Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/3dd6c3-69c9-45b0-9ce6-b46d072f60f4/1/c4cmY_zX_q1wXIdpEa0BoyfXvus.mft
File:                     c4cmY_zX_q1wXIdpEa0BoyfXvus.mft (raw, json)
Hash identifier:          w90xDoBR/83l3OTFK0sYXxdi+awjbkdHL+GvLsWPt/Y=
Subject key identifier:   50:0C:CA:B7:34:11:65:73:C7:C7:CB:41:B1:BB:9D:41:47:7E:7D:21
Authority key identifier: 73:87:26:63:FC:D7:FE:AD:70:5C:87:69:11:AD:01:A3:27:D7:BE:EB
Certificate issuer:       /CN=73872663fcd7fead705c876911ad01a327d7beeb
Certificate serial:       019F1942F2296BD753C0DE6301E462A364AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c4cmY_zX_q1wXIdpEa0BoyfXvus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/3dd6c3-69c9-45b0-9ce6-b46d072f60f4/1/c4cmY_zX_q1wXIdpEa0BoyfXvus.mft
Manifest number:          48
Signing time:             Tue 30 Jun 2026 16:00:45 +0000
Manifest this update:     Tue 30 Jun 2026 16:00:45 +0000
Manifest next update:     Wed 01 Jul 2026 16:00:45 +0000
Files and hashes:         1: AptVZmy3_ItS_TkajqAe7kmL-_g.roa (hash: RA6pgWpcf8eG2XE0T6xxg33Mvuf+5VmFUkJi/0cT6G8=)
                          2: c4cmY_zX_q1wXIdpEa0BoyfXvus.crl (hash: a8OUSjGSnCZZgK91ct91IOKxdy7GqRrtTF+yXFJ9AQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/3dd6c3-69c9-45b0-9ce6-b46d072f60f4/1/c4cmY_zX_q1wXIdpEa0BoyfXvus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/3dd6c3-69c9-45b0-9ce6-b46d072f60f4/1/c4cmY_zX_q1wXIdpEa0BoyfXvus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c4cmY_zX_q1wXIdpEa0BoyfXvus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:42:f2:29:6b:d7:53:c0:de:63:01:e4:62:a3:64:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73872663fcd7fead705c876911ad01a327d7beeb
        Validity
            Not Before: Jun 30 16:00:45 2026 GMT
            Not After : Jul  1 16:00:45 2026 GMT
        Subject: CN=500ccab734116573c7c7cb41b1bb9d41477e7d21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a1:79:44:46:b0:5e:54:46:cf:c1:4c:94:c9:
                    7a:50:9d:fe:af:90:35:6d:73:a4:c4:7d:38:b2:82:
                    a7:ba:8b:5e:a1:b7:87:b3:85:3a:8e:8b:77:9e:af:
                    7b:19:ca:95:6c:f1:b3:20:48:7b:a4:91:68:4e:d8:
                    02:45:e8:7c:22:a1:c7:04:17:44:2f:12:f5:b2:0e:
                    82:d4:03:e2:5f:42:d2:0d:9f:8d:bd:4b:35:13:b6:
                    e3:1a:39:8c:66:98:bd:16:91:35:36:c7:b8:9a:18:
                    cd:09:e8:a6:6b:e1:ba:7a:be:3e:32:77:cb:ce:22:
                    45:5e:a5:3c:17:7f:3f:a6:db:d0:14:46:ef:d1:55:
                    43:d5:1a:ac:b1:ed:1f:54:39:6e:d9:a0:21:54:17:
                    f6:ec:99:7e:59:f1:7e:36:cd:f7:64:81:03:c0:00:
                    6e:58:8b:71:23:02:d7:75:82:6a:41:4a:98:50:90:
                    cb:56:c6:ef:91:d4:51:cf:57:2e:69:12:b8:0e:ba:
                    c7:86:a9:0f:9a:04:3a:cd:95:16:94:f6:d0:41:60:
                    1a:08:e8:23:c2:11:f4:ff:4a:76:40:92:99:d1:a3:
                    36:dc:e2:29:30:df:af:9b:d6:dd:ff:f8:fb:a7:e4:
                    03:05:54:9a:93:4e:6d:30:df:81:1a:ae:98:77:4a:
                    0f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0C:CA:B7:34:11:65:73:C7:C7:CB:41:B1:BB:9D:41:47:7E:7D:21
            X509v3 Authority Key Identifier:
                keyid:73:87:26:63:FC:D7:FE:AD:70:5C:87:69:11:AD:01:A3:27:D7:BE:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4cmY_zX_q1wXIdpEa0BoyfXvus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3dd6c3-69c9-45b0-9ce6-b46d072f60f4/1/c4cmY_zX_q1wXIdpEa0BoyfXvus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3dd6c3-69c9-45b0-9ce6-b46d072f60f4/1/c4cmY_zX_q1wXIdpEa0BoyfXvus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:43:c8:b2:6d:e1:5c:2a:cc:55:ed:c0:1c:88:6d:2f:ca:a7:
         42:92:25:fd:11:20:cf:ae:60:26:92:ec:fa:3a:77:44:d9:c1:
         52:5b:1e:9e:67:fa:c6:3c:5c:5b:da:8a:f6:2a:ae:25:2a:ba:
         92:7d:6a:74:2a:69:57:cc:78:51:fe:08:c4:c0:f4:db:23:7e:
         aa:6b:e5:f5:6f:2e:f7:14:0c:53:8a:09:5f:06:b8:bc:92:39:
         43:cb:6e:0d:9e:a5:a0:ba:ca:fe:3c:db:72:ba:86:2c:6e:d4:
         53:f6:92:c5:ff:38:d2:d9:44:f4:2c:0f:91:8a:01:80:b6:e7:
         49:88:0e:0e:e9:57:d5:3e:c8:91:ad:ee:5f:87:cd:67:ee:8b:
         84:43:0b:e8:8e:1f:0a:a8:b3:05:75:1c:a6:d8:c0:5e:07:44:
         15:04:59:4c:ee:98:56:da:e4:46:17:d6:65:81:90:aa:c2:d5:
         2b:9e:68:70:d4:8c:46:5a:ab:e0:3a:17:e1:d3:5a:ff:41:7b:
         2f:a5:8f:97:05:b1:ec:12:e4:ac:ae:2e:f5:e6:77:33:7f:fa:
         68:c1:07:2b:61:95:57:ab:9f:95:6c:bc:78:10:b9:bf:7d:c2:
         b0:82:ad:a8:30:88:58:73:00:58:f6:16:a8:8d:6a:81:4d:ae:
         62:97:3e:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZQvIpa9dTwN5jAeRio2SvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczODcyNjYzZmNkN2ZlYWQ3MDVjODc2OTExYWQwMWEzMjdk
N2JlZWIwHhcNMjYwNjMwMTYwMDQ1WhcNMjYwNzAxMTYwMDQ1WjAzMTEwLwYDVQQD
Eyg1MDBjY2FiNzM0MTE2NTczYzdjN2NiNDFiMWJiOWQ0MTQ3N2U3ZDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6F5REawXlRGz8FMlMl6UJ3+r5A1
bXOkxH04soKnuoteobeHs4U6jot3nq97GcqVbPGzIEh7pJFoTtgCReh8IqHHBBdE
LxL1sg6C1APiX0LSDZ+NvUs1E7bjGjmMZpi9FpE1Nse4mhjNCeima+G6er4+MnfL
ziJFXqU8F38/ptvQFEbv0VVD1Rqsse0fVDlu2aAhVBf27Jl+WfF+Ns33ZIEDwABu
WItxIwLXdYJqQUqYUJDLVsbvkdRRz1cuaRK4DrrHhqkPmgQ6zZUWlPbQQWAaCOgj
whH0/0p2QJKZ0aM23OIpMN+vm9bd//j7p+QDBVSak05tMN+BGq6Yd0oPgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFAMyrc0EWVzx8fLQbG7nUFHfn0hMB8GA1UdIwQY
MBaAFHOHJmP81/6tcFyHaRGtAaMn177rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzRjbVlfelhfcTF3WElkcEVhMEJveWZYdnVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8zZGQ2YzMtNjljOS00NWIwLTljZTYt
YjQ2ZDA3MmY2MGY0LzEvYzRjbVlfelhfcTF3WElkcEVhMEJveWZYdnVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8zZGQ2YzMtNjljOS00NWIwLTljZTYtYjQ2ZDA3MmY2MGY0
LzEvYzRjbVlfelhfcTF3WElkcEVhMEJveWZYdnVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABEPIsm3h
XCrMVe3AHIhtL8qnQpIl/REgz65gJpLs+jp3RNnBUlsenmf6xjxcW9qK9iquJSq6
kn1qdCppV8x4Uf4IxMD02yN+qmvl9W8u9xQMU4oJXwa4vJI5Q8tuDZ6loLrK/jzb
crqGLG7UU/aSxf840tlE9CwPkYoBgLbnSYgODulX1T7Ika3uX4fNZ+6LhEML6I4f
CqizBXUcptjAXgdEFQRZTO6YVtrkRhfWZYGQqsLVK55ocNSMRlqr4DoX4dNa/0F7
L6WPlwWx7BLkrK4u9eZ3M3/6aMEHK2GVV6uflWy8eBC5v33CsIKtqDCIWHMAWPYW
qI1qgU2uYpc+5g==
-----END CERTIFICATE-----
Generated at Tue Jun 30 22:37:09 2026 by rpki-client