Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
File:                     e1l6Sw_khublyFue4D5ym97H570.mft (raw, json)
Hash identifier:          g1M0swDMkdCINzBMoOEx862YHRjjGBzq4d5leN3XkPA=
Subject key identifier:   E9:E5:6D:59:C1:3E:35:D5:07:4E:A4:FD:EC:10:74:B4:E5:E0:EA:4B
Authority key identifier: 7B:59:7A:4B:0F:E4:86:E6:E5:C8:5B:9E:E0:3E:72:9B:DE:C7:E7:BD
Certificate issuer:       /CN=7b597a4b0fe486e6e5c85b9ee03e729bdec7e7bd
Certificate serial:       019EE5C3F959A87C014974D42FD64E14AB9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
Manifest number:          0CF1
Signing time:             Sat 20 Jun 2026 16:01:26 +0000
Manifest this update:     Sat 20 Jun 2026 16:01:26 +0000
Manifest next update:     Sun 21 Jun 2026 16:01:26 +0000
Files and hashes:         1: V9PWKj4xB85axZ-pPoY3y8jfmGI.roa (hash: IXWd/a+RKpFfjxBBgClFTno9TLNCTt1rJRxcU8qS3Bw=)
                          2: e1l6Sw_khublyFue4D5ym97H570.crl (hash: EeO51pT0+zBb8aWpb1jhEDXpTGAYuODc3RAeeRgZKOk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Jun 2026 16:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e5:c3:f9:59:a8:7c:01:49:74:d4:2f:d6:4e:14:ab:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b597a4b0fe486e6e5c85b9ee03e729bdec7e7bd
        Validity
            Not Before: Jun 20 16:01:26 2026 GMT
            Not After : Jun 21 16:01:26 2026 GMT
        Subject: CN=e9e56d59c13e35d5074ea4fdec1074b4e5e0ea4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c7:ad:90:57:17:71:f9:83:79:29:17:1b:83:
                    91:68:33:af:62:60:06:ec:d9:60:4f:48:f3:e6:c7:
                    69:31:7e:d3:40:fa:b6:09:54:d6:e8:ff:c8:86:63:
                    f0:fc:10:f5:19:15:f9:83:16:02:9a:68:85:0b:34:
                    80:bf:79:3c:44:0a:c2:8c:14:89:a3:63:37:1e:2c:
                    36:9f:99:63:57:87:df:0f:92:85:b8:5e:88:27:bf:
                    7d:46:90:be:24:ac:d2:e9:6b:69:2f:7b:82:92:76:
                    fa:a9:cb:1f:4e:44:2d:74:87:e6:d3:2c:d1:e2:93:
                    10:33:f9:20:90:43:63:99:0a:59:01:61:ba:2f:62:
                    51:e3:e4:cb:24:9e:21:b7:05:2f:2a:93:0a:07:db:
                    22:d5:ee:4a:e6:c8:ce:f6:dc:b5:4d:8c:b1:e4:4c:
                    a0:78:dc:2c:87:51:21:c6:0f:31:70:94:8c:d2:2f:
                    97:7f:93:e4:a0:95:86:64:10:e3:b9:8f:bb:9c:39:
                    e5:bb:87:b7:30:4d:96:50:f5:92:d7:0a:5b:55:96:
                    0f:68:07:ed:d0:bd:c6:ac:4f:9d:53:66:c2:a1:f1:
                    75:ab:42:be:03:5d:1a:17:b7:98:88:89:a6:9f:b5:
                    eb:19:29:d4:c3:14:fa:47:9d:3b:9c:92:d6:ff:17:
                    7b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E5:6D:59:C1:3E:35:D5:07:4E:A4:FD:EC:10:74:B4:E5:E0:EA:4B
            X509v3 Authority Key Identifier:
                keyid:7B:59:7A:4B:0F:E4:86:E6:E5:C8:5B:9E:E0:3E:72:9B:DE:C7:E7:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:d8:59:52:1e:12:dc:0d:28:44:44:19:50:9f:19:0a:20:9e:
         dd:20:a7:bc:04:da:ec:23:ec:3b:6e:a1:35:7d:ba:e5:32:72:
         e9:2f:0e:b4:ec:c0:45:9c:00:27:39:74:a0:20:01:9b:a8:d1:
         f1:9b:f0:9e:41:ce:05:83:f6:25:be:0d:a8:a0:85:9b:5d:cc:
         f8:6a:9b:20:81:ac:73:bb:ab:35:e9:7f:0e:97:b7:d2:1c:61:
         c3:9f:14:48:11:9c:95:44:5e:17:2f:77:d3:11:9f:fc:2d:49:
         8e:fb:98:d9:65:a3:bb:94:a4:30:8b:58:12:4f:5f:21:76:ee:
         f2:62:12:01:47:68:d7:83:13:2d:0d:a3:5f:8b:5f:43:0f:e2:
         a0:bc:86:da:12:df:e5:8c:d1:f9:b2:2f:89:84:1c:a4:ee:83:
         8f:09:a1:e6:8c:26:a7:c6:1a:fe:68:1b:72:97:22:fb:7f:a7:
         6e:f2:ac:33:97:c2:2d:fc:7d:25:5e:30:c4:44:80:7a:73:a8:
         2c:38:8a:2e:15:15:7f:f5:90:54:3a:ea:7f:d9:40:f1:9d:1f:
         7d:85:2d:0c:1d:2a:86:d6:46:d3:50:3b:92:66:71:81:ed:a7:
         5d:04:d3:1a:6c:71:bb:57:5e:85:bc:90:59:7d:cb:3d:02:15:
         60:02:0d:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7lw/lZqHwBSXTUL9ZOFKufMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNTk3YTRiMGZlNDg2ZTZlNWM4NWI5ZWUwM2U3MjliZGVj
N2U3YmQwHhcNMjYwNjIwMTYwMTI2WhcNMjYwNjIxMTYwMTI2WjAzMTEwLwYDVQQD
EyhlOWU1NmQ1OWMxM2UzNWQ1MDc0ZWE0ZmRlYzEwNzRiNGU1ZTBlYTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8etkFcXcfmDeSkXG4ORaDOvYmAG
7NlgT0jz5sdpMX7TQPq2CVTW6P/IhmPw/BD1GRX5gxYCmmiFCzSAv3k8RArCjBSJ
o2M3Hiw2n5ljV4ffD5KFuF6IJ799RpC+JKzS6WtpL3uCknb6qcsfTkQtdIfm0yzR
4pMQM/kgkENjmQpZAWG6L2JR4+TLJJ4htwUvKpMKB9si1e5K5sjO9ty1TYyx5Eyg
eNwsh1Ehxg8xcJSM0i+Xf5PkoJWGZBDjuY+7nDnlu4e3ME2WUPWS1wpbVZYPaAft
0L3GrE+dU2bCofF1q0K+A10aF7eYiImmn7XrGSnUwxT6R507nJLW/xd7OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOnlbVnBPjXVB06k/ewQdLTl4OpLMB8GA1UdIwQY
MBaAFHtZeksP5Ibm5chbnuA+cpvex+e9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTFsNlN3X2todWJseUZ1ZTRENXltOTdINTcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mMDQ2MzYtYjI5NS00YWM4LWE4NmYt
ZTdhMzgyNzUwYmI5LzEvZTFsNlN3X2todWJseUZ1ZTRENXltOTdINTcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9mMDQ2MzYtYjI5NS00YWM4LWE4NmYtZTdhMzgyNzUwYmI5
LzEvZTFsNlN3X2todWJseUZ1ZTRENXltOTdINTcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM9hZUh4S
3A0oREQZUJ8ZCiCe3SCnvATa7CPsO26hNX265TJy6S8OtOzARZwAJzl0oCABm6jR
8ZvwnkHOBYP2Jb4NqKCFm13M+GqbIIGsc7urNel/Dpe30hxhw58USBGclUReFy93
0xGf/C1JjvuY2WWju5SkMItYEk9fIXbu8mISAUdo14MTLQ2jX4tfQw/ioLyG2hLf
5YzR+bIviYQcpO6Djwmh5owmp8Ya/mgbcpci+3+nbvKsM5fCLfx9JV4wxESAenOo
LDiKLhUVf/WQVDrqf9lA8Z0ffYUtDB0qhtZG01A7kmZxge2nXQTTGmxxu1dehbyQ
WX3LPQIVYAINCw==
-----END CERTIFICATE-----
Generated at Sun Jun 21 00:43:11 2026 by rpki-client