Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
File:                     MnVXzyJinQWKURSWWy-d-O9NtpA.mft (raw, json)
Hash identifier:          iQYAMJAsB5TnmfV/XeDhNIj95OfgLxLWkwsXZ+LQIWA=
Subject key identifier:   CB:C4:8E:AF:66:1B:04:B0:C0:FE:9A:0D:E3:5C:B6:7A:40:B6:26:87
Authority key identifier: 32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90
Certificate issuer:       /CN=327557cf22629d058a5114965b2f9df8ef4db690
Certificate serial:       019ED42BF21746EF88C1B7AA388674A4BA3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
Manifest number:          104B
Signing time:             Wed 17 Jun 2026 06:01:50 +0000
Manifest this update:     Wed 17 Jun 2026 06:01:50 +0000
Manifest next update:     Thu 18 Jun 2026 06:01:50 +0000
Files and hashes:         1: FnV4siConvZq8mk9CbOlR5a9DjI.roa (hash: IZ5c3lykfIm9IkvU3L26cQr7DSQZqq6fwwu8m+5tYDw=)
                          2: MnVXzyJinQWKURSWWy-d-O9NtpA.crl (hash: gkMzPnQbd7mUjQgCd2txuExpxKRdYApvfyC9sg/bW5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 06:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:2b:f2:17:46:ef:88:c1:b7:aa:38:86:74:a4:ba:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=327557cf22629d058a5114965b2f9df8ef4db690
        Validity
            Not Before: Jun 17 06:01:50 2026 GMT
            Not After : Jun 18 06:01:50 2026 GMT
        Subject: CN=cbc48eaf661b04b0c0fe9a0de35cb67a40b62687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:80:e4:22:1e:d9:66:cc:e4:1f:a6:5c:e0:32:
                    23:08:2b:2e:69:07:34:24:b4:ac:f0:82:cc:7b:ff:
                    e2:68:fa:53:c1:7f:be:44:c1:45:b3:d7:d5:f9:44:
                    39:43:c2:39:a1:6b:d8:7f:4c:b0:64:5d:68:f7:1f:
                    b9:84:f8:cf:31:6c:3e:71:8d:f8:32:c5:cb:c0:1a:
                    bb:a9:fe:b2:8c:c9:5c:f3:a2:9f:c8:16:a9:1c:f7:
                    7f:4f:d6:0e:61:51:20:c0:5b:99:1f:15:f8:84:6e:
                    e6:78:5b:e4:54:7a:c4:ca:70:e1:58:f5:b3:a1:87:
                    76:be:c8:9d:7e:f5:96:93:94:dd:7d:47:cd:34:be:
                    cf:cf:ed:06:c9:51:f0:13:2b:eb:b1:6a:2d:26:01:
                    34:c7:15:0e:64:49:16:4c:46:d4:ee:32:79:05:b5:
                    61:db:bc:11:23:da:cb:36:8e:ff:3d:69:5c:f9:01:
                    ff:16:63:b2:de:db:c4:42:0e:58:fe:8e:c3:ce:4e:
                    f1:f5:a6:ff:0c:29:98:70:2e:d7:01:61:68:af:23:
                    04:b1:81:f2:ae:40:16:f7:78:33:2e:50:86:57:2f:
                    9b:27:f7:7a:0c:0b:95:18:42:6c:9c:ce:c4:dc:e2:
                    80:0f:60:44:87:e7:04:f1:4c:fd:6d:a9:84:a3:fa:
                    5d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C4:8E:AF:66:1B:04:B0:C0:FE:9A:0D:E3:5C:B6:7A:40:B6:26:87
            X509v3 Authority Key Identifier:
                keyid:32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:ee:56:de:9b:d6:15:6c:f6:dd:b1:ac:c6:ff:10:73:28:fa:
         fd:94:2e:2e:58:4e:ef:a5:6b:06:93:dd:a1:47:f4:f9:28:ae:
         0f:e2:88:d5:70:bd:c0:63:31:a2:b1:b2:dd:58:09:e2:94:3e:
         d5:79:ae:bf:68:b8:bd:07:38:fd:f0:f4:67:50:58:c8:9f:df:
         9b:80:ac:96:c3:43:1e:58:82:3b:1b:d5:36:ca:cb:e4:32:87:
         90:f4:00:b4:3b:c5:29:a2:96:bf:1b:c6:0f:59:79:09:41:aa:
         ce:ff:65:c1:90:6d:6d:1c:c6:1b:25:4d:65:77:6d:44:c2:19:
         ec:31:00:08:ad:c9:22:92:e3:e1:69:61:72:ef:4b:3b:35:03:
         e3:17:4a:98:17:b2:ae:9a:9b:32:b3:82:e7:3f:62:91:04:ae:
         df:d3:ce:b5:7c:a2:bf:a4:32:1a:79:fa:79:5e:2a:47:b3:ca:
         2a:52:61:de:95:ba:03:1f:71:5d:e4:d5:f0:fe:84:e8:c9:57:
         aa:ca:ca:6f:5f:d0:d9:e8:b4:35:4d:54:2b:7f:6d:ed:7f:f2:
         63:ca:6b:fe:ce:f0:a6:af:84:1c:d6:3e:82:4f:cc:0e:ea:4a:
         cd:07:e8:26:75:ab:33:a8:40:09:92:a7:70:79:14:d0:a2:85:
         c6:a8:d8:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7UK/IXRu+IwbeqOIZ0pLo8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNzU1N2NmMjI2MjlkMDU4YTUxMTQ5NjViMmY5ZGY4ZWY0
ZGI2OTAwHhcNMjYwNjE3MDYwMTUwWhcNMjYwNjE4MDYwMTUwWjAzMTEwLwYDVQQD
EyhjYmM0OGVhZjY2MWIwNGIwYzBmZTlhMGRlMzVjYjY3YTQwYjYyNjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIDkIh7ZZszkH6Zc4DIjCCsuaQc0
JLSs8ILMe//iaPpTwX++RMFFs9fV+UQ5Q8I5oWvYf0ywZF1o9x+5hPjPMWw+cY34
MsXLwBq7qf6yjMlc86KfyBapHPd/T9YOYVEgwFuZHxX4hG7meFvkVHrEynDhWPWz
oYd2vsidfvWWk5TdfUfNNL7Pz+0GyVHwEyvrsWotJgE0xxUOZEkWTEbU7jJ5BbVh
27wRI9rLNo7/PWlc+QH/FmOy3tvEQg5Y/o7Dzk7x9ab/DCmYcC7XAWForyMEsYHy
rkAW93gzLlCGVy+bJ/d6DAuVGEJsnM7E3OKAD2BEh+cE8Uz9bamEo/pdiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvEjq9mGwSwwP6aDeNctnpAtiaHMB8GA1UdIwQY
MBaAFDJ1V88iYp0FilEUllsvnfjvTbaQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW5WWHp5SmluUVdLVVJTV1d5LWQtTzlOdHBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC85Y2ZmM2QtMTE2OC00MTFjLWEwNjUt
ZmQ3MjViODI1MjkxLzEvTW5WWHp5SmluUVdLVVJTV1d5LWQtTzlOdHBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC85Y2ZmM2QtMTE2OC00MTFjLWEwNjUtZmQ3MjViODI1Mjkx
LzEvTW5WWHp5SmluUVdLVVJTV1d5LWQtTzlOdHBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAce5W3pvW
FWz23bGsxv8Qcyj6/ZQuLlhO76VrBpPdoUf0+SiuD+KI1XC9wGMxorGy3VgJ4pQ+
1Xmuv2i4vQc4/fD0Z1BYyJ/fm4CslsNDHliCOxvVNsrL5DKHkPQAtDvFKaKWvxvG
D1l5CUGqzv9lwZBtbRzGGyVNZXdtRMIZ7DEACK3JIpLj4Wlhcu9LOzUD4xdKmBey
rpqbMrOC5z9ikQSu39POtXyiv6QyGnn6eV4qR7PKKlJh3pW6Ax9xXeTV8P6E6MlX
qsrKb1/Q2ei0NU1UK39t7X/yY8pr/s7wpq+EHNY+gk/MDupKzQfoJnWrM6hACZKn
cHkU0KKFxqjY7g==
-----END CERTIFICATE-----
Generated at Wed Jun 17 15:37:03 2026 by rpki-client