Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
File:                     b14CML55nkSCnIcgyjg0cEVJTiA.mft (raw, json)
Hash identifier:          ye4xqW0DEDVNipWcdgPhMWIA++S+Al1E5D2E9hf0Xhk=
Subject key identifier:   0C:AB:37:86:0A:48:06:94:EF:F9:BD:30:C1:03:A4:BF:70:6B:9B:02
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Certificate issuer:       /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial:       019F122E4F4AA1C318BA77756CE005D8DFAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
Manifest number:          19E1
Signing time:             Mon 29 Jun 2026 07:00:52 +0000
Manifest this update:     Mon 29 Jun 2026 07:00:52 +0000
Manifest next update:     Tue 30 Jun 2026 07:00:52 +0000
Files and hashes:         1: 1-ygVXvpX3v0iELiClfnmQNYwGyE.roa (hash: X5he1s+27okfT854bA2DHGCg/8azuLS5wg9wh4BAYOk=)
                          2: 81IrEqThFJ71oZltC7sydtXNojo.roa (hash: tEfEiIXn9wfKX7SvDjdARvZLxRgzMJ/S8JlSOukelog=)
                          3: AMQlobx9HParaeDL7T0v3tR4_mg.roa (hash: DvsmpIh8xvNvja7LOYbDo2D2JDk07c51OKvsQR0zZ1A=)
                          4: AXyzBE0tybxRg9_jdKm4jNHR7bw.roa (hash: nfQgADgYeSKYxfzdRmUnB0z2SSRcFjYrl/PLdcFMeDw=)
                          5: CP1-ZWFt3LQXYmFLwdbDKA6-btk.roa (hash: hFhoH59R3e+GZod8NYfc3YpX1Y6SV4cXhI67xJcoHls=)
                          6: JxJo9qALLP7eJJE5vuTtbxNKarg.roa (hash: HkVv74vSVM+BvE4aRbMZl6E3E6sT2RpvFk2i93TTTiE=)
                          7: X7CBYKuwZavOmFbf8xJJDhABAJ4.roa (hash: XXFExiGUxJHCf32+M8YXjA/DO0qOOWZKBpQs4MlsYQo=)
                          8: _BfUEuTWI4mH7z3tL2xj4fNLk8w.roa (hash: PZxV1RVfs2NX+n/RPHStsER54mLHjvguw+Y+i8qfbk0=)
                          9: _g7NYGu7EgLM-JyG677gAc99ISI.roa (hash: uHPD2j/d4/7LW+Vl6Kpwce5f7NuD1gag8TG/5Nj0SWs=)
                          10: b14CML55nkSCnIcgyjg0cEVJTiA.crl (hash: mKkm4uZ7f/mvDkCru8qF3zCew0hR5oxX7pHU6z79dmg=)
                          11: bsWFgvY3xPXPpuBC9Tw4bi4Apaw.roa (hash: bP8V3ZFMrLnl6jl+IYnrqUoSwWhsKke/987U4dAlXSc=)
                          12: cZ_CGt8J22trk7fBID_Lw_UFQeQ.roa (hash: MJoA4QKvMfD128eHraMg34YoNGsOhXAw8I0h2v8nSz4=)
                          13: de2lwVssf8rnTbV-vrGaj_YNofM.roa (hash: X+D652oMPb3y57iVvUCNT577oF8mBPxjOL994t6GNZs=)
                          14: fxuyMV_7iGJ5rjIPhk3y0WiOc-Y.roa (hash: kZWQ/Ewlc4WMwycM0JTInlzSOn7k6IqfaiPaxpvk380=)
                          15: g4ShtOVoK1sOm96RfSspdLumCvI.roa (hash: dbDK/BecQeIz6Zb33EjyuQY6S7PvjAP+A9ZP96sRxE8=)
                          16: qo7ie-ZCOxr3kULK0wr2-czci7A.roa (hash: tjSzYVU1BPWM+eWE8epAD1zQp+0FNjjYVtJc8ORfDvE=)
                          17: u3tBTHFA6uA1xiho6mlx2A99Pkg.roa (hash: FgLJ+SuCyCEVccEPsDGFLFFI0Fpbheu8wLy47VogJN8=)
                          18: vELnjGZG0HPMMI6eyVMJCb07tlM.roa (hash: hBZn4JkNx5C+fP4A7VfhJIdgWEeaLDhsZs+aBB3PMpI=)
                          19: wLenhQFsuSLCwYXZncb0yLg71-M.roa (hash: dddbiY/EtjgN2niK28Vk/3dSWCYor5BQPW3BdmG3koo=)
                          20: wRsmJd7CIJgwynHO3eDWK5E65EA.roa (hash: Is86hG9/O11lh+0TSiK7Jnli8yF4j5q5FW3grn/LkD0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:2e:4f:4a:a1:c3:18:ba:77:75:6c:e0:05:d8:df:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
        Validity
            Not Before: Jun 29 07:00:52 2026 GMT
            Not After : Jun 30 07:00:52 2026 GMT
        Subject: CN=0cab37860a480694eff9bd30c103a4bf706b9b02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1d:26:3d:28:46:6e:fa:6b:8b:f7:97:36:df:
                    22:b6:5b:65:49:18:5e:e7:47:ca:a6:04:9c:1b:9b:
                    a7:57:6c:64:2a:01:d9:59:47:a0:03:cb:57:24:60:
                    c3:61:e5:bc:8e:15:8c:74:68:29:2f:7c:fd:95:66:
                    d6:4b:d0:93:0f:10:b5:04:06:ed:cf:fa:f3:36:c4:
                    a4:e1:2e:53:2e:93:f9:d3:aa:89:3d:92:cd:66:01:
                    2f:0a:f9:b6:5e:8d:de:9d:7d:5d:07:f6:10:18:ca:
                    e1:2b:fe:c3:c2:fa:a8:05:5a:04:a4:a4:7b:54:3f:
                    c6:94:03:9e:17:ef:27:d4:12:fd:1a:16:ee:bb:c7:
                    dc:c4:ca:16:9b:f5:fb:02:b5:b1:4d:c4:e1:1d:d4:
                    6a:3f:78:6b:ed:5a:b2:88:9f:a8:2e:dc:fb:15:bf:
                    b6:97:55:fa:b1:12:de:00:68:99:e5:18:b1:3f:a6:
                    ce:18:f8:4a:8d:8f:6f:cc:21:a6:98:04:55:4d:08:
                    53:27:81:5d:cc:43:db:7d:06:49:b2:ac:9b:11:e7:
                    ab:2c:07:04:b1:30:a6:1f:08:ca:48:f2:37:17:cb:
                    c4:f6:14:7d:81:54:f2:d2:ae:d5:e9:9f:22:53:65:
                    50:f9:d7:22:b8:e0:e5:03:8e:9f:be:c3:fd:9e:df:
                    09:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:AB:37:86:0A:48:06:94:EF:F9:BD:30:C1:03:A4:BF:70:6B:9B:02
            X509v3 Authority Key Identifier:
                keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:4d:47:36:57:50:b3:d9:7a:bd:8e:4a:f4:ed:2d:2b:66:a9:
         85:9e:60:6e:2d:2d:bf:90:94:52:d8:fe:5c:f3:4e:5f:71:f3:
         a7:6c:c9:10:a8:3f:4d:b6:22:4a:88:d6:50:e1:d5:60:67:d0:
         78:9f:ca:9b:e3:f8:d8:67:89:36:51:0d:80:ab:3b:09:1c:43:
         83:11:4a:e2:10:93:58:af:c5:f5:d7:d9:42:a8:77:f3:b9:a1:
         e1:a5:dd:30:66:a7:b4:01:21:3b:3e:f3:95:de:f6:33:30:fe:
         ac:1e:81:c3:f1:56:6f:ea:43:47:a1:e2:65:00:e3:44:65:38:
         f9:ba:ae:7b:be:30:b6:af:86:d8:8b:dd:44:f5:f7:ab:96:7a:
         61:dc:16:5a:e0:81:84:3c:c5:d0:c0:20:52:79:21:09:6c:ef:
         3e:0b:fa:cb:f0:66:32:2d:70:b3:a5:bc:72:c7:04:d3:9a:7f:
         db:e9:6b:fb:08:60:98:9a:9c:87:99:e2:32:3f:83:19:57:b9:
         81:f5:13:c3:c8:5a:97:d7:47:72:c3:cf:de:2c:c7:15:08:23:
         f7:1a:bc:6f:49:ee:b7:5e:15:22:1a:c5:35:5d:d9:9c:03:a4:
         08:57:d7:3b:f2:69:49:7c:4c:2f:7f:a2:d2:b8:11:9a:b9:70:
         7c:e1:34:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8SLk9KocMYund1bOAF2N+vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNWUwMjMwYmU3OTllNDQ4MjljODcyMGNhMzgzNDcwNDU0
OTRlMjAwHhcNMjYwNjI5MDcwMDUyWhcNMjYwNjMwMDcwMDUyWjAzMTEwLwYDVQQD
EygwY2FiMzc4NjBhNDgwNjk0ZWZmOWJkMzBjMTAzYTRiZjcwNmI5YjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB0mPShGbvpri/eXNt8itltlSRhe
50fKpgScG5unV2xkKgHZWUegA8tXJGDDYeW8jhWMdGgpL3z9lWbWS9CTDxC1BAbt
z/rzNsSk4S5TLpP506qJPZLNZgEvCvm2Xo3enX1dB/YQGMrhK/7DwvqoBVoEpKR7
VD/GlAOeF+8n1BL9Ghbuu8fcxMoWm/X7ArWxTcThHdRqP3hr7VqyiJ+oLtz7Fb+2
l1X6sRLeAGiZ5RixP6bOGPhKjY9vzCGmmARVTQhTJ4FdzEPbfQZJsqybEeerLAcE
sTCmHwjKSPI3F8vE9hR9gVTy0q7V6Z8iU2VQ+dciuODlA46fvsP9nt8JVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyrN4YKSAaU7/m9MMEDpL9wa5sCMB8GA1UdIwQY
MBaAFG9eAjC+eZ5EgpyHIMo4NHBFSU4gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83MGNjZWYtMTdmMy00OTI4LTljMGIt
YmE3YzdkODE5MGNhLzEvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83MGNjZWYtMTdmMy00OTI4LTljMGItYmE3YzdkODE5MGNh
LzEvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhk1HNldQ
s9l6vY5K9O0tK2aphZ5gbi0tv5CUUtj+XPNOX3Hzp2zJEKg/TbYiSojWUOHVYGfQ
eJ/Km+P42GeJNlENgKs7CRxDgxFK4hCTWK/F9dfZQqh387mh4aXdMGantAEhOz7z
ld72MzD+rB6Bw/FWb+pDR6HiZQDjRGU4+bque74wtq+G2IvdRPX3q5Z6YdwWWuCB
hDzF0MAgUnkhCWzvPgv6y/BmMi1ws6W8cscE05p/2+lr+whgmJqch5niMj+DGVe5
gfUTw8hal9dHcsPP3izHFQgj9xq8b0nut14VIhrFNV3ZnAOkCFfXO/JpSXxML3+i
0rgRmrlwfOE0zQ==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:09:38 2026 by rpki-client