Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
File:                     Pme6gge4HBtHJjsf3o95uZWXA30.mft (raw, json)
Hash identifier:          LwT3BPFr/abXlptCFy1lY6o6TDbMQxFCj4noonp6BJQ=
Subject key identifier:   65:08:17:27:4A:6C:19:95:26:1E:8E:8A:44:A2:D8:C9:CA:4B:FB:4D
Authority key identifier: 3E:67:BA:82:07:B8:1C:1B:47:26:3B:1F:DE:8F:79:B9:95:97:03:7D
Certificate issuer:       /CN=3e67ba8207b81c1b47263b1fde8f79b99597037d
Certificate serial:       019EC06E224D4EF71D77BDF2D3A6D0313E70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
Manifest number:          18EC
Signing time:             Sat 13 Jun 2026 10:01:43 +0000
Manifest this update:     Sat 13 Jun 2026 10:01:43 +0000
Manifest next update:     Sun 14 Jun 2026 10:01:43 +0000
Files and hashes:         1: DJdqiSENKGFZJ1k4CQJ0qhVj-NU.roa (hash: JPyYKilJIGfMtwMBvPqVfl8PNsFxqskM2FqefiGjuEU=)
                          2: Pme6gge4HBtHJjsf3o95uZWXA30.crl (hash: fnJ3g5S5GvT+rWIE1eh5jmiKIZTP5qbaNWaYLykw0P8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6e:22:4d:4e:f7:1d:77:bd:f2:d3:a6:d0:31:3e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e67ba8207b81c1b47263b1fde8f79b99597037d
        Validity
            Not Before: Jun 13 10:01:43 2026 GMT
            Not After : Jun 14 10:01:43 2026 GMT
        Subject: CN=650817274a6c1995261e8e8a44a2d8c9ca4bfb4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4b:9b:20:20:40:f2:6a:00:4a:c9:76:34:a4:
                    62:4b:ed:57:a9:34:02:82:99:91:1a:77:f0:3e:2b:
                    c4:ef:20:b6:66:a8:98:09:ef:43:9b:d1:18:d4:0f:
                    09:9a:41:cc:92:ec:91:c4:94:d8:d5:94:4f:a0:1e:
                    b8:31:77:e3:00:0d:89:ed:2f:05:49:23:7f:43:68:
                    75:78:4d:9f:ae:df:ba:70:86:f4:c7:66:2c:ed:63:
                    f9:3c:e7:a9:5c:e7:e2:b8:0c:47:0c:a1:e1:0d:7b:
                    f3:71:c1:e7:4f:79:6c:ab:9f:ad:16:4f:70:eb:0b:
                    18:67:25:36:81:31:af:0c:b1:9d:1c:fd:4d:61:e4:
                    90:83:4e:f5:7c:c8:d1:d7:e3:52:10:d6:d4:1d:01:
                    2e:0f:ff:cc:4f:0e:c2:f5:73:bb:6a:1e:4b:b7:b0:
                    08:43:6a:56:5a:44:a4:24:92:04:0b:c0:60:dd:82:
                    0e:44:49:9b:17:08:47:ac:15:eb:9e:72:bf:7d:a9:
                    f5:fa:9b:36:69:6f:03:7e:d7:2e:69:29:dd:b7:69:
                    00:d0:e5:56:78:a4:93:f7:66:f4:6e:89:55:10:f1:
                    17:13:fc:61:ee:53:c0:27:5b:16:57:20:9f:a5:11:
                    1a:e1:49:f0:f6:d9:9c:5f:00:dc:5a:16:0e:ef:64:
                    34:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:08:17:27:4A:6C:19:95:26:1E:8E:8A:44:A2:D8:C9:CA:4B:FB:4D
            X509v3 Authority Key Identifier:
                keyid:3E:67:BA:82:07:B8:1C:1B:47:26:3B:1F:DE:8F:79:B9:95:97:03:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:2b:15:a1:d1:de:62:a9:f3:f4:6f:91:ec:85:90:84:b1:1b:
         63:7a:65:44:04:8d:64:6e:37:6d:f4:f6:94:f7:1e:b2:a7:4d:
         81:1f:ab:35:fc:18:64:2a:82:42:a6:26:69:1d:80:67:c9:e7:
         47:93:d4:a9:b5:0e:fc:e8:d4:4b:fb:55:9f:0a:d3:7f:c7:99:
         88:d3:9a:0e:87:b0:98:1e:de:9c:d7:dd:f8:9c:61:a3:a1:56:
         6a:d0:9a:80:75:10:64:9f:4a:f0:ce:f2:7e:41:0d:cd:73:aa:
         3a:0c:68:cd:3e:a4:0e:6b:1d:22:2b:82:2b:7a:7b:70:dd:bc:
         ca:e8:c5:41:e7:83:95:1e:01:fe:c2:97:82:2d:d6:de:72:31:
         65:67:e7:5b:48:69:da:ca:b9:2e:04:bc:df:92:3d:b3:df:6b:
         a8:6a:b1:44:5a:09:16:87:3e:35:9a:82:c8:9b:c8:07:db:62:
         3c:60:84:38:6a:49:37:d6:82:1a:a7:66:70:35:63:33:a8:83:
         ce:74:e6:18:5c:a3:b2:ca:61:e5:88:80:b3:b6:e3:a3:87:f5:
         ca:1a:a9:1d:ec:92:c7:5a:60:8b:8c:24:97:0d:8b:c9:33:c9:
         a6:a3:b0:60:e4:75:4e:a9:64:9a:ba:da:fc:79:ed:da:c4:7c:
         fd:a0:c6:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7AbiJNTvcdd73y06bQMT5wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjdiYTgyMDdiODFjMWI0NzI2M2IxZmRlOGY3OWI5OTU5
NzAzN2QwHhcNMjYwNjEzMTAwMTQzWhcNMjYwNjE0MTAwMTQzWjAzMTEwLwYDVQQD
Eyg2NTA4MTcyNzRhNmMxOTk1MjYxZThlOGE0NGEyZDhjOWNhNGJmYjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkubICBA8moASsl2NKRiS+1XqTQC
gpmRGnfwPivE7yC2ZqiYCe9Dm9EY1A8JmkHMkuyRxJTY1ZRPoB64MXfjAA2J7S8F
SSN/Q2h1eE2frt+6cIb0x2Ys7WP5POepXOfiuAxHDKHhDXvzccHnT3lsq5+tFk9w
6wsYZyU2gTGvDLGdHP1NYeSQg071fMjR1+NSENbUHQEuD//MTw7C9XO7ah5Lt7AI
Q2pWWkSkJJIEC8Bg3YIOREmbFwhHrBXrnnK/fan1+ps2aW8DftcuaSndt2kA0OVW
eKST92b0bolVEPEXE/xh7lPAJ1sWVyCfpREa4Unw9tmcXwDcWhYO72Q0xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUIFydKbBmVJh6OikSi2MnKS/tNMB8GA1UdIwQY
MBaAFD5nuoIHuBwbRyY7H96PebmVlwN9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1lNmdnZTRIQnRISmpzZjNvOTV1WldYQTMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9hMDIxMzYtZGI5Yi00YmVmLWFlMTIt
NGMyNWZjYmRlZGQxLzEvUG1lNmdnZTRIQnRISmpzZjNvOTV1WldYQTMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9hMDIxMzYtZGI5Yi00YmVmLWFlMTItNGMyNWZjYmRlZGQx
LzEvUG1lNmdnZTRIQnRISmpzZjNvOTV1WldYQTMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAisVodHe
Yqnz9G+R7IWQhLEbY3plRASNZG43bfT2lPcesqdNgR+rNfwYZCqCQqYmaR2AZ8nn
R5PUqbUO/OjUS/tVnwrTf8eZiNOaDoewmB7enNfd+Jxho6FWatCagHUQZJ9K8M7y
fkENzXOqOgxozT6kDmsdIiuCK3p7cN28yujFQeeDlR4B/sKXgi3W3nIxZWfnW0hp
2sq5LgS835I9s99rqGqxRFoJFoc+NZqCyJvIB9tiPGCEOGpJN9aCGqdmcDVjM6iD
znTmGFyjssph5YiAs7bjo4f1yhqpHeySx1pgi4wklw2LyTPJpqOwYOR1Tqlkmrra
/Hnt2sR8/aDGAg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:33:59 2026 by rpki-client