Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
File:                     l8AN4AfUqkpAMdR2ELObd0kIv0k.mft (raw, json)
Hash identifier:          oePtbGW9fADv1knBgrs9vjRseLOXHQ+85nGasKW5fwc=
Subject key identifier:   FA:6C:C9:92:14:10:DF:6D:93:CD:6C:58:DD:31:28:A7:50:0A:A1:3B
Authority key identifier: 97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49
Certificate issuer:       /CN=97c00de007d4aa4a4031d47610b39b774908bf49
Certificate serial:       019EB8EA8B0A0F7D0064BE1265BF87D98FE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
Manifest number:          053C
Signing time:             Thu 11 Jun 2026 23:00:39 +0000
Manifest this update:     Thu 11 Jun 2026 23:00:39 +0000
Manifest next update:     Fri 12 Jun 2026 23:00:39 +0000
Files and hashes:         1: l8AN4AfUqkpAMdR2ELObd0kIv0k.crl (hash: sf4blH58TwVwug2lIAONPQ1bzjIhAdNDZK0OkdWUUzM=)
                          2: odYIvbxaJeYmOjoyzYcsw6tdRBQ.roa (hash: gjz6TPRGymxJ3q8bit5/XLbB9ysikFUi3nJ/upxA8J0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:ea:8b:0a:0f:7d:00:64:be:12:65:bf:87:d9:8f:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97c00de007d4aa4a4031d47610b39b774908bf49
        Validity
            Not Before: Jun 11 23:00:39 2026 GMT
            Not After : Jun 12 23:00:39 2026 GMT
        Subject: CN=fa6cc9921410df6d93cd6c58dd3128a7500aa13b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:04:e4:27:69:e2:03:b4:42:51:71:1b:cf:84:
                    cf:bc:1a:2c:40:d0:df:7a:c2:58:92:d6:2c:7a:52:
                    90:8d:34:46:87:2d:39:7e:2e:ed:da:95:c6:d1:0f:
                    24:96:12:63:6f:67:20:09:04:62:fe:f4:08:05:79:
                    3f:28:b2:6a:ce:93:44:97:23:c9:ff:c0:53:24:13:
                    5e:c6:81:80:cd:e5:ea:ff:2a:3a:41:ff:b8:a7:5e:
                    cf:71:91:3d:4a:13:30:a7:00:d9:df:d5:a6:52:a1:
                    b2:9d:5e:37:35:17:26:99:51:68:dc:5a:fb:a9:24:
                    c6:8b:36:a7:5e:e2:18:36:28:0e:45:b9:0e:15:ce:
                    f5:1b:6c:2e:1a:fe:14:3d:b9:ba:cc:cd:c2:d2:53:
                    c4:e1:05:50:99:aa:e0:27:b8:18:9e:e8:72:26:26:
                    30:45:a9:79:31:f8:ef:60:a7:aa:c6:7b:91:93:8a:
                    fb:2b:09:6d:0e:ee:4e:65:10:39:9b:f5:ff:f2:67:
                    1e:69:95:b2:ac:1c:3d:31:03:63:2f:28:99:d4:a1:
                    e7:b1:57:d5:e3:b6:b6:14:7e:7c:ac:51:86:38:c6:
                    fc:89:5d:2d:2a:c2:ad:2a:09:51:20:24:7c:24:80:
                    63:4e:ca:20:b9:fe:9f:3e:f6:8b:06:42:6f:31:ff:
                    38:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:6C:C9:92:14:10:DF:6D:93:CD:6C:58:DD:31:28:A7:50:0A:A1:3B
            X509v3 Authority Key Identifier:
                keyid:97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:96:d3:1f:ed:d1:d7:27:83:01:fe:75:9e:7e:1f:2d:51:09:
         ec:4a:af:61:ce:6d:e4:8e:52:35:c3:a4:7c:7c:44:67:a1:d9:
         e7:d8:18:26:29:85:d3:b9:65:98:e6:c2:d3:f9:89:3c:18:95:
         52:e0:b5:50:d1:09:77:c5:7b:59:b5:6e:4b:7b:d2:4b:24:9e:
         f5:d3:29:52:00:6b:f7:33:da:6d:f0:62:fd:82:84:a4:a4:05:
         0e:00:84:4a:ba:f5:cf:7c:12:8c:c6:3a:05:5f:be:c2:b6:c9:
         82:2c:8b:8f:5e:e3:03:c8:7b:6f:f4:ea:58:4e:ff:99:ac:4c:
         96:97:df:93:da:a1:01:8c:62:a3:0b:09:08:a9:26:7f:ca:7d:
         27:cd:bc:56:a0:ce:e7:2a:7f:c4:3c:44:14:a8:30:28:03:1f:
         e6:9c:5d:7d:33:ba:b7:c3:ce:f3:17:ab:21:37:37:b3:cb:7d:
         6b:8e:d7:b6:5b:eb:76:af:b4:0f:ba:a2:b9:40:ee:b8:ac:cb:
         36:2f:e9:8b:22:34:9b:96:4c:1d:56:ff:b2:1b:71:4e:c6:f8:
         4e:38:df:43:7c:44:90:17:6e:a3:e5:40:3d:72:1a:3d:62:ce:
         9d:50:55:45:40:39:07:bf:65:4d:bc:51:a0:45:7d:89:4c:9a:
         82:58:c4:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ646osKD30AZL4SZb+H2Y/jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3YzAwZGUwMDdkNGFhNGE0MDMxZDQ3NjEwYjM5Yjc3NDkw
OGJmNDkwHhcNMjYwNjExMjMwMDM5WhcNMjYwNjEyMjMwMDM5WjAzMTEwLwYDVQQD
EyhmYTZjYzk5MjE0MTBkZjZkOTNjZDZjNThkZDMxMjhhNzUwMGFhMTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgTkJ2niA7RCUXEbz4TPvBosQNDf
esJYktYselKQjTRGhy05fi7t2pXG0Q8klhJjb2cgCQRi/vQIBXk/KLJqzpNElyPJ
/8BTJBNexoGAzeXq/yo6Qf+4p17PcZE9ShMwpwDZ39WmUqGynV43NRcmmVFo3Fr7
qSTGizanXuIYNigORbkOFc71G2wuGv4UPbm6zM3C0lPE4QVQmargJ7gYnuhyJiYw
Ral5MfjvYKeqxnuRk4r7KwltDu5OZRA5m/X/8mceaZWyrBw9MQNjLyiZ1KHnsVfV
47a2FH58rFGGOMb8iV0tKsKtKglRICR8JIBjTsoguf6fPvaLBkJvMf849wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpsyZIUEN9tk81sWN0xKKdQCqE7MB8GA1UdIwQY
MBaAFJfADeAH1KpKQDHUdhCzm3dJCL9JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDhBTjRBZlVxa3BBTWRSMkVMT2JkMGtJdjBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wMDc3YzUtZjBiZS00NjNmLWFiNzUt
OGMzZGNjNDU5MDI2LzEvbDhBTjRBZlVxa3BBTWRSMkVMT2JkMGtJdjBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8wMDc3YzUtZjBiZS00NjNmLWFiNzUtOGMzZGNjNDU5MDI2
LzEvbDhBTjRBZlVxa3BBTWRSMkVMT2JkMGtJdjBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUZbTH+3R
1yeDAf51nn4fLVEJ7EqvYc5t5I5SNcOkfHxEZ6HZ59gYJimF07llmObC0/mJPBiV
UuC1UNEJd8V7WbVuS3vSSySe9dMpUgBr9zPabfBi/YKEpKQFDgCESrr1z3wSjMY6
BV++wrbJgiyLj17jA8h7b/TqWE7/maxMlpffk9qhAYxiowsJCKkmf8p9J828VqDO
5yp/xDxEFKgwKAMf5pxdfTO6t8PO8xerITc3s8t9a47Xtlvrdq+0D7qiuUDuuKzL
Ni/piyI0m5ZMHVb/shtxTsb4TjjfQ3xEkBduo+VAPXIaPWLOnVBVRUA5B79lTbxR
oEV9iUyagljEGQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:35:24 2026 by rpki-client