Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
File:                     dn871L-9MHHDjNTXCSvTSQkgw9k.mft (raw, json)
Hash identifier:          imcHA/PTuMkbzH0crc7eh0XJpopEMYuFBA9HQlbDYLQ=
Subject key identifier:   B1:CC:E9:07:9F:E6:E6:99:A8:A2:07:83:9B:58:B3:6C:95:91:13:6F
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Certificate issuer:       /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial:       019EE1E781E9BA864B1D123CD40708CF92AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
Manifest number:          1362
Signing time:             Fri 19 Jun 2026 22:01:46 +0000
Manifest this update:     Fri 19 Jun 2026 22:01:46 +0000
Manifest next update:     Sat 20 Jun 2026 22:01:46 +0000
Files and hashes:         1: 04nGKAyUF6nGSn-0CbpqToB-ADg.roa (hash: 5gfuIT6ilGajdYOxkLDaRN30dyX80t2LoUgmLovbsIk=)
                          2: 2_M3hjSd7CTsmWcIflPRCb5WQkA.roa (hash: lb+AroYfcHpsLjtLQUflH3VlWHXn0bD5oDoLv70oXjU=)
                          3: 2fjRCs8xlK3pQaPk8rOIDSYlcxw.roa (hash: I2k2KEupu6w+ziyxDip54GCFZn2g6M1lsanI8ZV5WcQ=)
                          4: 5O6pftiG-0snfMNxyv3fwtZN7Ek.roa (hash: tFgNvGVMrkhJ1O1ibM19VvRSpEWTVzMxrgiAaCWJHjQ=)
                          5: GApNKBWC5Ue-NAU5Sg1EwP8MY6k.roa (hash: 2tMBvhTBaG9FOblLPHKcO+h2HyVM2AobojKlvW5vzV0=)
                          6: J3vzcKMRFcvugofD01F-WNUda7g.roa (hash: tBjEDKKlNdNNr7PYENGOctFjWK7OCe+09gFHwhf+c+U=)
                          7: NV2elJY5GbLtF-8XlJluZMFiLE4.roa (hash: NuN931tACouEZPBHD68kuj2kgkRWx5yBVRTsgr/PC0M=)
                          8: S_cMNHwGmO53SbTaPSTvEUZSyO4.roa (hash: VJ2mNoR51FwtQFNmuZTNPyshVFI+sQ6fyBXwc1Q4lR4=)
                          9: dn871L-9MHHDjNTXCSvTSQkgw9k.crl (hash: BXDbeF6Myhh+x3UxhCeyemVoXP2aUJ2AMNMZ09a0Mco=)
                          10: dwc98g5fGUgPAWxFG8AQgkdTGUE.roa (hash: r33CVUyGl3+7P6ErqgK1Pc1v2YLarpkrErbsExQx0So=)
                          11: ocHcLPqIiXs39TMNmLocr_HH0to.roa (hash: 2m7W1dsOxKOHHVh+M6gzZPsYBZCOmqgU0+hBomALNJM=)
                          12: qxh4ePvu5bsopWasfzDeFkJpzFU.roa (hash: Pag+HQMgvFAsKkQpY1mX2vKDLGA3ZEYBRUSYskRKFgw=)
                          13: r2wp15RalYZ-BpL4xsNnngK0594.roa (hash: NNjjTsbzbTB3BJf0ScAIqlbHnQQtN/B+x9X2kssrtLQ=)
                          14: tiWoclLyoubi_eH2eBTEmg_nRPQ.roa (hash: v7vNaiqbe+aP8/SaLVbx8mliFyA9s414yzNmBa2a+SI=)
                          15: uuy6ECeKU5zPxhagn8FIr283yKQ.roa (hash: OOKXwwUyMmEuY99QE9mTnSKY0ij2Tkkt4XqvRj4K6hc=)
                          16: yrbB1vsBIjdbUaylEPRfMMB-k3g.roa (hash: uUmid3sXY3uL8GFqpHsIlPFVeU82iqmCl12sBdQU42s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Jun 2026 19:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e1:e7:81:e9:ba:86:4b:1d:12:3c:d4:07:08:cf:92:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
        Validity
            Not Before: Jun 19 22:01:46 2026 GMT
            Not After : Jun 20 22:01:46 2026 GMT
        Subject: CN=b1cce9079fe6e699a8a207839b58b36c9591136f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:80:e0:8d:0e:7c:47:ca:4c:88:33:f8:1c:27:
                    f9:28:bc:d7:9e:ce:79:b1:72:ee:75:c0:6d:81:a9:
                    b4:12:ee:fa:3f:f9:10:03:76:3b:8a:37:eb:9a:98:
                    d7:c6:df:33:0f:14:58:5f:06:71:be:58:d2:96:0f:
                    9a:90:44:1a:f8:c4:53:c4:d9:61:11:d9:99:87:2e:
                    b0:52:65:b3:f4:74:4e:bc:2b:99:6c:72:99:ca:56:
                    aa:69:59:24:0d:98:71:8e:06:38:ab:96:c1:41:8b:
                    73:41:6c:50:4e:3f:97:bc:07:2e:8a:50:04:8c:ed:
                    ca:2c:6e:ce:de:b0:d0:25:dc:72:1e:a9:5e:60:6f:
                    3e:c2:c4:99:fd:40:38:ef:f5:e2:8b:d8:a1:ff:6b:
                    f3:1d:2b:3a:7a:e4:59:72:53:23:06:15:bb:b3:ca:
                    04:02:c4:3a:1d:ac:a8:5e:1d:66:57:a7:f2:8e:20:
                    84:a4:f0:d4:95:78:71:36:43:cb:b5:57:77:c8:1c:
                    25:1c:62:14:6a:71:39:af:0d:4a:28:49:31:80:7e:
                    09:5b:41:f6:f2:d9:ca:8e:f2:b3:b6:b9:a3:56:f4:
                    56:fe:7a:11:70:3a:b3:d7:bc:e9:30:9e:90:7b:7a:
                    1f:04:07:82:aa:59:f9:66:19:20:fc:16:f4:fc:3a:
                    af:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CC:E9:07:9F:E6:E6:99:A8:A2:07:83:9B:58:B3:6C:95:91:13:6F
            X509v3 Authority Key Identifier:
                keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:20:c9:c1:12:0f:5b:4a:f6:99:57:2d:b3:6f:86:64:8d:d5:
         01:1c:4d:01:8b:b1:5a:5e:8e:9b:92:db:62:e2:c3:48:ef:20:
         1c:75:0b:5e:c3:36:72:7d:0f:64:65:c2:c0:b8:0d:fe:ac:00:
         ae:8a:a2:71:f1:91:e5:ea:ef:fc:04:81:35:e1:eb:78:b8:45:
         47:3d:07:a5:e8:87:0c:e2:ad:cb:df:d7:c2:8b:c6:d3:2e:e6:
         93:4d:13:16:d6:39:69:c3:81:5e:61:2e:21:9a:d4:a1:f1:82:
         4f:ae:ba:e4:44:ad:0b:01:66:9a:0b:9f:b9:1f:c5:b9:73:be:
         fd:93:84:2a:3c:8f:23:59:08:ea:75:99:d4:24:e0:d0:31:92:
         43:06:58:96:6f:35:f4:c3:e6:da:72:0d:cd:92:63:ad:60:91:
         2e:b7:c6:9c:85:5b:0b:69:12:6a:9a:33:bb:91:0a:c3:3a:1e:
         06:7a:9d:f4:5c:43:4e:b0:61:36:49:e4:a7:94:a4:b0:9b:97:
         fd:e4:91:ad:cc:6d:b3:d2:9a:39:d8:6f:b4:f8:77:9d:34:ee:
         09:3c:3f:c2:8b:30:53:1e:e3:e0:2f:01:d7:1b:64:e5:61:3d:
         5a:f6:fb:1d:ec:4f:38:f9:64:f5:a0:61:6c:9a:9a:fd:71:b0:
         06:71:33:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7h54HpuoZLHRI81AcIz5KuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2N2YzYmQ0YmZiZDMwNzFjMzhjZDRkNzA5MmJkMzQ5MDky
MGMzZDkwHhcNMjYwNjE5MjIwMTQ2WhcNMjYwNjIwMjIwMTQ2WjAzMTEwLwYDVQQD
EyhiMWNjZTkwNzlmZTZlNjk5YThhMjA3ODM5YjU4YjM2Yzk1OTExMzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIDgjQ58R8pMiDP4HCf5KLzXns55
sXLudcBtgam0Eu76P/kQA3Y7ijfrmpjXxt8zDxRYXwZxvljSlg+akEQa+MRTxNlh
EdmZhy6wUmWz9HROvCuZbHKZylaqaVkkDZhxjgY4q5bBQYtzQWxQTj+XvAcuilAE
jO3KLG7O3rDQJdxyHqleYG8+wsSZ/UA47/Xii9ih/2vzHSs6euRZclMjBhW7s8oE
AsQ6HayoXh1mV6fyjiCEpPDUlXhxNkPLtVd3yBwlHGIUanE5rw1KKEkxgH4JW0H2
8tnKjvKztrmjVvRW/noRcDqz17zpMJ6Qe3ofBAeCqln5Zhkg/Bb0/DqvYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLHM6Qef5uaZqKIHg5tYs2yVkRNvMB8GA1UdIwQY
MBaAFHZ/O9S/vTBxw4zU1wkr00kJIMPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgt
NGZiNTU5YjNiOWIzLzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgtNGZiNTU5YjNiOWIz
LzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWCDJwRIP
W0r2mVcts2+GZI3VARxNAYuxWl6Om5LbYuLDSO8gHHULXsM2cn0PZGXCwLgN/qwA
roqicfGR5erv/ASBNeHreLhFRz0HpeiHDOKty9/XwovG0y7mk00TFtY5acOBXmEu
IZrUofGCT6665EStCwFmmgufuR/FuXO+/ZOEKjyPI1kI6nWZ1CTg0DGSQwZYlm81
9MPm2nINzZJjrWCRLrfGnIVbC2kSapozu5EKwzoeBnqd9FxDTrBhNknkp5SksJuX
/eSRrcxts9KaOdhvtPh3nTTuCTw/woswUx7j4C8B1xtk5WE9Wvb7HexPOPlk9aBh
bJqa/XGwBnEzTg==
-----END CERTIFICATE-----
Generated at Sat Jun 20 03:13:57 2026 by rpki-client