Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft
File:                     iwVEhe5ixvGTlhPLogZp7vRQT3k.mft (raw, json)
Hash identifier:          FZnkNloihqSkgzi6v3q8tNKzEQBqazchlyI8BzFcUg4=
Subject key identifier:   A5:5B:E7:C5:99:FD:BC:FE:E1:F7:D0:1E:C8:8D:4D:EC:C0:2E:79:45
Authority key identifier: 8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79
Certificate issuer:       /CN=8b054485ee62c6f1939613cba20669eef4504f79
Certificate serial:       019EFD2729DF2AF89B724F9909D7D5B9BD5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft
Manifest number:          0F6B
Signing time:             Thu 25 Jun 2026 05:01:02 +0000
Manifest this update:     Thu 25 Jun 2026 05:01:02 +0000
Manifest next update:     Fri 26 Jun 2026 05:01:02 +0000
Files and hashes:         1: MPdIoBhSamsoceGH97ZrbeY-7Y4.roa (hash: xk+VO+lT2ZL0Nzt8GYWzkONFJ8wXFr2d45kNV/RsFNQ=)
                          2: iwVEhe5ixvGTlhPLogZp7vRQT3k.crl (hash: EQPi3e2eje6i917NkvHTFpc8CzVCAaLYCsL+rfZniJ8=)
                          3: lYJDRXWPAACOBIGtN5SoMpmELk8.roa (hash: +/i7PrD75ms6DLzi7NKAcmr/vu2swer4LejKpfAFxnA=)
                          4: uUrDuBilHzuoCgA80rJqPJxqSNQ.roa (hash: 77BWKMeC9pAnIWkDSdffjc6huYPIszzufpj7ouuEVAY=)
                          5: vl57Hdk_U8b9_Y2PxCQcURRvrQw.roa (hash: LDklYITUv8QycRGMLTw4zqVIBgqTAfoD6STDQphVOWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Jun 2026 05:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fd:27:29:df:2a:f8:9b:72:4f:99:09:d7:d5:b9:bd:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b054485ee62c6f1939613cba20669eef4504f79
        Validity
            Not Before: Jun 25 05:01:02 2026 GMT
            Not After : Jun 26 05:01:02 2026 GMT
        Subject: CN=a55be7c599fdbcfee1f7d01ec88d4decc02e7945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b6:0d:7d:0c:63:b6:83:57:56:33:c4:a3:7c:
                    b6:73:f8:a0:2a:d8:63:0c:14:9e:d8:45:16:2e:92:
                    72:84:93:7d:d6:e3:95:b5:aa:2b:65:d5:c7:e8:b1:
                    83:81:17:40:90:99:0d:56:10:46:1c:71:2e:f7:4e:
                    92:6e:0f:f8:c2:b3:f4:d4:91:3d:0c:58:db:e1:5f:
                    14:bc:bb:4c:33:6d:a0:55:e5:31:91:42:49:c1:a0:
                    7b:c5:b1:c3:a8:03:7d:fa:cb:65:17:d8:9c:e0:fc:
                    2a:1d:ac:53:f1:7e:96:4c:19:d0:67:b3:37:e2:9e:
                    c4:02:a1:6d:22:55:18:51:58:66:46:f3:77:b8:6c:
                    31:fc:4a:bc:73:b8:a3:1a:e0:e1:18:b0:fe:89:8c:
                    64:07:38:70:81:c7:f9:5c:75:f4:74:cd:ea:4e:3e:
                    3e:4f:06:96:47:02:5f:40:08:ec:3e:3b:81:4f:de:
                    49:cc:5e:b9:83:3f:65:e9:66:3c:51:b0:23:5f:9b:
                    c6:3a:ec:44:24:56:49:7c:1e:bc:70:72:e2:f4:87:
                    cc:8d:a6:3c:f6:4d:42:c2:79:42:e0:70:e7:46:90:
                    1b:41:9b:8b:fd:48:c3:97:3a:be:6f:fd:9a:93:09:
                    b8:9b:35:bc:5f:16:c9:0a:b8:1e:f0:6d:4d:6e:6d:
                    8b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:5B:E7:C5:99:FD:BC:FE:E1:F7:D0:1E:C8:8D:4D:EC:C0:2E:79:45
            X509v3 Authority Key Identifier:
                keyid:8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:99:ac:84:04:93:a4:23:dd:6b:d8:6f:70:7a:e8:6d:77:17:
         ae:6f:b6:89:77:ad:a8:9d:c5:fc:68:5e:81:cb:52:4e:a3:91:
         f7:c4:1c:6b:e8:36:d7:96:12:b5:4c:8a:ed:ed:fe:f0:98:e0:
         5f:c3:b8:bb:8c:f9:dc:22:37:db:4e:bc:f8:b0:a6:73:59:53:
         24:40:44:82:96:a4:36:45:a3:57:f0:de:7b:2d:39:68:77:ab:
         03:c2:1f:35:31:ea:ea:b3:4b:ff:12:c5:25:d7:6d:8b:a4:da:
         0d:65:31:c4:f4:a3:cd:93:55:21:3e:81:4c:32:14:4a:a4:4e:
         08:96:57:21:40:f2:28:13:27:2c:4e:c5:0d:c6:e8:50:cf:90:
         3d:df:74:f1:d7:6e:c9:45:44:8d:7a:6d:ee:25:31:ec:69:cd:
         e6:f9:34:db:fb:25:ce:c4:24:fd:2e:30:92:51:63:58:53:ec:
         85:16:96:f6:1b:39:42:5f:db:62:9a:d5:96:be:9d:c4:99:7c:
         af:42:39:14:19:93:4f:3a:16:e7:14:ff:45:ff:22:cb:51:00:
         af:22:90:7d:0d:72:f6:c6:a0:9b:19:b1:2a:67:e4:69:b4:5c:
         65:5f:eb:43:be:c2:f9:06:78:97:53:f5:75:6f:d2:70:55:99:
         42:09:5a:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ79JynfKvibck+ZCdfVub1eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMDU0NDg1ZWU2MmM2ZjE5Mzk2MTNjYmEyMDY2OWVlZjQ1
MDRmNzkwHhcNMjYwNjI1MDUwMTAyWhcNMjYwNjI2MDUwMTAyWjAzMTEwLwYDVQQD
EyhhNTViZTdjNTk5ZmRiY2ZlZTFmN2QwMWVjODhkNGRlY2MwMmU3OTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bYNfQxjtoNXVjPEo3y2c/igKthj
DBSe2EUWLpJyhJN91uOVtaorZdXH6LGDgRdAkJkNVhBGHHEu906Sbg/4wrP01JE9
DFjb4V8UvLtMM22gVeUxkUJJwaB7xbHDqAN9+stlF9ic4PwqHaxT8X6WTBnQZ7M3
4p7EAqFtIlUYUVhmRvN3uGwx/Eq8c7ijGuDhGLD+iYxkBzhwgcf5XHX0dM3qTj4+
TwaWRwJfQAjsPjuBT95JzF65gz9l6WY8UbAjX5vGOuxEJFZJfB68cHLi9IfMjaY8
9k1CwnlC4HDnRpAbQZuL/UjDlzq+b/2akwm4mzW8XxbJCrge8G1Nbm2LuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKVb58WZ/bz+4ffQHsiNTezALnlFMB8GA1UdIwQY
MBaAFIsFRIXuYsbxk5YTy6IGae70UE95MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXdWRWhlNWl4dkdUbGhQTG9nWnA3dlJRVDNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83NzljMDktZjQ5YS00YjM4LWE3Nzgt
NmJjMzkwOTk1Y2FiLzEvaXdWRWhlNWl4dkdUbGhQTG9nWnA3dlJRVDNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC83NzljMDktZjQ5YS00YjM4LWE3NzgtNmJjMzkwOTk1Y2Fi
LzEvaXdWRWhlNWl4dkdUbGhQTG9nWnA3dlJRVDNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWpmshAST
pCPda9hvcHrobXcXrm+2iXetqJ3F/GhegctSTqOR98Qca+g215YStUyK7e3+8Jjg
X8O4u4z53CI32068+LCmc1lTJEBEgpakNkWjV/Deey05aHerA8IfNTHq6rNL/xLF
Jddti6TaDWUxxPSjzZNVIT6BTDIUSqROCJZXIUDyKBMnLE7FDcboUM+QPd908ddu
yUVEjXpt7iUx7GnN5vk02/slzsQk/S4wklFjWFPshRaW9hs5Ql/bYprVlr6dxJl8
r0I5FBmTTzoW5xT/Rf8iy1EAryKQfQ1y9sagmxmxKmfkabRcZV/rQ77C+QZ4l1P1
dW/ScFWZQglavQ==
-----END CERTIFICATE-----
Generated at Thu Jun 25 13:53:56 2026 by rpki-client