Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
File:                     3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft (raw, json)
Hash identifier:          Hqw+DYrmkvAkBP0dnzRbFwMe6AHHqi0SnWJ+BF69/9A=
Subject key identifier:   06:FA:A3:59:74:FC:F9:6B:2E:AD:D8:25:37:BC:F3:5D:30:41:75:89
Authority key identifier: DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5
Certificate issuer:       /CN=dce6e13e413baf381b625131e924e947843436f5
Certificate serial:       019EDCC11434E017C2DF55067ABE8F1C6974
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
Manifest number:          0DF8
Signing time:             Thu 18 Jun 2026 22:01:41 +0000
Manifest this update:     Thu 18 Jun 2026 22:01:41 +0000
Manifest next update:     Fri 19 Jun 2026 22:01:41 +0000
Files and hashes:         1: 3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl (hash: pwVBQCEyRZAJE7eIsTSH7QnlMM7RxWVoORIL0JAlzWg=)
                          2: WaiBRN4zqeNTstFb2Bj7FDDnj4A.roa (hash: R2F3HKnWVo0NsS1fo82XPlwTKBu5M4Ho2YxFKIfZuWs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Jun 2026 20:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:dc:c1:14:34:e0:17:c2:df:55:06:7a:be:8f:1c:69:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dce6e13e413baf381b625131e924e947843436f5
        Validity
            Not Before: Jun 18 22:01:41 2026 GMT
            Not After : Jun 19 22:01:41 2026 GMT
        Subject: CN=06faa35974fcf96b2eadd82537bcf35d30417589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2c:64:94:b0:02:08:eb:41:c7:63:42:6e:9b:
                    c0:8b:f8:d7:2f:9a:8c:2c:0c:2f:15:1d:3d:3b:cd:
                    b5:af:31:97:21:e3:53:0a:e9:89:aa:f0:d5:f9:0b:
                    cd:fb:02:ea:2f:2f:d9:1d:7e:f8:13:29:3d:50:04:
                    30:cd:03:70:c0:c1:59:b0:ab:e9:f0:86:82:24:7f:
                    c5:7b:c8:8f:e0:5f:82:c1:a0:9a:a4:3c:2b:db:dc:
                    9d:a2:cd:2b:2b:98:68:ba:38:8d:88:a1:24:bd:a7:
                    31:29:63:20:a3:25:f8:72:d3:1c:6b:01:99:d4:09:
                    eb:a9:67:dc:7b:2f:ef:5d:c4:c5:f9:00:6e:a8:07:
                    d5:53:7f:d9:b0:14:95:c9:21:8a:17:8d:28:05:dd:
                    ed:6a:f9:07:1a:90:77:e5:d7:08:0a:5b:65:4b:e1:
                    26:0a:80:18:81:ee:cb:f6:b1:91:4a:51:3d:ae:a7:
                    99:94:38:3b:e0:c4:18:12:24:6c:8d:7a:7f:90:9d:
                    a0:92:93:b9:51:7b:de:7a:51:75:e3:c1:54:f8:dc:
                    1d:88:99:e9:31:d9:bd:44:53:1d:c5:09:17:e2:b2:
                    8a:16:ea:50:c6:16:6d:4b:f1:a1:11:85:23:0c:38:
                    0b:b5:17:ea:ea:31:a1:aa:45:de:b6:9f:45:b6:92:
                    21:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:FA:A3:59:74:FC:F9:6B:2E:AD:D8:25:37:BC:F3:5D:30:41:75:89
            X509v3 Authority Key Identifier:
                keyid:DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:0d:d9:ce:1a:b5:c6:f5:a4:5f:fe:8f:a4:02:a0:56:b2:39:
         6a:08:6e:05:35:d1:61:ae:10:2b:11:ac:3f:74:4f:b4:a5:f1:
         17:de:61:37:4a:ab:d2:f3:77:f2:2d:7f:3c:43:01:38:59:50:
         49:7c:0a:00:fe:82:df:26:27:73:97:bb:7c:2c:71:af:0a:56:
         33:a3:ce:e7:63:19:cc:34:87:43:08:3c:0b:5d:c5:3a:94:23:
         d8:dd:37:d0:bc:5f:2d:c6:2d:9f:0e:b6:46:11:c9:a8:a3:ba:
         2a:06:fc:7b:57:ca:8e:2c:d8:4c:86:8d:54:67:62:3a:5d:60:
         0f:28:53:1b:94:cf:38:1d:c3:dc:f4:8e:03:32:54:1c:67:ab:
         3a:d9:4a:a8:68:4c:de:2a:3c:da:f8:3d:7f:63:5a:10:50:16:
         34:17:5b:ad:c6:2e:9d:f3:0a:aa:86:37:47:70:8f:bc:57:e1:
         18:50:6f:e7:39:03:15:13:23:d1:c6:09:2f:19:51:f4:cf:b8:
         88:95:70:8f:42:80:ae:23:d0:41:83:ce:0c:a3:80:a7:ea:7e:
         d5:2f:03:7c:40:56:1d:67:bc:b7:29:84:cb:68:58:3a:c7:fd:
         77:9b:26:64:35:ee:16:27:bd:36:e9:5a:a7:30:ce:16:d9:4b:
         ea:ba:2b:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7cwRQ04BfC31UGer6PHGl0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZTZlMTNlNDEzYmFmMzgxYjYyNTEzMWU5MjRlOTQ3ODQz
NDM2ZjUwHhcNMjYwNjE4MjIwMTQxWhcNMjYwNjE5MjIwMTQxWjAzMTEwLwYDVQQD
EygwNmZhYTM1OTc0ZmNmOTZiMmVhZGQ4MjUzN2JjZjM1ZDMwNDE3NTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CxklLACCOtBx2NCbpvAi/jXL5qM
LAwvFR09O821rzGXIeNTCumJqvDV+QvN+wLqLy/ZHX74Eyk9UAQwzQNwwMFZsKvp
8IaCJH/Fe8iP4F+CwaCapDwr29ydos0rK5houjiNiKEkvacxKWMgoyX4ctMcawGZ
1AnrqWfcey/vXcTF+QBuqAfVU3/ZsBSVySGKF40oBd3tavkHGpB35dcICltlS+Em
CoAYge7L9rGRSlE9rqeZlDg74MQYEiRsjXp/kJ2gkpO5UXveelF148FU+NwdiJnp
Mdm9RFMdxQkX4rKKFupQxhZtS/GhEYUjDDgLtRfq6jGhqkXetp9FtpIhKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAb6o1l0/PlrLq3YJTe8810wQXWJMB8GA1UdIwQY
MBaAFNzm4T5BO684G2JRMekk6UeENDb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM09iaFBrRTdyemdiWWxFeDZTVHBSNFEwTnZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi85YTRlZjUtNDJmYS00MzVmLWE4ZmUt
YjFmNGZjNzUyMmEwLzEvM09iaFBrRTdyemdiWWxFeDZTVHBSNFEwTnZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi85YTRlZjUtNDJmYS00MzVmLWE4ZmUtYjFmNGZjNzUyMmEw
LzEvM09iaFBrRTdyemdiWWxFeDZTVHBSNFEwTnZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjA3Zzhq1
xvWkX/6PpAKgVrI5aghuBTXRYa4QKxGsP3RPtKXxF95hN0qr0vN38i1/PEMBOFlQ
SXwKAP6C3yYnc5e7fCxxrwpWM6PO52MZzDSHQwg8C13FOpQj2N030LxfLcYtnw62
RhHJqKO6Kgb8e1fKjizYTIaNVGdiOl1gDyhTG5TPOB3D3PSOAzJUHGerOtlKqGhM
3io82vg9f2NaEFAWNBdbrcYunfMKqoY3R3CPvFfhGFBv5zkDFRMj0cYJLxlR9M+4
iJVwj0KAriPQQYPODKOAp+p+1S8DfEBWHWe8tymEy2hYOsf9d5smZDXuFie9Nula
pzDOFtlL6rorhw==
-----END CERTIFICATE-----
Generated at Fri Jun 19 03:36:05 2026 by rpki-client