Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
File:                     9qD_yrRKardihf2LFfuprgRywAo.mft (raw, json)
Hash identifier:          HEYTvzCw3g1uUfw5JgehMT0dfzmBYwVgTxKTlky4Hcc=
Subject key identifier:   A5:C2:8F:E8:14:06:75:CC:9E:3D:2E:CC:2A:70:D8:CC:B8:2B:FB:F8
Authority key identifier: F6:A0:FF:CA:B4:4A:6A:B7:62:85:FD:8B:15:FB:A9:AE:04:72:C0:0A
Certificate issuer:       /CN=f6a0ffcab44a6ab76285fd8b15fba9ae0472c00a
Certificate serial:       019EC17FC4BEF5FD5B84722AEC58E867C212
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 15:00:36 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:36 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:36 +0000
Files and hashes:         1: 86kV-CBVfnQcJyHUwtgj6mE9ynY.roa (hash: HD7vMFw1ZLvs7IG1Ix80v+8FBmp78WtI8pixF8GnWyU=)
                          2: 9qD_yrRKardihf2LFfuprgRywAo.crl (hash: a2zRX+B+5zNvYvp7domcn8RkR9qvgPE0FDwJRDorkYA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 15:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:c4:be:f5:fd:5b:84:72:2a:ec:58:e8:67:c2:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6a0ffcab44a6ab76285fd8b15fba9ae0472c00a
        Validity
            Not Before: Jun 13 15:00:36 2026 GMT
            Not After : Jun 14 15:00:36 2026 GMT
        Subject: CN=a5c28fe8140675cc9e3d2ecc2a70d8ccb82bfbf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d5:29:e5:02:b6:4e:21:a5:20:d2:54:67:26:
                    b8:ac:2f:7f:85:40:a9:a3:58:70:c7:34:48:e3:22:
                    87:47:a8:8e:4d:ee:f6:28:e3:35:61:43:8d:2a:55:
                    86:15:15:d4:35:de:df:99:c3:00:30:f2:2f:35:3a:
                    ab:c0:39:b6:d7:72:e6:d8:ab:f9:34:ec:0d:4c:96:
                    13:c3:77:85:aa:84:79:0e:f0:71:23:64:5b:88:aa:
                    5e:e1:82:57:d5:ab:ca:32:05:c9:8f:c8:b9:5a:a8:
                    14:da:0e:a7:fb:27:f6:12:33:b9:51:fa:43:8f:0d:
                    07:8e:c7:d8:f6:8a:35:02:aa:b6:90:10:81:df:af:
                    f7:32:9a:4c:ea:98:94:99:44:2e:ad:d3:ba:63:46:
                    6c:fe:ed:da:62:49:18:20:1a:67:c5:ba:76:c0:76:
                    a4:4c:38:e6:ae:d1:ea:e2:69:b5:27:44:d9:6e:a5:
                    ee:05:44:b5:f3:ed:b1:f4:b0:3c:86:0d:5c:bd:7d:
                    1f:e7:50:3e:bf:73:3d:f6:da:36:ef:51:8c:c9:0f:
                    1e:38:64:23:08:65:bc:c6:a3:10:04:41:86:b0:1d:
                    e5:af:37:89:7b:5d:b6:84:c0:83:d1:bf:dd:e7:4a:
                    94:de:cd:25:c1:74:8d:60:f7:08:8d:62:8f:ec:5e:
                    0a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C2:8F:E8:14:06:75:CC:9E:3D:2E:CC:2A:70:D8:CC:B8:2B:FB:F8
            X509v3 Authority Key Identifier:
                keyid:F6:A0:FF:CA:B4:4A:6A:B7:62:85:FD:8B:15:FB:A9:AE:04:72:C0:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:ee:61:de:8d:2c:92:db:34:ef:40:82:d8:60:cd:83:f1:26:
         0d:f8:2b:77:62:c2:14:22:25:70:de:1d:bc:26:45:19:5a:6e:
         0c:94:ab:de:9d:95:01:dd:ee:b7:a2:a1:e4:2d:8a:23:9d:5d:
         56:97:8d:61:af:94:97:f4:37:16:2a:cc:a0:9a:5e:d5:f4:4e:
         bb:cd:0e:0d:bc:64:1c:96:5b:b9:d9:7f:e7:88:56:ec:40:74:
         a2:57:0e:f8:06:3a:42:6d:b4:8b:0b:c5:42:99:0d:25:d1:ba:
         6e:82:1d:12:c0:bf:ca:97:c7:dd:c0:cc:89:3f:28:95:13:18:
         30:4a:13:51:70:fe:a9:51:9a:61:dd:53:12:a1:79:25:48:9e:
         76:35:fa:1e:4a:27:32:6b:2a:45:ac:44:b9:80:dd:e5:f4:b4:
         dc:3a:94:a9:b2:79:62:b7:b9:a7:66:c6:2c:b3:bc:6f:5d:97:
         86:e9:40:b4:ea:cb:fe:10:2b:f8:52:f8:6f:e1:a2:b7:5d:34:
         dd:2a:f7:76:47:4f:e4:72:c0:00:4f:71:8e:63:a7:00:ea:d1:
         b0:0b:e5:c9:6e:39:51:a9:55:11:33:3a:0d:44:a3:3f:46:d8:
         04:d7:82:88:df:07:ce:5b:89:b8:c5:12:5c:34:0b:f3:41:9f:
         63:cd:a8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:07:35 2026 by rpki-client