Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
File:                     QIH4VgKxFokl2D6zymFgnzV5VqY.mft (raw, json)
Hash identifier:          1+J8m0+5CrdlC9Sd5SqJ7JokandqTKV+qpgIpqw/H0I=
Subject key identifier:   CC:10:74:F3:32:2E:8D:52:74:BD:98:77:5F:D8:1B:FC:E4:09:D1:E0
Authority key identifier: 40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
Certificate issuer:       /CN=4081f85602b1168925d83eb3ca61609f357956a6
Certificate serial:       019EB921D9DE1549E017E2F8ED839E47FECF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
Manifest number:          11EA
Signing time:             Fri 12 Jun 2026 00:01:03 +0000
Manifest this update:     Fri 12 Jun 2026 00:01:03 +0000
Manifest next update:     Sat 13 Jun 2026 00:01:03 +0000
Files and hashes:         1: 1Nxx0TgOX3W2sPdrdUxayvvYBtk.roa (hash: BkBrVdmzVpfXD4QvBO8xygY9UajM60k/x4abGcDGbmw=)
                          2: 9enrJ1aLGA3RCeme7xBZCB62agk.roa (hash: vRnXuA5NETYBT1BeqdHLACLYGuovCr87R2REHEDrMcI=)
                          3: QIH4VgKxFokl2D6zymFgnzV5VqY.crl (hash: DZLJPbK1dO5HbJhWxKZYuw8MJAuOTPqtyPJWkdtrTec=)
                          4: wSuoaH9wOLl866tBer1nWZMIWCc.roa (hash: IgY4urUfYKNfspzPi766lr6KcHLSrEwdZwQgGXHYG6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:21:d9:de:15:49:e0:17:e2:f8:ed:83:9e:47:fe:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4081f85602b1168925d83eb3ca61609f357956a6
        Validity
            Not Before: Jun 12 00:01:03 2026 GMT
            Not After : Jun 13 00:01:03 2026 GMT
        Subject: CN=cc1074f3322e8d5274bd98775fd81bfce409d1e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:11:0f:4a:06:ca:8d:86:64:3c:33:bf:39:0c:
                    29:ee:34:fc:59:05:c2:40:63:b2:3e:d1:79:29:36:
                    94:11:b1:1c:cd:03:87:2c:03:b0:af:57:0e:39:5e:
                    b9:7f:54:8f:db:ae:01:5c:1f:a5:9e:7d:98:04:ed:
                    ef:0f:08:58:60:6c:dc:be:a8:13:d6:47:2d:d7:43:
                    48:ba:4d:a5:27:fc:71:6d:c9:a3:55:ca:f5:5c:ec:
                    c0:e5:f5:20:ea:a3:70:e9:e1:d4:82:8e:49:c7:1e:
                    5a:80:c9:89:cf:d1:6d:15:e0:54:23:d0:e0:d7:9d:
                    7c:ab:20:0a:09:ad:2d:08:df:75:af:55:6b:0c:54:
                    0e:3c:bd:5c:f9:a9:1f:95:6d:5f:cc:06:0e:1c:03:
                    23:2e:87:34:ec:82:0a:c4:9d:d8:be:ca:0f:d3:3c:
                    9e:09:cf:ff:53:55:95:3d:af:99:2c:03:66:28:23:
                    da:88:c5:89:d2:4a:2e:b4:1f:f0:4b:31:e3:e9:04:
                    e6:18:6d:37:09:fd:92:70:d6:6f:89:c8:51:24:02:
                    03:04:e3:fa:a7:96:6f:8d:6e:44:2b:a6:51:31:c2:
                    8f:1a:e9:d0:76:ce:54:71:a6:07:85:f6:5f:84:23:
                    d4:b7:3b:c9:33:92:64:7f:e7:db:88:1d:34:80:83:
                    62:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:10:74:F3:32:2E:8D:52:74:BD:98:77:5F:D8:1B:FC:E4:09:D1:E0
            X509v3 Authority Key Identifier:
                keyid:40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:bc:4d:50:43:55:15:bc:8c:97:c7:28:fe:35:c4:92:d8:26:
         7c:b2:d0:c0:a0:6b:f1:17:e5:3a:f9:80:64:99:44:bf:9e:71:
         ba:8f:77:4b:9c:92:44:6b:1d:46:f3:da:cc:0a:3a:6c:e0:fd:
         da:e9:06:96:92:52:b2:f9:03:ce:e7:83:b3:30:64:97:7a:77:
         2c:b1:0d:21:b8:7a:69:1d:7a:f8:46:f6:47:5f:54:e4:ee:3d:
         bc:71:e1:1e:f9:72:e4:0c:4d:2e:a4:c6:98:bf:2c:64:24:fb:
         20:7c:09:c3:f2:aa:6c:13:32:d5:96:2b:8a:21:2b:57:43:76:
         0e:bc:b5:26:06:7f:a3:80:a0:75:85:69:ea:50:eb:35:b9:da:
         0e:01:71:07:bf:b4:5e:13:cf:e7:e4:48:35:76:98:46:ef:c0:
         9b:62:1c:c8:84:1c:37:2d:9c:f1:ad:4e:7a:6a:35:6b:dd:0d:
         b2:38:a4:04:4e:c6:ae:99:18:4f:27:09:a9:5c:dd:a7:79:31:
         f3:c7:a2:61:a1:0f:e0:34:14:da:c2:b8:e4:a0:2e:56:17:1b:
         48:98:51:39:6f:07:01:2a:a1:0f:47:2b:26:b4:f1:4a:cd:79:
         02:2c:b3:b7:02:c6:98:cf:9c:62:fd:8d:d2:bb:4e:23:82:87:
         99:fe:fa:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65IdneFUngF+L47YOeR/7PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwODFmODU2MDJiMTE2ODkyNWQ4M2ViM2NhNjE2MDlmMzU3
OTU2YTYwHhcNMjYwNjEyMDAwMTAzWhcNMjYwNjEzMDAwMTAzWjAzMTEwLwYDVQQD
EyhjYzEwNzRmMzMyMmU4ZDUyNzRiZDk4Nzc1ZmQ4MWJmY2U0MDlkMWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxEPSgbKjYZkPDO/OQwp7jT8WQXC
QGOyPtF5KTaUEbEczQOHLAOwr1cOOV65f1SP264BXB+lnn2YBO3vDwhYYGzcvqgT
1kct10NIuk2lJ/xxbcmjVcr1XOzA5fUg6qNw6eHUgo5Jxx5agMmJz9FtFeBUI9Dg
1518qyAKCa0tCN91r1VrDFQOPL1c+akflW1fzAYOHAMjLoc07IIKxJ3YvsoP0zye
Cc//U1WVPa+ZLANmKCPaiMWJ0koutB/wSzHj6QTmGG03Cf2ScNZvichRJAIDBOP6
p5ZvjW5EK6ZRMcKPGunQds5UcaYHhfZfhCPUtzvJM5Jkf+fbiB00gINiAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwQdPMyLo1SdL2Yd1/YG/zkCdHgMB8GA1UdIwQY
MBaAFECB+FYCsRaJJdg+s8phYJ81eVamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUlINFZnS3hGb2tsMkQ2enltRmduelY1VnFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yMmM5M2MtOTAwMC00ZTczLWExYzUt
YzAzZjNmZGRkNGFjLzEvUUlINFZnS3hGb2tsMkQ2enltRmduelY1VnFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yMmM5M2MtOTAwMC00ZTczLWExYzUtYzAzZjNmZGRkNGFj
LzEvUUlINFZnS3hGb2tsMkQ2enltRmduelY1VnFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJbxNUENV
FbyMl8co/jXEktgmfLLQwKBr8RflOvmAZJlEv55xuo93S5ySRGsdRvPazAo6bOD9
2ukGlpJSsvkDzueDszBkl3p3LLENIbh6aR16+Eb2R19U5O49vHHhHvly5AxNLqTG
mL8sZCT7IHwJw/KqbBMy1ZYriiErV0N2Dry1JgZ/o4CgdYVp6lDrNbnaDgFxB7+0
XhPP5+RINXaYRu/Am2IcyIQcNy2c8a1Oemo1a90NsjikBE7GrpkYTycJqVzdp3kx
88eiYaEP4DQU2sK45KAuVhcbSJhROW8HASqhD0crJrTxSs15AiyztwLGmM+cYv2N
0rtOI4KHmf76Rg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 07:05:30 2026 by rpki-client