Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft
File:                     tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft (raw, json)
Hash identifier:          gimSOG2Fq7qHbre+/+xhRik9R78jMg3+GW2HcTsMxBQ=
Subject key identifier:   D0:79:A6:B0:8B:1A:DE:9A:AE:56:44:F9:AC:D5:69:28:E7:C9:C0:36
Authority key identifier: B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A
Certificate issuer:       /CN=b6f3db35659133315d2fcf93058dce350a4cb17a
Certificate serial:       019EB5B294B598BBDCB666BB488154953C33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft
Manifest number:          0350
Signing time:             Thu 11 Jun 2026 08:00:40 +0000
Manifest this update:     Thu 11 Jun 2026 08:00:40 +0000
Manifest next update:     Fri 12 Jun 2026 08:00:40 +0000
Files and hashes:         1: 1-Fy84YC95r-bQW2cLl79V6F_YT4.roa (hash: gL15S7gQEZVfvb5bxwrY+zQzlzYDYNRTFbb19+x9mOU=)
                          2: 1-Nznx-18fNZ6F7fV7FWsvpQVpSk.roa (hash: ESa0OQif8LkNT9zKRORM4Qe3nNaXNgqNLhdo7JNem/0=)
                          3: 2fYLBv1U0Aal5HtFShitrMTODDk.roa (hash: 2/V+b6fricNVBwCToj237iqhy26fLac2r/viReW4GF4=)
                          4: 3UqTULNUjwAb8aM5tZWDkdsXWeo.roa (hash: LLkvKetTDyJdMXPZuYokaJPjJ58hhOZl6BKgzGKR4fE=)
                          5: 4eZ7bkmpJQiebKtBTXoYVZg6Ldg.roa (hash: +qSceZV6AJUPDL56rity8Lx2SMr8wkGezaj/ssbWib4=)
                          6: 5A-xAaitVd-Z-3EM0tcDIKZtoa0.roa (hash: rvE7dA9kE2RGdYWQzFMr+Rr8fFZi5luB0pquTynO3s8=)
                          7: 9tWF1GqvjRro3KCeTjhlXGOeJnk.roa (hash: teh4jlkHAaykmKjheyxnAjMWR2tE22/CA39+lQwLfBY=)
                          8: AAN_C8py2EA1n7GC7uysYX9C8eI.roa (hash: YTXGhX9lVZicuBLsjZQtboD3S2P+2J1oVo6LxafsTbY=)
                          9: Aw2zWYgv8W7CwrMsEePdbTsLvok.roa (hash: wEinvm1qao+9BCRR0fnnIbv5tbDhJ2a5pDYCtrsJwPc=)
                          10: HTIxoi8WyFSrHeUOWzzUiEIhzDk.roa (hash: cd0RecHzNsbQYeDphiQhrKlq2//otbl1g44Ke+zy6bw=)
                          11: HwCEkBXkDVGb_trROXqUO3InBZs.roa (hash: 4VqvdzlCii9J+rZ10d2Ty8zbIKLGsNMqZiNczN/lH5o=)
                          12: J3Irj20a5Nlbymwp_tuM6NwpZGk.roa (hash: JOo4UjGWzNEE5RC1ZV6KYebK8zPHqC8OTRdKUFsxrbc=)
                          13: TIVfVbHfouWC6xhaqaOe2rROKk4.roa (hash: f7pxBjbhOpubYs4a19slbS3M7w5nVBiYFx5na8V322c=)
                          14: W-hqX4V_eWCdg6_rVRWyKKwNsZo.roa (hash: FbBn+Y+2aBjmifhJcGgHM6wc4kqUDt9aYkj9YzgXnQo=)
                          15: enXU2NRbrmUSLj3aNd49w6CB9kw.roa (hash: bqlmejBH4um+OhcSoaSwzujrI/A1SFNyu4se8eX8Jy8=)
                          16: fMecL_p_XorOu-OBjgfyWEuIE2g.roa (hash: E6t0K2Pr40cejujMiJaL8HUBY8+SoeQqKn7sy6Ra0fA=)
                          17: hTbfi8iyqpyBUx58enPyCnAk8B4.roa (hash: iR4m3I4+fi5SXyKVTPF8tJekzYjESRlBnoPf8B3mZQY=)
                          18: hnOMcA3FLHrspCaukH2G2BOpT8A.roa (hash: lcUqSg3j84OiYjox0KKVZ3oU4xCrQOPVs8tFQBrKuF4=)
                          19: lI-SGy6V9gbYheStfoup00TtjDg.roa (hash: j9/ph3cCY16/8Ag7j6nb1Eljp7GEHMNtLj6G3JeZuhg=)
                          20: ma_hJ5Go12WDQL6E3MOLLSFUGZg.roa (hash: ri5qcBP3AFkKJ9Kz9G4biTaRxnIVuPjswlV7TfCNoUM=)
                          21: tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl (hash: u5Hhjj3DCglpNF5DnnrmwEgErovnKT3rAxUSvuz6rj0=)
                          22: xAs-bndcqPd0AUG3p2gqYtNCwKs.roa (hash: RlwLGxg+e7W2Q6yDLdFrjAGx+ZccxU5PdajeFC3InjA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 08:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b5:b2:94:b5:98:bb:dc:b6:66:bb:48:81:54:95:3c:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f3db35659133315d2fcf93058dce350a4cb17a
        Validity
            Not Before: Jun 11 08:00:40 2026 GMT
            Not After : Jun 12 08:00:40 2026 GMT
        Subject: CN=d079a6b08b1ade9aae5644f9acd56928e7c9c036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d8:f8:7d:21:cb:b5:f7:da:42:24:10:7d:a4:
                    28:a9:4c:58:c8:19:ab:ff:90:f6:47:26:1d:c5:71:
                    62:52:0e:76:75:d0:cd:1e:ad:ed:eb:a4:3e:54:41:
                    1e:12:96:49:fb:5b:60:ee:c1:86:b6:e5:82:63:a5:
                    5b:71:74:27:be:a7:da:c0:e2:5d:98:96:6e:c4:76:
                    73:e2:05:ce:f1:24:1a:77:b7:87:0f:26:ed:3a:be:
                    86:43:71:00:b1:1c:89:d6:ad:a9:fb:78:86:49:f8:
                    c7:14:20:f8:03:d7:24:ab:c9:fb:49:b2:10:03:4e:
                    a3:3e:6e:6c:43:83:d7:02:66:d9:c6:24:65:dc:39:
                    52:45:6f:ac:85:f5:0a:75:bd:dd:ab:dc:77:39:ee:
                    c9:65:e5:62:1a:96:49:4b:89:a9:a3:40:03:6a:35:
                    6a:90:46:3f:16:9d:ec:91:fd:2b:72:65:85:da:78:
                    69:6f:79:3f:a0:cd:55:a0:7b:9a:99:87:15:a5:46:
                    c0:46:a8:9b:4f:fe:e9:af:d7:c2:29:34:6b:18:a5:
                    c0:81:44:f2:5a:ff:48:05:c5:94:74:70:fc:18:39:
                    c6:24:63:7d:6f:11:17:8a:d3:57:5f:e2:04:5a:0d:
                    ab:82:10:a8:85:5e:0d:e0:9f:7e:a8:76:f7:1f:52:
                    12:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:79:A6:B0:8B:1A:DE:9A:AE:56:44:F9:AC:D5:69:28:E7:C9:C0:36
            X509v3 Authority Key Identifier:
                keyid:B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:54:65:b6:3d:a5:b7:f7:68:7d:2e:bf:c1:f9:d5:a3:c9:f5:
         9a:4a:31:a2:53:b4:96:41:93:57:85:2a:88:32:8b:b2:ac:eb:
         15:66:75:6f:62:ce:d0:b6:f4:5b:e8:2f:20:bb:de:db:04:5d:
         a7:dc:b4:a7:3d:52:24:37:a6:6e:2e:29:be:6e:14:3c:4d:2f:
         fa:74:21:67:59:f3:5e:83:89:7b:f6:25:4e:53:dd:46:09:2b:
         b4:a5:3c:d6:f1:0f:28:b1:36:a0:ba:e2:4b:3e:fc:cb:16:f9:
         e7:b1:f4:5d:5f:17:29:58:18:5c:9b:72:43:74:d6:2f:5c:3e:
         5a:f1:71:86:ae:d1:51:b1:bb:47:52:9a:e8:a8:f0:b9:d3:dd:
         1e:63:18:b1:bd:16:90:f2:db:ff:08:70:7b:2b:fc:49:bd:5c:
         2b:9e:74:86:0c:67:34:c2:74:d2:4b:d0:c8:74:1a:ef:db:32:
         ab:c1:cd:5d:c9:f5:b9:99:d4:d5:6f:0a:d9:55:5e:33:95:9a:
         ea:36:e7:cc:bd:53:2d:34:a3:15:fa:8e:47:34:80:96:61:d7:
         c0:77:23:c6:92:f7:a2:b1:0e:fb:0a:7b:9b:cf:17:d5:87:91:
         fb:14:42:bf:71:60:e5:45:76:0e:76:5f:2c:b1:66:16:95:03:
         d3:0e:b9:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ61spS1mLvctma7SIFUlTwzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ZjNkYjM1NjU5MTMzMzE1ZDJmY2Y5MzA1OGRjZTM1MGE0
Y2IxN2EwHhcNMjYwNjExMDgwMDQwWhcNMjYwNjEyMDgwMDQwWjAzMTEwLwYDVQQD
EyhkMDc5YTZiMDhiMWFkZTlhYWU1NjQ0ZjlhY2Q1NjkyOGU3YzljMDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9j4fSHLtffaQiQQfaQoqUxYyBmr
/5D2RyYdxXFiUg52ddDNHq3t66Q+VEEeEpZJ+1tg7sGGtuWCY6VbcXQnvqfawOJd
mJZuxHZz4gXO8SQad7eHDybtOr6GQ3EAsRyJ1q2p+3iGSfjHFCD4A9ckq8n7SbIQ
A06jPm5sQ4PXAmbZxiRl3DlSRW+shfUKdb3dq9x3Oe7JZeViGpZJS4mpo0ADajVq
kEY/Fp3skf0rcmWF2nhpb3k/oM1VoHuamYcVpUbARqibT/7pr9fCKTRrGKXAgUTy
Wv9IBcWUdHD8GDnGJGN9bxEXitNXX+IEWg2rghCohV4N4J9+qHb3H1ISPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNB5prCLGt6arlZE+azVaSjnycA2MB8GA1UdIwQY
MBaAFLbz2zVlkTMxXS/PkwWNzjUKTLF6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQt
NTQ5ZWU2ZDMwZmI2LzEvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQtNTQ5ZWU2ZDMwZmI2
LzEvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa1Rltj2l
t/dofS6/wfnVo8n1mkoxolO0lkGTV4UqiDKLsqzrFWZ1b2LO0Lb0W+gvILve2wRd
p9y0pz1SJDembi4pvm4UPE0v+nQhZ1nzXoOJe/YlTlPdRgkrtKU81vEPKLE2oLri
Sz78yxb557H0XV8XKVgYXJtyQ3TWL1w+WvFxhq7RUbG7R1Ka6KjwudPdHmMYsb0W
kPLb/whweyv8Sb1cK550hgxnNMJ00kvQyHQa79syq8HNXcn1uZnU1W8K2VVeM5Wa
6jbnzL1TLTSjFfqORzSAlmHXwHcjxpL3orEO+wp7m88X1YeR+xRCv3Fg5UV2DnZf
LLFmFpUD0w65Uw==
-----END CERTIFICATE-----
Generated at Thu Jun 11 17:52:30 2026 by rpki-client