Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
File:                     4OkqeIpBBX0ndk8W87HSo-9jRdY.mft (raw, json)
Hash identifier:          m6SqJEX4YcAm7ppfzabSpLNeYZOl1ptOtqZ+BO8CRJQ=
Subject key identifier:   CD:6C:DD:AB:6F:E0:B6:21:E0:5C:87:56:24:E9:00:DD:31:8F:38:AC
Authority key identifier: E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6
Certificate issuer:       /CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
Certificate serial:       019EC22521A8C8551990E0B59D454CFE1B5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 18:01:13 +0000
Manifest this update:     Sat 13 Jun 2026 18:01:13 +0000
Manifest next update:     Sun 14 Jun 2026 18:01:13 +0000
Files and hashes:         1: 4OkqeIpBBX0ndk8W87HSo-9jRdY.crl (hash: BLeJguuK1qF+xw3AKYcP1KqUrKQ2KK46l9TRukY6GfI=)
                          2: Dv6DzYWC8QD9B_MZto_ESNK4j6k.roa (hash: punip1kHRpKApQYHrsUHwLPlb8qszTQ5w8o2U1ESN+k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:25:21:a8:c8:55:19:90:e0:b5:9d:45:4c:fe:1b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
        Validity
            Not Before: Jun 13 18:01:13 2026 GMT
            Not After : Jun 14 18:01:13 2026 GMT
        Subject: CN=cd6cddab6fe0b621e05c875624e900dd318f38ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1d:ff:47:42:aa:f7:3c:33:20:b9:76:90:b8:
                    06:05:82:f5:d9:73:44:25:61:13:d2:56:e7:7c:c3:
                    58:05:6e:18:6f:d2:08:d1:81:43:76:a7:53:e6:15:
                    7e:67:6b:54:a3:77:36:b5:e5:3a:33:54:b0:af:97:
                    dc:94:0c:b2:5b:22:d7:ae:b8:da:7a:98:67:52:34:
                    f7:33:4c:66:28:e8:3f:cb:c9:e8:ed:58:f3:7d:21:
                    b2:34:7f:69:d4:a0:28:a5:91:b0:3c:90:2c:1f:ce:
                    72:f0:b4:17:a2:9d:69:aa:c0:65:8b:cb:cd:a1:a9:
                    3f:0a:dd:12:d7:93:32:a5:73:3c:79:0a:17:46:34:
                    07:4e:d0:d1:33:47:5d:38:b7:2e:dd:06:bb:07:7b:
                    5d:4c:0d:8e:a2:12:de:6a:d6:7d:07:21:aa:2b:07:
                    68:2e:ae:53:0b:64:39:ef:39:c9:0c:c3:1c:be:8c:
                    43:0b:6c:9c:0a:4a:3c:a4:7c:7e:5b:27:15:ce:41:
                    4f:49:a7:a1:be:ba:9c:9c:fc:10:88:e7:36:2e:ca:
                    2a:e5:75:c3:ad:11:0d:7e:da:d4:4a:1e:9a:a0:e5:
                    c0:4f:36:96:65:ff:f5:07:bc:b7:15:42:33:89:ce:
                    b7:82:4e:ba:a9:99:b6:82:87:a2:e9:ed:b0:0f:0f:
                    cf:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6C:DD:AB:6F:E0:B6:21:E0:5C:87:56:24:E9:00:DD:31:8F:38:AC
            X509v3 Authority Key Identifier:
                keyid:E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:c1:7a:90:69:ec:9f:c8:51:dd:21:5c:78:c5:f3:78:62:78:
         cb:31:82:90:77:c7:e1:55:77:aa:50:ab:16:91:6f:00:dc:39:
         8d:73:92:4e:d1:14:80:90:96:a2:a2:8d:9f:35:28:ed:a8:98:
         d1:c8:0d:f4:69:fd:7e:64:b6:5e:2c:09:79:de:b4:a7:c6:d7:
         22:8a:ed:6e:e5:ef:2f:71:69:68:f3:1d:2f:aa:c7:0e:05:cc:
         46:5a:09:79:2a:16:c9:98:13:ad:99:dc:b6:6e:31:34:cb:69:
         98:46:52:61:0f:a5:1c:17:5e:fd:e8:dc:dc:fa:58:f5:f0:16:
         e8:21:65:f6:7b:ff:09:a4:db:f9:ac:2f:1c:d6:3d:a1:72:df:
         02:f4:73:7f:ad:c9:79:8d:f6:39:eb:05:70:54:c0:b7:5c:41:
         29:e2:74:96:b3:11:f8:c5:34:56:27:59:fb:fb:c9:df:6a:96:
         f6:01:d2:8a:46:84:54:18:03:e3:e0:dd:b4:a2:6e:12:55:32:
         b5:7f:7d:3a:63:ae:0e:87:17:61:e9:74:c8:f4:c8:b0:42:0f:
         4b:e4:c9:c4:16:3d:42:e2:ad:6c:95:b5:40:75:d2:fa:c0:d9:
         8a:2d:b7:11:a7:cb:d9:86:d3:81:42:72:2b:24:d7:95:8d:17:
         d6:bc:19:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:49:06 2026 by rpki-client