Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
File:                     Ff04BOALngaoLO2fB7NP4_2AOU4.mft (raw, json)
Hash identifier:          e3bvp0wviO7ke324XFBkR3MrxVph2SZ0LPbQsBZH4/I=
Subject key identifier:   C8:56:B0:6B:58:71:7C:42:06:E9:80:46:02:EB:01:C7:AE:E8:DA:1A
Authority key identifier: 15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
Certificate issuer:       /CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Certificate serial:       019EE0D4669E715F0DBB427CC8AF83594422
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
Manifest number:          10F9
Signing time:             Fri 19 Jun 2026 17:01:16 +0000
Manifest this update:     Fri 19 Jun 2026 17:01:16 +0000
Manifest next update:     Sat 20 Jun 2026 17:01:16 +0000
Files and hashes:         1: Ff04BOALngaoLO2fB7NP4_2AOU4.crl (hash: hMCbdaqS6zcDKMv3nGH6qpyghqHC8KOVWrczr96z8LM=)
                          2: G128Aj3UzxS3UKbzkqPvpKp9tmU.roa (hash: v5+OIZJuCZdNIq9ct3jjcPuaBsiWP2r52OBqdsOfDZ0=)
                          3: NX8gAo4kJVVnhVZZYeGsPN5mG8w.roa (hash: V0/RLiCz2ASel5h/MeTJN3bA9SuqAAYlXPDJdJh++xE=)
                          4: atC9_7KH84YKhxeQMKIpdCgSOAE.roa (hash: 895MfjfFbrM39ld+SYg/OsAZrEdBttPSgsek5g05vWU=)
                          5: uOvkQDziXdl03ymVnX12k48lv30.roa (hash: uWfGX0PhnwLyUyMwAiEAkFFInh+eiuwv8GILWk97Ti0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Jun 2026 17:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e0:d4:66:9e:71:5f:0d:bb:42:7c:c8:af:83:59:44:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
        Validity
            Not Before: Jun 19 17:01:16 2026 GMT
            Not After : Jun 20 17:01:16 2026 GMT
        Subject: CN=c856b06b58717c4206e9804602eb01c7aee8da1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a0:18:8d:42:71:f6:14:c2:84:6f:5e:44:3e:
                    90:39:a4:43:6f:3f:d2:e5:2c:34:46:ac:8e:e1:da:
                    cf:75:27:0b:32:ad:10:4d:3c:82:d9:ab:90:4a:5b:
                    62:92:9d:42:87:ee:d3:61:5c:d4:fd:8f:09:d9:f1:
                    25:a1:50:bc:89:90:37:5d:e7:2a:b3:11:aa:81:6b:
                    2c:5f:19:c4:10:0e:eb:35:5a:d6:76:d5:5d:b9:3e:
                    36:cf:93:45:9f:35:7b:c2:01:0f:af:d5:7d:45:62:
                    c7:f5:9f:e6:f5:98:97:f4:81:d0:dd:e0:04:c7:a1:
                    22:2b:5d:76:39:bd:1d:8d:d4:7f:64:ef:0e:f6:56:
                    e3:71:de:5c:8f:90:25:73:c1:3f:89:02:44:e7:8e:
                    e5:f1:ab:4e:10:c1:d3:3e:7f:03:8e:02:06:0f:29:
                    ab:da:c4:74:57:5b:47:f8:12:ee:fa:31:04:fd:b4:
                    37:08:e2:fd:49:10:9b:5d:30:03:56:31:36:73:c6:
                    9f:f3:91:3d:12:9d:60:1f:a7:ba:8e:51:14:a1:fa:
                    85:38:75:fb:80:f4:0b:12:21:b8:30:9d:69:b0:0a:
                    59:49:ec:e8:9a:99:fb:3e:66:ff:50:7b:ec:0f:4e:
                    e0:bd:32:b0:72:8c:8e:d1:3c:eb:4a:f4:b3:0a:fc:
                    23:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:56:B0:6B:58:71:7C:42:06:E9:80:46:02:EB:01:C7:AE:E8:DA:1A
            X509v3 Authority Key Identifier:
                keyid:15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:2f:0a:17:9a:ce:0d:15:d4:9e:48:82:73:bc:5d:f6:20:80:
         c0:04:5e:bd:83:a5:dd:80:3d:74:b7:9e:31:86:70:d3:a8:f5:
         1a:5c:ba:44:89:f1:ce:df:d7:b3:f1:7a:2f:14:84:92:18:32:
         52:35:06:31:0c:11:cb:67:46:c3:5c:c0:97:bf:04:19:59:9b:
         16:e8:4d:f7:95:f6:d5:ec:97:3d:c4:c9:ed:4b:8e:a7:19:57:
         bf:5b:3d:a4:27:18:e0:44:95:5e:ed:9d:d7:8c:dc:6f:0a:d2:
         8c:9b:14:d1:75:e8:7d:50:84:6f:38:c0:1a:7e:32:0f:83:4c:
         11:0a:37:35:42:e7:2e:fe:4c:6c:52:ab:a1:c0:31:33:04:1c:
         79:df:5d:42:73:e0:58:6c:d9:14:ff:a7:27:28:a9:aa:69:21:
         59:32:1d:3d:33:0e:cb:90:72:cc:4d:74:c2:1d:15:fd:8a:b5:
         f5:d6:ae:8f:c4:84:ec:f2:ec:a6:a5:4d:9d:fd:dc:36:2d:a4:
         c0:b6:ed:b1:cf:cb:99:56:88:a5:6a:c7:f0:0f:5f:84:7d:fc:
         ae:42:d0:5f:e3:66:9d:11:a5:12:d9:ad:3e:e2:3b:45:1f:e7:
         55:e2:72:ba:21:a0:4a:10:16:fe:28:5a:15:62:c1:ad:b2:85:
         9e:81:c7:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7g1GaecV8Nu0J8yK+DWUQiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZmQzODA0ZTAwYjllMDZhODJjZWQ5ZjA3YjM0ZmUzZmQ4
MDM5NGUwHhcNMjYwNjE5MTcwMTE2WhcNMjYwNjIwMTcwMTE2WjAzMTEwLwYDVQQD
EyhjODU2YjA2YjU4NzE3YzQyMDZlOTgwNDYwMmViMDFjN2FlZThkYTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaAYjUJx9hTChG9eRD6QOaRDbz/S
5Sw0RqyO4drPdScLMq0QTTyC2auQSltikp1Ch+7TYVzU/Y8J2fEloVC8iZA3Xecq
sxGqgWssXxnEEA7rNVrWdtVduT42z5NFnzV7wgEPr9V9RWLH9Z/m9ZiX9IHQ3eAE
x6EiK112Ob0djdR/ZO8O9lbjcd5cj5Alc8E/iQJE547l8atOEMHTPn8DjgIGDymr
2sR0V1tH+BLu+jEE/bQ3COL9SRCbXTADVjE2c8af85E9Ep1gH6e6jlEUofqFOHX7
gPQLEiG4MJ1psApZSezompn7Pmb/UHvsD07gvTKwcoyO0TzrSvSzCvwjZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhWsGtYcXxCBumARgLrAceu6NoaMB8GA1UdIwQY
MBaAFBX9OATgC54GqCztnwezT+P9gDlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmYwNEJPQUxuZ2FvTE8yZkI3TlA0XzJBT1U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9iZTNjNDAtMTIxMC00MjcyLWE1ZWEt
NzgzNWQzMjA4Mzk2LzEvRmYwNEJPQUxuZ2FvTE8yZkI3TlA0XzJBT1U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9iZTNjNDAtMTIxMC00MjcyLWE1ZWEtNzgzNWQzMjA4Mzk2
LzEvRmYwNEJPQUxuZ2FvTE8yZkI3TlA0XzJBT1U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUS8KF5rO
DRXUnkiCc7xd9iCAwARevYOl3YA9dLeeMYZw06j1Gly6RInxzt/Xs/F6LxSEkhgy
UjUGMQwRy2dGw1zAl78EGVmbFuhN95X21eyXPcTJ7UuOpxlXv1s9pCcY4ESVXu2d
14zcbwrSjJsU0XXofVCEbzjAGn4yD4NMEQo3NULnLv5MbFKrocAxMwQced9dQnPg
WGzZFP+nJyipqmkhWTIdPTMOy5ByzE10wh0V/Yq19dauj8SE7PLspqVNnf3cNi2k
wLbtsc/LmVaIpWrH8A9fhH38rkLQX+NmnRGlEtmtPuI7RR/nVeJyuiGgShAW/iha
FWLBrbKFnoHHwA==
-----END CERTIFICATE-----
Generated at Sat Jun 20 03:13:59 2026 by rpki-client