Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft
File:                     fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft (raw, json)
Hash identifier:          N0Opjj29U50df9MMdwAKgfqvVu53X9HECSwuU0DFYW0=
Subject key identifier:   B3:EA:80:C2:FE:8F:6E:E2:87:C0:53:B0:56:74:B9:0C:F5:E6:17:AD
Authority key identifier: 7E:8E:09:72:4F:47:2E:76:68:9C:61:DC:A6:0A:7C:64:1F:2A:C8:F9
Certificate issuer:       /CN=7e8e09724f472e76689c61dca60a7c641f2ac8f9
Certificate serial:       019EBAA216B7902B1C2835ECC6FB7D437152
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fo4Jck9HLnZonGHcpgp8ZB8qyPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft
Manifest number:          017F
Signing time:             Fri 12 Jun 2026 07:00:45 +0000
Manifest this update:     Fri 12 Jun 2026 07:00:45 +0000
Manifest next update:     Sat 13 Jun 2026 07:00:45 +0000
Files and hashes:         1: F-MQ4_q16IIp-IO6Aj9rbXh6FAg.roa (hash: O9ss77MomSSt907FsLWzdFo2wbDsc9Vaw/c7NY0bUPI=)
                          2: Lv7nZi0Ca4VD-5H2MSb5yq4Mxf8.roa (hash: kAeb16gDeMymOsy5vSRtUWw4R89UmFmfcQyy8hoRkQs=)
                          3: a6ILxs7AfRiz-iaAF-l64QD3g3c.asa (hash: 7o07rC7UvT5It+u+RtYxdmApc9D4ts/fYHhAKB3o4vs=)
                          4: fl-aO37XXQmTdf9bFQvR4sML3I8.asa (hash: 095zE2TxY8ZX1/zGISHc5yzKNCHD1HSK1z5BPh0SZNU=)
                          5: fo4Jck9HLnZonGHcpgp8ZB8qyPk.crl (hash: R8Z9faRT6X/vDascS04WT40rAfba162Fb6nrY35MU9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fo4Jck9HLnZonGHcpgp8ZB8qyPk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 07:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:a2:16:b7:90:2b:1c:28:35:ec:c6:fb:7d:43:71:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e8e09724f472e76689c61dca60a7c641f2ac8f9
        Validity
            Not Before: Jun 12 07:00:45 2026 GMT
            Not After : Jun 13 07:00:45 2026 GMT
        Subject: CN=b3ea80c2fe8f6ee287c053b05674b90cf5e617ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d5:3e:16:f5:99:6e:a7:5c:3b:d4:ab:8d:91:
                    ea:01:7b:d9:d0:50:94:f0:c9:d6:bd:2f:ea:5f:d3:
                    10:69:77:3d:ff:f5:f8:a3:66:92:4b:fc:71:7d:1c:
                    07:0b:21:c0:a6:89:5e:6d:0e:0b:83:14:07:87:60:
                    fe:c9:99:19:fd:5c:df:5e:be:8d:0d:a2:51:ed:c4:
                    c2:83:d6:14:ce:dc:2f:c8:4b:d0:6f:9d:9f:42:42:
                    61:50:d2:a2:bf:06:ca:19:95:81:8c:a4:75:4b:58:
                    4b:25:b0:b5:7f:7e:5e:3d:ba:03:fd:2b:e7:fd:b7:
                    e7:ec:20:eb:b0:04:06:cd:9b:e9:c7:bc:13:61:f6:
                    91:b0:43:c3:13:cb:ab:61:a8:01:fa:be:85:65:4e:
                    84:10:05:81:dc:f4:5e:12:64:4e:05:bc:24:ba:68:
                    62:9f:61:d8:ac:64:86:0b:13:5d:f0:10:e5:3e:1d:
                    6e:0c:7a:aa:0b:18:64:ae:88:ef:95:3f:c4:8c:e6:
                    72:a2:d6:de:98:9d:83:d4:eb:51:fd:2e:50:d3:aa:
                    7a:fe:13:b7:0d:60:a0:d9:e0:df:21:a9:53:3e:75:
                    48:0c:4f:f9:77:d5:a7:8d:00:34:40:ca:9c:c7:3b:
                    06:16:55:fd:c1:fc:23:ea:68:5d:39:45:78:6f:0b:
                    db:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:EA:80:C2:FE:8F:6E:E2:87:C0:53:B0:56:74:B9:0C:F5:E6:17:AD
            X509v3 Authority Key Identifier:
                keyid:7E:8E:09:72:4F:47:2E:76:68:9C:61:DC:A6:0A:7C:64:1F:2A:C8:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fo4Jck9HLnZonGHcpgp8ZB8qyPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:61:a0:7c:2a:2e:90:45:dd:99:22:dc:f1:20:e0:56:c9:48:
         ac:44:d7:08:aa:e6:ab:15:c6:0d:ad:38:09:92:51:06:99:3d:
         a3:0f:ad:a2:b6:6c:58:de:03:dc:30:17:e0:58:cc:4e:69:f9:
         a0:a0:4f:65:08:f2:a5:61:06:f8:7f:ff:6e:28:cd:e9:12:49:
         49:b4:65:d7:8a:8a:3c:7a:86:b6:27:ac:01:16:3e:8a:19:da:
         dc:1f:e9:86:09:a6:e6:24:f3:f7:a0:3f:ad:07:35:2a:0f:71:
         cb:f1:15:5a:a4:d2:a3:ec:b8:d0:6d:42:1a:f4:6f:f3:44:a5:
         63:b5:6c:55:75:4b:45:51:93:a8:67:cf:43:48:48:a2:2e:1f:
         66:bf:d7:cb:9b:14:98:d1:ef:1c:ca:9b:aa:ff:58:33:56:47:
         77:64:6c:79:13:c8:b3:ec:e1:6c:e8:c0:db:59:b5:8c:18:8d:
         a9:1d:18:3f:3d:fa:5c:4c:11:60:be:92:bd:7a:17:72:ad:10:
         e5:fc:86:be:49:2a:10:2c:1c:e6:8a:5c:76:32:19:f8:4b:07:
         b8:e6:3e:66:d6:63:88:09:6e:d8:e7:2a:a5:a9:1b:d4:34:3c:
         8f:5e:0d:7e:31:8b:f1:fc:0f:8f:ee:50:3a:02:62:85:a6:e3:
         de:1f:46:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ66oha3kCscKDXsxvt9Q3FSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlOGUwOTcyNGY0NzJlNzY2ODljNjFkY2E2MGE3YzY0MWYy
YWM4ZjkwHhcNMjYwNjEyMDcwMDQ1WhcNMjYwNjEzMDcwMDQ1WjAzMTEwLwYDVQQD
EyhiM2VhODBjMmZlOGY2ZWUyODdjMDUzYjA1Njc0YjkwY2Y1ZTYxN2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9U+FvWZbqdcO9SrjZHqAXvZ0FCU
8MnWvS/qX9MQaXc9//X4o2aSS/xxfRwHCyHApolebQ4LgxQHh2D+yZkZ/VzfXr6N
DaJR7cTCg9YUztwvyEvQb52fQkJhUNKivwbKGZWBjKR1S1hLJbC1f35ePboD/Svn
/bfn7CDrsAQGzZvpx7wTYfaRsEPDE8urYagB+r6FZU6EEAWB3PReEmROBbwkumhi
n2HYrGSGCxNd8BDlPh1uDHqqCxhkrojvlT/EjOZyotbemJ2D1OtR/S5Q06p6/hO3
DWCg2eDfIalTPnVIDE/5d9WnjQA0QMqcxzsGFlX9wfwj6mhdOUV4bwvbswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPqgML+j27ih8BTsFZ0uQz15hetMB8GA1UdIwQY
MBaAFH6OCXJPRy52aJxh3KYKfGQfKsj5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZm80SmNrOUhMblpvbkdIY3BncDhaQjhxeVBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9kZGMyN2MtNzkzNy00NTYwLWJlMjIt
ZGNiNWZiMzNjMTc4LzEvZm80SmNrOUhMblpvbkdIY3BncDhaQjhxeVBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9kZGMyN2MtNzkzNy00NTYwLWJlMjItZGNiNWZiMzNjMTc4
LzEvZm80SmNrOUhMblpvbkdIY3BncDhaQjhxeVBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE2GgfCou
kEXdmSLc8SDgVslIrETXCKrmqxXGDa04CZJRBpk9ow+torZsWN4D3DAX4FjMTmn5
oKBPZQjypWEG+H//bijN6RJJSbRl14qKPHqGtiesARY+ihna3B/phgmm5iTz96A/
rQc1Kg9xy/EVWqTSo+y40G1CGvRv80SlY7VsVXVLRVGTqGfPQ0hIoi4fZr/Xy5sU
mNHvHMqbqv9YM1ZHd2RseRPIs+zhbOjA21m1jBiNqR0YPz36XEwRYL6SvXoXcq0Q
5fyGvkkqECwc5opcdjIZ+EsHuOY+ZtZjiAlu2Ocqpakb1DQ8j14NfjGL8fwPj+5Q
OgJihabj3h9GpQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 10:09:14 2026 by rpki-client