Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.mft
File:                     l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.mft (raw, json)
Hash identifier:          hjqYF2gWBTvHMBlmlToYspKwzs8790DOSXAaJNjK88A=
Subject key identifier:   4E:03:3C:2E:04:3F:80:D5:3F:38:03:D4:DF:32:7E:BB:E0:F1:C2:E1
Authority key identifier: 97:7B:8A:A0:63:FC:4F:2B:B8:4A:9F:56:A3:BF:A3:8B:2A:BE:DF:9B
Certificate issuer:       /CN=977b8aa063fc4f2bb84a9f56a3bfa38b2abedf9b
Certificate serial:       019EB98F7B15F217B6B9C4A1855D26AEE023
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.mft
Manifest number:          1351
Signing time:             Fri 12 Jun 2026 02:00:48 +0000
Manifest this update:     Fri 12 Jun 2026 02:00:48 +0000
Manifest next update:     Sat 13 Jun 2026 02:00:48 +0000
Files and hashes:         1: hEHeb8OuF9xUk8MiJaqaoIXUxyM.roa (hash: cMPtLwG20T+Oxfp5dF/gVvhKkmvpYnxVK+DxJa36bGQ=)
                          2: l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.crl (hash: JfYVKz8xdzKRmwxLelckd7CvqxFwcrgb2qdpnNAYQHY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 02:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:8f:7b:15:f2:17:b6:b9:c4:a1:85:5d:26:ae:e0:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=977b8aa063fc4f2bb84a9f56a3bfa38b2abedf9b
        Validity
            Not Before: Jun 12 02:00:48 2026 GMT
            Not After : Jun 13 02:00:48 2026 GMT
        Subject: CN=4e033c2e043f80d53f3803d4df327ebbe0f1c2e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d6:7d:da:7a:62:a0:18:c8:2d:76:c2:f7:95:
                    ab:09:89:3b:67:69:9e:ec:38:a5:25:42:fa:5f:ed:
                    0c:fb:f2:7c:b7:20:6e:0a:4d:c0:cf:cf:80:36:ed:
                    28:93:fe:53:2c:d7:f9:53:a5:4f:f0:74:e4:ea:70:
                    49:f7:64:20:f4:10:17:8a:fa:ed:64:84:15:56:48:
                    5e:f2:47:d3:d5:12:21:ad:ad:3b:08:b4:9c:78:1a:
                    59:a9:06:22:d4:f0:cf:ec:a0:e8:fd:ca:fe:b7:cf:
                    e1:5a:b9:3a:48:a4:4f:3e:de:1d:32:cc:17:06:e8:
                    38:0e:57:f5:29:01:73:d7:71:09:82:93:2b:e2:a1:
                    3a:25:d7:8f:7a:ed:47:ca:bc:11:f5:b5:0d:63:76:
                    53:56:62:b9:ac:7a:f0:15:0a:b9:52:30:3a:74:6e:
                    47:e1:c4:09:b3:d8:ed:ee:f9:06:aa:ef:6b:12:ef:
                    6d:57:79:41:b1:2f:25:9f:1c:60:6e:82:9f:60:e8:
                    85:43:22:12:6b:0e:8b:97:a8:c1:24:a9:51:dc:f1:
                    06:e4:61:cb:34:b9:53:ea:1d:52:f3:f5:9c:91:dc:
                    90:f2:d1:53:f3:7f:63:2b:b7:09:c7:22:d6:0a:23:
                    af:d8:e3:4c:82:c9:72:41:67:cb:bc:ae:bc:46:19:
                    15:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:03:3C:2E:04:3F:80:D5:3F:38:03:D4:DF:32:7E:BB:E0:F1:C2:E1
            X509v3 Authority Key Identifier:
                keyid:97:7B:8A:A0:63:FC:4F:2B:B8:4A:9F:56:A3:BF:A3:8B:2A:BE:DF:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/bd59d9-690a-4fe2-b295-7ec5123be162/1/l3uKoGP8Tyu4Sp9Wo7-jiyq-35s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:7d:42:ea:8b:0e:10:a2:a3:52:86:8d:82:5a:93:ba:a5:d2:
         26:80:4a:5e:de:3f:bc:9d:72:d5:bd:73:f9:08:20:82:d1:fd:
         b5:68:4f:9c:a5:98:6a:43:cd:da:7f:57:a3:e1:8c:04:63:27:
         86:81:30:f6:08:89:e7:92:6b:cb:15:f5:13:f6:4e:21:fc:ea:
         dd:3f:c8:52:2d:c4:41:09:b3:29:59:cc:1f:63:ed:f5:25:ed:
         4d:ed:d0:02:82:ca:df:c6:a8:46:38:e0:2e:65:81:37:91:36:
         52:0a:49:b4:fa:be:ec:17:fd:97:3d:51:07:b5:78:6e:aa:a1:
         7b:73:72:01:f4:f3:01:dd:09:44:11:0d:03:ac:1d:95:65:66:
         bb:40:62:1d:30:d3:61:2d:1b:f0:5a:4e:af:42:51:2f:29:1a:
         a3:ab:f0:ce:f8:43:74:20:40:8c:b0:19:a8:c5:24:68:df:d7:
         5a:01:94:1a:ea:3d:5f:f0:a2:e2:ad:58:35:3d:ce:b8:a2:80:
         83:10:ac:e9:84:a7:0c:34:f9:df:d1:22:64:9e:46:c3:36:57:
         af:b6:ad:0b:a8:ea:fa:ae:89:36:c3:2e:9c:b0:f2:53:c9:1e:
         50:34:19:9d:89:6b:f1:fb:6c:be:a6:02:50:62:76:9a:92:08:
         3c:47:97:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65j3sV8he2ucShhV0mruAjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3N2I4YWEwNjNmYzRmMmJiODRhOWY1NmEzYmZhMzhiMmFi
ZWRmOWIwHhcNMjYwNjEyMDIwMDQ4WhcNMjYwNjEzMDIwMDQ4WjAzMTEwLwYDVQQD
Eyg0ZTAzM2MyZTA0M2Y4MGQ1M2YzODAzZDRkZjMyN2ViYmUwZjFjMmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9Z92npioBjILXbC95WrCYk7Z2me
7DilJUL6X+0M+/J8tyBuCk3Az8+ANu0ok/5TLNf5U6VP8HTk6nBJ92Qg9BAXivrt
ZIQVVkhe8kfT1RIhra07CLSceBpZqQYi1PDP7KDo/cr+t8/hWrk6SKRPPt4dMswX
Bug4Dlf1KQFz13EJgpMr4qE6JdePeu1HyrwR9bUNY3ZTVmK5rHrwFQq5UjA6dG5H
4cQJs9jt7vkGqu9rEu9tV3lBsS8lnxxgboKfYOiFQyISaw6Ll6jBJKlR3PEG5GHL
NLlT6h1S8/WckdyQ8tFT839jK7cJxyLWCiOv2ONMgslyQWfLvK68RhkVvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4DPC4EP4DVPzgD1N8yfrvg8cLhMB8GA1UdIwQY
MBaAFJd7iqBj/E8ruEqfVqO/o4sqvt+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDN1S29HUDhUeXU0U3A5V283LWppeXEtMzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9iZDU5ZDktNjkwYS00ZmUyLWIyOTUt
N2VjNTEyM2JlMTYyLzEvbDN1S29HUDhUeXU0U3A5V283LWppeXEtMzVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9iZDU5ZDktNjkwYS00ZmUyLWIyOTUtN2VjNTEyM2JlMTYy
LzEvbDN1S29HUDhUeXU0U3A5V283LWppeXEtMzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaX1C6osO
EKKjUoaNglqTuqXSJoBKXt4/vJ1y1b1z+QgggtH9tWhPnKWYakPN2n9Xo+GMBGMn
hoEw9giJ55JryxX1E/ZOIfzq3T/IUi3EQQmzKVnMH2Pt9SXtTe3QAoLK38aoRjjg
LmWBN5E2UgpJtPq+7Bf9lz1RB7V4bqqhe3NyAfTzAd0JRBENA6wdlWVmu0BiHTDT
YS0b8FpOr0JRLykao6vwzvhDdCBAjLAZqMUkaN/XWgGUGuo9X/Ci4q1YNT3OuKKA
gxCs6YSnDDT539EiZJ5GwzZXr7atC6jq+q6JNsMunLDyU8keUDQZnYlr8ftsvqYC
UGJ2mpIIPEeXEg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:50:39 2026 by rpki-client