Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File:                     EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier:          l5OvkMFYxzHBfYPzkbqKg/u4Q7w1DrgKkrxNDVibCNA=
Subject key identifier:   42:77:22:8B:FD:FD:EC:F0:74:09:48:16:AE:EF:B8:13:3D:F0:73:64
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       019F0104BB4DFEFD925D8A92452B655D9FA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number:          19C9
Signing time:             Thu 25 Jun 2026 23:01:54 +0000
Manifest this update:     Thu 25 Jun 2026 23:01:54 +0000
Manifest next update:     Fri 26 Jun 2026 23:01:54 +0000
Files and hashes:         1: 7ELbo8DKD8QOXRjssYS6wePnETw.roa (hash: g47QYVMiNHnqnXov0OVk0NOhZUsS+pa9D0jOV0goZEE=)
                          2: 7nHuEYfzq0sxBotIwOTKnrsuqJc.roa (hash: 5KEXUpcoESrkEUXw6CAMFCGMGysz+4l5l9DNIsTbLrQ=)
                          3: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: jk9JZCQG6qOvm0PnVJQvJSIZcc/7SnvT6HZx2Le+CZE=)
                          4: Nr7UmKzHvs5LFBWxclEXNby8v-w.roa (hash: 6yVyO1xkWu0C7uNE6Y6DPlWxOVCuyQgMCCzQsQV5E34=)
                          5: PBeIIGkcHysJPrw2bh6-t7i6h2Q.roa (hash: 8GRkaUrE7jPN3KtBvtWO8Y/2n25/ErqReEtBTVUOJOM=)
                          6: QKB2yXBKCucZIik_NUkIUu-0gsU.roa (hash: Az9ohs2u7S8Tz5MIQmRIq0++DK7ITljN4NySQ9ZLZEM=)
                          7: R15U4TurpGZ6_74GJTZ7B1mnB5w.roa (hash: nCR8dGZ8Kanmd+TAXuyL33xBxmEOGcczAv2h+qPOvfM=)
                          8: UCp9_ApWUbgQGIa1NKLJ-cS_tv8.roa (hash: yi6xNjGkjqnryzu2NNxC+M1I7oPuwMvhO/Hni9IEjDY=)
                          9: a0xEiVjzWYZWA6mFm9xUSgeK1AY.roa (hash: S+5zYJa35rHTKnwj7CXJQB2mrb0WWFh2WpXU/4m9ZOc=)
                          10: b7L24DGacCv1Jjj0E2xwOpKR_rI.roa (hash: dn3nM0XrClq6tP6low/fe+MmlfMR2imBrruQdtqUDrY=)
                          11: eJZw4lvkyTThK1hHF7ea4kiJbjI.roa (hash: Z63CbP8wrCiSbcvLHW5lkv40Jr5h6n5yJBfP7IOdvMQ=)
                          12: fiC8FoDEV1wgGCem1X1XF0O_lZg.roa (hash: /O+AtGpBwjj3rjKwzdQACIuoL2216zBEBnUVLPCtJQs=)
                          13: gHV84Ce0tQPq0MuD_bkU9QPAns4.roa (hash: re+X2TGGK92eU/L6LtTiYjKBQ/FAo99HrBg3gP7PqYI=)
                          14: gtsveEMSshs3GcdNL4F4hWCTTWo.roa (hash: RJctdCivuPc3UqTwjVyyJO6uirIWfQK/cVIp5Hcrq4M=)
                          15: i99u0goUMp8noCiOxLvsF0PjThg.roa (hash: BlAXZTEbYm5C8kWdW14+SQaoI4/b99p1HyX+X4SArGA=)
                          16: j9jFZwTJ0znYArYrP_wb7FovBv8.roa (hash: ry2e+m/h6zjqugwIc/oTaduBcZ+a/pH5c4SrYte7lzE=)
                          17: knv596giWxC-Wv303dib7Qt8Zhw.roa (hash: RYC30OCfNr/qMd5J5JMtEIe4zUUHIA5/DP4BCkCZcl8=)
                          18: pf1pBUnzxjHov513TFJHTqE4Iy0.roa (hash: Gqdsv31psN3b7M2TvRqD53MdlcZ7EHjfjPl3nHfwAmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Jun 2026 17:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:01:04:bb:4d:fe:fd:92:5d:8a:92:45:2b:65:5d:9f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Jun 25 23:01:54 2026 GMT
            Not After : Jun 26 23:01:54 2026 GMT
        Subject: CN=4277228bfdfdecf074094816aeefb8133df07364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ff:b3:58:83:bf:08:bb:11:81:24:74:6d:ca:
                    e7:aa:21:2b:ba:bc:7c:7b:d6:75:26:d5:39:99:00:
                    b0:47:40:b1:e9:81:02:9d:30:75:bf:4a:e5:c4:a4:
                    82:29:a3:9c:cf:69:3d:d3:0b:a6:17:e4:69:9d:e6:
                    83:c3:a2:ae:b8:9e:b0:be:0c:2f:43:fc:46:96:c0:
                    df:61:9d:2a:70:8e:89:3a:05:50:3f:8d:7d:94:d3:
                    fe:45:5b:84:c6:0b:11:55:2f:7e:56:6f:d2:c1:4f:
                    e6:53:09:25:d5:46:d9:16:eb:12:58:ac:61:10:a5:
                    41:0b:f1:f7:1d:ca:8b:ce:3b:d6:69:c5:a7:5f:aa:
                    f6:d2:88:57:99:12:12:42:90:a0:e4:db:75:09:4b:
                    ed:41:a7:20:ba:64:3e:6b:88:55:a3:dd:38:9d:e7:
                    4f:f9:f9:40:39:4a:47:ae:fe:60:36:e8:38:fb:09:
                    dd:0d:93:7e:a1:20:b9:e1:2c:e5:aa:59:50:fb:f0:
                    b1:d2:de:60:13:fd:22:57:f0:30:92:ca:5b:a3:e9:
                    37:79:0a:6a:d6:2e:8a:c1:cb:23:19:1e:cd:1d:f0:
                    80:00:03:70:87:22:a5:20:d1:82:47:5e:47:97:65:
                    49:8a:08:ec:2f:7f:36:19:58:a7:7b:f6:48:80:da:
                    2e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:77:22:8B:FD:FD:EC:F0:74:09:48:16:AE:EF:B8:13:3D:F0:73:64
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:6a:df:e5:ae:82:a0:82:49:8d:92:ed:fb:5d:86:44:17:0c:
         5d:d5:69:cc:2f:01:06:35:0e:e7:6d:58:18:a0:95:24:42:60:
         31:d3:49:89:c7:56:1c:00:95:e2:a2:e9:ad:1f:ef:f2:bd:5b:
         66:3d:b9:4b:53:55:8e:54:f3:53:2e:de:8d:31:1e:ec:5b:53:
         19:cb:bd:28:2b:1a:8b:8d:87:d4:89:6c:24:96:67:5d:76:29:
         aa:18:e1:7c:c8:a1:86:8c:14:4d:e3:5e:7a:4c:28:1e:b6:d8:
         ee:31:78:ae:62:44:6d:f2:9d:3d:32:4d:a4:6d:d9:bc:fd:51:
         93:a4:ef:0b:b6:40:d1:9e:c6:a3:99:77:e5:5d:cb:51:93:ba:
         8a:75:05:6d:0d:84:55:b9:eb:5f:87:2f:03:5d:0a:8a:87:a7:
         09:44:21:ab:cd:68:83:11:11:0c:64:16:a3:0e:93:1f:cc:ef:
         37:04:69:7e:20:e5:78:13:6e:94:eb:23:94:d9:5a:5a:d8:06:
         26:81:48:92:79:9c:65:71:d1:18:ab:f1:b4:3d:d0:42:95:bc:
         25:06:4a:cf:2b:ea:41:3f:3f:c0:0d:4c:09:67:30:b5:75:05:
         48:2d:db:8c:7d:e9:a9:ff:9c:50:55:99:37:d6:fa:5a:53:79:
         8b:0a:79:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8BBLtN/v2SXYqSRStlXZ+gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNTZiY2Q0MjZmZDg3Y2Q2ZjQxNDdlMTMzMjE2ZDAzMTEy
YjE4MWIwHhcNMjYwNjI1MjMwMTU0WhcNMjYwNjI2MjMwMTU0WjAzMTEwLwYDVQQD
Eyg0Mjc3MjI4YmZkZmRlY2YwNzQwOTQ4MTZhZWVmYjgxMzNkZjA3MzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/+zWIO/CLsRgSR0bcrnqiErurx8
e9Z1JtU5mQCwR0Cx6YECnTB1v0rlxKSCKaOcz2k90wumF+RpneaDw6KuuJ6wvgwv
Q/xGlsDfYZ0qcI6JOgVQP419lNP+RVuExgsRVS9+Vm/SwU/mUwkl1UbZFusSWKxh
EKVBC/H3HcqLzjvWacWnX6r20ohXmRISQpCg5Nt1CUvtQacgumQ+a4hVo904nedP
+flAOUpHrv5gNug4+wndDZN+oSC54SzlqllQ+/Cx0t5gE/0iV/Awkspbo+k3eQpq
1i6KwcsjGR7NHfCAAANwhyKlINGCR15Hl2VJigjsL382GVine/ZIgNouqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJ3Iov9/ezwdAlIFq7vuBM98HNkMB8GA1UdIwQY
MBaAFBBWvNQm/YfNb0FH4TMhbQMRKxgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzct
YWE4NTllMTkyYjE2LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzctYWE4NTllMTkyYjE2
LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwGrf5a6C
oIJJjZLt+12GRBcMXdVpzC8BBjUO521YGKCVJEJgMdNJicdWHACV4qLprR/v8r1b
Zj25S1NVjlTzUy7ejTEe7FtTGcu9KCsai42H1IlsJJZnXXYpqhjhfMihhowUTeNe
ekwoHrbY7jF4rmJEbfKdPTJNpG3ZvP1Rk6TvC7ZA0Z7Go5l35V3LUZO6inUFbQ2E
VbnrX4cvA10KioenCUQhq81ogxERDGQWow6TH8zvNwRpfiDleBNulOsjlNlaWtgG
JoFIknmcZXHRGKvxtD3QQpW8JQZKzyvqQT8/wA1MCWcwtXUFSC3bjH3pqf+cUFWZ
N9b6WlN5iwp5oA==
-----END CERTIFICATE-----
Generated at Fri Jun 26 02:42:50 2026 by rpki-client