Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/13b2a5-c045-490b-8af6-88c21e43cd1e/1/V1N5OGE9UmjoP0gAEw8fnVafeFA.mft
File:                     V1N5OGE9UmjoP0gAEw8fnVafeFA.mft (raw, json)
Hash identifier:          jZvZ2A2EvlrkrC81r0Km/7kj4CuPMfr1N6N15FnHccE=
Subject key identifier:   D7:A1:AF:EC:CC:08:D1:03:A5:0F:EB:0D:86:77:76:85:78:B5:AC:BC
Authority key identifier: 57:53:79:38:61:3D:52:68:E8:3F:48:00:13:0F:1F:9D:56:9F:78:50
Certificate issuer:       /CN=57537938613d5268e83f4800130f1f9d569f7850
Certificate serial:       019EB7D8125EEBCAC366E789907075149EE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V1N5OGE9UmjoP0gAEw8fnVafeFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/13b2a5-c045-490b-8af6-88c21e43cd1e/1/V1N5OGE9UmjoP0gAEw8fnVafeFA.mft
Manifest number:          0145
Signing time:             Thu 11 Jun 2026 18:00:51 +0000
Manifest this update:     Thu 11 Jun 2026 18:00:51 +0000
Manifest next update:     Fri 12 Jun 2026 18:00:51 +0000
Files and hashes:         1: JEv-p42MOZ0QrNfVUGr1gTTDu7o.roa (hash: gc04AhUcmWl7QLETDmgumdvIpDyqEnMmC5mWOPsnvmI=)
                          2: V1N5OGE9UmjoP0gAEw8fnVafeFA.crl (hash: y6RlRG3+G52uiS4xARJPivyQYp0nxIB3dQ8zyCdeq3c=)
                          3: mpCz2Btceh8obeRlP3H4XUjWsec.roa (hash: nf7Yud3TW51o07Q7utOXvAePNCDCzrMuynSmG/Ni9pg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/13b2a5-c045-490b-8af6-88c21e43cd1e/1/V1N5OGE9UmjoP0gAEw8fnVafeFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/13b2a5-c045-490b-8af6-88c21e43cd1e/1/V1N5OGE9UmjoP0gAEw8fnVafeFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V1N5OGE9UmjoP0gAEw8fnVafeFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 18:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:d8:12:5e:eb:ca:c3:66:e7:89:90:70:75:14:9e:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57537938613d5268e83f4800130f1f9d569f7850
        Validity
            Not Before: Jun 11 18:00:51 2026 GMT
            Not After : Jun 12 18:00:51 2026 GMT
        Subject: CN=d7a1afeccc08d103a50feb0d8677768578b5acbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3d:6b:21:4b:e8:02:1b:f2:f6:71:28:cc:fc:
                    b3:b7:a0:31:95:80:cd:ff:71:65:18:f2:c9:7a:77:
                    18:03:88:c9:68:f0:8b:87:9a:67:53:c6:39:c0:14:
                    76:8a:55:64:e2:7e:4e:64:d2:7e:e5:57:a2:09:90:
                    a7:ae:0b:3a:e8:66:36:b9:32:b9:c0:d2:23:39:86:
                    7a:25:9d:6b:35:a3:67:4f:fe:19:7f:2d:bf:42:5a:
                    fe:50:a4:12:05:0a:33:12:46:20:14:e0:77:be:27:
                    c8:7d:a6:b0:31:58:63:23:6c:f0:64:e4:04:2c:4b:
                    73:0e:66:07:71:01:35:b5:30:92:f6:a9:c0:ff:a3:
                    9c:d3:cf:3e:9b:d3:cf:1c:18:6b:8b:f7:b3:38:7f:
                    ac:22:d0:15:32:86:5f:b4:ce:80:ba:de:46:29:cc:
                    bb:5d:9a:33:ce:5d:cd:c6:8a:9a:a5:ec:12:60:93:
                    13:6e:e5:b9:1b:86:31:69:8f:46:f4:30:2a:93:e9:
                    17:5a:73:e6:05:7a:65:5e:4d:18:38:2e:6a:33:1b:
                    88:f3:57:0c:6e:7b:4c:59:d3:e5:50:4a:04:f2:f3:
                    9d:a0:19:7d:ee:82:f7:3b:cc:ed:43:bb:26:6c:a5:
                    81:af:07:ab:a1:5a:55:e7:1a:65:15:2b:8b:43:83:
                    2a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A1:AF:EC:CC:08:D1:03:A5:0F:EB:0D:86:77:76:85:78:B5:AC:BC
            X509v3 Authority Key Identifier:
                keyid:57:53:79:38:61:3D:52:68:E8:3F:48:00:13:0F:1F:9D:56:9F:78:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1N5OGE9UmjoP0gAEw8fnVafeFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/13b2a5-c045-490b-8af6-88c21e43cd1e/1/V1N5OGE9UmjoP0gAEw8fnVafeFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/13b2a5-c045-490b-8af6-88c21e43cd1e/1/V1N5OGE9UmjoP0gAEw8fnVafeFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:17:a7:87:c4:22:7b:b9:6a:2a:76:c1:fb:e8:84:06:ee:8b:
         4e:20:c2:c6:fd:3b:9c:13:f9:21:1f:71:58:c0:2a:02:63:1a:
         2f:8f:d9:d5:d4:80:d2:ad:77:9a:fe:bc:c8:1a:46:fb:10:4e:
         29:9d:24:2c:4b:b8:c6:6b:4c:ab:77:25:2b:d1:ad:85:dc:79:
         9f:82:59:24:ef:f7:b1:bb:f5:73:9c:96:83:4f:8f:bc:57:6b:
         64:0b:2a:0c:1c:dd:91:f3:a1:1b:61:7d:17:50:b2:ec:6e:98:
         4e:1b:6e:b1:b3:70:d5:6a:4b:2c:88:dc:22:59:c7:dd:d3:85:
         8f:b1:b8:4e:61:cd:01:79:bb:8e:f3:c2:da:8b:49:38:c6:79:
         9a:d8:f6:20:64:11:c9:d8:ce:66:46:05:b8:32:38:bc:ed:f5:
         da:ce:8f:4f:49:af:99:ed:b2:31:b8:19:87:6b:96:a6:b9:2f:
         f5:81:9a:b8:3c:bf:e6:c3:30:98:ab:33:34:af:c0:54:a3:5d:
         c1:61:d5:5b:c9:ff:46:e3:f4:2d:e4:19:36:73:14:1e:0e:6d:
         32:f2:d2:61:c5:62:b3:01:90:60:3a:9a:7e:e0:4c:dd:b4:28:
         fb:24:29:ae:91:84:60:b8:a7:b4:56:20:63:c9:a5:70:da:f0:
         06:a2:09:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ632BJe68rDZueJkHB1FJ7nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NTM3OTM4NjEzZDUyNjhlODNmNDgwMDEzMGYxZjlkNTY5
Zjc4NTAwHhcNMjYwNjExMTgwMDUxWhcNMjYwNjEyMTgwMDUxWjAzMTEwLwYDVQQD
EyhkN2ExYWZlY2NjMDhkMTAzYTUwZmViMGQ4Njc3NzY4NTc4YjVhY2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxT1rIUvoAhvy9nEozPyzt6AxlYDN
/3FlGPLJencYA4jJaPCLh5pnU8Y5wBR2ilVk4n5OZNJ+5VeiCZCnrgs66GY2uTK5
wNIjOYZ6JZ1rNaNnT/4Zfy2/Qlr+UKQSBQozEkYgFOB3vifIfaawMVhjI2zwZOQE
LEtzDmYHcQE1tTCS9qnA/6Oc088+m9PPHBhri/ezOH+sItAVMoZftM6Aut5GKcy7
XZozzl3NxoqapewSYJMTbuW5G4YxaY9G9DAqk+kXWnPmBXplXk0YOC5qMxuI81cM
bntMWdPlUEoE8vOdoBl97oL3O8ztQ7smbKWBrweroVpV5xplFSuLQ4MqlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNehr+zMCNEDpQ/rDYZ3doV4tay8MB8GA1UdIwQY
MBaAFFdTeThhPVJo6D9IABMPH51Wn3hQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjFONU9HRTlVbWpvUDBnQUV3OGZuVmFmZUZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8xM2IyYTUtYzA0NS00OTBiLThhZjYt
ODhjMjFlNDNjZDFlLzEvVjFONU9HRTlVbWpvUDBnQUV3OGZuVmFmZUZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8xM2IyYTUtYzA0NS00OTBiLThhZjYtODhjMjFlNDNjZDFl
LzEvVjFONU9HRTlVbWpvUDBnQUV3OGZuVmFmZUZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwhenh8Qi
e7lqKnbB++iEBu6LTiDCxv07nBP5IR9xWMAqAmMaL4/Z1dSA0q13mv68yBpG+xBO
KZ0kLEu4xmtMq3clK9Gthdx5n4JZJO/3sbv1c5yWg0+PvFdrZAsqDBzdkfOhG2F9
F1Cy7G6YThtusbNw1WpLLIjcIlnH3dOFj7G4TmHNAXm7jvPC2otJOMZ5mtj2IGQR
ydjOZkYFuDI4vO312s6PT0mvme2yMbgZh2uWprkv9YGauDy/5sMwmKszNK/AVKNd
wWHVW8n/RuP0LeQZNnMUHg5tMvLSYcViswGQYDqafuBM3bQo+yQprpGEYLintFYg
Y8mlcNrwBqIJNA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 03:53:54 2026 by rpki-client