Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
File:                     B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft (raw, json)
Hash identifier:          fCi+8iAVE0H73j7I3GlxuOe9LHeLjzDlLmVOwrpr5/o=
Subject key identifier:   33:36:B5:61:47:F5:4A:96:F2:E5:6A:40:BE:59:94:A3:6D:75:54:46
Authority key identifier: 07:81:EE:86:9D:2E:1C:20:0F:F8:C6:97:E2:D3:7E:AA:42:94:0A:36
Certificate issuer:       /CN=0781ee869d2e1c200ff8c697e2d37eaa42940a36
Certificate serial:       019F1979E9063F9295BA10271197AB25CB05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
Manifest number:          1487
Signing time:             Tue 30 Jun 2026 17:00:47 +0000
Manifest this update:     Tue 30 Jun 2026 17:00:47 +0000
Manifest next update:     Wed 01 Jul 2026 17:00:47 +0000
Files and hashes:         1: B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl (hash: pZV6psvLJxRI1O24QYyjD4tNLpTHZZF36+t6+bkkLv0=)
                          2: DUkKAgihVQLx-9lRs9kP656LAqs.roa (hash: Q209pcJqFgT3dRAcDq1sFjsPW/cttABhC0fxm9KWWRE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:79:e9:06:3f:92:95:ba:10:27:11:97:ab:25:cb:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0781ee869d2e1c200ff8c697e2d37eaa42940a36
        Validity
            Not Before: Jun 30 17:00:47 2026 GMT
            Not After : Jul  1 17:00:47 2026 GMT
        Subject: CN=3336b56147f54a96f2e56a40be5994a36d755446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:1a:47:3e:91:74:e3:66:88:f1:c8:3f:f3:5b:
                    41:f6:13:aa:91:7b:3a:8f:88:66:5a:b3:78:60:20:
                    97:08:bf:60:cd:fc:77:4a:88:16:4d:79:06:65:28:
                    6a:1f:25:9a:c6:cf:2f:45:dd:c2:f7:96:5d:7c:96:
                    72:35:9d:5b:5e:c0:40:e7:22:ef:54:6a:27:0a:ad:
                    41:01:dd:c7:d4:1c:8c:50:5f:68:c5:16:a7:56:e3:
                    20:a6:ce:8e:26:8c:51:f1:50:e8:c9:7e:e8:d9:5f:
                    ec:fc:2b:1e:aa:cf:37:6a:da:e8:7a:ab:41:2d:7e:
                    82:94:dd:bc:c2:fa:9c:6c:15:27:e7:3d:dd:53:89:
                    38:b7:a5:d6:3b:bd:a6:1a:52:96:f2:79:ab:52:a4:
                    9d:ef:cb:29:07:8b:17:4b:30:0a:11:04:0f:e7:2a:
                    82:91:ec:6d:50:ff:05:3b:cb:08:12:e6:97:6e:e4:
                    ce:f7:fe:9e:bd:99:1f:7b:dc:03:2f:a9:94:d1:7f:
                    ff:da:db:7c:0e:4c:3a:bf:83:34:84:13:4b:7e:29:
                    26:c2:bb:53:52:93:5a:f5:ad:0f:bc:94:5e:e2:58:
                    66:ec:f7:74:87:02:83:81:05:74:27:57:ec:44:f8:
                    9c:ad:6c:3e:18:5a:3a:43:3d:06:e9:4a:da:31:17:
                    30:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:36:B5:61:47:F5:4A:96:F2:E5:6A:40:BE:59:94:A3:6D:75:54:46
            X509v3 Authority Key Identifier:
                keyid:07:81:EE:86:9D:2E:1C:20:0F:F8:C6:97:E2:D3:7E:AA:42:94:0A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:ad:60:7c:60:86:a9:a5:37:59:47:fc:4c:85:61:4a:3d:80:
         34:2e:eb:3b:29:98:db:eb:05:d3:07:7f:30:1d:9d:3f:77:78:
         5f:8a:5b:78:63:67:0c:e8:e6:5d:9a:5d:d9:f1:a4:cc:2b:03:
         44:4d:ad:a8:27:29:67:e2:9b:cd:db:4c:d7:b0:4b:61:40:30:
         16:7a:a2:95:fc:bc:e7:c8:bf:e6:ed:0d:b4:ae:a9:13:98:4a:
         58:a2:cf:fe:5c:6d:55:bf:14:52:80:c0:1b:5d:c2:a1:44:ce:
         8a:a9:4a:8c:fb:7d:4f:01:31:9a:39:85:12:2c:84:a1:53:ea:
         26:4f:9c:ca:e1:bc:ed:cf:be:54:7c:89:0a:a4:fe:cc:e5:6f:
         5a:40:c3:ad:ce:6c:75:7f:d4:19:a7:0d:86:c3:4a:b6:74:6b:
         f3:4e:64:74:40:4c:c7:52:9c:a5:d3:ef:e5:bb:f7:93:39:25:
         58:73:8c:46:ac:61:71:07:74:95:14:9a:86:26:df:dc:d2:8a:
         d7:0f:72:cc:15:d0:03:fc:b3:2c:10:36:46:0b:6a:0a:84:98:
         76:68:37:ac:9c:c1:31:4e:98:0b:e9:90:e3:60:75:92:4a:c7:
         d0:1d:19:52:1f:bb:d1:f0:0f:df:1d:e2:e0:7b:25:57:3f:76:
         91:1f:99:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZeekGP5KVuhAnEZerJcsFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ODFlZTg2OWQyZTFjMjAwZmY4YzY5N2UyZDM3ZWFhNDI5
NDBhMzYwHhcNMjYwNjMwMTcwMDQ3WhcNMjYwNzAxMTcwMDQ3WjAzMTEwLwYDVQQD
EygzMzM2YjU2MTQ3ZjU0YTk2ZjJlNTZhNDBiZTU5OTRhMzZkNzU1NDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hpHPpF042aI8cg/81tB9hOqkXs6
j4hmWrN4YCCXCL9gzfx3SogWTXkGZShqHyWaxs8vRd3C95ZdfJZyNZ1bXsBA5yLv
VGonCq1BAd3H1ByMUF9oxRanVuMgps6OJoxR8VDoyX7o2V/s/Cseqs83atroeqtB
LX6ClN28wvqcbBUn5z3dU4k4t6XWO72mGlKW8nmrUqSd78spB4sXSzAKEQQP5yqC
kextUP8FO8sIEuaXbuTO9/6evZkfe9wDL6mU0X//2tt8Dkw6v4M0hBNLfikmwrtT
UpNa9a0PvJRe4lhm7Pd0hwKDgQV0J1fsRPicrWw+GFo6Qz0G6UraMRcwbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDM2tWFH9UqW8uVqQL5ZlKNtdVRGMB8GA1UdIwQY
MBaAFAeB7oadLhwgD/jGl+LTfqpClAo2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjRIdWhwMHVIQ0FQLU1hWDR0Ti1xa0tVQ2pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC81NjQ1ZDItNzIyNC00ZDEwLTgyYmYt
M2U3NTA1MWI4ZWFjLzEvQjRIdWhwMHVIQ0FQLU1hWDR0Ti1xa0tVQ2pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC81NjQ1ZDItNzIyNC00ZDEwLTgyYmYtM2U3NTA1MWI4ZWFj
LzEvQjRIdWhwMHVIQ0FQLU1hWDR0Ti1xa0tVQ2pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbq1gfGCG
qaU3WUf8TIVhSj2ANC7rOymY2+sF0wd/MB2dP3d4X4pbeGNnDOjmXZpd2fGkzCsD
RE2tqCcpZ+KbzdtM17BLYUAwFnqilfy858i/5u0NtK6pE5hKWKLP/lxtVb8UUoDA
G13CoUTOiqlKjPt9TwExmjmFEiyEoVPqJk+cyuG87c++VHyJCqT+zOVvWkDDrc5s
dX/UGacNhsNKtnRr805kdEBMx1KcpdPv5bv3kzklWHOMRqxhcQd0lRSahibf3NKK
1w9yzBXQA/yzLBA2RgtqCoSYdmg3rJzBMU6YC+mQ42B1kkrH0B0ZUh+70fAP3x3i
4HslVz92kR+ZKA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:16 2026 by rpki-client