Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
File:                     08YXj7A0kFEwrwzhzSdRVPK1m3g.mft (raw, json)
Hash identifier:          E8dKVhlyGJ2BZlZen7o1huYSfGCC4ajEYDxsQGEtjxA=
Subject key identifier:   BC:C4:95:EC:17:48:E9:EF:B3:A9:49:73:A7:96:58:66:77:15:C0:CB
Authority key identifier: D3:C6:17:8F:B0:34:90:51:30:AF:0C:E1:CD:27:51:54:F2:B5:9B:78
Certificate issuer:       /CN=d3c6178fb034905130af0ce1cd275154f2b59b78
Certificate serial:       019EBE7F5E316764A92BB166A4B1F3A27855
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 01:01:18 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:18 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:18 +0000
Files and hashes:         1: 08YXj7A0kFEwrwzhzSdRVPK1m3g.crl (hash: jdSXWootkuYPIonF0effLmw781BsYoDASRvHbv0a4U8=)
                          2: TkVIENg5yxh_iBn69iwP-Gzs7M0.roa (hash: XN4b40QKJDQSEm8B3f99MTAbjS4H9rL0ddzhBtlCaKw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:5e:31:67:64:a9:2b:b1:66:a4:b1:f3:a2:78:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c6178fb034905130af0ce1cd275154f2b59b78
        Validity
            Not Before: Jun 13 01:01:18 2026 GMT
            Not After : Jun 14 01:01:18 2026 GMT
        Subject: CN=bcc495ec1748e9efb3a94973a79658667715c0cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ca:f9:c9:64:8f:c0:41:68:04:83:f1:39:dd:
                    87:07:3e:86:81:07:8b:bf:29:31:77:5c:47:04:f1:
                    93:f6:1d:5d:d0:c1:d7:d7:7d:ff:06:85:64:0c:27:
                    44:a1:05:59:b9:10:14:97:7f:4a:13:41:da:c0:fd:
                    e4:bf:e9:ac:31:66:66:ed:c0:c8:cf:7e:67:66:f4:
                    9d:c5:1b:5d:24:ba:19:99:c8:9d:a2:a7:20:a0:ea:
                    5a:f3:c4:e8:9b:94:e8:79:1f:40:1d:e6:26:72:7f:
                    d1:72:83:eb:ca:9d:0d:1b:71:02:39:12:96:13:e0:
                    4f:42:e0:a1:75:c0:33:ed:87:74:90:23:e0:b2:8f:
                    2f:a3:0c:4e:51:9b:47:f6:92:20:a2:04:1c:b3:71:
                    08:91:ef:23:22:89:78:66:cf:da:ce:fc:a8:d8:95:
                    d2:85:a8:d2:ca:e2:74:b3:a3:a3:1a:7d:a6:b5:30:
                    82:38:b9:54:6d:24:85:08:4b:fc:5a:37:8c:89:68:
                    66:49:82:5f:97:70:31:1c:db:b3:16:ca:4a:92:b3:
                    bc:8a:ca:d6:a8:b7:6f:09:ba:07:d3:2e:1f:e7:81:
                    4f:27:9a:f8:e7:2a:02:a6:56:43:5a:ef:49:f9:6e:
                    9f:cb:a0:ed:f3:3d:be:7a:67:f3:d6:97:81:78:2e:
                    9c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C4:95:EC:17:48:E9:EF:B3:A9:49:73:A7:96:58:66:77:15:C0:CB
            X509v3 Authority Key Identifier:
                keyid:D3:C6:17:8F:B0:34:90:51:30:AF:0C:E1:CD:27:51:54:F2:B5:9B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:47:01:80:77:01:d8:27:c3:59:3a:a3:a8:1a:38:f4:35:6a:
         d4:97:ad:ed:1b:0a:95:6d:61:ab:de:ba:28:5e:e2:bb:6e:b2:
         b2:d6:2d:c9:9a:bf:0d:ae:0c:2a:83:da:e3:12:24:bb:bf:d9:
         ae:3c:e8:29:88:bf:8d:04:90:89:cc:b8:a8:af:ed:16:03:ad:
         c8:46:bb:a7:4e:4c:ee:d4:df:da:2d:70:85:8a:06:a5:9c:9b:
         66:30:5e:b4:ee:d7:ad:ff:b7:67:0a:d2:38:8d:a2:73:e5:4e:
         1c:32:75:21:ad:53:ed:9c:40:58:a6:3d:c1:e0:b7:14:64:09:
         ca:e4:86:9e:a0:e2:02:76:77:29:eb:2c:e4:57:e5:7a:cc:90:
         dd:be:a6:9e:0d:50:a2:48:99:46:b1:f2:e2:2e:d6:73:6f:0b:
         86:78:b4:98:5e:2a:3f:16:e4:65:82:94:34:46:ed:57:da:c2:
         ed:ec:db:c6:17:01:a2:ac:c6:35:61:c2:fe:ac:7d:6e:ea:ed:
         2b:d6:73:14:f0:02:ce:b9:5e:f1:5f:8b:89:ce:c7:59:41:5b:
         f6:fa:40:a3:ad:84:67:3a:66:91:0b:fb:16:41:6e:d9:56:ee:
         e4:29:84:65:1f:67:7d:ad:08:9a:fc:21:b8:4d:f2:0c:83:84:
         c1:4e:93:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:23:29 2026 by rpki-client