Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft
File:                     dixgr01zclhFzq8Le1hed1cGaWU.mft (raw, json)
Hash identifier:          3hrQcDv0RDoCNRhIZ9gNk2vJFYdT8JEzBm1Fyn5Yqeo=
Subject key identifier:   38:9D:6B:69:CF:EF:91:E0:5C:ED:1E:B7:18:7A:13:88:7C:E6:AC:2C
Authority key identifier: 76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65
Certificate issuer:       /CN=762c60af4d73725845ceaf0b7b585e7757066965
Certificate serial:       019EB98F1C3014FB9E906E31EB87BDBF6D57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft
Manifest number:          1957
Signing time:             Fri 12 Jun 2026 02:00:24 +0000
Manifest this update:     Fri 12 Jun 2026 02:00:24 +0000
Manifest next update:     Sat 13 Jun 2026 02:00:24 +0000
Files and hashes:         1: 13ja1cIxS4cK0b0RY3CC1WL6GYs.roa (hash: c+J6Q65ZscwsVoYSvT1zs/WDV1dPfYCmK+qupBgYe50=)
                          2: 9OSGu-CL3eoRiBIUAPN11BJFt2o.roa (hash: jKTEcw4I25lyqC0/LKz20znUmkmfgUVEV6D5UsdJUAo=)
                          3: RtgqAojptg3yfsTJ-oga_8isRto.roa (hash: eyQYoF7t82yY3YtM/1jPPLvEjYoo8YlLinObPAQcXHA=)
                          4: X6IQ-q68Lu6Sm7ozgn09iKo2xDc.roa (hash: 1oM0JFaG4XNcO5zFMn1eRQw1lAJ0Or0fahaPut34poU=)
                          5: _1hB8H52OK9tZ7oTDVioeT82qgM.roa (hash: 7T2hoZDj4U/8s/AFME6VJZzf9NWdP3HcXbeV7H9Xusw=)
                          6: dixgr01zclhFzq8Le1hed1cGaWU.crl (hash: Z9DDbKFQEl+VpH0UBCLJlUNGqZpU0aoFf7BJt1+v69Q=)
                          7: taZtaRwec6TUmh7xkAuy4J_X1F4.roa (hash: CpXD+0k4LSqd3QdCbAr+w3LdfUJFfvPxHaufA8KBMW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:8f:1c:30:14:fb:9e:90:6e:31:eb:87:bd:bf:6d:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=762c60af4d73725845ceaf0b7b585e7757066965
        Validity
            Not Before: Jun 12 02:00:24 2026 GMT
            Not After : Jun 13 02:00:24 2026 GMT
        Subject: CN=389d6b69cfef91e05ced1eb7187a13887ce6ac2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f1:30:ac:8a:39:bb:fa:34:5c:a8:18:c3:c6:
                    0e:3f:11:50:cc:4e:bb:c6:6d:76:a8:b0:c9:de:c9:
                    38:55:e9:66:18:75:17:e4:e8:dc:f7:9c:a5:e5:96:
                    ad:d9:01:97:bd:cc:af:bd:22:8e:b9:e3:f0:a6:6a:
                    ba:52:0b:a2:45:ea:2f:26:bf:ff:58:c8:c5:a5:04:
                    95:57:ad:c9:8f:e7:6c:63:11:f9:cc:12:f9:1b:6b:
                    fa:15:4d:3a:a0:53:de:3a:e5:78:fd:92:55:63:b2:
                    02:f7:c0:d1:ff:3d:a4:9e:24:63:e9:f2:1d:c2:ae:
                    10:49:52:16:f1:ce:9e:cb:a8:fa:4d:be:ef:49:48:
                    41:52:eb:e0:66:b8:2d:19:ed:85:ef:ad:53:9d:dc:
                    8b:9a:56:df:53:5e:62:c9:b7:cc:df:43:6f:21:83:
                    46:a5:0a:a8:0d:8d:f0:78:6c:56:c4:4b:c1:7d:af:
                    11:8e:82:e7:65:fd:41:ee:24:ee:af:34:f2:f0:99:
                    21:1c:35:ac:01:8f:87:49:f3:a3:58:4d:fc:06:89:
                    b2:b0:d0:22:bb:92:47:8b:e1:83:bd:fa:94:ec:f3:
                    c0:ac:a7:0a:b6:de:85:ff:23:a3:d7:20:99:d4:74:
                    cc:60:2a:2e:e8:24:9f:7c:aa:25:24:63:ca:6b:9f:
                    54:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9D:6B:69:CF:EF:91:E0:5C:ED:1E:B7:18:7A:13:88:7C:E6:AC:2C
            X509v3 Authority Key Identifier:
                keyid:76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:09:e6:b2:79:5b:01:bf:21:b5:4d:f8:27:c9:8d:89:eb:b4:
         55:93:56:90:a8:4f:d7:fa:9b:15:c6:8f:8b:6f:75:11:eb:e0:
         1d:ce:e9:7e:34:d8:0c:bf:09:f6:88:df:c6:0b:c5:6e:ff:18:
         d1:65:42:78:8a:2a:18:4e:5d:c0:90:f8:85:dc:d5:1c:84:2b:
         43:a6:f2:d8:d9:b9:dd:1e:4b:60:7b:73:54:c2:99:c5:79:9d:
         43:e3:a2:f0:73:91:8c:8e:bf:53:db:26:7e:84:a1:31:a4:30:
         28:91:09:a9:2d:94:64:9b:b8:a8:da:1e:33:5f:fb:cf:51:74:
         58:98:a9:f2:11:b9:ca:af:8d:1a:52:d5:0c:46:72:b2:c2:8a:
         e0:98:7b:83:24:37:f2:ff:eb:47:2b:6f:6e:7c:6a:7d:11:b3:
         1f:4b:32:30:0f:9e:ce:51:32:23:6e:17:30:74:a3:30:73:14:
         a6:d2:6a:50:21:15:f3:e1:b9:3f:d9:48:d0:5d:ec:95:68:5e:
         1d:b6:01:f7:f3:53:a9:a7:9d:e5:21:63:4b:e0:3a:c4:1b:46:
         c9:63:4a:01:ce:82:42:07:42:77:59:56:d6:da:a5:2b:d2:57:
         15:32:d6:e8:1a:ed:bb:2d:bc:44:09:e4:0d:24:d9:8a:eb:10:
         98:b3:c8:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65jxwwFPuekG4x64e9v21XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MmM2MGFmNGQ3MzcyNTg0NWNlYWYwYjdiNTg1ZTc3NTcw
NjY5NjUwHhcNMjYwNjEyMDIwMDI0WhcNMjYwNjEzMDIwMDI0WjAzMTEwLwYDVQQD
EygzODlkNmI2OWNmZWY5MWUwNWNlZDFlYjcxODdhMTM4ODdjZTZhYzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPEwrIo5u/o0XKgYw8YOPxFQzE67
xm12qLDJ3sk4VelmGHUX5Ojc95yl5Zat2QGXvcyvvSKOuePwpmq6UguiReovJr//
WMjFpQSVV63Jj+dsYxH5zBL5G2v6FU06oFPeOuV4/ZJVY7IC98DR/z2kniRj6fId
wq4QSVIW8c6ey6j6Tb7vSUhBUuvgZrgtGe2F761TndyLmlbfU15iybfM30NvIYNG
pQqoDY3weGxWxEvBfa8RjoLnZf1B7iTurzTy8JkhHDWsAY+HSfOjWE38BomysNAi
u5JHi+GDvfqU7PPArKcKtt6F/yOj1yCZ1HTMYCou6CSffKolJGPKa59USwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDida2nP75HgXO0etxh6E4h85qwsMB8GA1UdIwQY
MBaAFHYsYK9Nc3JYRc6vC3tYXndXBmllMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGl4Z3IwMXpjbGhGenE4TGUxaGVkMWNHYVdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9lNmEwMmUtMDE0Ni00NGE2LTlkZmMt
ZDQyMDlmYzdmM2M5LzEvZGl4Z3IwMXpjbGhGenE4TGUxaGVkMWNHYVdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9lNmEwMmUtMDE0Ni00NGE2LTlkZmMtZDQyMDlmYzdmM2M5
LzEvZGl4Z3IwMXpjbGhGenE4TGUxaGVkMWNHYVdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApQnmsnlb
Ab8htU34J8mNieu0VZNWkKhP1/qbFcaPi291EevgHc7pfjTYDL8J9ojfxgvFbv8Y
0WVCeIoqGE5dwJD4hdzVHIQrQ6by2Nm53R5LYHtzVMKZxXmdQ+Oi8HORjI6/U9sm
foShMaQwKJEJqS2UZJu4qNoeM1/7z1F0WJip8hG5yq+NGlLVDEZyssKK4Jh7gyQ3
8v/rRytvbnxqfRGzH0syMA+ezlEyI24XMHSjMHMUptJqUCEV8+G5P9lI0F3slWhe
HbYB9/NTqaed5SFjS+A6xBtGyWNKAc6CQgdCd1lW1tqlK9JXFTLW6Brtuy28RAnk
DSTZiusQmLPIrg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 10:24:53 2026 by rpki-client