Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft
File:                     u6Nc-KtvPqoq663Z4jc97AiTYl4.mft (raw, json)
Hash identifier:          GeEZBQOxZciGTT+Cmb+b3cSiAcE5WmM5buomr5OXRfU=
Subject key identifier:   D0:93:7B:6A:48:AC:F1:83:9D:A5:FE:3B:3C:0B:91:26:3B:4A:DB:19
Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E
Certificate issuer:       /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e
Certificate serial:       019E2A39D58C114624D51B6E5F13173CE880
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft
Manifest number:          16DB
Signing time:             Fri 15 May 2026 06:01:33 +0000
Manifest this update:     Fri 15 May 2026 06:01:33 +0000
Manifest next update:     Sat 16 May 2026 06:01:33 +0000
Files and hashes:         1: 6XbZ2xpI7l6Fwo5nUGJ8LcI12BM.roa (hash: oIH5kZRy4QQWIkNsi+TOmhTdqOjqPl4X4VEu5ZY7rrc=)
                          2: 6yY85OHD-46vFhP-wtPZWs3MeCY.roa (hash: hOno4SiXgMirUzFVpAXsEoPlI4QIn/ikV8WWQvXsoXg=)
                          3: 8McrGRfEqcovWnRSpklEmiBGADA.roa (hash: xszqUKxiKaCx1G5C+PDbNWuR86U3w6LgZy01FF25iiY=)
                          4: BooqKG4SsYSQxh6PGW72NBqbtuw.roa (hash: TU0xZxrNhYVeehRBPFf+LnBXvIDYoAVW0L6Hmfayq5M=)
                          5: Dib_4B7-59g2qlFon4U52XelorA.roa (hash: 7rKsJnSr5QX2uVe31jye987BgbcYNd7z/lfjZmUFdDY=)
                          6: J2-fb4bt2CtctBmzmfC8H8k0-Zo.roa (hash: PhWWvX6X2tLUSE0WxzAfwrSrZ7vyehY98guTk5gmtdI=)
                          7: Td85PzLGixLgYgdBT3GS17rfwTQ.roa (hash: ZtLYgrcf2o9oO80ckMCQ8oe+MvEY9qGa8/wSqJ2K4VY=)
                          8: bpUtIFcpj0wFmx0CClP1L0TgIfY.roa (hash: JpwXWXow0nu1gKjNId4RQPrmV9a8gFVj5DrvmpBJ7Ac=)
                          9: dkSZC1vcgEsyqm56yAJmonI1P1E.roa (hash: Wn8sFewfyDAMaX3VNG1l/GCgIijws7/FwmZlH3//5Vk=)
                          10: eH8mEFUxJaD15bIkdrb0eoEm43Q.roa (hash: iVNXmnAd/Aq9qGpFjFCXba0ETiSTvXsmOGBSWpVw4y4=)
                          11: u6Nc-KtvPqoq663Z4jc97AiTYl4.crl (hash: 1wTBDnUAcRYInTJfffQ4vA/JubVfQMapMwSH43tKynE=)
                          12: vJiRTEd6tTiZDm_JR7rLwIox0zw.roa (hash: IYF63rRulzFNBpbGnH/dDmLviCvKmUvwCJNoi515Gao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 06:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:39:d5:8c:11:46:24:d5:1b:6e:5f:13:17:3c:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e
        Validity
            Not Before: May 15 06:01:33 2026 GMT
            Not After : May 16 06:01:33 2026 GMT
        Subject: CN=d0937b6a48acf1839da5fe3b3c0b91263b4adb19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b5:b6:72:ec:f5:4f:ba:34:1d:3d:cc:54:36:
                    d9:fd:2a:59:60:1b:94:d7:4b:b3:8a:07:7b:8d:47:
                    bb:d2:2f:13:71:90:de:1f:b5:d7:b6:33:e1:96:b4:
                    3f:c8:82:d5:12:cc:23:e0:c4:e3:7b:2c:92:aa:83:
                    7f:61:cd:f7:98:5c:ce:29:42:a3:5f:e0:04:51:96:
                    d0:6a:84:d9:2f:f1:89:e3:a9:c5:cd:ea:92:30:fb:
                    48:40:ae:77:65:0c:ff:72:2d:be:19:13:9d:4e:fe:
                    ee:8b:67:e9:83:9f:13:0f:65:a9:11:85:3d:96:17:
                    48:66:d2:be:7a:2c:be:68:0b:c0:66:69:b6:5d:9e:
                    2c:53:66:85:4a:2c:1c:db:38:f8:31:44:9e:3e:27:
                    b3:a4:48:0b:39:cc:26:43:08:04:45:a4:7c:4a:82:
                    8f:43:fa:5a:71:22:a7:83:bb:3f:01:a5:5f:80:d0:
                    c3:9a:4b:2f:66:e2:f5:20:f0:88:2f:fb:68:f9:71:
                    e6:61:9f:0f:b9:7b:13:12:c7:5f:3d:39:87:92:5c:
                    0b:73:a5:8f:2d:29:d4:fd:1e:15:9e:e5:49:6a:05:
                    30:28:12:0a:61:c7:84:65:29:4f:72:65:73:3f:8f:
                    c1:b2:8d:8d:dd:c7:53:ac:af:2c:d5:6c:a9:9f:24:
                    b0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:93:7B:6A:48:AC:F1:83:9D:A5:FE:3B:3C:0B:91:26:3B:4A:DB:19
            X509v3 Authority Key Identifier:
                keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:e5:d1:73:60:3e:47:79:92:f0:8c:fb:7a:c3:c4:2a:66:92:
         ae:1b:5e:73:29:9f:ae:1e:e3:c4:34:8c:3a:0f:32:f1:76:98:
         10:6f:cb:f5:9b:79:00:55:56:55:df:43:71:21:20:ad:cc:b2:
         91:46:57:3f:e5:78:13:42:6c:b3:83:cc:f2:a9:18:60:b0:43:
         db:30:5f:f4:4f:da:25:68:f5:00:14:d1:9b:98:24:c0:74:d9:
         ce:aa:c0:61:5f:d8:bc:11:ed:7c:f0:60:d8:a0:2a:05:30:ce:
         9b:10:ba:66:cc:68:db:69:d4:9a:e5:7b:54:02:1c:4d:3a:1a:
         54:23:ee:11:53:e4:d3:58:e7:93:42:90:f6:99:0f:bc:26:72:
         80:ab:a0:a4:82:a4:d5:0d:a3:3a:f7:05:cf:97:a5:c5:c1:1a:
         0e:d5:6d:be:07:91:03:36:9f:62:e7:48:c3:a6:bc:d9:c8:00:
         76:fc:76:f4:a9:47:07:60:35:78:d0:6e:d7:3c:d7:1c:e8:56:
         0e:bb:27:a4:3b:48:0e:ce:53:0e:78:3b:7b:41:b6:ed:9f:cf:
         9a:62:18:17:f2:2a:33:53:dd:a1:01:08:9e:2a:68:5c:5a:56:
         b4:bc:0b:64:94:e6:a7:28:75:05:bd:5d:70:90:7d:73:3c:b1:
         a8:76:b6:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4qOdWMEUYk1RtuXxMXPOiAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiYTM1Y2Y4YWI2ZjNlYWEyYWViYWRkOWUyMzczZGVjMDg5
MzYyNWUwHhcNMjYwNTE1MDYwMTMzWhcNMjYwNTE2MDYwMTMzWjAzMTEwLwYDVQQD
EyhkMDkzN2I2YTQ4YWNmMTgzOWRhNWZlM2IzYzBiOTEyNjNiNGFkYjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprW2cuz1T7o0HT3MVDbZ/SpZYBuU
10uzigd7jUe70i8TcZDeH7XXtjPhlrQ/yILVEswj4MTjeyySqoN/Yc33mFzOKUKj
X+AEUZbQaoTZL/GJ46nFzeqSMPtIQK53ZQz/ci2+GROdTv7ui2fpg58TD2WpEYU9
lhdIZtK+eiy+aAvAZmm2XZ4sU2aFSiwc2zj4MUSePiezpEgLOcwmQwgERaR8SoKP
Q/pacSKng7s/AaVfgNDDmksvZuL1IPCIL/to+XHmYZ8PuXsTEsdfPTmHklwLc6WP
LSnU/R4VnuVJagUwKBIKYceEZSlPcmVzP4/Bso2N3cdTrK8s1WypnySwBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCTe2pIrPGDnaX+OzwLkSY7StsZMB8GA1UdIwQY
MBaAFLujXPirbz6qKuut2eI3PewIk2JeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMt
NTk3YjZlMjQ5MmFiLzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMtNTk3YjZlMjQ5MmFi
LzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtOXRc2A+
R3mS8Iz7esPEKmaSrhtecymfrh7jxDSMOg8y8XaYEG/L9Zt5AFVWVd9DcSEgrcyy
kUZXP+V4E0Jss4PM8qkYYLBD2zBf9E/aJWj1ABTRm5gkwHTZzqrAYV/YvBHtfPBg
2KAqBTDOmxC6Zsxo22nUmuV7VAIcTToaVCPuEVPk01jnk0KQ9pkPvCZygKugpIKk
1Q2jOvcFz5elxcEaDtVtvgeRAzafYudIw6a82cgAdvx29KlHB2A1eNBu1zzXHOhW
DrsnpDtIDs5TDng7e0G27Z/PmmIYF/IqM1PdoQEInipoXFpWtLwLZJTmpyh1Bb1d
cJB9czyxqHa2mA==
-----END CERTIFICATE-----
Generated at Fri May 15 14:49:56 2026 by rpki-client