Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
File:                     RsmLLko-Bg3vRavGLA40X6qAtew.mft (raw, json)
Hash identifier:          64Hxsjru3LGVYwlp3NJPICX2Zsi/288Y3m2Zb5LoOcE=
Subject key identifier:   27:11:8C:F5:5B:79:3D:4F:61:3D:27:3C:67:68:CC:6F:A9:14:78:18
Authority key identifier: 46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC
Certificate issuer:       /CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
Certificate serial:       019ED72C2309E292C11A4989BC2AEBC7066F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
Manifest number:          1964
Signing time:             Wed 17 Jun 2026 20:00:54 +0000
Manifest this update:     Wed 17 Jun 2026 20:00:54 +0000
Manifest next update:     Thu 18 Jun 2026 20:00:54 +0000
Files and hashes:         1: Ip7p_hL1VXdeRgj8FVGhTum4zB0.roa (hash: agYqlxFFSnuNhJD9cHkZJfqIOemy4XNVrJfaav2GJL4=)
                          2: MGqAhkKHBACRFaiNXYcP9SHiMFE.roa (hash: GZRYXJdlMwxnrdhoW6/XDsnMjgU/H78VBDuIRDqDxI0=)
                          3: RsmLLko-Bg3vRavGLA40X6qAtew.crl (hash: MKhBuPsMXeCMxKvZxpzgj3V87q2GsdoQbDersac31sE=)
                          4: WjHsZr2LYotu7UixbhUPmyhufyM.roa (hash: UbFC6dvqvKaXgJmhKzkqauNjGk31aKocZ5d+hid0GEk=)
                          5: hL4nAbMjDcB0I8HfTfp0aJOETu4.roa (hash: HMgiqPXACPgRgXB4fWWx/eVqV6zK3UzAgCuz5lAzZEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 17:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d7:2c:23:09:e2:92:c1:1a:49:89:bc:2a:eb:c7:06:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
        Validity
            Not Before: Jun 17 20:00:54 2026 GMT
            Not After : Jun 18 20:00:54 2026 GMT
        Subject: CN=27118cf55b793d4f613d273c6768cc6fa9147818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6a:5b:77:d8:10:87:a4:61:3a:8e:06:d6:4d:
                    ff:82:3f:f3:5b:08:30:5c:d1:4c:ad:1a:d9:1c:85:
                    9b:30:a8:05:3c:a8:a0:e4:36:e0:a2:f4:11:13:1f:
                    e2:8f:17:fa:12:fe:c3:a5:6f:1a:46:29:66:41:e8:
                    6b:5a:6c:aa:80:58:12:02:74:72:2c:0b:f4:a2:53:
                    f1:a0:9c:24:77:98:06:3e:39:9e:fe:e9:61:88:80:
                    ab:e1:75:9a:e2:72:c9:0b:e6:56:e4:6f:e6:e8:40:
                    c3:a3:4c:76:3a:26:cf:45:70:1f:4b:1d:1e:83:c7:
                    86:f9:7d:56:5e:d5:d6:15:1d:a4:0a:69:8e:2e:1d:
                    0f:7a:cb:35:13:3a:36:67:04:0b:17:6f:de:c8:76:
                    d0:0f:b2:14:c7:61:69:1f:24:17:45:7b:76:3f:3d:
                    b8:a7:61:fa:ac:1e:cc:c8:d5:b1:96:4e:86:e0:97:
                    1d:3b:24:36:52:ef:be:72:8c:89:47:a9:49:ed:f7:
                    28:f4:9c:cb:75:d0:6f:73:c4:11:8f:fe:35:d6:88:
                    07:ac:dc:e1:28:18:04:2b:02:63:75:c4:2e:6d:e3:
                    9e:7c:c5:f1:b8:a7:26:09:ba:86:36:8c:d5:95:db:
                    80:11:32:f0:bc:d7:ed:df:03:5b:7c:48:2b:81:1a:
                    e0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:11:8C:F5:5B:79:3D:4F:61:3D:27:3C:67:68:CC:6F:A9:14:78:18
            X509v3 Authority Key Identifier:
                keyid:46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:28:b8:66:41:2b:81:a0:88:a4:82:08:e2:b3:6d:da:27:63:
         0d:14:4c:ee:a2:a6:a1:ef:05:30:84:4e:e1:60:1f:d1:50:49:
         f1:48:9e:49:2c:89:c9:3d:fe:d9:49:c8:65:3b:04:38:f9:0f:
         cd:91:2d:68:22:b1:5b:a5:99:cc:45:68:1c:24:bd:a8:1d:dd:
         81:93:13:9d:c7:c8:c7:1c:70:6b:97:df:4e:bd:86:26:9d:f2:
         8a:4f:40:d7:72:18:47:27:17:ef:ea:c7:cc:d3:0f:0c:89:ac:
         6c:fd:34:9b:34:d9:79:c0:a0:95:fd:73:3a:28:3f:c8:62:43:
         0e:7b:34:3b:60:14:bf:4b:e5:6b:5f:0c:95:fb:50:86:ba:9e:
         d0:35:3e:68:1a:b0:47:7a:f0:4e:36:24:7c:17:fa:54:ae:bf:
         bd:14:1a:20:5f:8d:fa:40:3e:8c:de:18:58:6c:df:3b:8c:47:
         60:9c:2d:dd:c5:3f:e1:9f:9f:de:50:07:fa:72:f8:1e:11:f7:
         f3:96:4c:50:38:1d:af:ff:45:b3:27:73:b7:ad:cb:0e:7c:28:
         09:5e:bb:1e:c3:ae:da:2d:b3:31:16:f8:2c:5f:e1:3a:f2:c9:
         3b:cd:19:b9:35:05:8c:7a:45:9d:3f:70:1b:19:b9:a6:04:f3:
         69:3f:4b:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7XLCMJ4pLBGkmJvCrrxwZvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2Yzk4YjJlNGEzZTA2MGRlZjQ1YWJjNjJjMGUzNDVmYWE4
MGI1ZWMwHhcNMjYwNjE3MjAwMDU0WhcNMjYwNjE4MjAwMDU0WjAzMTEwLwYDVQQD
EygyNzExOGNmNTViNzkzZDRmNjEzZDI3M2M2NzY4Y2M2ZmE5MTQ3ODE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmpbd9gQh6RhOo4G1k3/gj/zWwgw
XNFMrRrZHIWbMKgFPKig5DbgovQREx/ijxf6Ev7DpW8aRilmQehrWmyqgFgSAnRy
LAv0olPxoJwkd5gGPjme/ulhiICr4XWa4nLJC+ZW5G/m6EDDo0x2OibPRXAfSx0e
g8eG+X1WXtXWFR2kCmmOLh0Pess1Ezo2ZwQLF2/eyHbQD7IUx2FpHyQXRXt2Pz24
p2H6rB7MyNWxlk6G4JcdOyQ2Uu++coyJR6lJ7fco9JzLddBvc8QRj/411ogHrNzh
KBgEKwJjdcQubeOefMXxuKcmCbqGNozVlduAETLwvNft3wNbfEgrgRrgaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCcRjPVbeT1PYT0nPGdozG+pFHgYMB8GA1UdIwQY
MBaAFEbJiy5KPgYN70WrxiwONF+qgLXsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnNtTExrby1CZzN2UmF2R0xBNDBYNnFBdGV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yYWE4ZDEtY2I3MS00OTA0LWE1OTEt
MzQ0OTUyMjcxMGU3LzEvUnNtTExrby1CZzN2UmF2R0xBNDBYNnFBdGV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8yYWE4ZDEtY2I3MS00OTA0LWE1OTEtMzQ0OTUyMjcxMGU3
LzEvUnNtTExrby1CZzN2UmF2R0xBNDBYNnFBdGV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlSi4ZkEr
gaCIpIII4rNt2idjDRRM7qKmoe8FMIRO4WAf0VBJ8UieSSyJyT3+2UnIZTsEOPkP
zZEtaCKxW6WZzEVoHCS9qB3dgZMTncfIxxxwa5ffTr2GJp3yik9A13IYRycX7+rH
zNMPDImsbP00mzTZecCglf1zOig/yGJDDns0O2AUv0vla18MlftQhrqe0DU+aBqw
R3rwTjYkfBf6VK6/vRQaIF+N+kA+jN4YWGzfO4xHYJwt3cU/4Z+f3lAH+nL4HhH3
85ZMUDgdr/9Fsydzt63LDnwoCV67HsOu2i2zMRb4LF/hOvLJO80ZuTUFjHpFnT9w
Gxm5pgTzaT9Lxg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 23:36:02 2026 by rpki-client