Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
File:                     1-qTuqG-fPm54gbS42hmh0nJehxA.mft (raw, json)
Hash identifier:          QJoprTumimgsbcBz78ziYSXUoc/cQIe5FlmP6YJvSfo=
Subject key identifier:   0E:D4:F7:F0:E9:BC:25:D3:CA:89:4C:30:AB:FD:7E:2F:A3:29:5A:06
Authority key identifier: FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10
Certificate issuer:       /CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710
Certificate serial:       019EC2C9C9491BCC955EC250DB29DA02DC0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 21:01:04 +0000
Manifest this update:     Sat 13 Jun 2026 21:01:04 +0000
Manifest next update:     Sun 14 Jun 2026 21:01:04 +0000
Files and hashes:         1: 1-qTuqG-fPm54gbS42hmh0nJehxA.crl (hash: SkMg8l1xFzKmshkIE0A/OfmGUMbH1JCXgGVpyif/DSo=)
                          2: DeMSqglNgnRimF4pLlzh1FBEhnA.roa (hash: 4oE04OONKgwG5O+fZ1H47RApbnAL6oA0WTInP838z0I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:c9:49:1b:cc:95:5e:c2:50:db:29:da:02:dc:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710
        Validity
            Not Before: Jun 13 21:01:04 2026 GMT
            Not After : Jun 14 21:01:04 2026 GMT
        Subject: CN=0ed4f7f0e9bc25d3ca894c30abfd7e2fa3295a06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0b:98:9f:9e:3e:96:80:65:02:a4:a1:7e:8a:
                    95:bc:97:72:f0:b7:b2:d8:7e:5f:b7:ca:c9:73:e9:
                    f6:43:3a:aa:24:fb:11:a5:88:81:c4:c0:95:93:65:
                    d5:46:c2:70:d1:16:24:45:55:b7:fe:fb:82:69:09:
                    d8:40:e8:df:67:ed:49:16:49:1e:95:08:e2:9a:28:
                    23:f8:2b:7b:e5:f8:da:5d:ef:eb:aa:66:14:e1:ca:
                    9d:b6:e1:bd:b2:82:cf:e4:77:d3:d4:fb:03:75:4f:
                    98:dc:f6:78:94:52:11:e0:eb:1d:0c:f5:f8:34:8b:
                    03:6b:2b:ef:01:0a:b8:51:16:dc:9e:6d:af:eb:8a:
                    28:7c:3d:92:5d:f7:93:6e:86:ab:25:0a:99:12:ac:
                    be:16:b3:f2:1d:48:7e:53:8a:89:e8:c4:00:64:dd:
                    74:7d:94:4d:c8:5d:80:38:24:9b:24:77:7f:4f:dd:
                    9e:20:55:18:41:5e:23:22:74:74:66:45:ee:7e:4f:
                    48:ff:f1:90:29:d0:41:14:71:43:4c:09:8d:58:02:
                    49:89:87:89:26:be:2d:b3:69:84:0c:82:b1:ab:3e:
                    1e:4f:ba:31:54:39:fc:2b:db:79:b0:23:b3:01:2c:
                    87:14:cb:79:3e:e5:be:97:d7:fb:c5:df:ff:14:a9:
                    36:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D4:F7:F0:E9:BC:25:D3:CA:89:4C:30:AB:FD:7E:2F:A3:29:5A:06
            X509v3 Authority Key Identifier:
                keyid:FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:40:58:58:2a:4b:31:e2:da:f3:d3:11:5e:e3:41:5d:40:77:
         61:82:6b:bc:2b:67:4b:42:cb:72:93:83:28:66:b6:91:18:df:
         11:3b:3d:e4:a6:07:a1:09:98:14:9f:6d:ff:3d:91:50:dd:e6:
         e9:8a:94:d3:dd:9e:a0:6c:ee:1b:5a:90:d9:c8:ce:4e:49:8a:
         9c:70:67:28:fe:be:b2:04:f4:89:67:8d:98:da:f5:d9:0e:f3:
         46:63:79:07:90:c5:4b:91:01:35:55:f9:0c:46:65:c3:37:82:
         84:64:e2:73:f0:b7:b6:74:50:78:9f:7b:fe:8e:f5:27:a8:f8:
         53:73:01:a8:94:38:75:8c:d3:11:6a:a3:1e:f5:80:4d:42:2c:
         21:aa:89:6b:92:00:90:79:32:c7:8b:b9:10:41:0e:3c:dd:d7:
         76:17:55:a0:18:64:c2:75:30:40:05:61:52:e1:8a:ad:d5:e6:
         5c:d5:06:4b:03:d7:e6:30:b0:d8:a1:1f:9c:bc:78:60:26:9e:
         02:64:f3:92:2a:95:a2:22:b7:10:fe:90:ee:7d:4f:f0:41:4e:
         5f:b1:24:2b:83:f5:30:48:ee:26:39:d0:6c:f9:e7:86:d0:20:
         ec:f4:4c:da:4c:5d:0c:61:5d:47:c3:47:08:ce:e4:b3:09:46:
         3f:07:01:7a
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ7CyclJG8yVXsJQ2ynaAtwOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYTRlZWE4NmY5ZjNlNmU3ODgxYjRiOGRhMTlhMWQyNzI1
ZTg3MTAwHhcNMjYwNjEzMjEwMTA0WhcNMjYwNjE0MjEwMTA0WjAzMTEwLwYDVQQD
EygwZWQ0ZjdmMGU5YmMyNWQzY2E4OTRjMzBhYmZkN2UyZmEzMjk1YTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAuYn54+loBlAqShfoqVvJdy8Ley
2H5ft8rJc+n2QzqqJPsRpYiBxMCVk2XVRsJw0RYkRVW3/vuCaQnYQOjfZ+1JFkke
lQjimigj+Ct75fjaXe/rqmYU4cqdtuG9soLP5HfT1PsDdU+Y3PZ4lFIR4OsdDPX4
NIsDayvvAQq4URbcnm2v64oofD2SXfeTboarJQqZEqy+FrPyHUh+U4qJ6MQAZN10
fZRNyF2AOCSbJHd/T92eIFUYQV4jInR0ZkXufk9I//GQKdBBFHFDTAmNWAJJiYeJ
Jr4ts2mEDIKxqz4eT7oxVDn8K9t5sCOzASyHFMt5PuW+l9f7xd//FKk2CwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFA7U9/DpvCXTyolMMKv9fi+jKVoGMB8GA1UdIwQY
MBaAFPqk7qhvnz5ueIG0uNoZodJyXocQMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1xVHVxRy1mUG01NGdiUzQyaG1oMG5KZWh4QS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvYzJjMjg4LTZmNTYtNGM0ZC05ZGI1
LTk2ZTk5Zjc5NDI3OC8xLzEtcVR1cUctZlBtNTRnYlM0MmhtaDBuSmVoeEEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzBmL2MyYzI4OC02ZjU2LTRjNGQtOWRiNS05NmU5OWY3OTQy
NzgvMS8xLXFUdXFHLWZQbTU0Z2JTNDJobWgwbkplaHhBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3EBY
WCpLMeLa89MRXuNBXUB3YYJrvCtnS0LLcpODKGa2kRjfETs95KYHoQmYFJ9t/z2R
UN3m6YqU092eoGzuG1qQ2cjOTkmKnHBnKP6+sgT0iWeNmNr12Q7zRmN5B5DFS5EB
NVX5DEZlwzeChGTic/C3tnRQeJ97/o71J6j4U3MBqJQ4dYzTEWqjHvWATUIsIaqJ
a5IAkHkyx4u5EEEOPN3XdhdVoBhkwnUwQAVhUuGKrdXmXNUGSwPX5jCw2KEfnLx4
YCaeAmTzkiqVoiK3EP6Q7n1P8EFOX7EkK4P1MEjuJjnQbPnnhtAg7PRM2kxdDGFd
R8NHCM7kswlGPwcBeg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:10:18 2026 by rpki-client