Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
File:                     up0w5gNb6Lg4YGHycUgccH4Ezis.mft (raw, json)
Hash identifier:          HPl40waRpkrfnqa6fl6TnotWjckAUy/w0IqUNeGW1xo=
Subject key identifier:   7B:2D:F3:68:42:7C:24:E6:A4:08:E7:05:65:78:C8:04:B3:DD:1E:C1
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Certificate issuer:       /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial:       019EB733CEC45C3E9C49BB064F2ED11501D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
Manifest number:          1967
Signing time:             Thu 11 Jun 2026 15:01:25 +0000
Manifest this update:     Thu 11 Jun 2026 15:01:25 +0000
Manifest next update:     Fri 12 Jun 2026 15:01:25 +0000
Files and hashes:         1: 0MNXCFdih4d9FwCAX6PPnVOHOIQ.roa (hash: VbJf/zpJU+nEIQciqPz/B0PK4md21WWEaGREZ1xeby8=)
                          2: 1KgfC-hxOio5W-Z9Sgg63Nt5rkY.roa (hash: EoOuCir1JdYOzVmD9C+0aCRnn0E0kdYzw6esRGPxmMQ=)
                          3: 53-Empt8fqhopJ7cOY61y1UNXLc.roa (hash: YjL+5qe2020D+DOQyVjhX1FTLXsdUT9QvCPVPeb6WkY=)
                          4: 6fl2PyZRjLFdwSBx3r61hkXya8k.roa (hash: D61QyHJ6S5T1IxCuN2yRBjSfJTg/+aLEQXnYgmdlUDs=)
                          5: ANtitpMQT-uK7LHD0X0IbBsKjWM.roa (hash: 5c2CNK7pBthzGV4Sg561qpwP1GJzRFFkA4PDWmW+aSg=)
                          6: Df8h7qloFeTHYGavNQ4pJHpP5CU.roa (hash: 3kk9LrOCm1NH+leIgX8QEU4SIoLjtl1E1AbkJm7CLGc=)
                          7: IDuIILf-M7RgIDs4AJSYtPxrGic.roa (hash: Nv2s82WUeiBOVGtaFJF3rHfW4CDw9k2CQ7WS0TmM93s=)
                          8: ITKErq6hul380zQefCl7nGu5iiw.roa (hash: ThIKSMsSMV9/7c4Wu+9DRro9qpNPtMCBXl8IA6+T3z0=)
                          9: N3LKuwLRuVKYuFWiGYpHH9iTJDU.roa (hash: +3GE+YLKYRUGq2ir////J+cfvpEdtk9nror7A4YJdrQ=)
                          10: R-8E5zauBsFTDGfod6Tef2eLm4M.roa (hash: ClvLXgh4oJn2dvcbOHZrF6o7ap5IhqsfDX14XxeUfO0=)
                          11: a149HuY71oYMfosTA9HCL8g-pdI.roa (hash: FHyu/0R9GDUP3gmfU9JfTLPTviTJTT8eGmQ8uq/ZlfA=)
                          12: bTookxgPSxSd_gnM8XNiIJ3mpr8.roa (hash: qaTVa3H72kXabxQBE9N2TN7e2tyXH6RWDJSNci8VjEs=)
                          13: blYq_pKFV_IJYUCGIJ3ZWpeEWIs.roa (hash: aV35UJJhFzqPJKc16YBKA5F2EyafDubx6D6p0nLFPAk=)
                          14: dh0HxZTX0gUx4atQo9tXgidUMLc.roa (hash: C/NbxOhBDbuOgCOrG7xkr9yc1xlWN7ZS9mwZEOk3C7w=)
                          15: ehRbssTu-uCbiOQmcMxAxNH82GI.roa (hash: aYjSWmwkop/Ic11eCu/RIPvn387xQFE72I0LsyWzzf0=)
                          16: fD0zMeFpTdbjlyII0WXNlsdWjwg.roa (hash: 1nJ8LKFZY40ZGZ9fyCE9tTFmLCEjP6khJLvEfhwNXts=)
                          17: hYygt2D_2n1pYi_NTrG2nkmeaiI.roa (hash: dQrBwFPxwSf58rNos8WFJkrSXg3GQyoC4p0wWkx0CkU=)
                          18: khIatClzzDAzsXKofHk3CzFjNwQ.roa (hash: VqTvtGjsJjhyzOsm3Z+fa0f8w1YFBA58VD7S9gC+DFg=)
                          19: ky1PLfC5Niqk_rOOzNBr8Wiq3Ls.roa (hash: O3k8tfSgOWL0eFoLFOr80zr8e1hwzB6oN6psmB5jVbw=)
                          20: l_ZD8sSGfJ3_8TqaLtRsvJOov9Q.roa (hash: 0ZLcxVq4SbMJb/Tzs+R0ez5dGHPb27PKXrdMSol7/iI=)
                          21: lh0U2VbssLYHQuI_GeDtu-78fs8.roa (hash: argvv+35DPV6sAk39FUkOQj04x5r0LiO2lKQbHUbgZU=)
                          22: o2CtVQw5GkFX89PhUjlW0skEA5w.roa (hash: m4/K5u0ohrJNEPA+u5iCk/BUETlDCODb4D0JMGKGkg4=)
                          23: oy53UV29ZxGHyA7mlLseXZBnge8.roa (hash: zmREFQtkqLZ8wJLGEuvGnLyo+ZygeKXKKyJIbyBcMM4=)
                          24: qSnbVpCUTBo3CbEFeEaAeBg12KU.roa (hash: lUFBwmvXAt5o1tXZm7PlCC3E71TOjkaQgtMQg6Erswc=)
                          25: uhWP65iIcvZTsGSiBTIcefinHZQ.roa (hash: RDsU+on83wZCchaROnKt/rVWQYfzxwy4j90xxJ6pfyg=)
                          26: up0w5gNb6Lg4YGHycUgccH4Ezis.crl (hash: bf+DhqKeGbsUy2GFd0o7vlBmxk8h1t6ZYofGeOrnaxk=)
                          27: vuod5WTfo-bMzWgcehLtUNsV8iQ.roa (hash: S3lLxKRzTk1ObgBCNRSt9Y3FAylgCuMuERfb8CAqXtY=)
                          28: xSEYJ36rS-kznLQUl3DFtM3R1jM.roa (hash: 3mFKbERmZQc21I9KRtXeu1S3oH9xaIQQ0cmDzkgXhUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:33:ce:c4:5c:3e:9c:49:bb:06:4f:2e:d1:15:01:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
        Validity
            Not Before: Jun 11 15:01:25 2026 GMT
            Not After : Jun 12 15:01:25 2026 GMT
        Subject: CN=7b2df368427c24e6a408e7056578c804b3dd1ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4d:09:c8:bb:1b:f0:eb:8d:d8:a9:e9:ba:71:
                    69:7f:8e:05:b3:05:44:a1:7d:58:b9:fa:29:86:7f:
                    03:ec:30:81:55:73:76:14:6f:3b:6a:14:24:9c:8b:
                    fc:ea:73:5c:72:74:f9:39:5b:d6:93:ff:73:e7:71:
                    7a:2f:93:59:eb:65:a7:31:06:6b:34:9c:30:95:e5:
                    25:ba:94:3f:ab:58:a0:cc:30:0b:cf:16:23:17:3f:
                    47:9a:32:62:33:4c:bf:17:e0:a4:5e:20:22:99:5e:
                    ed:7c:a3:69:8f:61:de:87:04:68:65:85:68:5c:46:
                    b5:62:e7:09:9c:0b:3c:1e:50:30:09:ed:0f:a1:7c:
                    bb:6c:13:59:4f:28:ca:56:59:c0:29:32:59:5e:11:
                    b1:9a:10:c6:a6:e5:2e:02:69:24:38:86:67:e2:a7:
                    53:ca:e2:72:eb:5e:e1:cd:ee:6e:b6:04:df:9e:e1:
                    8c:ed:15:02:37:f7:eb:8b:69:2a:e4:60:ea:6a:d3:
                    8c:f3:fd:49:39:24:bc:ea:b5:ec:84:e8:c9:53:6a:
                    47:19:f1:c3:6e:8b:59:3a:44:51:b8:3b:4b:51:03:
                    c8:c6:11:35:3f:d6:f2:51:98:41:d4:6e:e4:39:80:
                    1e:15:c7:3f:af:4e:3f:7c:45:d0:7e:1b:62:49:ce:
                    69:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:2D:F3:68:42:7C:24:E6:A4:08:E7:05:65:78:C8:04:B3:DD:1E:C1
            X509v3 Authority Key Identifier:
                keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:5e:d6:87:d1:2a:2c:17:f7:07:2d:43:2c:cd:36:73:69:6e:
         ad:3c:d6:f6:1d:69:ea:2a:63:09:bc:d4:b2:c4:1d:04:1d:bb:
         03:1b:52:47:b1:f3:65:c6:4a:3d:d4:95:58:b6:06:17:fa:15:
         38:eb:78:88:1b:54:27:34:5d:06:da:00:c2:4f:d7:ec:2d:53:
         87:30:b6:a5:64:ab:09:ef:e2:4c:51:81:ed:b0:90:a5:0c:c2:
         58:d7:00:e7:59:51:24:25:9c:a5:12:db:5d:b7:1e:3f:9d:57:
         84:dc:e5:19:87:43:3b:46:4b:96:dc:4a:22:f2:b9:0f:4d:b4:
         66:7f:45:a5:6f:f6:88:dc:e3:ef:2a:5d:85:70:12:fd:92:76:
         3e:19:ec:54:4e:09:56:4b:14:99:46:ac:f1:f9:77:30:a2:f2:
         3b:06:a0:e2:4c:24:02:6d:8a:e7:cb:9b:b2:58:74:98:e6:ea:
         ac:f0:b1:04:7b:37:81:2b:71:83:2e:0f:b6:22:7c:9a:10:0d:
         6c:a6:b0:76:94:de:ff:c2:98:65:b4:fd:50:c9:da:13:a5:74:
         02:37:89:0b:d2:cf:ac:2c:ce:23:7a:44:fb:27:9d:6f:12:24:
         d8:90:04:33:20:12:d8:d2:e9:e1:f2:a4:c3:4d:12:42:bd:2a:
         1d:78:89:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:23:59 2026 by rpki-client