Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.mft
File:                     1N33M6X21zWr8n6JKuDlANVyffM.mft (raw, json)
Hash identifier:          1c1dy03a7eKt7QWEP2YnN/CSy4SBsWFzs6kbkjPnJ2M=
Subject key identifier:   E5:52:10:53:D2:33:11:7F:F6:A6:BA:02:1F:4F:B3:E0:BB:D6:AA:E5
Authority key identifier: D4:DD:F7:33:A5:F6:D7:35:AB:F2:7E:89:2A:E0:E5:00:D5:72:7D:F3
Certificate issuer:       /CN=d4ddf733a5f6d735abf27e892ae0e500d5727df3
Certificate serial:       019EB845A1C08F1E37CB47B5C49CCD2C91B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1N33M6X21zWr8n6JKuDlANVyffM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.mft
Manifest number:          016E
Signing time:             Thu 11 Jun 2026 20:00:31 +0000
Manifest this update:     Thu 11 Jun 2026 20:00:31 +0000
Manifest next update:     Fri 12 Jun 2026 20:00:31 +0000
Files and hashes:         1: 1N33M6X21zWr8n6JKuDlANVyffM.crl (hash: KWU2oAES2BHNnwpB73IWsTE2P/xGuv23/U8hP2ijJz0=)
                          2: iKbr2LK5J82gYuXSxnRiW9ytVSU.roa (hash: SB/v/t0GxNGoad1gEDHjAA4/1IulHpKzS+RYj669lVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1N33M6X21zWr8n6JKuDlANVyffM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:45:a1:c0:8f:1e:37:cb:47:b5:c4:9c:cd:2c:91:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4ddf733a5f6d735abf27e892ae0e500d5727df3
        Validity
            Not Before: Jun 11 20:00:31 2026 GMT
            Not After : Jun 12 20:00:31 2026 GMT
        Subject: CN=e5521053d233117ff6a6ba021f4fb3e0bbd6aae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:dc:39:8f:b6:34:e4:3b:04:5a:1c:d5:7f:47:
                    10:75:9f:14:47:32:ae:fe:4e:1f:96:81:42:f7:bf:
                    9b:46:d2:1d:27:eb:9c:67:ef:ec:f5:42:63:33:38:
                    e8:73:c5:b3:f7:5f:c6:33:ee:5a:15:6e:79:d9:7c:
                    83:45:2b:a9:2a:af:71:49:54:80:c8:f7:38:7b:33:
                    d2:e1:14:b2:a0:13:6f:8d:7a:9f:5d:d9:3d:8d:84:
                    46:8a:36:5f:1c:f3:ec:71:fa:20:6e:75:64:df:67:
                    2f:30:62:8f:a8:ff:47:09:b7:f3:cc:f8:79:1b:8d:
                    bd:43:94:05:65:ba:5f:5e:e4:bf:33:11:51:e5:bd:
                    ee:b9:4f:60:6a:5f:c1:6b:af:3e:7d:85:4e:5f:8f:
                    e2:28:31:fa:22:77:18:3c:01:a3:14:08:be:53:31:
                    e2:bc:3e:6e:c3:b8:8d:e4:c4:88:05:c2:11:22:e1:
                    09:79:5e:69:ae:cf:95:03:46:1e:d3:fa:a9:ef:b3:
                    bd:53:7c:41:f4:78:69:85:84:fe:ea:e6:e3:20:28:
                    59:cc:ba:2b:73:8c:52:4a:74:dd:47:f1:7a:2e:3f:
                    2d:95:65:ac:3f:ab:1a:5b:f6:3a:44:aa:a6:37:1b:
                    0d:b8:67:85:26:38:75:1e:74:24:ec:a3:29:af:45:
                    d2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:52:10:53:D2:33:11:7F:F6:A6:BA:02:1F:4F:B3:E0:BB:D6:AA:E5
            X509v3 Authority Key Identifier:
                keyid:D4:DD:F7:33:A5:F6:D7:35:AB:F2:7E:89:2A:E0:E5:00:D5:72:7D:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1N33M6X21zWr8n6JKuDlANVyffM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:8d:97:38:2d:52:6c:dd:06:0e:a8:b5:e9:b1:1d:f0:91:da:
         36:70:61:d3:9e:71:e6:bf:d7:c7:41:bf:13:9b:38:0d:b0:57:
         cd:63:67:7a:8b:5f:60:61:d2:da:25:30:51:0d:41:8f:20:de:
         ec:a9:89:4a:23:6a:32:42:73:40:95:eb:5b:01:ae:60:60:46:
         d4:18:b2:fc:d6:65:4e:5f:3b:8c:9b:99:48:4a:54:18:9a:3b:
         c4:8d:58:d4:a4:a4:61:85:b7:c0:cf:65:82:75:50:f9:22:2e:
         93:dc:79:64:94:5d:45:30:82:ee:ef:d5:d6:86:f4:40:0e:e8:
         84:a7:24:75:9e:2e:a3:13:2b:e6:b5:aa:86:c4:3e:2f:40:71:
         6a:30:27:50:3a:49:b8:72:ff:a2:74:0c:0f:d8:d2:66:bd:81:
         07:c9:13:46:3c:c1:45:e7:59:e8:f6:aa:d1:03:25:a4:a9:ec:
         f9:9d:8c:37:27:bb:db:3a:00:27:23:99:8c:cb:7c:8e:93:5c:
         19:7e:15:f9:cd:46:93:1f:90:15:b1:a4:9c:ec:c5:ce:6d:2b:
         b0:4f:b9:ff:37:dd:a5:01:64:b6:81:6f:27:17:de:0f:f5:b5:
         e5:9f:28:f9:65:5e:c4:a4:7a:83:55:81:ad:a5:5d:bb:89:14:
         7a:03:92:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64RaHAjx43y0e1xJzNLJGzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZGRmNzMzYTVmNmQ3MzVhYmYyN2U4OTJhZTBlNTAwZDU3
MjdkZjMwHhcNMjYwNjExMjAwMDMxWhcNMjYwNjEyMjAwMDMxWjAzMTEwLwYDVQQD
EyhlNTUyMTA1M2QyMzMxMTdmZjZhNmJhMDIxZjRmYjNlMGJiZDZhYWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltw5j7Y05DsEWhzVf0cQdZ8URzKu
/k4floFC97+bRtIdJ+ucZ+/s9UJjMzjoc8Wz91/GM+5aFW552XyDRSupKq9xSVSA
yPc4ezPS4RSyoBNvjXqfXdk9jYRGijZfHPPscfogbnVk32cvMGKPqP9HCbfzzPh5
G429Q5QFZbpfXuS/MxFR5b3uuU9gal/Ba68+fYVOX4/iKDH6IncYPAGjFAi+UzHi
vD5uw7iN5MSIBcIRIuEJeV5prs+VA0Ye0/qp77O9U3xB9HhphYT+6ubjIChZzLor
c4xSSnTdR/F6Lj8tlWWsP6saW/Y6RKqmNxsNuGeFJjh1HnQk7KMpr0XSPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOVSEFPSMxF/9qa6Ah9Ps+C71qrlMB8GA1UdIwQY
MBaAFNTd9zOl9tc1q/J+iSrg5QDVcn3zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU4zM002WDIxeldyOG42Skt1RGxBTlZ5ZmZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9kODQ2NmUtMjRiZS00YTZkLWI1NWYt
ZWZlNTk5YmY1ZDg3LzEvMU4zM002WDIxeldyOG42Skt1RGxBTlZ5ZmZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9kODQ2NmUtMjRiZS00YTZkLWI1NWYtZWZlNTk5YmY1ZDg3
LzEvMU4zM002WDIxeldyOG42Skt1RGxBTlZ5ZmZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAY2XOC1S
bN0GDqi16bEd8JHaNnBh055x5r/Xx0G/E5s4DbBXzWNneotfYGHS2iUwUQ1BjyDe
7KmJSiNqMkJzQJXrWwGuYGBG1Biy/NZlTl87jJuZSEpUGJo7xI1Y1KSkYYW3wM9l
gnVQ+SIuk9x5ZJRdRTCC7u/V1ob0QA7ohKckdZ4uoxMr5rWqhsQ+L0BxajAnUDpJ
uHL/onQMD9jSZr2BB8kTRjzBRedZ6Paq0QMlpKns+Z2MNye72zoAJyOZjMt8jpNc
GX4V+c1Gkx+QFbGknOzFzm0rsE+5/zfdpQFktoFvJxfeD/W15Z8o+WVexKR6g1WB
raVdu4kUegOSrA==
-----END CERTIFICATE-----
Generated at Thu Jun 11 23:55:48 2026 by rpki-client