Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
File:                     zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft (raw, json)
Hash identifier:          hULv4brBVaKYTficUbUDF6L6dB9X7610LHRXRVxjjWQ=
Subject key identifier:   69:49:DF:E1:27:33:31:F6:C7:27:6A:32:49:74:76:DC:08:D2:F9:B7
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Certificate issuer:       /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial:       019EB845C4D4E695103BDEBC5954984AE53E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
Manifest number:          114C
Signing time:             Thu 11 Jun 2026 20:00:40 +0000
Manifest this update:     Thu 11 Jun 2026 20:00:40 +0000
Manifest next update:     Fri 12 Jun 2026 20:00:40 +0000
Files and hashes:         1: 1-cJPzLFnEqH5HBa7LXTLzTN8Sig.roa (hash: y2pMWhMaLZyGP/h+eP0yeYXn0/ZQODr617glRelxkng=)
                          2: 1-w_96dZZvAhqknsLDQxMYnFiHlY.roa (hash: Yvy1v6JVhNfglPJmSg7JFYYeASs2BwwOCl6D0ULH7XE=)
                          3: 5qt9lNybqUHZohfxSPz95g9mX7E.roa (hash: mVHv2PLsBDsXEMy4ovgXLDyhiJ+2KGTM6nPmA9c85LE=)
                          4: 70_l1y6U6sQdwIpOb6iklVy3oao.roa (hash: VpEU3IVoWQIPh97gn+id38/VbaiStJZ66MLtFsKLfsU=)
                          5: AEZof4s4jSU43Cjeiy5C6caRCeg.roa (hash: u3Tu4bTb99jlY+qChU7xb5zLmf+nryw4qR+okn3NkQU=)
                          6: BGMxTE0_-Ky6TibuPNRzmTxUL6k.roa (hash: a0OwK3rrYXMHfxjEnabs1KjSXWbcFZrLT7UxZW9tjc0=)
                          7: BKPl0VR7xYdXYKg2sB5jhzIUpPM.roa (hash: WLYjBTaaoRkUg9cIZWEhhWlOX7Jh/HdxdA+DXCeO3yM=)
                          8: CVjpP5fbG6FZ2VuiKyMRFNqdUK8.roa (hash: pUvsaqMuCpZ883OSrkl0sgOmVBTesmRkdym3KHIgbJc=)
                          9: GGfTyBNbI489PdjBnrpK0_0Pbtw.roa (hash: H+6wl5gGeH6iVyXOVvQsj95iEngE2FRVQ1f4kfsJ1Sc=)
                          10: HrOHL7N5WVrxCxYAttZq-03pfHc.roa (hash: qifv399whUGIsH7h7aGdUtF3vmpZ1o8CfKVRy9gkfLQ=)
                          11: JGn2GKoXJ8jNO9rMaZb5j6MBYt8.roa (hash: YJCYbO1tbshnVmgvPqt65xZEpQvUa9LqSd0IYWT7qsg=)
                          12: KiGFzL7XSLHCsk5kOv5EU6GDjHs.roa (hash: E2MSykUDl/Q4sWoRqwyjpDX7oQ+5JC9Qa55nDLPQgKc=)
                          13: NAErYGyu2OxGuf_6AEnvFZF3m00.roa (hash: Efn4X5npgxeYg3CAnRT/UiNScy4w0Cb8p/IjBRVN00E=)
                          14: Q6jWWNwFSQEE3tRsGBlCg_ZVl20.roa (hash: FyqK9jZ27cGkvbDyCDe1OUlIh4FvaJyJ1LPI/ZyMQ0g=)
                          15: Rh1E5qxMlmiIy0iHzMFcbx-ILCY.roa (hash: l7nvXUR6ZjHVsyeZWx0Ki3Tb8P2diCAcOJlZGejmDxA=)
                          16: TPflC2tWkm5_6P9IemHAg3jDH38.roa (hash: 7haADyJs1k9uwE2EhKfl4+X3oqT2rg7BL60uh8bbzNo=)
                          17: XVq3IYAj2pjJVKsPJGpvrfgzYxs.roa (hash: 1m83ro/W3gU5CbeKTbsHPZcXEc5WYBDNa/RLiDPwPnI=)
                          18: Y7DNK9hcBBTE7Th1kYyVw3RPwWY.roa (hash: HI8YgFsMuVg4hk5qijfjNGh2VIu0QcRdphqK5LhPNyc=)
                          19: _JDLOHBdrBVnKNE-CkwafjX4Upw.roa (hash: 7xZENWzKb48fOsZF0FWLYlI8o3hnSoZOH464Nb3NFoo=)
                          20: aq4mHriPC_Od7XgUBZpEqq5gcHk.roa (hash: yiecnEtPgQHrRACDcmP4fFBJvqjTl0FnO0eslGPKhWc=)
                          21: cRhh2a8DyS-BnqcPTrEQH0ZbDoA.roa (hash: IqlFBWiZvX+DZXZZbfb7qN9FDJR9IKeDzLOuL+Y7oLQ=)
                          22: kopgSW14D0aMxVGgeQmEGmsYFAQ.roa (hash: emFzXwVeUl6yg/bnrgocFfxZY+cFQwEF3lD8I6fBmX0=)
                          23: ksVJIBjGvwL4s1PtRRQoRC2eUSM.roa (hash: Ga4kbKkw40NTNAmZazaZ3aVIVvGOSEfaNiqjZ2JqONY=)
                          24: m8rYr_2iytyxaBvpY5bmVT_GPA4.roa (hash: JdvL9p4h+mSTLc+2jMP4AS3ujI2r7wbx0jXR1EyHp+g=)
                          25: mJ0j47UwFivW9zAPZ7Wpb6242sQ.roa (hash: ovh6+isWS+HgWIGH47x4leRVJSZT91OgjJW9sbvcdqA=)
                          26: pJ62jL1_CaC6LVWNYtByFrcLuDM.roa (hash: ouNLsKMv0CYovkFAKO8v3kQl+SqC8Bd31AIWBDyAwC4=)
                          27: pfHQoQuY3aQ1KMskVy6elrET6o0.roa (hash: 2B0UR9R1NQKR59jfjcXzQuYHh64T7KqpxoLNPjc77ks=)
                          28: t9G_1LZtK2mabZqjl3XjkAvpMkQ.roa (hash: dvgQDwtsUk39Ao+BrG34yvxtiJYryUNCUxCkBcW8cSE=)
                          29: w1p9YqCZmBafcgTm9UvFxf_0dG0.roa (hash: FOuH5kfe8qsQZTv/hD7teSHzc0NJLVkSv0+KWq6KBBo=)
                          30: zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl (hash: TrAbeIjWYu2uZsVHO9lALCRrGV9HfNukqKImGxppOuw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:45:c4:d4:e6:95:10:3b:de:bc:59:54:98:4a:e5:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
        Validity
            Not Before: Jun 11 20:00:40 2026 GMT
            Not After : Jun 12 20:00:40 2026 GMT
        Subject: CN=6949dfe1273331f6c7276a32497476dc08d2f9b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:76:5d:e9:b7:ac:75:71:d9:f5:7b:26:92:a4:
                    27:29:c3:76:3c:5d:4c:1f:6a:97:be:41:b5:5e:e1:
                    35:ea:c5:33:55:39:9f:f2:85:52:8c:52:ea:4b:37:
                    94:f5:86:66:34:ee:70:8c:5b:c4:a1:02:23:22:2d:
                    c5:e0:77:57:c9:f0:3e:54:94:20:cf:31:dc:1d:2b:
                    f3:63:b0:00:e2:7f:b4:0b:c2:dc:cd:d9:21:4f:fd:
                    90:69:90:ad:0c:b6:29:ab:90:38:72:b9:37:6e:39:
                    30:b8:6a:d4:f0:b1:a0:66:e8:9b:b2:13:1f:6b:5d:
                    70:fb:e9:a5:16:89:0c:64:d5:ec:9e:25:1f:ca:e8:
                    34:78:57:d4:8f:d0:6a:73:4b:12:d0:44:a2:fb:12:
                    c7:a3:ad:86:ea:c8:76:90:f8:6a:9b:43:ab:15:0d:
                    39:0f:61:3d:cf:02:29:50:56:b8:b7:fb:9b:ea:68:
                    0e:a7:8e:0a:2a:9c:79:41:b2:8c:7a:28:ea:2c:bb:
                    9c:11:63:a8:44:04:39:13:7a:5f:90:43:5a:7e:51:
                    31:ef:f2:c5:78:26:40:05:dd:10:16:83:aa:44:ac:
                    c1:8d:3d:d6:a2:d9:24:cc:d8:a7:50:37:bf:eb:49:
                    3f:39:c7:c8:d0:a2:8d:b3:17:40:ac:41:f6:0a:40:
                    88:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:49:DF:E1:27:33:31:F6:C7:27:6A:32:49:74:76:DC:08:D2:F9:B7
            X509v3 Authority Key Identifier:
                keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:eb:0f:e3:61:4b:d3:98:dd:ff:4c:10:ed:f0:60:fb:9f:a3:
         33:30:05:7f:08:42:83:31:70:17:9e:e0:1d:46:32:a4:9d:a4:
         df:11:74:2f:2b:95:4c:78:11:77:be:c7:7e:2c:06:c2:ba:89:
         8d:d1:b1:14:c2:c3:f3:2a:73:1d:f2:19:a5:af:3e:04:24:4a:
         35:a4:2a:2f:15:3c:1c:0a:80:bb:85:da:40:a2:9c:89:98:7c:
         94:c2:29:93:6c:5e:98:aa:a0:b4:dd:e0:a2:68:c3:de:4b:b5:
         84:a2:6a:28:2f:81:a7:00:19:ff:d0:ef:61:bc:7b:d4:b2:a4:
         a3:79:e4:b6:59:f1:24:39:6d:bf:69:a7:fe:2f:09:f9:23:02:
         0d:44:47:c6:40:05:56:fa:49:0e:b4:74:6f:64:b7:1e:2d:93:
         3f:3a:3e:70:24:db:c0:d5:fe:5b:b1:8e:bf:fc:e4:74:4e:80:
         01:6f:64:41:52:d0:f2:32:5b:d4:71:f4:65:e6:83:3b:10:83:
         77:c0:54:5b:61:a6:c2:f2:67:7b:6a:78:1c:1e:72:89:09:01:
         b9:ca:38:96:e0:e1:83:f0:30:5e:89:79:cf:54:86:41:d4:ef:
         52:3a:59:61:82:97:05:62:80:1b:44:da:4f:ad:ff:4c:0e:0b:
         68:b0:44:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:07:50 2026 by rpki-client