Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
File:                     B2X29feTbbg1Ggo5PPBppRjldEU.mft (raw, json)
Hash identifier:          D0rwnpB0o/LA1p6FSWEa+lEUpz4lsOQHTSOrB37cbOk=
Subject key identifier:   7C:F8:DF:B5:24:CF:5E:BA:AC:41:DB:D1:49:C1:D1:C4:C8:95:8F:10
Authority key identifier: 07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45
Certificate issuer:       /CN=0765f6f5f7936db8351a0a393cf069a518e57445
Certificate serial:       019EB9FD3E7B7AFD099E66DB6FBC19E630EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
Manifest number:          0AB2
Signing time:             Fri 12 Jun 2026 04:00:41 +0000
Manifest this update:     Fri 12 Jun 2026 04:00:41 +0000
Manifest next update:     Sat 13 Jun 2026 04:00:41 +0000
Files and hashes:         1: B2X29feTbbg1Ggo5PPBppRjldEU.crl (hash: wF/LUU+U1XnMtAEmIkAPvis33kNfRNs6S1wnmK3/p1Q=)
                          2: wPl7ynnI5jX4tx7pSw6wN-FRjIs.roa (hash: Wc0jszL4Hb97uhnMz/zMSryxca7jN11EVHOmQGyZa3E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 04:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:fd:3e:7b:7a:fd:09:9e:66:db:6f:bc:19:e6:30:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0765f6f5f7936db8351a0a393cf069a518e57445
        Validity
            Not Before: Jun 12 04:00:41 2026 GMT
            Not After : Jun 13 04:00:41 2026 GMT
        Subject: CN=7cf8dfb524cf5ebaac41dbd149c1d1c4c8958f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:87:20:4a:51:d2:9b:51:42:34:9e:d6:cc:e5:
                    6f:08:32:50:cf:93:85:d1:12:b2:29:c7:02:15:05:
                    da:d0:b9:14:06:90:fd:bf:b5:21:4f:69:4c:82:ea:
                    f6:c5:72:d3:29:27:e3:0b:2f:b7:3b:07:ff:40:9c:
                    86:7a:86:24:c4:21:7c:ea:a6:bc:05:cf:f9:1b:4a:
                    c2:6b:43:ce:08:d7:13:0a:9c:3f:90:8d:6d:c2:fd:
                    a5:fe:8e:cc:12:b9:35:c0:89:8d:cc:78:6e:02:58:
                    9e:e3:ef:56:9e:c7:84:eb:06:c8:85:c8:82:6e:a2:
                    4c:de:68:9a:95:f8:9a:de:83:0f:7c:ab:01:79:f2:
                    08:b9:03:56:b7:4f:67:f1:2a:5f:57:de:9a:5e:33:
                    07:07:95:72:2f:79:1a:86:8a:77:d1:e4:8e:ee:f0:
                    80:34:61:1a:dc:9f:f2:b3:da:cd:8d:c9:e3:b7:5a:
                    cc:de:62:a4:c9:02:47:de:76:e0:85:89:3a:22:7a:
                    47:0f:3a:79:0e:d7:e0:df:7a:c1:f2:00:d8:b1:4b:
                    3e:47:e1:36:dc:cd:55:b4:c6:22:4d:82:2e:ac:37:
                    a3:7b:f3:3f:7d:0a:4d:55:4f:27:9a:07:ce:e7:9d:
                    95:a2:3b:9c:32:b5:4b:af:e5:15:1a:cf:93:26:46:
                    0c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F8:DF:B5:24:CF:5E:BA:AC:41:DB:D1:49:C1:D1:C4:C8:95:8F:10
            X509v3 Authority Key Identifier:
                keyid:07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:be:56:70:0a:0a:66:15:ef:21:08:b7:e6:d0:5b:45:ff:00:
         37:14:3d:c6:8f:60:da:16:f3:91:7a:d7:3d:a9:36:c9:43:a7:
         89:91:18:dd:94:da:25:d4:6d:7a:8b:71:d2:c9:2c:99:14:eb:
         02:0d:ed:28:ec:a5:48:9b:9f:fb:6f:f7:56:7c:a8:5a:c5:13:
         02:d6:af:73:88:22:e7:42:e3:fd:43:ef:7b:3f:ef:d1:91:39:
         1e:35:d5:78:4a:d3:6b:17:84:05:97:35:9b:bb:e3:b7:d8:68:
         b3:26:9c:13:66:b9:0d:63:e3:1e:8a:e1:af:f4:19:87:1b:6e:
         24:ba:fa:68:74:e3:ee:fe:d3:e0:be:53:5b:4e:67:f4:41:bd:
         9c:64:20:96:1d:7c:37:9f:58:f8:b3:55:a0:7e:24:c7:5e:21:
         c6:a2:ee:76:af:14:6e:1d:87:c2:3b:f7:28:9a:7f:50:82:58:
         44:88:b4:57:1c:b6:d9:e2:d4:9f:48:22:63:d4:2f:f5:5e:cf:
         af:85:60:e5:a7:1c:83:f6:c5:30:0c:dd:12:09:0a:28:59:8d:
         af:d6:e7:56:06:8b:33:3c:73:63:94:f6:63:83:a8:4b:5a:bf:
         95:4c:73:c9:de:30:c6:23:c1:9a:57:c3:04:d0:4c:3d:85:c0:
         d2:34:0a:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65/T57ev0Jnmbbb7wZ5jDvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NjVmNmY1Zjc5MzZkYjgzNTFhMGEzOTNjZjA2OWE1MThl
NTc0NDUwHhcNMjYwNjEyMDQwMDQxWhcNMjYwNjEzMDQwMDQxWjAzMTEwLwYDVQQD
Eyg3Y2Y4ZGZiNTI0Y2Y1ZWJhYWM0MWRiZDE0OWMxZDFjNGM4OTU4ZjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YcgSlHSm1FCNJ7WzOVvCDJQz5OF
0RKyKccCFQXa0LkUBpD9v7UhT2lMgur2xXLTKSfjCy+3Owf/QJyGeoYkxCF86qa8
Bc/5G0rCa0POCNcTCpw/kI1twv2l/o7MErk1wImNzHhuAlie4+9WnseE6wbIhciC
bqJM3mialfia3oMPfKsBefIIuQNWt09n8SpfV96aXjMHB5VyL3kahop30eSO7vCA
NGEa3J/ys9rNjcnjt1rM3mKkyQJH3nbghYk6InpHDzp5Dtfg33rB8gDYsUs+R+E2
3M1VtMYiTYIurDeje/M/fQpNVU8nmgfO552VojucMrVLr+UVGs+TJkYM5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHz437Ukz166rEHb0UnB0cTIlY8QMB8GA1UdIwQY
MBaAFAdl9vX3k224NRoKOTzwaaUY5XRFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjJYMjlmZVRiYmcxR2dvNVBQQnBwUmpsZEVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy85YTY2NTUtMWQyYy00NWNiLWFkYTEt
ZjQ2YjQ2ZDUzODAwLzEvQjJYMjlmZVRiYmcxR2dvNVBQQnBwUmpsZEVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy85YTY2NTUtMWQyYy00NWNiLWFkYTEtZjQ2YjQ2ZDUzODAw
LzEvQjJYMjlmZVRiYmcxR2dvNVBQQnBwUmpsZEVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASb5WcAoK
ZhXvIQi35tBbRf8ANxQ9xo9g2hbzkXrXPak2yUOniZEY3ZTaJdRteotx0sksmRTr
Ag3tKOylSJuf+2/3VnyoWsUTAtavc4gi50Lj/UPvez/v0ZE5HjXVeErTaxeEBZc1
m7vjt9hosyacE2a5DWPjHorhr/QZhxtuJLr6aHTj7v7T4L5TW05n9EG9nGQglh18
N59Y+LNVoH4kx14hxqLudq8Ubh2Hwjv3KJp/UIJYRIi0Vxy22eLUn0giY9Qv9V7P
r4Vg5accg/bFMAzdEgkKKFmNr9bnVgaLMzxzY5T2Y4OoS1q/lUxzyd4wxiPBmlfD
BNBMPYXA0jQKhw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 11:03:31 2026 by rpki-client