Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.mft
File:                     C27I7Y_JP3IzT3qXSka8J9EQKSM.mft (raw, json)
Hash identifier:          KGHs4KNSfbEs0Chbnu82p22m0GYDXLhlrsGGuqvByHo=
Subject key identifier:   F4:13:57:13:36:DD:F2:4C:BD:28:64:5E:BC:9B:CE:56:3A:5E:97:D0
Authority key identifier: 0B:6E:C8:ED:8F:C9:3F:72:33:4F:7A:97:4A:46:BC:27:D1:10:29:23
Certificate issuer:       /CN=0b6ec8ed8fc93f72334f7a974a46bc27d1102923
Certificate serial:       019F11C0864A9A387E02F3ED47C3DE280CC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C27I7Y_JP3IzT3qXSka8J9EQKSM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.mft
Manifest number:          0222
Signing time:             Mon 29 Jun 2026 05:00:57 +0000
Manifest this update:     Mon 29 Jun 2026 05:00:57 +0000
Manifest next update:     Tue 30 Jun 2026 05:00:57 +0000
Files and hashes:         1: C27I7Y_JP3IzT3qXSka8J9EQKSM.crl (hash: Mh2D6zLJEcUwIuD4R8AsLXaLUJalKtO85+r4PByfmRE=)
                          2: DKgUlR5pbKENT44IWjYvShteIMA.asa (hash: cjw0dcwU+VRciQW/zDHQdmfkPqgl6w46zUMqg73c0pw=)
                          3: TA3RHAyRhbZeooIsQWMB-18Medo.roa (hash: hbd2prwUOdAITht5l5Qygma9hqYfUIqWnfb9zdLXopA=)
                          4: b84BPERKuOU7XfEOPsJAZAHPSDU.roa (hash: O1yboufDOcbfnri6uWC9z7NwLPBbQ/YoUC4nJjBq2XA=)
                          5: lXV32X79w4UTFHhLN_yUCd-Dpt8.asa (hash: ePLhNqdI3ZuZTZSWnit7eTonIRBYqpL6u07KsloVVUQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C27I7Y_JP3IzT3qXSka8J9EQKSM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:c0:86:4a:9a:38:7e:02:f3:ed:47:c3:de:28:0c:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b6ec8ed8fc93f72334f7a974a46bc27d1102923
        Validity
            Not Before: Jun 29 05:00:57 2026 GMT
            Not After : Jun 30 05:00:57 2026 GMT
        Subject: CN=f413571336ddf24cbd28645ebc9bce563a5e97d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:64:73:7c:d2:59:7d:2e:35:e8:60:4b:cd:76:
                    17:47:7f:7e:cd:74:39:e8:d1:fb:5e:a8:85:6f:15:
                    4a:2b:0e:83:6f:39:c1:cf:4a:91:90:da:dc:41:ba:
                    96:6d:94:a0:f7:2d:98:ee:71:12:40:96:11:81:20:
                    59:24:68:6d:9a:67:0c:12:7a:e0:4c:2f:a6:9f:a2:
                    11:42:1d:2e:49:c6:b5:85:e2:37:c0:01:84:4a:93:
                    c7:65:fe:51:ad:5c:79:b9:65:60:c5:ac:05:4b:bc:
                    40:86:0f:33:3b:b7:4c:ca:96:09:61:eb:96:9d:fe:
                    22:8e:91:82:4e:35:70:b4:39:0a:2b:d8:bc:42:f0:
                    96:c0:21:6f:47:f9:70:59:00:bb:a7:9a:80:dc:d2:
                    a3:7f:e6:92:ec:92:62:b1:dc:81:b2:7e:4b:46:c2:
                    7f:b9:73:5e:eb:3a:96:72:a5:71:82:53:af:c5:7b:
                    2c:5d:f6:24:00:ed:da:d8:fc:38:c7:6b:c3:42:67:
                    9b:91:85:55:ad:9a:65:f7:30:41:24:e6:6a:a4:90:
                    57:a0:0e:6c:ec:18:6e:0c:6e:af:8e:02:96:cf:d2:
                    37:8a:bf:5b:b8:2b:e8:76:e0:a9:cd:82:6b:ad:a7:
                    05:b3:bb:98:4d:4d:cf:da:20:a7:0f:24:31:ac:fe:
                    6a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:13:57:13:36:DD:F2:4C:BD:28:64:5E:BC:9B:CE:56:3A:5E:97:D0
            X509v3 Authority Key Identifier:
                keyid:0B:6E:C8:ED:8F:C9:3F:72:33:4F:7A:97:4A:46:BC:27:D1:10:29:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C27I7Y_JP3IzT3qXSka8J9EQKSM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:eb:88:3a:97:91:be:29:f7:0d:a9:b8:f1:6e:c1:67:ae:8d:
         a2:15:d5:9b:7e:b7:0d:f5:4c:99:21:bd:12:44:9e:3b:aa:1a:
         d5:a4:20:53:29:bc:f9:bb:09:40:24:51:63:e9:76:d4:96:da:
         e8:1e:83:e1:77:90:fd:8d:40:db:e0:49:fb:28:59:c1:6a:a6:
         1f:d3:5a:b8:0c:73:3b:91:e1:78:a4:12:da:04:24:a7:4a:01:
         f2:d4:b5:e7:85:41:97:40:50:f5:43:66:2c:49:00:f8:2d:d5:
         80:94:84:f6:39:70:a2:c3:ef:8c:68:67:a6:96:13:9f:a4:49:
         2d:1c:17:94:a3:fa:be:9c:54:de:f4:e5:ed:1b:cb:99:23:2d:
         90:58:03:46:5b:d6:8c:a8:2f:9f:a3:2a:d3:90:b7:07:f8:6a:
         28:c2:cc:36:a5:18:49:c6:10:ef:a6:b0:2f:5f:31:80:04:f6:
         2a:e1:37:4d:5f:e5:02:ae:d4:e7:2b:e4:d4:ad:87:db:95:5c:
         1d:ce:24:1d:8c:a6:b2:2e:34:57:5d:03:49:4b:fe:6e:d5:40:
         3a:af:1b:4c:e9:1c:c0:e4:db:4e:0e:17:7c:8f:72:26:67:e7:
         6d:6d:b8:22:5f:b7:cc:d9:aa:dc:33:f3:cb:e3:55:a2:e1:be:
         ee:a4:4d:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8RwIZKmjh+AvPtR8PeKAzJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNmVjOGVkOGZjOTNmNzIzMzRmN2E5NzRhNDZiYzI3ZDEx
MDI5MjMwHhcNMjYwNjI5MDUwMDU3WhcNMjYwNjMwMDUwMDU3WjAzMTEwLwYDVQQD
EyhmNDEzNTcxMzM2ZGRmMjRjYmQyODY0NWViYzliY2U1NjNhNWU5N2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGRzfNJZfS416GBLzXYXR39+zXQ5
6NH7XqiFbxVKKw6DbznBz0qRkNrcQbqWbZSg9y2Y7nESQJYRgSBZJGhtmmcMEnrg
TC+mn6IRQh0uSca1heI3wAGESpPHZf5RrVx5uWVgxawFS7xAhg8zO7dMypYJYeuW
nf4ijpGCTjVwtDkKK9i8QvCWwCFvR/lwWQC7p5qA3NKjf+aS7JJisdyBsn5LRsJ/
uXNe6zqWcqVxglOvxXssXfYkAO3a2Pw4x2vDQmebkYVVrZpl9zBBJOZqpJBXoA5s
7BhuDG6vjgKWz9I3ir9buCvoduCpzYJrracFs7uYTU3P2iCnDyQxrP5qAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQTVxM23fJMvShkXrybzlY6XpfQMB8GA1UdIwQY
MBaAFAtuyO2PyT9yM096l0pGvCfRECkjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzI3STdZX0pQM0l6VDNxWFNrYThKOUVRS1NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zMDQ3NjItNjczMy00YzczLTg1MjMt
MDQ3Nzc1MTI5MTQ4LzEvQzI3STdZX0pQM0l6VDNxWFNrYThKOUVRS1NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8zMDQ3NjItNjczMy00YzczLTg1MjMtMDQ3Nzc1MTI5MTQ4
LzEvQzI3STdZX0pQM0l6VDNxWFNrYThKOUVRS1NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZuuIOpeR
vin3Dam48W7BZ66NohXVm363DfVMmSG9EkSeO6oa1aQgUym8+bsJQCRRY+l21Jba
6B6D4XeQ/Y1A2+BJ+yhZwWqmH9NauAxzO5HheKQS2gQkp0oB8tS154VBl0BQ9UNm
LEkA+C3VgJSE9jlwosPvjGhnppYTn6RJLRwXlKP6vpxU3vTl7RvLmSMtkFgDRlvW
jKgvn6Mq05C3B/hqKMLMNqUYScYQ76awL18xgAT2KuE3TV/lAq7U5yvk1K2H25Vc
Hc4kHYymsi40V10DSUv+btVAOq8bTOkcwOTbTg4XfI9yJmfnbW24Il+3zNmq3DPz
y+NVouG+7qRNOQ==
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:44:16 2026 by rpki-client