Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
File:                     crvS-hgxljniX_v0vb-gCGYBWK4.mft (raw, json)
Hash identifier:          GoAZNggCTSpWoizzE2ZMjgJDIycFg9dHTrnFMA4Jyhg=
Subject key identifier:   2B:C8:A6:6B:DD:35:BA:B3:6F:3C:15:88:D3:50:0A:00:62:50:C8:71
Authority key identifier: 72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
Certificate issuer:       /CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Certificate serial:       019EC9397A58967CE2A773B36B301245D24F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
Manifest number:          0A71
Signing time:             Mon 15 Jun 2026 03:00:47 +0000
Manifest this update:     Mon 15 Jun 2026 03:00:47 +0000
Manifest next update:     Tue 16 Jun 2026 03:00:47 +0000
Files and hashes:         1: CtUb_khJo3kUaPz7Tczh3fTMkSI.roa (hash: TmMbi1KebbnPaU2uYcFYkbumiWNa51w3Bfk/CmEIg48=)
                          2: LYTtAf3H_kyY7ENaa_s2xlDryvA.roa (hash: qVqCrQfBkXTFFeCBC+csIaSWA9WFskDBhKnN7ZNtnUI=)
                          3: crvS-hgxljniX_v0vb-gCGYBWK4.crl (hash: lhhaNDobPLTTcbUz+9jXnytj2cFhdU4AiDhJFmb45jc=)
                          4: nzVsqgRihITV0rAfYCaXGFifXGQ.roa (hash: 8JP5nQ7Ra35LooABXjLjF+v7Z2glNePMlz4FbudAXmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Jun 2026 03:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c9:39:7a:58:96:7c:e2:a7:73:b3:6b:30:12:45:d2:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
        Validity
            Not Before: Jun 15 03:00:47 2026 GMT
            Not After : Jun 16 03:00:47 2026 GMT
        Subject: CN=2bc8a66bdd35bab36f3c1588d3500a006250c871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3b:5b:05:18:3e:b8:26:97:c0:ea:d7:eb:f0:
                    6d:7b:e3:43:fa:dd:37:56:cb:97:09:3d:e8:5e:6f:
                    ea:27:79:1c:40:c2:5e:80:e0:bd:3b:13:b6:0c:f6:
                    12:92:b2:a4:1e:66:0a:6e:bc:a0:2b:10:4f:fb:71:
                    e0:20:a0:b1:a1:33:a8:42:6d:f9:34:2c:21:08:c3:
                    12:d8:5e:f1:7a:78:55:56:73:3a:61:d0:e5:79:ba:
                    5b:2e:78:39:38:b6:27:77:4d:bd:f1:11:0f:61:6b:
                    b9:8e:e3:61:4f:9f:19:b5:7f:7c:6c:d9:5a:de:01:
                    dd:5d:8d:f8:67:55:ab:21:75:a9:14:04:e7:5c:98:
                    28:eb:49:45:ec:7d:36:58:ff:78:1e:da:7c:d4:3c:
                    89:72:dd:8e:f3:44:d1:b5:ed:68:60:11:e8:b9:a4:
                    ac:29:37:5c:7f:60:e4:c5:eb:ad:bf:18:3e:62:6b:
                    2f:d2:7d:9a:77:89:bb:3f:91:d4:a2:04:e8:88:0e:
                    5f:c4:43:49:97:34:9f:b7:6d:22:18:e3:d3:68:5f:
                    06:9f:76:85:de:6c:49:14:54:00:a7:15:c7:93:40:
                    47:c4:42:65:eb:a1:63:9a:82:8f:15:b5:76:19:92:
                    37:b3:cc:53:5e:15:30:56:49:fc:ed:14:8e:0e:de:
                    80:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C8:A6:6B:DD:35:BA:B3:6F:3C:15:88:D3:50:0A:00:62:50:C8:71
            X509v3 Authority Key Identifier:
                keyid:72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:c1:43:65:e9:27:bb:d7:dd:c6:28:ce:97:b9:73:62:9a:67:
         48:40:bc:46:bb:4a:46:53:85:10:57:fb:62:bf:ab:11:ee:40:
         d1:3f:68:34:d0:d5:bf:ef:65:03:06:67:9a:52:4c:b7:09:66:
         14:8d:b3:76:df:fe:96:ed:6f:9d:2a:2f:61:39:b0:12:25:29:
         d2:86:8f:1e:16:aa:08:ff:08:45:65:7c:95:22:c8:13:98:4f:
         fa:a8:fa:00:b9:41:bf:f7:23:9d:05:3a:c6:f7:80:4b:d5:51:
         29:ed:c8:fc:31:bf:90:09:72:25:9f:ac:9c:d2:04:5a:2b:00:
         77:80:4c:0f:44:99:e9:b8:75:a8:04:b0:e2:e6:32:a6:94:0d:
         d3:d0:3a:ac:b3:00:ba:7c:cb:b7:51:09:30:ee:78:c1:57:56:
         7f:a4:28:1f:9f:08:9b:31:5a:e8:39:e1:48:79:41:8d:c8:43:
         18:cb:1e:dd:71:41:ec:08:83:ee:e5:af:ea:f6:f0:c4:f9:46:
         a5:62:e1:08:b8:11:e9:75:51:c9:8f:51:ed:53:36:b4:0b:c2:
         0a:40:0c:fb:a3:80:9f:63:1c:32:e2:3f:32:0a:8d:e5:93:56:
         f9:43:97:55:80:7f:52:7f:28:eb:e0:20:0d:22:1d:50:99:ba:
         b8:cd:d0:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7JOXpYlnzip3OzazASRdJPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYmJkMmZhMTgzMTk2MzllMjVmZmJmNGJkYmZhMDA4NjYw
MTU4YWUwHhcNMjYwNjE1MDMwMDQ3WhcNMjYwNjE2MDMwMDQ3WjAzMTEwLwYDVQQD
EygyYmM4YTY2YmRkMzViYWIzNmYzYzE1ODhkMzUwMGEwMDYyNTBjODcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDtbBRg+uCaXwOrX6/Bte+ND+t03
VsuXCT3oXm/qJ3kcQMJegOC9OxO2DPYSkrKkHmYKbrygKxBP+3HgIKCxoTOoQm35
NCwhCMMS2F7xenhVVnM6YdDlebpbLng5OLYnd0298REPYWu5juNhT58ZtX98bNla
3gHdXY34Z1WrIXWpFATnXJgo60lF7H02WP94Htp81DyJct2O80TRte1oYBHouaSs
KTdcf2Dkxeutvxg+Ymsv0n2ad4m7P5HUogToiA5fxENJlzSft20iGOPTaF8Gn3aF
3mxJFFQApxXHk0BHxEJl66FjmoKPFbV2GZI3s8xTXhUwVkn87RSODt6AOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCvIpmvdNbqzbzwViNNQCgBiUMhxMB8GA1UdIwQY
MBaAFHK70voYMZY54l/79L2/oAhmAViuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3J2Uy1oZ3hsam5pWF92MHZiLWdDR1lCV0s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kYzQ0MjAtNDA2Mi00Nzc4LTkzNTgt
MGFmMmU1NDE2NDZjLzEvY3J2Uy1oZ3hsam5pWF92MHZiLWdDR1lCV0s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9kYzQ0MjAtNDA2Mi00Nzc4LTkzNTgtMGFmMmU1NDE2NDZj
LzEvY3J2Uy1oZ3hsam5pWF92MHZiLWdDR1lCV0s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAosFDZekn
u9fdxijOl7lzYppnSEC8RrtKRlOFEFf7Yr+rEe5A0T9oNNDVv+9lAwZnmlJMtwlm
FI2zdt/+lu1vnSovYTmwEiUp0oaPHhaqCP8IRWV8lSLIE5hP+qj6ALlBv/cjnQU6
xveAS9VRKe3I/DG/kAlyJZ+snNIEWisAd4BMD0SZ6bh1qASw4uYyppQN09A6rLMA
unzLt1EJMO54wVdWf6QoH58ImzFa6DnhSHlBjchDGMse3XFB7AiD7uWv6vbwxPlG
pWLhCLgR6XVRyY9R7VM2tAvCCkAM+6OAn2McMuI/MgqN5ZNW+UOXVYB/Un8o6+Ag
DSIdUJm6uM3QnQ==
-----END CERTIFICATE-----
Generated at Mon Jun 15 09:52:55 2026 by rpki-client