Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/cf9409-3935-43f5-a7ea-5584b853ed34/1/71Gzh1Ji-kFtju3puQEuSC6G6Qg.mft
File:                     71Gzh1Ji-kFtju3puQEuSC6G6Qg.mft (raw, json)
Hash identifier:          HQIVgTVRcvZorjjerRe9Vi0mu7o9vTRt5zf440BRLgU=
Subject key identifier:   8F:64:61:A6:60:B8:4C:57:58:AA:5E:C2:CF:00:76:27:2E:A5:45:08
Authority key identifier: EF:51:B3:87:52:62:FA:41:6D:8E:ED:E9:B9:01:2E:48:2E:86:E9:08
Certificate issuer:       /CN=ef51b3875262fa416d8eede9b9012e482e86e908
Certificate serial:       019F0A74B088EF6669C447092103799C06C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71Gzh1Ji-kFtju3puQEuSC6G6Qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/cf9409-3935-43f5-a7ea-5584b853ed34/1/71Gzh1Ji-kFtju3puQEuSC6G6Qg.mft
Manifest number:          92
Signing time:             Sat 27 Jun 2026 19:00:47 +0000
Manifest this update:     Sat 27 Jun 2026 19:00:47 +0000
Manifest next update:     Sun 28 Jun 2026 19:00:47 +0000
Files and hashes:         1: 71Gzh1Ji-kFtju3puQEuSC6G6Qg.crl (hash: X1IyUxCiqJyUxz4cTDXDJAJBCJwiPK2wzfuOeCcuLAE=)
                          2: WE6dCj7x0gJX4CBgsBBV4qD6kks.asa (hash: Ik9fu30Prhl5cLZ5Dpjdp1/bctc/vb9Xl0Pi2G12sXU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/cf9409-3935-43f5-a7ea-5584b853ed34/1/71Gzh1Ji-kFtju3puQEuSC6G6Qg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/cf9409-3935-43f5-a7ea-5584b853ed34/1/71Gzh1Ji-kFtju3puQEuSC6G6Qg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71Gzh1Ji-kFtju3puQEuSC6G6Qg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Jun 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:0a:74:b0:88:ef:66:69:c4:47:09:21:03:79:9c:06:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef51b3875262fa416d8eede9b9012e482e86e908
        Validity
            Not Before: Jun 27 19:00:47 2026 GMT
            Not After : Jun 28 19:00:47 2026 GMT
        Subject: CN=8f6461a660b84c5758aa5ec2cf0076272ea54508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:54:14:a7:74:7d:a6:c8:f2:a5:79:b0:1f:4a:
                    29:2f:03:c3:98:8a:3b:0d:04:ad:b6:09:09:85:62:
                    98:3c:0a:a2:a9:08:d6:42:88:87:9f:4d:cc:be:8b:
                    f0:70:42:94:c6:05:71:36:a4:20:6b:c2:a3:ea:bf:
                    36:3d:ef:b6:a9:14:bd:fd:92:cc:ac:a3:29:b9:e3:
                    88:b9:f1:26:78:19:5e:4d:6d:96:ab:e4:0b:77:58:
                    86:7c:08:80:33:8a:d1:05:56:73:ea:f5:24:7e:7f:
                    0d:9d:d7:c7:5f:e0:bb:9d:16:26:00:9a:e6:48:98:
                    b7:74:e9:c7:f1:d8:48:53:61:94:5f:d5:f0:82:f7:
                    49:76:00:d2:3b:98:ba:1a:45:b6:13:08:89:c0:58:
                    6c:48:47:b7:66:5c:d3:b2:a9:53:f7:3b:8c:49:c4:
                    55:81:d2:2d:38:52:a3:ed:df:63:44:48:a8:92:4e:
                    47:67:02:5d:dd:ac:84:d0:f4:f3:dd:f9:c4:13:59:
                    16:81:93:56:a9:e1:14:5e:49:19:b4:39:a7:6b:9c:
                    09:69:71:1c:bd:07:a8:05:28:b7:65:75:db:9f:06:
                    f5:4a:0f:1d:6c:bc:90:52:a4:6c:2c:93:78:bb:a5:
                    fc:57:d0:26:d6:7f:81:e6:a4:bb:f5:6e:91:e6:e2:
                    6d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:64:61:A6:60:B8:4C:57:58:AA:5E:C2:CF:00:76:27:2E:A5:45:08
            X509v3 Authority Key Identifier:
                keyid:EF:51:B3:87:52:62:FA:41:6D:8E:ED:E9:B9:01:2E:48:2E:86:E9:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71Gzh1Ji-kFtju3puQEuSC6G6Qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/cf9409-3935-43f5-a7ea-5584b853ed34/1/71Gzh1Ji-kFtju3puQEuSC6G6Qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/cf9409-3935-43f5-a7ea-5584b853ed34/1/71Gzh1Ji-kFtju3puQEuSC6G6Qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:06:fb:a7:b9:b2:e3:80:2d:8a:18:d9:16:0a:e9:34:fb:e1:
         a8:99:96:6c:11:3a:07:00:7a:11:ac:c1:62:25:d6:51:89:5a:
         ad:b8:d3:92:52:2b:e4:74:b0:93:7e:61:13:9e:72:cd:69:42:
         f0:ef:0a:6b:12:da:d4:af:f9:1b:af:3d:eb:15:7e:d5:5e:80:
         67:22:ac:f9:96:dd:41:b6:aa:d1:c9:ba:78:a2:b9:a6:ef:22:
         1a:fe:58:af:85:09:b3:63:83:14:c2:8c:4c:8a:df:f6:16:68:
         67:71:7a:4d:c7:21:1c:20:8a:cc:72:69:f5:e7:9a:b4:57:f6:
         0a:d7:39:58:d2:d3:3a:5b:bf:03:52:77:ca:8f:85:c2:5d:87:
         06:93:4e:f5:a3:19:9a:52:60:72:d8:9a:d2:98:9c:45:00:92:
         3e:f8:53:06:01:6f:ae:f0:0b:6d:43:32:a9:0a:33:4a:53:5c:
         fd:d4:51:86:00:35:e0:f0:be:49:23:01:7b:88:52:62:17:bc:
         81:38:76:1f:9d:0a:18:f2:c7:df:7f:ca:2d:2a:c1:4f:3c:09:
         7e:db:6c:99:5c:e5:01:54:e8:14:40:5f:9c:1e:cf:32:ab:f1:
         18:fe:9b:8f:0a:fd:1d:96:ee:10:2e:11:f4:89:56:70:89:ea:
         57:0f:5f:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8KdLCI72ZpxEcJIQN5nAbIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNTFiMzg3NTI2MmZhNDE2ZDhlZWRlOWI5MDEyZTQ4MmU4
NmU5MDgwHhcNMjYwNjI3MTkwMDQ3WhcNMjYwNjI4MTkwMDQ3WjAzMTEwLwYDVQQD
Eyg4ZjY0NjFhNjYwYjg0YzU3NThhYTVlYzJjZjAwNzYyNzJlYTU0NTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlQUp3R9psjypXmwH0opLwPDmIo7
DQSttgkJhWKYPAqiqQjWQoiHn03MvovwcEKUxgVxNqQga8Kj6r82Pe+2qRS9/ZLM
rKMpueOIufEmeBleTW2Wq+QLd1iGfAiAM4rRBVZz6vUkfn8NndfHX+C7nRYmAJrm
SJi3dOnH8dhIU2GUX9XwgvdJdgDSO5i6GkW2EwiJwFhsSEe3ZlzTsqlT9zuMScRV
gdItOFKj7d9jREiokk5HZwJd3ayE0PTz3fnEE1kWgZNWqeEUXkkZtDmna5wJaXEc
vQeoBSi3ZXXbnwb1Sg8dbLyQUqRsLJN4u6X8V9Am1n+B5qS79W6R5uJt7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9kYaZguExXWKpews8AdicupUUIMB8GA1UdIwQY
MBaAFO9Rs4dSYvpBbY7t6bkBLkguhukIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzFHemgxSmkta0Z0anUzcHVRRXVTQzZHNlFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9jZjk0MDktMzkzNS00M2Y1LWE3ZWEt
NTU4NGI4NTNlZDM0LzEvNzFHemgxSmkta0Z0anUzcHVRRXVTQzZHNlFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9jZjk0MDktMzkzNS00M2Y1LWE3ZWEtNTU4NGI4NTNlZDM0
LzEvNzFHemgxSmkta0Z0anUzcHVRRXVTQzZHNlFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPwb7p7my
44AtihjZFgrpNPvhqJmWbBE6BwB6EazBYiXWUYlarbjTklIr5HSwk35hE55yzWlC
8O8KaxLa1K/5G6896xV+1V6AZyKs+ZbdQbaq0cm6eKK5pu8iGv5Yr4UJs2ODFMKM
TIrf9hZoZ3F6TcchHCCKzHJp9eeatFf2Ctc5WNLTOlu/A1J3yo+Fwl2HBpNO9aMZ
mlJgctia0picRQCSPvhTBgFvrvALbUMyqQozSlNc/dRRhgA14PC+SSMBe4hSYhe8
gTh2H50KGPLH33/KLSrBTzwJfttsmVzlAVToFEBfnB7PMqvxGP6bjwr9HZbuEC4R
9IlWcInqVw9f3Q==
-----END CERTIFICATE-----
Generated at Sun Jun 28 01:11:43 2026 by rpki-client