Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.mft
File:                     1ZTpX6WbUrWZ26QG17dvODypD6g.mft (raw, json)
Hash identifier:          K2qHcsKC5i1wAzh9FOkRqiW2IOgeyFu+uroevDt8H2w=
Subject key identifier:   E8:EC:53:2D:3C:2E:E5:95:D2:CC:5E:8F:88:7C:9E:70:E0:A8:21:37
Authority key identifier: D5:94:E9:5F:A5:9B:52:B5:99:DB:A4:06:D7:B7:6F:38:3C:A9:0F:A8
Certificate issuer:       /CN=d594e95fa59b52b599dba406d7b76f383ca90fa8
Certificate serial:       019F197A31F75DD1E98EEE36243F10919AFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ZTpX6WbUrWZ26QG17dvODypD6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.mft
Manifest number:          1131
Signing time:             Tue 30 Jun 2026 17:01:06 +0000
Manifest this update:     Tue 30 Jun 2026 17:01:06 +0000
Manifest next update:     Wed 01 Jul 2026 17:01:06 +0000
Files and hashes:         1: 1ZTpX6WbUrWZ26QG17dvODypD6g.crl (hash: fJK17uGpFXVt9SrZRiQzJRau4kUANXnYMsM+1g+dmRo=)
                          2: DUskNcIQZwjTb7DZ-freME2oNjk.roa (hash: nDcT9LCMb7BQTYuDE4O/4AXMPAGpOTpeKPOxcFIo824=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1ZTpX6WbUrWZ26QG17dvODypD6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:7a:31:f7:5d:d1:e9:8e:ee:36:24:3f:10:91:9a:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d594e95fa59b52b599dba406d7b76f383ca90fa8
        Validity
            Not Before: Jun 30 17:01:06 2026 GMT
            Not After : Jul  1 17:01:06 2026 GMT
        Subject: CN=e8ec532d3c2ee595d2cc5e8f887c9e70e0a82137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b7:f8:5a:df:55:d8:1b:8c:58:b5:3a:54:cd:
                    e3:af:ee:28:06:7d:2d:b5:d4:89:74:20:0f:a9:16:
                    49:82:28:30:1d:fb:85:50:39:aa:23:30:d1:c1:be:
                    a2:db:ee:2c:9b:7a:18:4b:05:87:54:1a:c0:25:35:
                    b8:21:2a:b7:e4:46:e4:8e:32:02:ac:a1:31:61:c3:
                    df:34:2a:23:8e:fc:3b:d9:ee:41:ec:21:0e:6e:96:
                    57:a1:31:94:f4:9d:d9:4e:25:af:d1:ae:6c:09:3b:
                    a5:2c:a2:57:06:9d:24:b8:03:56:41:cd:1e:2f:89:
                    cd:c5:97:f7:0d:7d:d6:62:9d:72:1c:02:a0:a7:cf:
                    fd:fb:a2:3a:9a:d4:26:ec:b4:8b:8f:c8:f7:1d:c2:
                    0a:67:74:88:ed:ff:88:fa:53:81:7b:23:50:9e:57:
                    d9:79:bd:ba:52:d8:9f:bd:74:b5:fe:82:62:cf:ca:
                    ea:2b:92:e2:4f:9c:74:d0:41:ca:d2:8c:7a:eb:3c:
                    c9:fc:0c:ae:ec:a5:3b:03:1f:9b:64:6d:a0:39:a2:
                    fa:38:84:e9:ef:03:ed:e2:4b:bc:14:e9:88:a2:ce:
                    65:c0:04:bd:0a:b0:54:5c:9c:ad:21:28:4a:1d:8b:
                    2a:d2:e6:35:49:42:0f:a9:be:1d:41:d9:67:e4:93:
                    40:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:EC:53:2D:3C:2E:E5:95:D2:CC:5E:8F:88:7C:9E:70:E0:A8:21:37
            X509v3 Authority Key Identifier:
                keyid:D5:94:E9:5F:A5:9B:52:B5:99:DB:A4:06:D7:B7:6F:38:3C:A9:0F:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZTpX6WbUrWZ26QG17dvODypD6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:d1:80:6c:9d:5e:e8:14:6d:23:cc:61:78:4c:65:b5:89:58:
         05:de:85:6d:eb:31:c5:da:fd:06:46:3f:56:25:50:0e:e5:70:
         9b:d6:e9:8c:65:f0:3e:5c:6a:3c:98:8a:3b:72:a9:cb:e4:6e:
         4b:8c:1a:ee:17:33:11:15:5d:1a:eb:0f:9f:e7:8e:50:7f:0d:
         f9:94:22:d7:5e:a2:18:ab:da:01:1d:e2:c5:af:7d:61:e1:ff:
         b2:2c:7a:9a:19:d6:03:cc:b2:b5:0a:b5:e0:cf:7f:f5:2f:d5:
         a1:8c:eb:41:ff:8e:99:53:51:eb:0b:a3:a8:a4:7f:01:ce:15:
         ea:d2:f1:d6:b0:bd:48:81:cb:28:bf:6e:31:c8:41:62:15:4f:
         b8:af:26:1c:a1:34:77:36:61:15:b1:b5:fe:9b:b0:30:97:ef:
         37:94:33:f2:ca:ef:91:20:1b:c7:4f:02:f8:72:1d:de:60:5f:
         04:c5:ca:a0:1d:ea:dd:b9:4a:3c:1c:cd:9d:04:78:a5:4f:b9:
         5f:d2:24:89:92:6e:bc:1b:bf:09:68:5a:16:26:e8:61:da:05:
         3b:6f:3e:81:f8:dd:5c:6f:ce:8d:92:b2:8d:57:e1:01:c4:28:
         4f:43:8e:63:84:c9:00:e0:3a:7c:f4:9d:72:3e:3c:37:3a:78:
         46:1d:18:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZejH3XdHpju42JD8QkZr/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1OTRlOTVmYTU5YjUyYjU5OWRiYTQwNmQ3Yjc2ZjM4M2Nh
OTBmYTgwHhcNMjYwNjMwMTcwMTA2WhcNMjYwNzAxMTcwMTA2WjAzMTEwLwYDVQQD
EyhlOGVjNTMyZDNjMmVlNTk1ZDJjYzVlOGY4ODdjOWU3MGUwYTgyMTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7f4Wt9V2BuMWLU6VM3jr+4oBn0t
tdSJdCAPqRZJgigwHfuFUDmqIzDRwb6i2+4sm3oYSwWHVBrAJTW4ISq35EbkjjIC
rKExYcPfNCojjvw72e5B7CEObpZXoTGU9J3ZTiWv0a5sCTulLKJXBp0kuANWQc0e
L4nNxZf3DX3WYp1yHAKgp8/9+6I6mtQm7LSLj8j3HcIKZ3SI7f+I+lOBeyNQnlfZ
eb26UtifvXS1/oJiz8rqK5LiT5x00EHK0ox66zzJ/Ayu7KU7Ax+bZG2gOaL6OITp
7wPt4ku8FOmIos5lwAS9CrBUXJytIShKHYsq0uY1SUIPqb4dQdln5JNAawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjsUy08LuWV0sxej4h8nnDgqCE3MB8GA1UdIwQY
MBaAFNWU6V+lm1K1mdukBte3bzg8qQ+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVpUcFg2V2JVcldaMjZRRzE3ZHZPRHlwRDZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9lZWRiY2QtYWIxOC00YWIzLWI1ZGQt
ZTNiMGI0MWUyNWM1LzEvMVpUcFg2V2JVcldaMjZRRzE3ZHZPRHlwRDZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9lZWRiY2QtYWIxOC00YWIzLWI1ZGQtZTNiMGI0MWUyNWM1
LzEvMVpUcFg2V2JVcldaMjZRRzE3ZHZPRHlwRDZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGNGAbJ1e
6BRtI8xheExltYlYBd6Fbesxxdr9BkY/ViVQDuVwm9bpjGXwPlxqPJiKO3Kpy+Ru
S4wa7hczERVdGusPn+eOUH8N+ZQi116iGKvaAR3ixa99YeH/six6mhnWA8yytQq1
4M9/9S/VoYzrQf+OmVNR6wujqKR/Ac4V6tLx1rC9SIHLKL9uMchBYhVPuK8mHKE0
dzZhFbG1/puwMJfvN5Qz8srvkSAbx08C+HId3mBfBMXKoB3q3blKPBzNnQR4pU+5
X9IkiZJuvBu/CWhaFiboYdoFO28+gfjdXG/OjZKyjVfhAcQoT0OOY4TJAOA6fPSd
cj48Nzp4Rh0Yug==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:16:29 2026 by rpki-client