Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
File:                     71LcaSC94AdFBjC7_AIWreTgP2I.mft (raw, json)
Hash identifier:          Mtyf934vYhCq1UcX5zreEdQd5mCkgiXXYA4CZyNl0eM=
Subject key identifier:   84:83:CD:B9:49:1F:CC:8E:FE:D4:A3:5C:1D:6F:6F:BC:DA:2A:27:A3
Authority key identifier: EF:52:DC:69:20:BD:E0:07:45:06:30:BB:FC:02:16:AD:E4:E0:3F:62
Certificate issuer:       /CN=ef52dc6920bde007450630bbfc0216ade4e03f62
Certificate serial:       019EB845E52EBCC199D1BBF73D4E0FEC0F49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
Manifest number:          1421
Signing time:             Thu 11 Jun 2026 20:00:48 +0000
Manifest this update:     Thu 11 Jun 2026 20:00:48 +0000
Manifest next update:     Fri 12 Jun 2026 20:00:48 +0000
Files and hashes:         1: 1-U6aXSNrwCxTePFdNUR5lBDEtfE.roa (hash: 5TwFfZ3mjpXZiK+WWFipXkRuzwCPyvQ/Hl+kyatEY/M=)
                          2: 71LcaSC94AdFBjC7_AIWreTgP2I.crl (hash: ysmSpBmKB2lff7SM8AlGaH6ok8sz5ZnU1G450EXwxgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:45:e5:2e:bc:c1:99:d1:bb:f7:3d:4e:0f:ec:0f:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef52dc6920bde007450630bbfc0216ade4e03f62
        Validity
            Not Before: Jun 11 20:00:48 2026 GMT
            Not After : Jun 12 20:00:48 2026 GMT
        Subject: CN=8483cdb9491fcc8efed4a35c1d6f6fbcda2a27a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:aa:41:73:75:b0:ca:c3:c1:81:3d:25:3d:63:
                    fd:0e:21:cb:17:d5:76:a6:41:d9:9f:ad:36:b5:c5:
                    09:1b:46:6f:81:fb:f4:f7:11:07:32:49:9b:fd:35:
                    a1:6e:25:5a:12:5e:7d:a8:76:46:ea:d1:9f:9c:ad:
                    75:cc:82:4e:31:b3:2e:34:04:4c:a7:0b:7d:df:b8:
                    e4:10:33:76:9a:da:4a:d5:0c:43:33:74:bb:12:52:
                    20:bb:af:80:b5:c2:47:3b:c8:8e:4e:6b:6b:ad:cb:
                    82:b7:db:0b:86:bc:22:c2:06:d6:2e:10:d6:da:96:
                    b4:c2:0d:da:5b:70:26:85:71:15:a3:fe:bd:5e:74:
                    14:7a:8b:96:7a:3c:32:cf:c2:3f:5f:38:aa:cd:da:
                    4b:17:bd:8b:34:23:8d:1f:a4:9c:5f:c9:0f:9a:b2:
                    db:ab:00:50:ff:9d:7f:09:e8:42:db:e9:dc:7e:42:
                    0e:e4:2d:da:48:7d:78:67:4a:77:6d:77:b3:2e:0b:
                    c2:73:ba:14:e3:be:e2:7e:4b:3c:ca:ed:45:24:8c:
                    fd:b8:34:b1:01:6e:ff:35:f7:5b:39:e1:6e:06:b7:
                    a7:19:53:48:4c:66:c2:f8:39:82:ab:09:79:1e:ae:
                    07:74:8a:b4:c1:26:fe:43:20:6f:24:6d:0b:cf:2b:
                    17:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:83:CD:B9:49:1F:CC:8E:FE:D4:A3:5C:1D:6F:6F:BC:DA:2A:27:A3
            X509v3 Authority Key Identifier:
                keyid:EF:52:DC:69:20:BD:E0:07:45:06:30:BB:FC:02:16:AD:E4:E0:3F:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:32:ef:56:50:87:67:05:1b:31:bc:c2:30:28:50:ad:f7:c4:
         8b:49:40:6f:b4:50:fd:a6:97:75:5a:62:9e:ee:cb:63:ca:d7:
         af:77:b9:6f:34:cc:36:a9:f8:f3:51:d9:6d:c9:a3:9d:40:b8:
         d9:46:30:d1:33:14:ff:7f:ad:a3:88:2d:7f:58:f1:9d:b3:a4:
         12:bd:55:30:d4:d8:f5:88:07:e3:95:53:dc:2b:a8:f6:80:ce:
         d2:bc:7a:da:22:d2:10:18:1e:99:d3:36:c4:be:5a:60:1e:77:
         c0:12:e0:92:ca:1e:94:3b:b0:1d:c4:c4:66:5a:27:fa:83:5c:
         fa:74:01:4f:ee:75:d9:3a:68:1f:ec:33:3e:e2:d3:61:3d:76:
         f4:97:32:a1:61:09:a1:57:1b:e3:3f:ac:e1:04:7d:da:87:c9:
         13:98:bb:bb:90:25:b6:02:7b:da:95:66:f9:e2:c3:7f:0e:80:
         fa:f6:fa:7f:e6:d3:92:1c:6e:fb:e8:49:df:a3:c1:28:8c:58:
         9a:26:0d:f1:f7:b1:1d:ec:f3:e6:c3:07:39:39:18:77:b9:f0:
         16:38:0c:90:f2:24:6b:65:14:34:b4:28:6b:43:db:12:bc:1b:
         d4:0e:71:74:e2:5f:b8:50:bc:17:ff:82:d8:c7:85:af:fa:b8:
         6a:01:98:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64ReUuvMGZ0bv3PU4P7A9JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNTJkYzY5MjBiZGUwMDc0NTA2MzBiYmZjMDIxNmFkZTRl
MDNmNjIwHhcNMjYwNjExMjAwMDQ4WhcNMjYwNjEyMjAwMDQ4WjAzMTEwLwYDVQQD
Eyg4NDgzY2RiOTQ5MWZjYzhlZmVkNGEzNWMxZDZmNmZiY2RhMmEyN2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKpBc3WwysPBgT0lPWP9DiHLF9V2
pkHZn602tcUJG0Zvgfv09xEHMkmb/TWhbiVaEl59qHZG6tGfnK11zIJOMbMuNARM
pwt937jkEDN2mtpK1QxDM3S7ElIgu6+AtcJHO8iOTmtrrcuCt9sLhrwiwgbWLhDW
2pa0wg3aW3AmhXEVo/69XnQUeouWejwyz8I/XziqzdpLF72LNCONH6ScX8kPmrLb
qwBQ/51/CehC2+ncfkIO5C3aSH14Z0p3bXezLgvCc7oU477ifks8yu1FJIz9uDSx
AW7/NfdbOeFuBrenGVNITGbC+DmCqwl5Hq4HdIq0wSb+QyBvJG0LzysXCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISDzblJH8yO/tSjXB1vb7zaKiejMB8GA1UdIwQY
MBaAFO9S3GkgveAHRQYwu/wCFq3k4D9iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzFMY2FTQzk0QWRGQmpDN19BSVdyZVRnUDJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8yNzg0N2MtNTExMy00YTRiLWE3ODgt
NzY0MzYzYjEzY2QyLzEvNzFMY2FTQzk0QWRGQmpDN19BSVdyZVRnUDJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8yNzg0N2MtNTExMy00YTRiLWE3ODgtNzY0MzYzYjEzY2Qy
LzEvNzFMY2FTQzk0QWRGQmpDN19BSVdyZVRnUDJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApDLvVlCH
ZwUbMbzCMChQrffEi0lAb7RQ/aaXdVpinu7LY8rXr3e5bzTMNqn481HZbcmjnUC4
2UYw0TMU/3+to4gtf1jxnbOkEr1VMNTY9YgH45VT3Cuo9oDO0rx62iLSEBgemdM2
xL5aYB53wBLgksoelDuwHcTEZlon+oNc+nQBT+512TpoH+wzPuLTYT129JcyoWEJ
oVcb4z+s4QR92ofJE5i7u5AltgJ72pVm+eLDfw6A+vb6f+bTkhxu++hJ36PBKIxY
miYN8fexHezz5sMHOTkYd7nwFjgMkPIka2UUNLQoa0PbErwb1A5xdOJfuFC8F/+C
2MeFr/q4agGYPw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 07:03:31 2026 by rpki-client