjPIERilOjdd10Dd2I30p+W950l4ykX6DOXcvqrNRYAYRcqEtfZ1V94K
RxVK3YhOA8vkwgu+f5IhyCFSD4ZE/FCYwTGEB4sEYH7DWGYl5vfSGf10swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOC65xBn3UIbl+8nRGg9IED/YtKsMB8GA1UdIwQY
MBaAFPRA5eui+L/I/o/lbMiKQollI5C6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUVEbDY2TDR2OGotai1Wc3lJcENpV1Vqa0xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kZTg2NjItOTkzZi00N2Y3LWEyN2Yt
MDBiOTJjMWMxZWY0LzEvOUVEbDY2TDR2OGotai1Wc3lJcENpV1Vqa0xvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9kZTg2NjItOTkzZi00N2Y3LWEyN2YtMDBiOTJjMWMxZWY0
LzEvOUVEbDY2TDR2OGotai1Wc3lJcENpV1Vqa0xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh8go0h2X
jwn5uG4Cw973PhmhW8I8aQwJuY/Ctq2plrMpIVuedLMgxF74aS1xmGhEfKruTgqc
5HPtGFbpy03hw1KT3vp//56R0lpfLGESyHxyA4yV9/mWnQ9NjkLR78WEIcUpo9l4
9S55zuuHpj/mr33tq4PW6de9x2zXd9pswVnIwBJI3A6kNVtypDx3gGBdjcppd0qu
545mTUdQ5NQliCF0Czi/lVkSfkWu7JrVZaW2QwWBa8pt4ZbosMdIuLwOeBJ2FDU0
JA5TH/+R1rzcppDPprSWvwK4sHJKp3lzN0D85rhaT1+u8eI27IMJtoKxPq+1tYOk
4ksi/vkEIsUijA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:07 2026 by rpki-client