Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
File:                     aZ11B_muHIs_3kVDOu6Pz5haIfo.mft (raw, json)
Hash identifier:          MtGRlgZ3b6RyHjnFu3EWo1EjrqGUTQyWWeSHB1vRy5o=
Subject key identifier:   71:FB:EC:BB:FE:91:46:64:4A:A5:6B:09:10:0F:C0:EC:3D:7A:5B:7B
Authority key identifier: 69:9D:75:07:F9:AE:1C:8B:3F:DE:45:43:3A:EE:8F:CF:98:5A:21:FA
Certificate issuer:       /CN=699d7507f9ae1c8b3fde45433aee8fcf985a21fa
Certificate serial:       019F129C0D322D16B18DD7239FDFD90B04FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
Manifest number:          121A
Signing time:             Mon 29 Jun 2026 09:00:44 +0000
Manifest this update:     Mon 29 Jun 2026 09:00:44 +0000
Manifest next update:     Tue 30 Jun 2026 09:00:44 +0000
Files and hashes:         1: aZ11B_muHIs_3kVDOu6Pz5haIfo.crl (hash: iIguFMNllmG7Jd55IE1yChJ57JY18HVjTkYMSI95jFA=)
                          2: uxIFoYaci_ec-DO8z0hezY7ktq4.asa (hash: SDJifCzUIO+4H118O2u0CQ5c1Yer68j64MbpD0n6+XE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:9c:0d:32:2d:16:b1:8d:d7:23:9f:df:d9:0b:04:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=699d7507f9ae1c8b3fde45433aee8fcf985a21fa
        Validity
            Not Before: Jun 29 09:00:44 2026 GMT
            Not After : Jun 30 09:00:44 2026 GMT
        Subject: CN=71fbecbbfe9146644aa56b09100fc0ec3d7a5b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:34:f6:65:ee:fb:f4:ae:7b:87:99:d8:79:e6:
                    f7:6a:25:ab:f8:42:ed:21:f7:22:25:ab:e9:40:f1:
                    08:de:42:e5:f3:fe:81:3a:a6:85:ca:f2:1b:84:82:
                    7e:e7:e4:e3:bd:91:ac:f2:ff:cf:a8:ae:e1:52:81:
                    57:50:26:1d:a3:37:50:48:74:e3:79:64:33:d3:7e:
                    5b:f1:5f:3c:f4:ac:f5:f3:5d:eb:32:7f:8d:d3:92:
                    e3:03:3b:4a:97:ae:1f:68:d7:66:36:5d:07:8b:d4:
                    fe:56:b4:2b:d7:fb:21:e6:ea:82:1b:4a:7e:c2:a8:
                    50:41:fb:06:f4:40:5b:3f:38:08:d4:8e:11:a3:51:
                    70:44:ed:92:44:31:f8:fe:94:cf:ee:f5:a6:b0:49:
                    58:a5:97:37:ab:5a:3f:63:48:f8:af:1a:b2:39:96:
                    08:0e:fd:89:b2:80:f6:fa:40:dc:f9:92:af:c4:36:
                    0c:7d:6c:26:da:40:60:91:c1:f8:20:e5:3d:93:10:
                    87:16:52:59:ca:13:8e:c5:92:60:ac:d3:ca:aa:a7:
                    db:e4:e1:c5:9d:ed:ca:6a:be:2c:2c:fd:d3:3b:0b:
                    aa:63:f2:96:ee:b7:38:6a:14:81:d2:9c:c7:23:2f:
                    16:6d:70:9f:79:dc:16:36:ab:b4:9a:6e:14:13:dd:
                    b2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:FB:EC:BB:FE:91:46:64:4A:A5:6B:09:10:0F:C0:EC:3D:7A:5B:7B
            X509v3 Authority Key Identifier:
                keyid:69:9D:75:07:F9:AE:1C:8B:3F:DE:45:43:3A:EE:8F:CF:98:5A:21:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:9b:69:6c:96:c8:99:a5:bd:fc:9e:9d:19:b1:95:07:c0:8c:
         4f:81:ff:c4:b9:42:bf:45:a8:71:fc:be:f7:d4:ad:58:7d:13:
         c7:54:c6:09:f1:0a:f9:21:31:9a:76:9e:a2:04:88:4c:e4:6b:
         dd:bf:b2:56:1e:5c:76:2c:76:94:6f:99:c5:c6:f4:57:34:41:
         69:c5:23:68:96:f8:be:fd:81:c7:3c:74:1f:f1:a0:05:9e:42:
         43:ae:e2:4f:90:2e:96:91:fe:4c:23:7d:28:4b:1e:ed:88:34:
         a8:b8:d4:8a:a0:d6:eb:f5:c2:86:4f:2d:9c:4a:26:8c:95:6c:
         cb:30:4b:7b:61:e3:08:59:60:10:f5:fa:6e:82:7d:59:5d:6b:
         25:2b:97:42:ad:c7:45:5f:44:da:d0:5e:eb:40:97:cb:73:33:
         6b:f2:99:78:58:63:fe:dd:6b:ee:a5:af:8c:59:79:b0:40:38:
         8d:46:57:8d:0d:61:a8:a1:a1:7c:5c:66:08:e3:53:71:12:55:
         5e:2b:e5:cb:a0:f5:02:c1:36:21:31:f5:17:27:35:40:49:15:
         ca:d3:34:d0:56:15:8a:9a:1d:06:7e:60:4a:58:64:24:d6:2e:
         c5:70:55:31:a2:ea:7b:eb:30:59:c0:c4:27:82:9f:be:60:1d:
         9c:59:31:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8SnA0yLRaxjdcjn9/ZCwT+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5OWQ3NTA3ZjlhZTFjOGIzZmRlNDU0MzNhZWU4ZmNmOTg1
YTIxZmEwHhcNMjYwNjI5MDkwMDQ0WhcNMjYwNjMwMDkwMDQ0WjAzMTEwLwYDVQQD
Eyg3MWZiZWNiYmZlOTE0NjY0NGFhNTZiMDkxMDBmYzBlYzNkN2E1YjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTT2Ze779K57h5nYeeb3aiWr+ELt
IfciJavpQPEI3kLl8/6BOqaFyvIbhIJ+5+TjvZGs8v/PqK7hUoFXUCYdozdQSHTj
eWQz035b8V889Kz1813rMn+N05LjAztKl64faNdmNl0Hi9T+VrQr1/sh5uqCG0p+
wqhQQfsG9EBbPzgI1I4Ro1FwRO2SRDH4/pTP7vWmsElYpZc3q1o/Y0j4rxqyOZYI
Dv2JsoD2+kDc+ZKvxDYMfWwm2kBgkcH4IOU9kxCHFlJZyhOOxZJgrNPKqqfb5OHF
ne3Kar4sLP3TOwuqY/KW7rc4ahSB0pzHIy8WbXCfedwWNqu0mm4UE92y/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHH77Lv+kUZkSqVrCRAPwOw9elt7MB8GA1UdIwQY
MBaAFGmddQf5rhyLP95FQzruj8+YWiH6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVoxMUJfbXVISXNfM2tWRE91NlB6NWhhSWZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81NWM3MWItM2QwNi00MzZmLTgxMjIt
MjI0MTY1ZWMxODBhLzEvYVoxMUJfbXVISXNfM2tWRE91NlB6NWhhSWZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC81NWM3MWItM2QwNi00MzZmLTgxMjItMjI0MTY1ZWMxODBh
LzEvYVoxMUJfbXVISXNfM2tWRE91NlB6NWhhSWZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACJtpbJbI
maW9/J6dGbGVB8CMT4H/xLlCv0Wocfy+99StWH0Tx1TGCfEK+SExmnaeogSITORr
3b+yVh5cdix2lG+Zxcb0VzRBacUjaJb4vv2Bxzx0H/GgBZ5CQ67iT5AulpH+TCN9
KEse7Yg0qLjUiqDW6/XChk8tnEomjJVsyzBLe2HjCFlgEPX6boJ9WV1rJSuXQq3H
RV9E2tBe60CXy3Mza/KZeFhj/t1r7qWvjFl5sEA4jUZXjQ1hqKGhfFxmCONTcRJV
Xivly6D1AsE2ITH1Fyc1QEkVytM00FYVipodBn5gSlhkJNYuxXBVMaLqe+swWcDE
J4KfvmAdnFkx9w==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:39:02 2026 by rpki-client