Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
File:                     j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft (raw, json)
Hash identifier:          HktAYuXiP0LfKEz4btuMLIoTSfxFTuKCoDbzjRfKdC0=
Subject key identifier:   39:02:0B:24:FF:28:79:8C:C1:BD:57:BB:58:73:BB:46:2F:B7:C7:E7
Authority key identifier: 8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1
Certificate issuer:       /CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
Certificate serial:       019EEE9060D8DDD5A545854C2D1B0549F97D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
Manifest number:          1989
Signing time:             Mon 22 Jun 2026 09:01:39 +0000
Manifest this update:     Mon 22 Jun 2026 09:01:39 +0000
Manifest next update:     Tue 23 Jun 2026 09:01:39 +0000
Files and hashes:         1: 41oXR0Dcl8hEJOhB0K8Qrklv49c.roa (hash: TTWK0RRIlbuhKut+ATLmSdEPI+QN808VYnN7Vid5qyQ=)
                          2: Dv951AUIUaLuX0MPAgSurBs_Q4o.roa (hash: 3zxZnskXEXOtDhz+ouG2z/QdauveqbNwr6CiV/4QdDc=)
                          3: K9WiUPnzKMk0kTn3YOAAeGsJ3EI.roa (hash: dUaZk3IlcqCI85S/6UCtSKIbamHpI107QQx2h8oykGA=)
                          4: LxOq1v5UAj3ExgdR-fIgrMVK-BY.roa (hash: /x4igD0ebKYVQZig1vtn+O0OtoMkLAFpYnPG8GiLvWI=)
                          5: U-2sblCAHu3qIKD-Lrud2Vu1jU0.roa (hash: QBCXbXwqQu101TJcQB50Hnn/s+aowNHvXExjcnPeLEI=)
                          6: j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl (hash: 1GVltp2w1qjYq72u3VDmzjB38Xv69nZc6TOPqM050Zw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Jun 2026 05:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ee:90:60:d8:dd:d5:a5:45:85:4c:2d:1b:05:49:f9:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
        Validity
            Not Before: Jun 22 09:01:39 2026 GMT
            Not After : Jun 23 09:01:39 2026 GMT
        Subject: CN=39020b24ff28798cc1bd57bb5873bb462fb7c7e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c9:fc:ab:eb:2e:ba:78:07:91:82:6d:0c:f6:
                    4c:d9:d0:c0:f5:14:b6:be:c6:a0:d3:41:18:b4:9e:
                    cc:25:17:cc:28:46:db:ae:a3:e3:9f:49:57:86:93:
                    20:1f:ff:0f:42:8e:1f:9f:5d:6e:a5:b3:5c:fa:72:
                    8a:87:83:f0:8b:76:cf:7f:d0:37:e8:0d:10:6e:e7:
                    32:5b:e1:df:73:1c:47:0e:1f:19:be:de:55:78:e2:
                    98:6b:9a:ef:7f:4a:11:24:85:a3:13:ea:d4:59:05:
                    97:85:0e:fb:fc:2b:89:58:93:8b:3d:73:19:54:b0:
                    1a:23:2b:54:61:9b:ec:a0:65:d1:51:3b:c7:e4:34:
                    db:3f:48:50:5d:a4:35:c8:6e:30:bd:6f:76:df:e5:
                    fc:26:9b:1f:52:ba:de:f0:90:cd:c9:d9:03:9d:ac:
                    16:77:ae:cf:e9:79:b8:9c:37:cf:77:90:37:a1:c6:
                    54:e5:da:34:5c:86:67:04:68:1d:d1:bf:18:c9:f4:
                    24:b8:50:2a:29:02:0f:c7:58:f7:78:81:4e:08:59:
                    eb:96:1a:12:61:4c:29:e7:b6:a0:43:77:d6:ae:55:
                    4a:b6:11:70:12:8a:5b:20:60:78:5f:9a:9f:89:88:
                    b2:9a:6f:b9:2f:b4:4e:2e:8d:eb:fa:53:91:1f:c6:
                    20:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:02:0B:24:FF:28:79:8C:C1:BD:57:BB:58:73:BB:46:2F:B7:C7:E7
            X509v3 Authority Key Identifier:
                keyid:8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:68:7f:e9:e9:c0:0b:80:56:a4:5e:13:4a:c6:fc:03:d5:0e:
         22:24:e7:d9:2c:24:81:05:33:55:52:d7:56:26:5e:ee:d8:3a:
         4c:bc:09:5d:4d:e8:2e:1c:04:17:63:9b:f6:ad:f7:df:70:0a:
         ff:3e:14:6c:c1:2c:10:4e:4d:63:73:7d:75:98:ac:0c:70:50:
         d7:8e:f1:ba:ea:7b:4e:b0:86:22:f9:65:08:3b:62:22:5c:ef:
         49:34:24:11:f8:ad:e4:b9:9a:48:63:3a:c6:ac:2a:cb:fa:fb:
         5d:93:72:ed:a9:79:56:6d:dd:54:76:46:9a:ea:0e:dc:20:63:
         ff:5a:6e:10:55:dd:3c:d1:3e:a6:c9:54:74:b2:cf:db:81:ee:
         1c:f1:27:5b:20:ac:d4:0e:21:e0:b8:de:5c:e8:7d:4e:fd:85:
         c9:01:ad:74:d5:f0:a5:18:f6:9a:22:32:da:16:2d:d5:11:78:
         a3:bb:46:53:8c:e6:9d:72:4d:3e:64:fe:f2:9c:f8:3c:31:45:
         4c:96:dd:8a:f1:dc:f0:c2:be:12:6c:ad:96:b7:c5:e8:f1:67:
         7e:3d:2f:80:d4:14:2a:a0:c5:ef:eb:9b:1c:0a:f1:44:db:bd:
         51:12:ca:c5:e0:e3:d3:48:70:f3:de:88:92:88:c4:a3:8a:5c:
         c2:c3:1f:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ukGDY3dWlRYVMLRsFSfl9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNDY2OTIxNmEyMDc4Y2IwMjQyMzFmNDYzMmVhYjRkYTdl
ZTRiYzEwHhcNMjYwNjIyMDkwMTM5WhcNMjYwNjIzMDkwMTM5WjAzMTEwLwYDVQQD
EygzOTAyMGIyNGZmMjg3OThjYzFiZDU3YmI1ODczYmI0NjJmYjdjN2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcn8q+suungHkYJtDPZM2dDA9RS2
vsag00EYtJ7MJRfMKEbbrqPjn0lXhpMgH/8PQo4fn11upbNc+nKKh4Pwi3bPf9A3
6A0QbucyW+HfcxxHDh8Zvt5VeOKYa5rvf0oRJIWjE+rUWQWXhQ77/CuJWJOLPXMZ
VLAaIytUYZvsoGXRUTvH5DTbP0hQXaQ1yG4wvW923+X8JpsfUrre8JDNydkDnawW
d67P6Xm4nDfPd5A3ocZU5do0XIZnBGgd0b8YyfQkuFAqKQIPx1j3eIFOCFnrlhoS
YUwp57agQ3fWrlVKthFwEopbIGB4X5qfiYiymm+5L7ROLo3r+lORH8YgIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkCCyT/KHmMwb1Xu1hzu0Yvt8fnMB8GA1UdIwQY
MBaAFI9GaSFqIHjLAkIx9GMuq02n7kvBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajBacElXb2dlTXNDUWpIMFl5NnJUYWZ1UzhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kYTQ4ZTItZmY2My00YmNkLTgyYTIt
ZDdiOGViNDYwOGUyLzEvajBacElXb2dlTXNDUWpIMFl5NnJUYWZ1UzhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9kYTQ4ZTItZmY2My00YmNkLTgyYTItZDdiOGViNDYwOGUy
LzEvajBacElXb2dlTXNDUWpIMFl5NnJUYWZ1UzhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj2h/6enA
C4BWpF4TSsb8A9UOIiTn2SwkgQUzVVLXViZe7tg6TLwJXU3oLhwEF2Ob9q3333AK
/z4UbMEsEE5NY3N9dZisDHBQ147xuup7TrCGIvllCDtiIlzvSTQkEfit5LmaSGM6
xqwqy/r7XZNy7al5Vm3dVHZGmuoO3CBj/1puEFXdPNE+pslUdLLP24HuHPEnWyCs
1A4h4LjeXOh9Tv2FyQGtdNXwpRj2miIy2hYt1RF4o7tGU4zmnXJNPmT+8pz4PDFF
TJbdivHc8MK+EmytlrfF6PFnfj0vgNQUKqDF7+ubHArxRNu9URLKxeDj00hw896I
kojEo4pcwsMf7A==
-----END CERTIFICATE-----
Generated at Mon Jun 22 11:07:00 2026 by rpki-client