Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
File:                     Ib-nezzXgpM-XyVURdQorfvcoOE.mft (raw, json)
Hash identifier:          ravZnQFgJb1QerB0818GwkBQxFCa6qAS8jgwEq0JOQQ=
Subject key identifier:   DB:9B:7C:95:FC:6E:A9:77:BA:A8:E8:DB:F0:09:48:29:D9:65:9D:2F
Authority key identifier: 21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
Certificate issuer:       /CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Certificate serial:       019EC1125BCB0D7EC80C1A94183389CB1667
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 13:01:06 +0000
Manifest this update:     Sat 13 Jun 2026 13:01:06 +0000
Manifest next update:     Sun 14 Jun 2026 13:01:06 +0000
Files and hashes:         1: Ib-nezzXgpM-XyVURdQorfvcoOE.crl (hash: 8+cl9viRxW1TFlXHIw73uJJoEa4+xpoFiWsIjwD0w5A=)
                          2: tVC2csu9UGG1-01gEwc1t4LJEVg.roa (hash: F7t5gXl+oY8MHELP0QCMp2iMpD0P8eAkfXVgIusmD4c=)
                          3: veTOQGnBK7iaYhGL3G7GNS69oDU.roa (hash: O4MK7Gc8l+4Xx+SJNgVyYVCnc4Eq4VWeh1FutcFXWtc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:12:5b:cb:0d:7e:c8:0c:1a:94:18:33:89:cb:16:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
        Validity
            Not Before: Jun 13 13:01:06 2026 GMT
            Not After : Jun 14 13:01:06 2026 GMT
        Subject: CN=db9b7c95fc6ea977baa8e8dbf0094829d9659d2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:36:6e:13:f3:d4:4a:7e:ab:29:31:e3:bf:08:
                    a7:54:f5:fa:3e:83:f2:31:e2:2b:5e:7d:25:56:5c:
                    bf:01:b2:62:38:ad:2c:88:b7:eb:8c:14:8c:97:e1:
                    ab:3e:51:db:a9:b7:f2:e0:0e:38:ec:58:9a:44:b4:
                    56:de:ae:4f:79:47:a8:a3:dc:f7:38:90:05:cd:cf:
                    9c:51:95:1e:68:ce:f8:35:33:5a:b2:f9:37:e5:88:
                    1f:2c:a4:d7:0b:02:7e:c0:59:5d:1f:06:c3:53:07:
                    ed:73:e0:e1:90:cc:70:70:9b:f0:31:08:e7:8a:8d:
                    3d:25:fd:b4:15:da:6f:19:09:6b:ea:94:26:7e:f8:
                    bf:60:0e:7d:44:30:79:08:75:43:e4:80:97:36:cc:
                    88:4c:03:fd:34:68:6a:0d:b7:d4:e8:32:1d:68:7a:
                    9b:00:43:5d:78:f1:57:e0:a2:c9:10:06:ec:67:fa:
                    59:dd:6a:b1:85:24:0d:15:ff:77:a6:1d:5b:25:ba:
                    7a:a5:a7:c1:c1:b9:04:1f:5a:26:50:8a:73:8e:68:
                    f4:6f:a9:a2:50:5e:8f:35:6b:78:d4:88:55:9a:1c:
                    99:be:cc:b6:4a:15:e9:1e:70:5f:0f:d6:0c:a8:9b:
                    f9:ea:26:f6:1c:59:62:12:58:ff:7f:c4:f7:dd:17:
                    2e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:9B:7C:95:FC:6E:A9:77:BA:A8:E8:DB:F0:09:48:29:D9:65:9D:2F
            X509v3 Authority Key Identifier:
                keyid:21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:1d:2b:76:5a:82:08:88:00:80:1f:57:c6:e5:b8:7a:30:37:
         6b:de:d1:5f:1d:00:c3:e7:71:b0:75:05:ac:52:2d:8d:63:37:
         a0:8d:6d:65:05:c7:4f:25:98:d0:c0:6a:d7:22:a1:50:70:b8:
         2a:04:50:b0:46:02:37:86:5f:be:4f:96:c6:0d:dd:70:23:d1:
         84:3b:4b:9c:b9:22:4e:d0:f2:ff:70:29:10:2f:93:67:88:f8:
         41:02:f2:b4:c4:a9:b2:79:cc:7c:08:20:c2:d3:c9:53:39:06:
         d4:3f:fa:4f:f7:cc:29:95:90:9b:8e:11:08:3f:34:08:23:33:
         d8:94:94:a7:6d:1b:62:2b:a0:b0:30:49:d2:b8:aa:c6:86:f7:
         af:d2:9c:c3:98:79:d1:c0:71:ef:9c:82:30:a9:90:de:2f:cb:
         61:2c:0d:4b:38:ec:45:6b:7a:20:65:0a:84:9b:1e:2e:10:1c:
         93:99:1a:90:8a:25:e0:86:80:d2:ea:3e:0b:24:99:ab:b2:40:
         b3:84:a7:c3:24:2d:5d:2b:65:4a:73:8b:6f:20:b4:0f:94:d1:
         f0:8b:90:49:ce:bf:34:12:49:6d:79:e6:05:09:27:e3:72:34:
         d5:42:00:31:b1:df:0d:01:8e:f3:be:67:c6:1b:3d:c6:c6:f1:
         37:c7:32:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:07:13 2026 by rpki-client