Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft
File:                     CoH-kFn2ggvBitWALy8fynfSVLc.mft (raw, json)
Hash identifier:          TknITrDNQJG2zdgI/PWieZB4axFaGsxA5Ev6V3DN3Ro=
Subject key identifier:   FD:14:5F:85:5C:38:26:F5:01:2C:A7:3A:E6:AF:37:B6:A4:26:89:AD
Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7
Certificate issuer:       /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7
Certificate serial:       019F189EF2547DD04E770BBE34E339A8E813
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft
Manifest number:          0CEC
Signing time:             Tue 30 Jun 2026 13:01:37 +0000
Manifest this update:     Tue 30 Jun 2026 13:01:37 +0000
Manifest next update:     Wed 01 Jul 2026 13:01:37 +0000
Files and hashes:         1: 0-DUuatym4EjrLpEXcW6I4MvGuM.roa (hash: uxv6/KY05jYuEsZLZV3EP7utj37no6k0dC74Q/DN0po=)
                          2: 0G0rRTu6YWCR1V_Lc199bCBf3eY.roa (hash: ONejcgv+C+EtCtZmR2C80Az2frNnLr2aDGvIHLHpMsw=)
                          3: CoH-kFn2ggvBitWALy8fynfSVLc.crl (hash: BORU+gZMuIqt8dJbpUIaR4GbBkwLkhMj7+PfikNqU6g=)
                          4: DRWGbkvEcD_bNQTgjUEfobLZ-PA.roa (hash: eZVLmuCp5+bXUFcL2aI3C/aZXJNWqBIZX9DvM7Y7ZFY=)
                          5: RxPOdCnW7tymnjueSRcA6hs4elk.roa (hash: FCPYguPsplTXs5/9P4PJ+u4lYOZKePLa/u9GPsujen4=)
                          6: Y-ntuvRTafT1eOZlmfGsaPPEtjE.roa (hash: v4qO0jj2DVZ9xq0w+y70kJel8FoTbySNEx7XDJ9VH/Q=)
                          7: dJpXPlF_vRyOgX7jQKghLw8pQUQ.roa (hash: E1+cy9PTWiny/1y88hiJPYv+llkKbECfLmkj5G9alPY=)
                          8: g4wrIHIGlRmBjCBIOZWynLiU_RQ.roa (hash: crp+OmNL+gqdA9fGFNYDxasudDTsK6CYTas0oygF0Vs=)
                          9: kN69teI4lOPRDRSTeJKcvbg3DVI.roa (hash: 0zY8u4pSs4JdcMd1LnlNAD4f7WGos0AD35DsttS72fg=)
                          10: mgliWT245mKPpOJ9J-koUWKPC38.roa (hash: 2leVbMv5cZcWloTjT8tRG7S73gX0MLHEKiLR37iqlKc=)
                          11: nyqLqit5oB_bMTURFw941vObpAs.roa (hash: YyM6j1YO1pKfOQnOF8zW9g/xPYJJDmuheUmA+y3jAx0=)
                          12: qHpfpL-iX9xY8GdRHaONTT8pr8Y.roa (hash: +ysYA2z1c9FzjaGNYUk90Ddk4xsZHBpqAK7t8gXQInM=)
                          13: uf3e_BE2zQVDAEvwnBCYDlW_CRA.roa (hash: pdun+BKUOQ7DoLG0PPskjv1gebPPRcfr5c7Kait8/nk=)
                          14: xbafFgHngcJFMb2cngm3oN0_3sA.roa (hash: 3QhvTvFkxgvJXVXMTx914Du8ko0OHV0OfDyouPKHYiA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:f2:54:7d:d0:4e:77:0b:be:34:e3:39:a8:e8:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7
        Validity
            Not Before: Jun 30 13:01:37 2026 GMT
            Not After : Jul  1 13:01:37 2026 GMT
        Subject: CN=fd145f855c3826f5012ca73ae6af37b6a42689ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5c:fc:4f:51:8a:22:0a:73:8c:6e:6b:f8:bc:
                    46:41:4a:6a:e4:b1:40:c7:82:bf:ca:7c:49:4f:34:
                    9a:79:e6:c6:6f:4c:81:af:65:21:1f:e6:80:02:a1:
                    47:ed:f8:1c:c2:b9:e7:04:84:63:52:69:dd:53:91:
                    db:32:9f:3b:28:4e:cb:62:11:39:6a:d0:ce:2e:1c:
                    52:58:05:f7:a0:14:79:8d:82:d0:bf:a6:9d:80:b7:
                    1f:63:f8:ec:e5:a5:16:e7:07:75:8d:99:ca:86:f2:
                    0a:4c:1c:22:cf:cd:de:b1:0e:a4:ab:90:b7:54:06:
                    01:c5:cb:7b:85:ab:f6:30:b2:6a:a1:fc:3d:00:5a:
                    56:cd:1a:31:ff:e5:81:52:3f:b9:61:af:e9:02:7d:
                    99:d0:85:e1:dd:bf:d7:06:68:e1:c5:b9:f1:61:95:
                    16:94:68:88:d0:3d:6a:bc:7b:55:1b:9b:1a:d2:21:
                    ec:c1:89:74:b7:3f:66:74:d9:ed:b5:62:99:13:cc:
                    e9:ad:11:83:6d:b6:a5:d0:ce:f8:8b:5a:dc:8b:72:
                    b6:85:15:81:15:92:bb:0a:6d:18:3f:07:78:14:9c:
                    5b:12:b1:cf:79:a6:8b:15:0e:dc:8d:e6:e2:cb:e0:
                    3a:0f:43:19:b6:2a:05:23:e6:5a:9c:ac:75:db:ff:
                    80:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:14:5F:85:5C:38:26:F5:01:2C:A7:3A:E6:AF:37:B6:A4:26:89:AD
            X509v3 Authority Key Identifier:
                keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:59:1c:89:0e:e6:a6:e5:02:c9:bd:13:22:41:15:b8:9e:e5:
         ec:3d:11:60:ee:58:87:01:73:1d:88:f8:48:93:a9:a9:47:59:
         51:f3:58:02:99:20:7b:3d:6b:0c:2b:a7:1d:61:fe:47:6d:bf:
         86:c2:b5:9f:54:10:8a:82:5b:76:1c:03:01:41:93:61:33:f2:
         f3:e6:6d:84:83:b3:03:88:3d:22:9c:43:e8:c0:bb:bf:b5:1f:
         80:4c:ed:cc:bb:ea:78:7f:e4:de:fd:db:cf:d1:5d:cf:08:68:
         1f:75:0b:19:fe:99:25:b8:30:5f:96:d3:4f:1e:aa:ca:2b:3b:
         3e:de:53:64:13:93:e8:94:9e:9b:c6:64:0a:5f:fc:17:4f:ed:
         f9:03:d1:42:01:73:f5:1e:8b:37:d1:f5:3a:e3:96:e6:6f:b3:
         e4:9b:d9:a2:64:d0:1d:be:37:7f:04:08:08:d4:93:c7:a9:0a:
         70:ac:d2:37:5b:8f:31:cb:97:da:3e:44:d2:ef:58:16:a6:6b:
         d2:ac:54:02:29:16:57:6e:0c:3b:f3:b0:10:03:f9:52:4d:9f:
         e2:1d:85:67:e6:7c:76:e1:c1:a6:03:c5:5b:4e:9c:fa:d6:8f:
         1d:04:71:4d:e1:62:31:c9:c6:46:b7:47:2a:5d:1a:8f:13:1c:
         43:7d:5a:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YnvJUfdBOdwu+NOM5qOgTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhODFmZTkwNTlmNjgyMGJjMThhZDU4MDJmMmYxZmNhNzdk
MjU0YjcwHhcNMjYwNjMwMTMwMTM3WhcNMjYwNzAxMTMwMTM3WjAzMTEwLwYDVQQD
EyhmZDE0NWY4NTVjMzgyNmY1MDEyY2E3M2FlNmFmMzdiNmE0MjY4OWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVz8T1GKIgpzjG5r+LxGQUpq5LFA
x4K/ynxJTzSaeebGb0yBr2UhH+aAAqFH7fgcwrnnBIRjUmndU5HbMp87KE7LYhE5
atDOLhxSWAX3oBR5jYLQv6adgLcfY/js5aUW5wd1jZnKhvIKTBwiz83esQ6kq5C3
VAYBxct7hav2MLJqofw9AFpWzRox/+WBUj+5Ya/pAn2Z0IXh3b/XBmjhxbnxYZUW
lGiI0D1qvHtVG5sa0iHswYl0tz9mdNnttWKZE8zprRGDbbal0M74i1rci3K2hRWB
FZK7Cm0YPwd4FJxbErHPeaaLFQ7cjebiy+A6D0MZtioFI+ZanKx12/+A6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0UX4VcOCb1ASynOuavN7akJomtMB8GA1UdIwQY
MBaAFAqB/pBZ9oILwYrVgC8vH8p30lS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgt
YmYwNWFjYzgyYmQxLzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgtYmYwNWFjYzgyYmQx
LzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjVkciQ7m
puUCyb0TIkEVuJ7l7D0RYO5YhwFzHYj4SJOpqUdZUfNYApkgez1rDCunHWH+R22/
hsK1n1QQioJbdhwDAUGTYTPy8+ZthIOzA4g9IpxD6MC7v7UfgEztzLvqeH/k3v3b
z9FdzwhoH3ULGf6ZJbgwX5bTTx6qyis7Pt5TZBOT6JSem8ZkCl/8F0/t+QPRQgFz
9R6LN9H1OuOW5m+z5JvZomTQHb43fwQICNSTx6kKcKzSN1uPMcuX2j5E0u9YFqZr
0qxUAikWV24MO/OwEAP5Uk2f4h2FZ+Z8duHBpgPFW06c+taPHQRxTeFiMcnGRrdH
Kl0ajxMcQ31ang==
-----END CERTIFICATE-----
Generated at Tue Jun 30 22:39:09 2026 by rpki-client