Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
File:                     C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft (raw, json)
Hash identifier:          Lhz0zKhY2F190p+5nKeT/uD+xkyDL8rjOJ12PHWoVyA=
Subject key identifier:   08:33:F5:75:F0:BB:35:58:A2:A3:1D:FD:03:F3:31:2B:4B:7D:66:E1
Authority key identifier: 0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3
Certificate issuer:       /CN=0b8e20c48e8973c331e33ce55195a321773f0ac3
Certificate serial:       019EBE7FAB760B0DBB48A982498748BD7CA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
Manifest number:          192A
Signing time:             Sat 13 Jun 2026 01:01:38 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:38 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:38 +0000
Files and hashes:         1: C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl (hash: Fbr8sqjSw/5pE7MPmTRg4glQufGXBAjNlDrJX5QnBkM=)
                          2: Uv1LOQn-rihpO-VnBwQTGmMa48E.roa (hash: U1Bj99VrPaNBoxUvCEMoBEqTdDcni4KZuGxKdf2wOC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:ab:76:0b:0d:bb:48:a9:82:49:87:48:bd:7c:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b8e20c48e8973c331e33ce55195a321773f0ac3
        Validity
            Not Before: Jun 13 01:01:38 2026 GMT
            Not After : Jun 14 01:01:38 2026 GMT
        Subject: CN=0833f575f0bb3558a2a31dfd03f3312b4b7d66e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c7:8e:37:2b:d5:d7:0c:04:9f:4f:a9:fe:e9:
                    25:00:e0:94:37:03:06:66:7f:fb:d8:76:bb:4a:05:
                    32:0c:50:0d:74:bb:a1:a5:ab:18:8d:b4:bf:cf:06:
                    a3:11:1e:7d:20:1d:30:3f:e4:3d:ff:67:2a:5e:e3:
                    a7:44:77:8f:2c:4b:a6:d6:e2:db:db:3f:64:d0:75:
                    34:f6:5d:38:f5:97:e1:aa:d6:39:0b:1f:fa:53:e6:
                    59:fa:66:94:e2:30:a6:16:6c:ed:91:76:d7:f0:ca:
                    b4:69:b1:d0:5d:36:a3:92:69:db:37:72:4a:98:02:
                    91:56:b0:f2:b3:5b:38:75:7e:74:4f:a0:d7:4f:e4:
                    b9:06:94:fc:d1:8a:03:6e:5f:7e:ed:7f:95:99:af:
                    25:58:bd:ec:d3:dd:86:4c:ee:86:e4:04:a6:02:78:
                    9d:18:5b:8c:b6:5e:4a:b6:74:3c:0e:bc:72:5b:53:
                    3d:ae:96:fe:27:70:ee:41:51:71:0c:59:b7:97:22:
                    18:a1:3a:b7:07:1d:84:a7:49:dd:0a:70:9b:f9:30:
                    9b:20:d9:d4:80:bc:3b:03:ec:a2:b2:4e:54:79:55:
                    87:35:40:fb:45:4e:c7:71:a3:71:1d:71:3d:4f:75:
                    55:16:ea:ac:40:d4:f2:c2:c8:4a:a5:57:ec:07:d7:
                    1f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:33:F5:75:F0:BB:35:58:A2:A3:1D:FD:03:F3:31:2B:4B:7D:66:E1
            X509v3 Authority Key Identifier:
                keyid:0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:81:5c:c3:c4:50:9b:2a:e6:7c:37:98:70:39:28:2d:4f:41:
         b0:49:ad:b0:54:e3:13:6c:c3:c5:46:14:0b:0e:3d:f6:f7:7c:
         0c:46:18:01:5d:28:6f:cf:56:4a:6f:c2:6c:e8:02:6b:d9:55:
         93:38:af:9c:f6:3e:e9:99:25:14:df:76:4c:7d:d1:43:9c:66:
         3f:c0:d4:93:00:73:dd:76:cc:c4:3a:bb:86:69:15:b6:a3:81:
         de:66:99:67:b3:e6:dd:08:db:21:79:ff:a1:24:75:74:4c:9f:
         da:6c:a0:ef:ae:af:39:f6:70:8e:2a:52:63:ae:c3:83:4e:de:
         01:e7:74:a3:83:87:3f:69:fa:c7:40:f5:28:2e:88:dc:b9:0f:
         4c:c7:3d:82:10:5c:33:6f:4e:23:3b:5d:3a:8f:19:70:71:94:
         2a:db:3e:e1:f8:be:2a:34:c0:ec:4d:6b:62:7a:02:0b:31:35:
         8d:b1:f3:dd:49:66:5f:9e:3c:b2:ca:01:46:36:8b:3b:6b:50:
         0b:9b:46:4b:34:c6:53:bb:7d:e0:0e:06:91:fd:b3:b4:44:cd:
         12:85:4d:30:2e:23:bf:aa:5a:15:99:b9:2d:d0:d2:65:30:23:
         96:2e:77:cf:be:63:74:59:f2:c7:69:9f:ee:13:ba:c5:41:3e:
         60:09:11:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:11:12 2026 by rpki-client