Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
File:                     0sKw7hh5KECQZdGe6cCFjowX6hM.mft (raw, json)
Hash identifier:          XiAET83kt7F5vHvUDlmY5Dy0mI7GtWnzVRKmB8Ob4lQ=
Subject key identifier:   E4:82:28:4C:CE:F0:FE:51:27:93:68:30:3D:38:3E:DC:AB:BF:0E:DE
Authority key identifier: D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13
Certificate issuer:       /CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
Certificate serial:       019EBF9129FAA57E975CF9352F123275B097
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 06:00:22 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:22 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:22 +0000
Files and hashes:         1: 0sKw7hh5KECQZdGe6cCFjowX6hM.crl (hash: PWX2Tb6SybTceX+cGQDiEpggbxsEMUNjeOMGNmui1rQ=)
                          2: Yd0ISItT25nHU31sDdFobBWtukM.roa (hash: BpfqZXiuQQu7xNd4WIEYwPFlxLRUFTvBsSR5u9ClQwA=)
                          3: _73P6T6R3O1x9vvtr2p4XPdIlxo.roa (hash: LQcRZBmXpQKqNcm08uPyPyuOJz2qTqd9JQZhTsJFO+g=)
                          4: cZX-vXoSkiVX1DDpE2stQryxES0.roa (hash: DZ4toH+8MBJm3/Ie0kvOYB9O/Ot8hRGuCx70ecPDboc=)
                          5: eoJQmOi00RtisYT69k2lcfpvuTI.roa (hash: zyn9MIC0PYdNEQ/1NTEkC1cOqVRsDhiTSo2jAFn7xpI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:29:fa:a5:7e:97:5c:f9:35:2f:12:32:75:b0:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
        Validity
            Not Before: Jun 13 06:00:22 2026 GMT
            Not After : Jun 14 06:00:22 2026 GMT
        Subject: CN=e482284ccef0fe51279368303d383edcabbf0ede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:83:a5:8c:76:15:aa:1c:c0:9a:78:5a:39:6d:
                    f4:ec:e9:bb:04:89:e9:3a:1a:5a:fe:87:f1:52:ac:
                    a7:01:d5:e5:9d:db:73:32:05:70:f2:25:a0:c3:05:
                    16:22:d3:53:1e:d2:e5:27:74:50:df:1a:a5:d2:11:
                    2c:9b:41:97:73:75:f3:ef:8a:ad:5a:1e:56:7a:d4:
                    96:64:57:fb:fc:9d:d9:d2:eb:03:79:2f:f8:35:51:
                    56:94:d3:a5:ee:a0:46:22:5b:57:5e:09:a2:c9:18:
                    bf:64:4c:cc:31:36:2c:9f:f8:ee:c0:7e:5b:36:56:
                    df:14:03:a1:e2:de:bc:01:cb:5e:d7:39:7c:f8:5e:
                    20:bd:16:c4:0f:d2:c3:a0:fc:91:b0:a5:a0:3f:e8:
                    5e:4f:12:32:5f:f5:3c:04:2b:7e:bc:e3:11:72:9d:
                    40:28:8c:2d:fa:81:e9:62:c5:17:b0:da:08:d4:24:
                    c0:38:b3:29:0a:e0:12:77:55:f5:03:d4:b2:ee:de:
                    aa:41:09:56:5a:28:d4:c1:d2:8b:ab:01:9b:6f:65:
                    b7:ba:89:49:a4:03:07:e0:d0:fc:17:22:05:ef:e7:
                    ec:10:ef:4e:90:76:52:24:7f:4e:8f:26:a7:75:5c:
                    50:97:51:81:7a:13:1a:25:b4:cc:16:b0:f7:5a:62:
                    1c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:82:28:4C:CE:F0:FE:51:27:93:68:30:3D:38:3E:DC:AB:BF:0E:DE
            X509v3 Authority Key Identifier:
                keyid:D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:b4:e7:3e:d6:23:85:f5:5e:6f:a0:bf:61:73:41:cf:03:76:
         32:32:c8:3b:35:6c:d7:fd:77:59:73:a4:60:e1:e0:a9:58:66:
         ba:0e:f2:8d:6f:e4:0d:33:bc:f1:39:34:13:fd:82:9b:d6:aa:
         59:16:95:1b:18:44:99:48:3c:7e:d2:c6:9f:a1:47:2d:2e:a3:
         d8:e9:07:1c:1c:d6:38:34:75:2f:6c:36:03:6d:f7:20:ab:11:
         05:68:ce:f3:2b:e7:d5:d0:60:8a:4f:4d:47:d3:58:d0:72:1d:
         7a:08:2f:65:35:50:dd:90:45:4c:1d:bc:19:0d:16:d5:7e:a9:
         f5:21:40:2d:19:71:62:28:d7:51:8a:55:5f:8e:14:c5:e3:61:
         c3:2f:a5:05:6d:3b:ed:ae:af:04:80:f4:b7:1e:b9:de:0b:e7:
         63:71:7b:f5:cd:cf:ef:94:46:0a:dc:7b:a4:73:9c:ec:90:15:
         59:65:11:59:7f:50:bc:c2:a4:4a:2e:43:0f:63:3e:4e:ae:10:
         d9:ff:61:c7:bb:db:b7:7a:b0:a0:1d:9e:dd:f4:05:88:d4:35:
         c7:06:8c:40:29:2a:f4:6c:d3:73:51:bf:67:1a:48:ba:3b:93:
         69:f1:5a:91:66:78:9d:c6:ae:0b:f9:fd:fa:77:68:47:2c:87:
         07:fc:b0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:36:59 2026 by rpki-client