Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
File:                     5iNO09jKltxRjTXB58kr6_z2zk0.mft (raw, json)
Hash identifier:          0p85ZdSP9+OzbA2LIiPkHFlp83dPXtf0wHSmWOaggYs=
Subject key identifier:   8E:BF:F4:6C:B8:25:BD:D5:E3:A3:87:5F:EA:DE:6D:E4:7F:45:17:50
Authority key identifier: E6:23:4E:D3:D8:CA:96:DC:51:8D:35:C1:E7:C9:2B:EB:FC:F6:CE:4D
Certificate issuer:       /CN=e6234ed3d8ca96dc518d35c1e7c92bebfcf6ce4d
Certificate serial:       019F19E82BEA79EF9CB50CF30FBB4DD06BAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
Manifest number:          1918
Signing time:             Tue 30 Jun 2026 19:01:13 +0000
Manifest this update:     Tue 30 Jun 2026 19:01:13 +0000
Manifest next update:     Wed 01 Jul 2026 19:01:13 +0000
Files and hashes:         1: 1-Q3xDZfzQc6tV29ExEVxZMLhErU.roa (hash: RiGnAtuoBY0MDLXEEdvsOwo9zTH9zl0+GNo+JIs/bog=)
                          2: 5iNO09jKltxRjTXB58kr6_z2zk0.crl (hash: GmRJB0WCuZM2YQ61cdywvykQstgv75FgT8TxkbvCb+o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:e8:2b:ea:79:ef:9c:b5:0c:f3:0f:bb:4d:d0:6b:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6234ed3d8ca96dc518d35c1e7c92bebfcf6ce4d
        Validity
            Not Before: Jun 30 19:01:13 2026 GMT
            Not After : Jul  1 19:01:13 2026 GMT
        Subject: CN=8ebff46cb825bdd5e3a3875feade6de47f451750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:40:26:e5:1a:90:52:e9:ea:42:e8:4d:e3:7b:
                    e2:b1:68:8d:24:c1:fe:1b:b2:5e:54:6c:21:59:2c:
                    12:0b:89:56:00:06:ca:45:b4:9b:41:78:9d:62:a4:
                    33:1e:19:ba:82:a0:05:5c:7f:17:0d:db:59:82:44:
                    79:c9:aa:c2:ba:6e:09:af:b1:60:ea:f8:e6:18:21:
                    7c:8a:87:a5:5b:27:56:dd:19:22:6e:03:ad:12:59:
                    f3:57:9b:f7:a5:cc:13:dc:e9:dc:0c:10:6f:1b:e4:
                    e3:c4:b2:55:d1:c6:93:29:5f:77:17:13:38:91:65:
                    00:27:04:88:25:26:c0:d7:67:20:a9:79:96:d7:70:
                    df:e9:91:d0:48:a7:13:18:c1:1b:78:a0:78:2c:67:
                    a4:25:f3:f0:5a:9d:f3:89:0e:44:14:06:1e:91:9e:
                    57:7d:5d:83:7b:2a:d4:1f:97:21:61:93:66:87:44:
                    6f:9d:8c:90:1f:c3:a8:81:d8:c1:d3:20:e0:be:5f:
                    df:52:da:74:16:5b:01:89:f3:e0:07:df:20:34:6c:
                    b9:b7:9a:29:85:6c:36:8e:4c:f6:61:42:29:7b:b3:
                    d6:3f:bc:58:8a:a3:0b:00:9c:89:33:3c:5f:2d:dd:
                    a2:53:1c:06:be:88:fe:aa:21:ce:a2:41:1f:8c:8a:
                    e5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:BF:F4:6C:B8:25:BD:D5:E3:A3:87:5F:EA:DE:6D:E4:7F:45:17:50
            X509v3 Authority Key Identifier:
                keyid:E6:23:4E:D3:D8:CA:96:DC:51:8D:35:C1:E7:C9:2B:EB:FC:F6:CE:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:c6:cd:a6:fc:86:41:3d:2f:46:72:a7:bf:fe:00:94:34:74:
         5f:ea:f0:a2:ac:e1:a1:d8:3d:ed:73:51:ec:91:c1:ea:c1:b2:
         75:07:44:b6:9c:3e:f5:e8:8e:f4:a8:50:66:88:b6:09:bd:4e:
         31:c1:05:99:2b:e2:7b:23:16:fd:cc:3d:52:54:2f:ba:63:2f:
         a5:a1:14:96:d4:76:35:97:94:7c:96:1d:c7:75:5b:53:37:27:
         b3:1c:98:ba:16:e1:04:b7:44:31:7e:1c:2a:c8:50:b3:06:07:
         0d:53:ca:18:45:bf:f8:ee:29:24:1c:ab:f4:25:0f:df:b1:95:
         e9:d2:88:7d:d8:22:e4:63:fa:21:d2:7a:e8:e4:04:50:b5:cf:
         34:3a:c9:3a:ed:d7:b4:90:08:b5:8a:91:b7:9c:32:9c:29:5a:
         09:99:e2:98:e0:b0:64:16:6c:e4:e3:a2:44:fc:1b:0a:36:9b:
         e5:e7:4d:c3:e4:9b:47:0e:26:a2:b4:7f:99:61:a6:8b:23:64:
         f0:51:8d:e9:3b:d2:30:f4:3e:39:22:bf:38:1e:e0:81:2d:e2:
         33:8d:3c:30:b5:b7:6a:85:8e:be:47:4d:5e:ac:90:0e:c6:a4:
         40:02:fe:84:ee:84:ac:05:78:3a:f7:5e:7b:2f:68:d8:49:74:
         6c:e2:f9:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Z6Cvqee+ctQzzD7tN0GuvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MjM0ZWQzZDhjYTk2ZGM1MThkMzVjMWU3YzkyYmViZmNm
NmNlNGQwHhcNMjYwNjMwMTkwMTEzWhcNMjYwNzAxMTkwMTEzWjAzMTEwLwYDVQQD
Eyg4ZWJmZjQ2Y2I4MjViZGQ1ZTNhMzg3NWZlYWRlNmRlNDdmNDUxNzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EAm5RqQUunqQuhN43visWiNJMH+
G7JeVGwhWSwSC4lWAAbKRbSbQXidYqQzHhm6gqAFXH8XDdtZgkR5yarCum4Jr7Fg
6vjmGCF8ioelWydW3RkibgOtElnzV5v3pcwT3OncDBBvG+TjxLJV0caTKV93FxM4
kWUAJwSIJSbA12cgqXmW13Df6ZHQSKcTGMEbeKB4LGekJfPwWp3ziQ5EFAYekZ5X
fV2DeyrUH5chYZNmh0RvnYyQH8OogdjB0yDgvl/fUtp0FlsBifPgB98gNGy5t5op
hWw2jkz2YUIpe7PWP7xYiqMLAJyJMzxfLd2iUxwGvoj+qiHOokEfjIrl6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6/9Gy4Jb3V46OHX+rebeR/RRdQMB8GA1UdIwQY
MBaAFOYjTtPYypbcUY01wefJK+v89s5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWlOTzA5aktsdHhSalRYQjU4a3I2X3oyemswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC85YjY3NGMtMzY1Ny00YzI1LTk5NTMt
M2Y3MDQwOTk3NjgyLzEvNWlOTzA5aktsdHhSalRYQjU4a3I2X3oyemswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC85YjY3NGMtMzY1Ny00YzI1LTk5NTMtM2Y3MDQwOTk3Njgy
LzEvNWlOTzA5aktsdHhSalRYQjU4a3I2X3oyemswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxMbNpvyG
QT0vRnKnv/4AlDR0X+rwoqzhodg97XNR7JHB6sGydQdEtpw+9eiO9KhQZoi2Cb1O
McEFmSvieyMW/cw9UlQvumMvpaEUltR2NZeUfJYdx3VbUzcnsxyYuhbhBLdEMX4c
KshQswYHDVPKGEW/+O4pJByr9CUP37GV6dKIfdgi5GP6IdJ66OQEULXPNDrJOu3X
tJAItYqRt5wynClaCZnimOCwZBZs5OOiRPwbCjab5edNw+SbRw4morR/mWGmiyNk
8FGN6TvSMPQ+OSK/OB7ggS3iM408MLW3aoWOvkdNXqyQDsakQAL+hO6ErAV4Ovde
ey9o2El0bOL5yg==
-----END CERTIFICATE-----
Generated at Tue Jun 30 23:38:31 2026 by rpki-client