Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft
File:                     vY-cA-dX89tRTKONFa2kUfoulhU.mft (raw, json)
Hash identifier:          tmOG/HsBkuQGnLiOSAWsI2KYfJ4uc1/uR9WEJq+/rzI=
Subject key identifier:   F4:D3:78:48:D7:30:6C:7A:D3:DF:20:8C:3E:7A:61:C8:3C:F4:DD:F3
Authority key identifier: BD:8F:9C:03:E7:57:F3:DB:51:4C:A3:8D:15:AD:A4:51:FA:2E:96:15
Certificate issuer:       /CN=bd8f9c03e757f3db514ca38d15ada451fa2e9615
Certificate serial:       019EF9F07F16242BA853601662071E900524
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft
Manifest number:          0CEE
Signing time:             Wed 24 Jun 2026 14:02:28 +0000
Manifest this update:     Wed 24 Jun 2026 14:02:28 +0000
Manifest next update:     Thu 25 Jun 2026 14:02:28 +0000
Files and hashes:         1: 5DhZq_rBdW3po_ZrXdjJ55GpFqA.roa (hash: QKy+PuVbWKIlnbGB9uOk/snfAnZg1+WrdQuHuNMld0k=)
                          2: SDLTrQjkiw192HmXLpffrpBlDcs.roa (hash: BhXmkSXu3As8CiQ1UvxuCgeN4cbmIJZN7UIHsihXBW8=)
                          3: eJqsemrX4r9IuhcHQVX7WZ3vipk.roa (hash: EYEupg+CuEQXFJeFdsXHjk15qYcFEa8u1+yv6+YuTRw=)
                          4: vY-cA-dX89tRTKONFa2kUfoulhU.crl (hash: eaz91BIpGnF8h/FFNsYCZyH6ATyGQHi2h332cBwjlsU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 14:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:f9:f0:7f:16:24:2b:a8:53:60:16:62:07:1e:90:05:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd8f9c03e757f3db514ca38d15ada451fa2e9615
        Validity
            Not Before: Jun 24 14:02:28 2026 GMT
            Not After : Jun 25 14:02:28 2026 GMT
        Subject: CN=f4d37848d7306c7ad3df208c3e7a61c83cf4ddf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b0:da:46:53:78:04:fe:0c:f4:bc:01:56:ff:
                    8c:22:fe:aa:e2:b6:cc:4f:4c:88:d8:1f:87:87:a4:
                    e3:e9:d2:48:cd:f9:2d:07:7d:bd:c3:a8:c2:5f:7d:
                    15:d9:fe:c9:21:5e:e8:2e:be:26:3c:49:5d:ea:d4:
                    c1:4d:e1:11:42:2a:7f:e9:b6:46:0d:fe:7c:0b:6e:
                    cc:dd:11:b0:44:71:7f:b4:6c:79:d8:4f:4d:8a:be:
                    91:df:75:b2:96:8b:ed:28:3a:86:70:91:82:e8:ad:
                    3d:37:a6:45:8e:f1:28:0d:06:4b:63:d1:37:5c:16:
                    fa:bc:2c:eb:f1:3f:15:4f:ca:5e:69:95:49:91:8e:
                    b7:e0:03:a9:e5:33:35:3f:c0:fd:f2:fd:1a:78:36:
                    45:be:5f:28:6c:4d:33:1d:bd:34:b2:93:59:f9:f7:
                    5c:ff:eb:8b:22:16:ee:23:79:25:c2:83:2f:b0:26:
                    ad:30:33:6b:21:58:35:a9:a9:49:bc:38:0a:be:a0:
                    1b:9d:05:35:3c:9c:15:8b:84:09:62:f0:84:98:f4:
                    6e:a1:6c:6e:38:62:14:c3:e5:70:73:b6:41:05:20:
                    26:dc:38:d6:95:0c:f1:0d:49:ac:43:39:d4:d4:3d:
                    b7:81:f6:9b:9c:cc:77:cc:00:01:09:a4:09:01:7c:
                    2d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D3:78:48:D7:30:6C:7A:D3:DF:20:8C:3E:7A:61:C8:3C:F4:DD:F3
            X509v3 Authority Key Identifier:
                keyid:BD:8F:9C:03:E7:57:F3:DB:51:4C:A3:8D:15:AD:A4:51:FA:2E:96:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:98:4e:ae:36:ea:c0:0a:d7:2a:1c:50:9e:87:59:e3:e1:ad:
         f8:a8:2e:57:6a:ab:49:36:9b:f3:26:5b:46:f6:ec:94:f0:24:
         17:ac:a1:c0:40:eb:4f:5f:34:b3:0a:f5:4c:f7:0f:6b:26:e4:
         49:2e:dd:49:a3:12:05:e7:45:c3:60:1e:d1:95:66:f2:17:68:
         bb:ef:fd:38:c0:a5:39:43:6a:4c:3d:f6:98:11:f1:74:ae:73:
         6f:04:ae:68:0d:40:f1:82:ca:4e:35:ca:49:25:65:63:44:7c:
         b8:0e:ec:23:e9:82:42:cc:c7:16:f3:18:89:3a:a5:61:2b:37:
         8b:1c:26:dd:9c:3a:84:4d:c7:bd:75:0d:2e:8a:9e:fa:8f:c3:
         3b:ee:77:6b:8b:8d:cb:40:81:53:61:d1:02:48:1d:05:4d:c1:
         07:06:ba:6c:dc:8e:8a:39:11:48:ee:d5:75:5b:01:e1:f9:21:
         53:47:0c:74:a6:cf:40:e5:7a:bc:bf:ed:0a:b2:95:46:9b:c3:
         94:e5:96:3e:56:02:af:d8:51:84:6f:d5:50:5b:ae:fb:4d:cb:
         96:73:21:2e:2c:0d:7f:fd:3e:a7:d7:4f:3e:c0:7e:85:96:7c:
         81:8e:c7:21:1e:e5:15:b4:9f:53:0d:cf:59:c1:ac:80:af:ff:
         9b:98:af:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ758H8WJCuoU2AWYgcekAUkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkOGY5YzAzZTc1N2YzZGI1MTRjYTM4ZDE1YWRhNDUxZmEy
ZTk2MTUwHhcNMjYwNjI0MTQwMjI4WhcNMjYwNjI1MTQwMjI4WjAzMTEwLwYDVQQD
EyhmNGQzNzg0OGQ3MzA2YzdhZDNkZjIwOGMzZTdhNjFjODNjZjRkZGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbDaRlN4BP4M9LwBVv+MIv6q4rbM
T0yI2B+Hh6Tj6dJIzfktB329w6jCX30V2f7JIV7oLr4mPEld6tTBTeERQip/6bZG
Df58C27M3RGwRHF/tGx52E9Nir6R33WylovtKDqGcJGC6K09N6ZFjvEoDQZLY9E3
XBb6vCzr8T8VT8peaZVJkY634AOp5TM1P8D98v0aeDZFvl8obE0zHb00spNZ+fdc
/+uLIhbuI3klwoMvsCatMDNrIVg1qalJvDgKvqAbnQU1PJwVi4QJYvCEmPRuoWxu
OGIUw+Vwc7ZBBSAm3DjWlQzxDUmsQznU1D23gfabnMx3zAABCaQJAXwtPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTTeEjXMGx6098gjD56Ycg89N3zMB8GA1UdIwQY
MBaAFL2PnAPnV/PbUUyjjRWtpFH6LpYVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlktY0EtZFg4OXRSVEtPTkZhMmtVZm91bGhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9iODNlNDctYmMwNC00OTJkLTlhMDct
ZWNkZDgxNzQwMDdhLzEvdlktY0EtZFg4OXRSVEtPTkZhMmtVZm91bGhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9iODNlNDctYmMwNC00OTJkLTlhMDctZWNkZDgxNzQwMDdh
LzEvdlktY0EtZFg4OXRSVEtPTkZhMmtVZm91bGhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGphOrjbq
wArXKhxQnodZ4+Gt+KguV2qrSTab8yZbRvbslPAkF6yhwEDrT180swr1TPcPaybk
SS7dSaMSBedFw2Ae0ZVm8hdou+/9OMClOUNqTD32mBHxdK5zbwSuaA1A8YLKTjXK
SSVlY0R8uA7sI+mCQszHFvMYiTqlYSs3ixwm3Zw6hE3HvXUNLoqe+o/DO+53a4uN
y0CBU2HRAkgdBU3BBwa6bNyOijkRSO7VdVsB4fkhU0cMdKbPQOV6vL/tCrKVRpvD
lOWWPlYCr9hRhG/VUFuu+03LlnMhLiwNf/0+p9dPPsB+hZZ8gY7HIR7lFbSfUw3P
WcGsgK//m5ivKg==
-----END CERTIFICATE-----
Generated at Wed Jun 24 21:20:23 2026 by rpki-client