Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
File:                     ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft (raw, json)
Hash identifier:          e39/d3AQ0KvSkL+bBFdkyEdUCy4LzgJy1e/be2Eu3JA=
Subject key identifier:   E3:DF:EE:8D:19:35:3E:D5:D4:44:58:8F:FB:FE:C7:26:51:75:CF:B0
Authority key identifier: 4E:16:7E:E5:F8:D2:AC:0D:9C:C0:13:7B:41:91:2F:18:1B:04:89:B0
Certificate issuer:       /CN=4e167ee5f8d2ac0d9cc0137b41912f181b0489b0
Certificate serial:       019EB9C69F795E9D1259B0D5585A9FEC02C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
Manifest number:          1958
Signing time:             Fri 12 Jun 2026 03:01:02 +0000
Manifest this update:     Fri 12 Jun 2026 03:01:02 +0000
Manifest next update:     Sat 13 Jun 2026 03:01:02 +0000
Files and hashes:         1: RRd_UXeiD7Rdkue9YMFkD_-Iwlo.roa (hash: KjoTbh2/2oeAXhL3EDRzxg7GIycpq9YCYmNFBZjjVj8=)
                          2: ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl (hash: 4MOE2NWmjnIa8mt5og6PXFQsRHHOyuvsuxSd68eUZz8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:c6:9f:79:5e:9d:12:59:b0:d5:58:5a:9f:ec:02:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e167ee5f8d2ac0d9cc0137b41912f181b0489b0
        Validity
            Not Before: Jun 12 03:01:02 2026 GMT
            Not After : Jun 13 03:01:02 2026 GMT
        Subject: CN=e3dfee8d19353ed5d444588ffbfec7265175cfb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:76:ef:14:52:89:cd:ea:ca:dd:1a:72:de:e9:
                    70:e8:3c:e0:20:69:c6:87:08:3a:f9:37:51:a7:bf:
                    aa:b7:d1:00:ad:26:a6:96:09:27:c9:27:88:d3:81:
                    bf:bf:64:21:4c:56:18:f4:da:b6:f5:d8:ff:dd:d6:
                    57:61:71:42:19:33:8f:3a:53:c3:04:bd:05:95:0f:
                    aa:78:27:1f:ea:3d:51:86:f6:f0:e9:48:ff:47:59:
                    6c:a2:18:3f:99:62:85:9d:b4:7a:58:5b:bb:71:89:
                    0a:ec:47:3f:87:26:b8:4a:1d:a5:af:ad:06:36:a9:
                    84:0c:a5:47:52:53:0e:dd:17:f6:77:88:fc:a0:86:
                    55:02:3c:d6:c9:d8:98:9c:d8:fe:26:ae:77:35:85:
                    ff:47:0e:92:55:86:2c:db:d6:12:3a:8d:a4:7a:18:
                    97:33:0f:67:ae:eb:18:b4:42:66:b0:06:00:5e:38:
                    fe:03:d7:6d:14:2c:70:2e:ad:cc:b6:99:0e:cf:90:
                    17:0b:d1:d9:78:33:30:0b:53:6c:06:97:fc:30:54:
                    bb:4a:8d:8a:ea:64:d5:38:5a:0b:dd:3b:10:b2:14:
                    ee:8d:4f:c1:97:93:db:66:9c:d5:1f:56:21:29:45:
                    5d:b6:05:c6:f8:d5:e7:98:ab:86:ff:4c:0f:2b:8e:
                    c5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DF:EE:8D:19:35:3E:D5:D4:44:58:8F:FB:FE:C7:26:51:75:CF:B0
            X509v3 Authority Key Identifier:
                keyid:4E:16:7E:E5:F8:D2:AC:0D:9C:C0:13:7B:41:91:2F:18:1B:04:89:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:0e:66:e0:95:58:c3:d6:6a:73:81:98:b9:d9:37:3c:19:d5:
         79:29:8c:ed:7e:1d:be:79:23:44:4f:d4:02:42:f3:ff:42:29:
         8f:0c:ad:ad:7d:ac:6b:79:24:b8:98:48:e5:d8:82:a9:40:a3:
         f0:62:37:b2:43:49:14:9a:9b:32:25:26:89:f4:92:77:f1:e7:
         b5:39:81:dc:20:19:b9:9f:60:03:21:86:0a:bf:06:f8:c5:18:
         ee:ff:96:3a:1e:60:e3:d9:74:53:5b:d1:f9:8f:5b:9f:58:41:
         cc:b3:12:f6:73:80:cb:cf:0c:c6:a4:03:5d:24:97:e2:b1:eb:
         c7:c8:67:fd:f6:24:40:93:c2:ac:89:09:f2:f4:b1:1e:85:84:
         4a:af:ca:fd:3c:0c:b2:dc:37:7e:2b:1e:a6:99:7f:00:23:4d:
         94:52:52:f6:6f:b0:c0:4d:9d:02:12:88:d5:90:9d:2b:a9:a7:
         dc:e4:b3:8f:07:e6:39:c1:47:7d:fd:e8:ef:bb:79:71:6a:22:
         3a:f1:aa:05:b3:32:69:cf:80:96:a8:4c:c5:8d:70:37:23:f1:
         1b:3f:4a:22:26:7c:29:8e:73:39:52:c8:72:73:63:69:6f:07:
         1c:fd:14:d6:fd:6a:50:4e:f2:5e:b1:7f:56:84:39:7d:ac:f0:
         10:76:73:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65xp95Xp0SWbDVWFqf7ALJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTY3ZWU1ZjhkMmFjMGQ5Y2MwMTM3YjQxOTEyZjE4MWIw
NDg5YjAwHhcNMjYwNjEyMDMwMTAyWhcNMjYwNjEzMDMwMTAyWjAzMTEwLwYDVQQD
EyhlM2RmZWU4ZDE5MzUzZWQ1ZDQ0NDU4OGZmYmZlYzcyNjUxNzVjZmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nbvFFKJzerK3Rpy3ulw6DzgIGnG
hwg6+TdRp7+qt9EArSamlgknySeI04G/v2QhTFYY9Nq29dj/3dZXYXFCGTOPOlPD
BL0FlQ+qeCcf6j1Rhvbw6Uj/R1lsohg/mWKFnbR6WFu7cYkK7Ec/hya4Sh2lr60G
NqmEDKVHUlMO3Rf2d4j8oIZVAjzWydiYnNj+Jq53NYX/Rw6SVYYs29YSOo2kehiX
Mw9nrusYtEJmsAYAXjj+A9dtFCxwLq3MtpkOz5AXC9HZeDMwC1NsBpf8MFS7So2K
6mTVOFoL3TsQshTujU/Bl5PbZpzVH1YhKUVdtgXG+NXnmKuG/0wPK47FaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPf7o0ZNT7V1ERYj/v+xyZRdc+wMB8GA1UdIwQY
MBaAFE4WfuX40qwNnMATe0GRLxgbBImwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhaLTVmalNyQTJjd0JON1FaRXZHQnNFaWJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS82ZTE3OGUtOWNiZi00ODllLWFhM2Et
ZjY2MmIwYTY1ZThlLzEvVGhaLTVmalNyQTJjd0JON1FaRXZHQnNFaWJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS82ZTE3OGUtOWNiZi00ODllLWFhM2EtZjY2MmIwYTY1ZThl
LzEvVGhaLTVmalNyQTJjd0JON1FaRXZHQnNFaWJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWg5m4JVY
w9Zqc4GYudk3PBnVeSmM7X4dvnkjRE/UAkLz/0IpjwytrX2sa3kkuJhI5diCqUCj
8GI3skNJFJqbMiUmifSSd/HntTmB3CAZuZ9gAyGGCr8G+MUY7v+WOh5g49l0U1vR
+Y9bn1hBzLMS9nOAy88MxqQDXSSX4rHrx8hn/fYkQJPCrIkJ8vSxHoWESq/K/TwM
stw3fiseppl/ACNNlFJS9m+wwE2dAhKI1ZCdK6mn3OSzjwfmOcFHff3o77t5cWoi
OvGqBbMyac+AlqhMxY1wNyPxGz9KIiZ8KY5zOVLIcnNjaW8HHP0U1v1qUE7yXrF/
VoQ5fazwEHZz+w==
-----END CERTIFICATE-----
Generated at Fri Jun 12 07:06:13 2026 by rpki-client