Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
File:                     3F0s-9udWNV0D_N1oxWzglRKlK4.mft (raw, json)
Hash identifier:          fPHWZsNAwulxRmMzxZkRVf2hmjSFznJiMqTDj8R3Cv4=
Subject key identifier:   59:1F:0D:3B:6D:20:05:0C:C9:EB:31:A3:85:E0:AE:58:EB:BE:B1:3E
Authority key identifier: DC:5D:2C:FB:DB:9D:58:D5:74:0F:F3:75:A3:15:B3:82:54:4A:94:AE
Certificate issuer:       /CN=dc5d2cfbdb9d58d5740ff375a315b382544a94ae
Certificate serial:       019F1076C5FC4BE2F5468E718366FB5F93AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
Manifest number:          0E04
Signing time:             Sun 28 Jun 2026 23:00:46 +0000
Manifest this update:     Sun 28 Jun 2026 23:00:46 +0000
Manifest next update:     Mon 29 Jun 2026 23:00:46 +0000
Files and hashes:         1: 3F0s-9udWNV0D_N1oxWzglRKlK4.crl (hash: 1y8XTSykkoBlRxSq2iAXSN63umQAm727LojRGsZcCEs=)
                          2: 7gKbnCeEeFU9kgMWCw85IQnBGJs.roa (hash: BEos/oIubVJfuhxS0jxVgCoi+2xWKG0c7X3weGq3uEE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Jun 2026 22:10:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:10:76:c5:fc:4b:e2:f5:46:8e:71:83:66:fb:5f:93:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc5d2cfbdb9d58d5740ff375a315b382544a94ae
        Validity
            Not Before: Jun 28 23:00:46 2026 GMT
            Not After : Jun 29 23:00:46 2026 GMT
        Subject: CN=591f0d3b6d20050cc9eb31a385e0ae58ebbeb13e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b1:4d:af:71:c1:7e:9e:bc:24:fe:9a:46:cb:
                    e5:ac:57:5d:1b:f5:a1:94:52:fa:b0:a8:f2:f8:40:
                    09:a5:db:aa:a6:0f:52:59:6e:8e:e9:f4:9d:16:77:
                    ce:83:6b:99:e8:34:d6:fa:79:9b:63:91:ad:18:01:
                    78:bc:0a:26:59:c8:9f:af:bd:d4:94:1b:58:a1:9f:
                    49:2f:fa:f4:89:46:36:36:b8:5f:4d:72:96:49:75:
                    1f:64:34:db:aa:a6:93:b5:58:71:4f:31:2e:bd:17:
                    00:c0:65:a9:da:8f:84:36:e6:e4:bf:88:c1:4b:b2:
                    5d:07:83:25:9f:33:40:52:36:dd:c8:20:05:25:b1:
                    df:1b:fa:d4:ac:68:11:84:c7:96:ad:0b:6f:ad:08:
                    a2:2d:bf:f2:bb:65:8a:9a:e9:eb:bf:15:17:ec:75:
                    07:74:c2:08:58:ce:7b:e5:b3:46:02:f6:68:75:97:
                    82:7e:10:7a:81:49:c1:8b:d8:cb:04:56:f9:f3:50:
                    11:04:4f:9a:78:f5:07:65:a4:b6:e3:b3:cc:6d:a2:
                    ac:9c:2b:39:64:72:a8:c4:d3:76:b7:cc:30:9b:d4:
                    e2:af:c4:d9:ff:f1:58:41:c5:cf:cf:07:65:54:fb:
                    b4:82:ed:8a:4f:35:95:de:8c:ba:c9:16:4e:0a:c0:
                    0b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1F:0D:3B:6D:20:05:0C:C9:EB:31:A3:85:E0:AE:58:EB:BE:B1:3E
            X509v3 Authority Key Identifier:
                keyid:DC:5D:2C:FB:DB:9D:58:D5:74:0F:F3:75:A3:15:B3:82:54:4A:94:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3F0s-9udWNV0D_N1oxWzglRKlK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0b99d9-5ae9-4aa6-a2fc-1842348f5c6c/1/3F0s-9udWNV0D_N1oxWzglRKlK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:a5:77:49:8f:9a:02:77:84:aa:5c:fc:77:5b:d7:d3:bc:40:
         74:e9:5b:57:4e:7d:59:aa:6a:8d:36:66:05:33:08:1d:89:e1:
         82:90:f4:cd:6d:3f:37:15:57:2d:32:0d:8b:b8:1c:5a:ef:df:
         1d:8b:3c:0f:f3:62:68:57:21:15:6e:25:f9:1f:f2:75:74:db:
         de:f5:72:f8:52:e4:d3:8b:c3:50:34:36:f7:d7:e6:64:26:8e:
         3e:bb:1b:4b:08:91:f7:c7:78:76:49:89:01:ea:5c:05:07:31:
         2f:81:c1:ca:9d:65:59:ca:4d:c5:2b:c8:b6:f8:d8:64:29:62:
         a2:e0:59:0e:d0:92:81:ee:74:f1:16:03:e3:2c:a1:af:1d:ed:
         af:4f:f2:ca:d0:f0:86:7f:b5:f3:53:42:39:5e:3d:07:e6:94:
         72:e6:a0:28:3b:c1:0e:e0:20:34:b3:e3:42:3d:2e:c1:0e:9b:
         4f:32:2b:6f:e6:a7:43:bb:ea:1d:45:e5:fd:b0:3c:c3:0b:a6:
         29:57:4e:2c:ac:13:68:c1:cb:72:3e:67:03:a8:a0:46:4a:0c:
         d1:8a:ed:85:d3:72:e4:fa:08:1d:e9:44:4e:8d:c6:e1:80:83:
         0f:0e:12:18:f1:5e:bc:29:27:4d:11:71:10:ed:cb:14:24:ab:
         21:a7:e0:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8QdsX8S+L1Ro5xg2b7X5OuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNWQyY2ZiZGI5ZDU4ZDU3NDBmZjM3NWEzMTViMzgyNTQ0
YTk0YWUwHhcNMjYwNjI4MjMwMDQ2WhcNMjYwNjI5MjMwMDQ2WjAzMTEwLwYDVQQD
Eyg1OTFmMGQzYjZkMjAwNTBjYzllYjMxYTM4NWUwYWU1OGViYmViMTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7FNr3HBfp68JP6aRsvlrFddG/Wh
lFL6sKjy+EAJpduqpg9SWW6O6fSdFnfOg2uZ6DTW+nmbY5GtGAF4vAomWcifr73U
lBtYoZ9JL/r0iUY2NrhfTXKWSXUfZDTbqqaTtVhxTzEuvRcAwGWp2o+ENubkv4jB
S7JdB4MlnzNAUjbdyCAFJbHfG/rUrGgRhMeWrQtvrQiiLb/yu2WKmunrvxUX7HUH
dMIIWM575bNGAvZodZeCfhB6gUnBi9jLBFb581ARBE+aePUHZaS247PMbaKsnCs5
ZHKoxNN2t8wwm9Tir8TZ//FYQcXPzwdlVPu0gu2KTzWV3oy6yRZOCsALGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkfDTttIAUMyesxo4XgrljrvrE+MB8GA1UdIwQY
MBaAFNxdLPvbnVjVdA/zdaMVs4JUSpSuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0Ywcy05dWRXTlYwRF9OMW94V3pnbFJLbEs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8wYjk5ZDktNWFlOS00YWE2LWEyZmMt
MTg0MjM0OGY1YzZjLzEvM0Ywcy05dWRXTlYwRF9OMW94V3pnbFJLbEs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8wYjk5ZDktNWFlOS00YWE2LWEyZmMtMTg0MjM0OGY1YzZj
LzEvM0Ywcy05dWRXTlYwRF9OMW94V3pnbFJLbEs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlaV3SY+a
AneEqlz8d1vX07xAdOlbV059WapqjTZmBTMIHYnhgpD0zW0/NxVXLTINi7gcWu/f
HYs8D/NiaFchFW4l+R/ydXTb3vVy+FLk04vDUDQ299fmZCaOPrsbSwiR98d4dkmJ
AepcBQcxL4HByp1lWcpNxSvItvjYZCliouBZDtCSge508RYD4yyhrx3tr0/yytDw
hn+181NCOV49B+aUcuagKDvBDuAgNLPjQj0uwQ6bTzIrb+anQ7vqHUXl/bA8wwum
KVdOLKwTaMHLcj5nA6igRkoM0YrthdNy5PoIHelETo3G4YCDDw4SGPFevCknTRFx
EO3LFCSrIafgfA==
-----END CERTIFICATE-----
Generated at Mon Jun 29 05:04:16 2026 by rpki-client