Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft
File:                     4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft (raw, json)
Hash identifier:          m3piucbQ+I74hCx38Y4rnPIymgClhOxU23U7sTgsTXU=
Subject key identifier:   01:A3:DE:07:F4:DD:C9:12:EE:60:1E:C1:4C:36:54:B3:F1:DA:84:61
Authority key identifier: E3:1D:A2:BA:05:7E:9A:54:A6:17:0F:25:7F:F9:78:56:DC:97:E0:68
Certificate issuer:       /CN=e31da2ba057e9a54a6170f257ff97856dc97e068
Certificate serial:       019EBFC83A90A7ADB82BE2F6218C65F26AB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4x2iugV-mlSmFw8lf_l4VtyX4Gg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 07:00:30 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:30 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:30 +0000
Files and hashes:         1: 4x2iugV-mlSmFw8lf_l4VtyX4Gg.crl (hash: JGcnL5Bkb7lFnucEmgkZDHlGkkWjUe+baH9KaMoGU30=)
                          2: limcXQL5irLoJkXVtLb_HxKT9Cc.roa (hash: aQ8BkEO1FUkjaNo1mk5XdjSymKmGcpWue4kgaoY47rc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4x2iugV-mlSmFw8lf_l4VtyX4Gg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:3a:90:a7:ad:b8:2b:e2:f6:21:8c:65:f2:6a:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e31da2ba057e9a54a6170f257ff97856dc97e068
        Validity
            Not Before: Jun 13 07:00:30 2026 GMT
            Not After : Jun 14 07:00:30 2026 GMT
        Subject: CN=01a3de07f4ddc912ee601ec14c3654b3f1da8461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:84:f1:7d:40:9c:40:e0:38:c6:c3:ce:b5:d9:
                    79:57:2f:0b:61:b5:fb:fa:96:85:a7:2c:b4:3a:ed:
                    b8:5e:40:08:18:e6:09:6a:04:1c:40:36:3f:3a:10:
                    37:73:a1:28:f8:da:c7:5d:9a:4a:5e:d6:80:4f:fe:
                    6d:2d:af:63:c7:ba:59:07:4d:3b:df:b0:97:f5:76:
                    4e:c8:8c:39:d7:d4:b6:2a:c6:84:ac:ce:77:99:f7:
                    a3:38:ee:fb:b2:6d:60:fd:0c:bf:74:61:cc:6b:a2:
                    85:78:21:6a:f1:5c:09:4d:81:24:d2:00:df:cd:1d:
                    df:b7:1b:b9:29:04:ad:89:c7:17:82:1e:b9:bf:b2:
                    2c:6d:f2:34:65:33:2d:a0:e4:58:06:54:66:52:25:
                    73:bc:ec:91:42:b5:0f:8a:d9:8c:25:22:51:1c:c9:
                    cc:fd:98:f3:47:5d:67:1c:2f:14:48:eb:b6:06:1a:
                    75:dd:2a:4f:71:99:08:38:ad:86:8c:0b:64:70:7f:
                    50:58:d1:f3:0f:aa:37:31:5d:9e:70:f7:09:55:15:
                    3a:af:f6:48:06:21:2c:a9:50:4b:9c:55:6f:d7:d9:
                    d5:8c:33:ff:f2:e7:2e:41:0d:68:a3:c5:28:c6:5b:
                    c4:18:69:f1:2b:92:79:17:c9:b2:27:d2:89:06:8b:
                    95:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A3:DE:07:F4:DD:C9:12:EE:60:1E:C1:4C:36:54:B3:F1:DA:84:61
            X509v3 Authority Key Identifier:
                keyid:E3:1D:A2:BA:05:7E:9A:54:A6:17:0F:25:7F:F9:78:56:DC:97:E0:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4x2iugV-mlSmFw8lf_l4VtyX4Gg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:c9:f0:1b:8b:af:ec:c2:ed:91:6d:d3:be:52:3d:e1:7b:46:
         85:fa:42:a7:31:c9:3d:95:4b:62:59:0b:55:0f:43:23:55:13:
         a7:eb:9d:29:ea:ba:f2:77:59:64:14:47:35:90:6c:23:b9:7d:
         41:f1:2f:95:30:48:f5:ed:2f:c0:2c:5c:58:9e:79:40:88:18:
         5e:41:71:6b:11:18:1a:7a:09:d9:68:74:09:8d:c1:b4:69:50:
         cf:89:71:d7:f0:2b:39:a4:0a:ba:ff:64:2a:74:74:10:11:ad:
         50:ed:ca:14:82:77:43:8d:75:09:66:b1:87:0c:ed:5f:c1:4c:
         23:7e:60:7b:5d:40:4e:9f:c9:fd:f9:b8:1e:ed:8c:21:dc:de:
         fa:65:30:72:45:06:fb:56:89:34:45:6f:2f:74:8e:78:4e:6c:
         6e:04:5d:28:c8:ce:8f:36:74:6b:c7:fc:ef:9b:92:a6:23:5f:
         0a:2d:2b:e5:aa:02:49:c7:f8:1b:42:fd:87:f6:90:56:18:85:
         c4:98:1d:fe:3b:63:b2:b0:45:82:d4:8a:3c:dc:5e:bb:b4:50:
         8f:e3:71:af:26:05:7c:38:3b:ce:7a:04:e2:27:38:0e:24:ea:
         ba:5b:5e:6c:79:b7:06:36:9c:9a:ee:4a:cf:af:3f:d2:84:cd:
         30:20:c0:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/yDqQp624K+L2IYxl8mq0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMWRhMmJhMDU3ZTlhNTRhNjE3MGYyNTdmZjk3ODU2ZGM5
N2UwNjgwHhcNMjYwNjEzMDcwMDMwWhcNMjYwNjE0MDcwMDMwWjAzMTEwLwYDVQQD
EygwMWEzZGUwN2Y0ZGRjOTEyZWU2MDFlYzE0YzM2NTRiM2YxZGE4NDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4TxfUCcQOA4xsPOtdl5Vy8LYbX7
+paFpyy0Ou24XkAIGOYJagQcQDY/OhA3c6Eo+NrHXZpKXtaAT/5tLa9jx7pZB007
37CX9XZOyIw519S2KsaErM53mfejOO77sm1g/Qy/dGHMa6KFeCFq8VwJTYEk0gDf
zR3ftxu5KQSticcXgh65v7IsbfI0ZTMtoORYBlRmUiVzvOyRQrUPitmMJSJRHMnM
/ZjzR11nHC8USOu2Bhp13SpPcZkIOK2GjAtkcH9QWNHzD6o3MV2ecPcJVRU6r/ZI
BiEsqVBLnFVv19nVjDP/8ucuQQ1oo8UoxlvEGGnxK5J5F8myJ9KJBouV0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGj3gf03ckS7mAewUw2VLPx2oRhMB8GA1UdIwQY
MBaAFOMdoroFfppUphcPJX/5eFbcl+BoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHgyaXVnVi1tbFNtRnc4bGZfbDRWdHlYNEdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82OWEyMDktZmE1Ny00M2YwLWJiYzIt
NzUwN2U4MTlhNzk1LzEvNHgyaXVnVi1tbFNtRnc4bGZfbDRWdHlYNEdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy82OWEyMDktZmE1Ny00M2YwLWJiYzItNzUwN2U4MTlhNzk1
LzEvNHgyaXVnVi1tbFNtRnc4bGZfbDRWdHlYNEdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJMnwG4uv
7MLtkW3TvlI94XtGhfpCpzHJPZVLYlkLVQ9DI1UTp+udKeq68ndZZBRHNZBsI7l9
QfEvlTBI9e0vwCxcWJ55QIgYXkFxaxEYGnoJ2Wh0CY3BtGlQz4lx1/ArOaQKuv9k
KnR0EBGtUO3KFIJ3Q411CWaxhwztX8FMI35ge11ATp/J/fm4Hu2MIdze+mUwckUG
+1aJNEVvL3SOeE5sbgRdKMjOjzZ0a8f875uSpiNfCi0r5aoCScf4G0L9h/aQVhiF
xJgd/jtjsrBFgtSKPNxeu7RQj+NxryYFfDg7znoE4ic4DiTqultebHm3Bjacmu5K
z68/0oTNMCDA5Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:47:29 2026 by rpki-client