Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft
File:                     DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft (raw, json)
Hash identifier:          2eRB3fNTaiVThJnLuCW5DWC5Rn5IzQy9R4c08cZJFY4=
Subject key identifier:   8A:B8:9F:E6:49:56:AF:76:88:4D:9B:0F:1A:14:6F:59:C2:FF:D6:63
Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
Certificate issuer:       /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Certificate serial:       019EBE481CA4E09C5EA06C6BDBDFA476D00D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft
Manifest number:          1327
Signing time:             Sat 13 Jun 2026 00:00:57 +0000
Manifest this update:     Sat 13 Jun 2026 00:00:57 +0000
Manifest next update:     Sun 14 Jun 2026 00:00:57 +0000
Files and hashes:         1: AbJQHx5ahYpjvv315eRsPQzSy6s.roa (hash: IieQfWIJT+/3Ysx4MwtAIRbsPXEZaLQ5D1UaLDyxns0=)
                          2: Cl4gUWWdkaLuufc7IaskeYPpLtI.roa (hash: 1MLU7eGqfR1fNhY59VB68snOwCNrx/MEqW1PogRhMWg=)
                          3: DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl (hash: xjnznSXFiShSQogfsd3QCvr14KraWBjbdZCw8L8QWzg=)
                          4: M3d-ndtS-EWKNtc6mJwZhcKWXhE.roa (hash: IX96+0wugdLurSubiSiT1icuKiERC0yGvvvWL4yy+fQ=)
                          5: VDlRmZ_UUBGQIZXe-tlycFHtxuY.roa (hash: roAWquTgnTt3gI/FQ9e2D2VEpYewknrb+S48y8ncfXs=)
                          6: WyLq5mdKCW2UGDpdqrK7Xp2HJRc.roa (hash: 3yoswgkDWLABDVLm06inU+3X5NuNCflUQTjxzRiweyM=)
                          7: dQ7u4JbIzkGK7zGlgsaEjYvDyPw.roa (hash: 0Io/aF5BJoS3S7A3SgO0UMDiD52MQt1rPPj3iNE5lRA=)
                          8: eWt0Tak3myBNkMD7r4cZaRZMMuI.roa (hash: H9iIgQUbeHquNPmfK/S2A+3CGFk8Rb9c/Cx3jhDtaaM=)
                          9: h3O572ai_eUifMk-F32TUL7VkXM.roa (hash: 66/7jgHjdxS0pR5qYD6CjCTDfR7QgTTO/qDff+KDDOM=)
                          10: hzQ7tMh6oqC5v0mKv_jBU_A9aCw.roa (hash: fUyvgz1r/egD8D0UE0/Rhf6tbMxfTD9jAEgan6se/FA=)
                          11: jg4t7SrnuYvRZomc0XCPotAh4u0.roa (hash: 9RmoUuo6041b6kGDwKKpPE71TUf5ltFSivOlPvvgN5o=)
                          12: kP39bsnw_qJA-nAXWzwPudCCaSw.roa (hash: p5h1eBsrXq6bm8kjGVr9OVb84+2GgS0jxbrmtlhu5Yc=)
                          13: t9zXA_rZh6B_pE4ccfKKbM0UX8M.roa (hash: x+rDhCDJVIl1HJ9OhOXObawt9Y9MUYeu8ZdvRA+YDqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 16:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:48:1c:a4:e0:9c:5e:a0:6c:6b:db:df:a4:76:d0:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
        Validity
            Not Before: Jun 13 00:00:57 2026 GMT
            Not After : Jun 14 00:00:57 2026 GMT
        Subject: CN=8ab89fe64956af76884d9b0f1a146f59c2ffd663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2d:c2:48:af:34:eb:8d:17:4b:ba:c3:8c:2c:
                    b8:34:9d:28:03:89:e6:cd:23:29:3a:14:bc:67:df:
                    0b:67:58:99:03:87:b1:23:24:f6:ac:41:cd:7e:a6:
                    88:9b:7e:e7:14:ef:af:76:a4:4b:ba:29:f7:27:ce:
                    a9:7c:82:a3:20:e2:5a:d6:04:f7:3d:8b:69:16:28:
                    bc:08:e7:67:a1:c6:1f:e2:21:fc:b5:4b:68:e3:23:
                    3a:96:39:4d:ed:95:c6:b3:e0:bd:0a:df:94:1d:d7:
                    36:7f:4b:3e:0c:6f:e1:14:e1:a0:ba:58:73:87:3a:
                    97:12:5e:b8:21:36:60:e5:c1:5f:54:94:47:af:cd:
                    7f:aa:e2:fd:40:82:fe:38:4b:bc:36:e4:1e:0e:28:
                    a3:31:ca:fa:76:3f:2f:4f:8d:37:57:a8:3f:d6:50:
                    99:0d:47:90:65:46:7e:36:c4:46:7a:46:0a:0b:2f:
                    a0:e6:bc:0d:dc:eb:1a:31:0b:e5:ea:bc:e2:71:b8:
                    4e:a0:6b:bd:d9:e6:03:08:9e:e0:96:48:bd:78:64:
                    bc:b1:be:6e:6f:67:e5:f5:71:0d:3f:cb:10:fa:5f:
                    3b:82:84:64:a4:cd:37:26:60:e1:96:a8:24:4c:94:
                    c5:10:d4:c3:70:41:49:a9:7a:ca:c0:83:f9:16:a3:
                    65:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B8:9F:E6:49:56:AF:76:88:4D:9B:0F:1A:14:6F:59:C2:FF:D6:63
            X509v3 Authority Key Identifier:
                keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:30:fb:b6:da:b4:cb:1d:90:22:bc:cb:26:f6:83:8f:73:c7:
         11:3a:59:6b:39:60:4b:76:b7:a9:de:ec:fa:d1:e2:33:5d:86:
         60:6b:8f:30:4c:14:89:95:bb:9a:87:8e:be:32:63:a5:9f:08:
         89:cb:59:e4:4e:c5:b1:fa:21:74:c6:ba:d9:b9:b3:5c:86:9c:
         54:17:ee:7e:c7:54:db:a8:03:43:5c:e4:f1:a3:1b:ff:89:32:
         e9:18:f1:d7:4a:d4:ef:cb:35:d4:24:3d:a6:64:bf:02:64:cb:
         7f:f1:bc:01:91:73:4a:5a:39:20:62:7d:ba:c3:65:ae:39:47:
         53:d2:6b:28:15:c4:cb:d4:a6:b6:54:db:e5:2d:a8:33:53:7a:
         db:d8:23:4d:ec:1c:f8:fd:86:40:e3:8e:59:07:25:f7:4e:48:
         a4:a5:00:3d:6a:d7:36:b9:38:74:55:6a:ea:d2:c1:97:1c:04:
         e6:1d:7c:87:5a:25:20:aa:a3:61:2e:e5:17:76:83:10:73:87:
         a9:9b:6f:45:e8:5d:71:58:90:08:14:b5:30:c8:f7:1e:08:a0:
         e6:31:66:76:f3:a4:dd:ae:27:07:e6:10:50:f5:6c:ce:14:04:
         96:fb:88:56:e4:52:b9:eb:69:db:03:78:36:44:3d:81:ef:8b:
         20:91:97:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+SByk4JxeoGxr29+kdtANMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk
NDI1YjAwHhcNMjYwNjEzMDAwMDU3WhcNMjYwNjE0MDAwMDU3WjAzMTEwLwYDVQQD
Eyg4YWI4OWZlNjQ5NTZhZjc2ODg0ZDliMGYxYTE0NmY1OWMyZmZkNjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3C3CSK80640XS7rDjCy4NJ0oA4nm
zSMpOhS8Z98LZ1iZA4exIyT2rEHNfqaIm37nFO+vdqRLuin3J86pfIKjIOJa1gT3
PYtpFii8COdnocYf4iH8tUto4yM6ljlN7ZXGs+C9Ct+UHdc2f0s+DG/hFOGgulhz
hzqXEl64ITZg5cFfVJRHr81/quL9QIL+OEu8NuQeDiijMcr6dj8vT403V6g/1lCZ
DUeQZUZ+NsRGekYKCy+g5rwN3OsaMQvl6rzicbhOoGu92eYDCJ7glki9eGS8sb5u
b2fl9XENP8sQ+l87goRkpM03JmDhlqgkTJTFENTDcEFJqXrKwIP5FqNlGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIq4n+ZJVq92iE2bDxoUb1nC/9ZjMB8GA1UdIwQY
MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt
YjAzZGY5OTZlNDgxLzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx
LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAjD7ttq0
yx2QIrzLJvaDj3PHETpZazlgS3a3qd7s+tHiM12GYGuPMEwUiZW7moeOvjJjpZ8I
ictZ5E7FsfohdMa62bmzXIacVBfufsdU26gDQ1zk8aMb/4ky6Rjx10rU78s11CQ9
pmS/AmTLf/G8AZFzSlo5IGJ9usNlrjlHU9JrKBXEy9SmtlTb5S2oM1N629gjTewc
+P2GQOOOWQcl905IpKUAPWrXNrk4dFVq6tLBlxwE5h18h1olIKqjYS7lF3aDEHOH
qZtvRehdcViQCBS1MMj3Hgig5jFmdvOk3a4nB+YQUPVszhQElvuIVuRSuetp2wN4
NkQ9ge+LIJGXiQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 02:21:15 2026 by rpki-client