Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File:                     M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier:          zGJqMIrpleeuA4437zeDR9cqs3M3ClD5bUDGtWVpj5w=
Subject key identifier:   C9:6C:BB:71:C7:75:FB:F4:E2:EC:30:1D:28:61:33:2D:EB:55:61:F8
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer:       /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial:       019ED2E1F3A28D0FDAFDF61BFA4CF3DB4DF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number:          093E
Signing time:             Wed 17 Jun 2026 00:01:23 +0000
Manifest this update:     Wed 17 Jun 2026 00:01:23 +0000
Manifest next update:     Thu 18 Jun 2026 00:01:23 +0000
Files and hashes:         1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: A6UmPN1pYmUUrPO9OTCQ85s7pKC91aFMx+0XHcU3PLo=)
                          2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
                          3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 21:56:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d2:e1:f3:a2:8d:0f:da:fd:f6:1b:fa:4c:f3:db:4d:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
        Validity
            Not Before: Jun 17 00:01:23 2026 GMT
            Not After : Jun 18 00:01:23 2026 GMT
        Subject: CN=c96cbb71c775fbf4e2ec301d2861332deb5561f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:00:48:f7:c1:da:4d:c0:a9:66:ee:79:c0:a4:
                    f5:14:d2:36:a6:95:49:8b:3b:25:78:87:9c:b3:8c:
                    85:a2:83:ed:64:66:3e:b6:32:2b:e9:bc:0c:0e:42:
                    31:e5:21:57:9d:2e:54:cf:61:67:d4:c1:78:40:73:
                    55:de:bd:df:e4:52:08:15:46:33:29:b0:02:85:0a:
                    36:6d:95:33:92:76:49:c4:00:09:5b:98:c8:f7:9e:
                    08:fc:12:22:b9:a4:25:0c:e3:23:9c:4a:2d:70:e4:
                    e3:b7:5c:f1:08:55:bd:3d:f4:aa:7d:14:a3:ad:03:
                    ee:96:6a:fe:7f:40:1e:96:4b:1c:b2:6e:12:ef:86:
                    76:b3:72:80:0a:74:4d:24:f7:4d:84:ea:51:11:7e:
                    6a:f2:6d:8f:fd:07:1b:86:81:bc:5b:42:e2:1b:a4:
                    a6:50:02:86:c7:1d:3a:85:3e:cf:cd:c1:2c:2a:e8:
                    96:31:5e:7a:c7:34:d3:9c:29:65:6a:12:53:8f:c1:
                    a7:6c:ff:96:66:fe:e9:a6:7c:19:5c:96:fc:dc:bd:
                    46:c5:ee:c9:b3:7d:5b:4f:02:21:ce:c0:c2:ef:fc:
                    7b:b6:05:16:a1:6d:92:5a:1c:fc:d3:23:91:6e:eb:
                    00:d4:de:03:44:1b:cb:4a:d1:cd:88:1d:34:ad:cb:
                    be:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:6C:BB:71:C7:75:FB:F4:E2:EC:30:1D:28:61:33:2D:EB:55:61:F8
            X509v3 Authority Key Identifier:
                keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:19:f6:e6:ab:6e:33:8c:34:b8:74:43:27:0a:9b:78:ad:66:
         04:3b:5f:30:d1:a8:c0:c6:cd:9f:25:42:37:83:dc:9e:3b:7f:
         aa:ca:72:2d:fd:9d:66:1a:62:ea:a5:36:ed:a1:ba:81:a8:8f:
         ef:4e:8b:f7:05:38:ab:d3:87:48:28:d3:0b:54:06:60:c1:63:
         af:dd:f4:64:e5:01:59:95:97:e1:79:ac:c5:d7:ad:06:cd:27:
         c3:c9:f4:80:77:89:16:34:d9:ef:32:76:29:81:18:ad:1a:c6:
         c6:43:c9:d6:b1:c0:f9:7d:26:b5:53:d5:c0:a7:06:90:3e:a5:
         3a:74:df:b0:64:35:f4:b9:ae:ec:87:a8:0f:51:ff:8a:21:73:
         b7:22:06:3a:de:09:a2:d6:29:22:f7:ed:91:9f:34:ba:a0:d7:
         3a:72:46:78:09:b2:bd:95:82:16:52:dd:15:f5:88:33:b7:b1:
         10:6f:b5:e9:1a:f6:14:ec:8e:ed:08:c1:29:a2:b9:71:4c:ef:
         59:a0:1b:35:89:b1:db:2e:9f:7d:26:bf:e4:17:ec:a9:05:04:
         bc:75:ba:14:35:bf:f1:91:18:94:16:65:7d:53:52:78:6e:58:
         33:f4:6e:de:0f:e1:1b:e8:59:de:5b:34:99:8a:33:9d:a8:c4:
         4f:7c:bc:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7S4fOijQ/a/fYb+kzz203xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNGIwOTc0M2VkMmFmZDZhZmI0N2M1ODM2MGVlMzExMmE5
NWNkMzQwHhcNMjYwNjE3MDAwMTIzWhcNMjYwNjE4MDAwMTIzWjAzMTEwLwYDVQQD
EyhjOTZjYmI3MWM3NzVmYmY0ZTJlYzMwMWQyODYxMzMyZGViNTU2MWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwBI98HaTcCpZu55wKT1FNI2ppVJ
izsleIecs4yFooPtZGY+tjIr6bwMDkIx5SFXnS5Uz2Fn1MF4QHNV3r3f5FIIFUYz
KbAChQo2bZUzknZJxAAJW5jI954I/BIiuaQlDOMjnEotcOTjt1zxCFW9PfSqfRSj
rQPulmr+f0Aelkscsm4S74Z2s3KACnRNJPdNhOpREX5q8m2P/QcbhoG8W0LiG6Sm
UAKGxx06hT7PzcEsKuiWMV56xzTTnCllahJTj8GnbP+WZv7ppnwZXJb83L1Gxe7J
s31bTwIhzsDC7/x7tgUWoW2SWhz80yORbusA1N4DRBvLStHNiB00rcu+FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlsu3HHdfv04uwwHShhMy3rVWH4MB8GA1UdIwQY
MBaAFDNLCXQ+0q/Wr7R8WDYO4xEqlc00MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEt
NTllNzkyZmUxNGNjLzEvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEtNTllNzkyZmUxNGNj
LzEvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcBn25qtu
M4w0uHRDJwqbeK1mBDtfMNGowMbNnyVCN4Pcnjt/qspyLf2dZhpi6qU27aG6gaiP
706L9wU4q9OHSCjTC1QGYMFjr930ZOUBWZWX4XmsxdetBs0nw8n0gHeJFjTZ7zJ2
KYEYrRrGxkPJ1rHA+X0mtVPVwKcGkD6lOnTfsGQ19Lmu7IeoD1H/iiFztyIGOt4J
otYpIvftkZ80uqDXOnJGeAmyvZWCFlLdFfWIM7exEG+16Rr2FOyO7QjBKaK5cUzv
WaAbNYmx2y6ffSa/5BfsqQUEvHW6FDW/8ZEYlBZlfVNSeG5YM/Ru3g/hG+hZ3ls0
mYoznajET3y8HA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 07:37:16 2026 by rpki-client