Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
File:                     g7d8noEHbPS0zv7V7vIQf3UsNjA.mft (raw, json)
Hash identifier:          GyuWpSI7s70no2AvvQ4ARz/WSv5j1X9mTeYpAPUzXYQ=
Subject key identifier:   A0:EF:AB:A5:C2:00:64:CF:ED:CC:12:C6:F8:C8:F9:69:4E:B2:DC:9A
Authority key identifier: 83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30
Certificate issuer:       /CN=83b77c9e81076cf4b4cefed5eef2107f752c3630
Certificate serial:       019EC035F64D091331C84E1FE510FC5E927D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 09:00:22 +0000
Manifest this update:     Sat 13 Jun 2026 09:00:22 +0000
Manifest next update:     Sun 14 Jun 2026 09:00:22 +0000
Files and hashes:         1: GHGkwEVylqYxr15hWfLzxHp9MA0.roa (hash: 6MgKNZ/wr6UP8/R75FjFSF75c2qdb4J/GZr8B0Cgj+s=)
                          2: g7d8noEHbPS0zv7V7vIQf3UsNjA.crl (hash: DW30+fVNj4hHBnPW0tPmziDFNdOapRBmhg3YMemS7sQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:35:f6:4d:09:13:31:c8:4e:1f:e5:10:fc:5e:92:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83b77c9e81076cf4b4cefed5eef2107f752c3630
        Validity
            Not Before: Jun 13 09:00:22 2026 GMT
            Not After : Jun 14 09:00:22 2026 GMT
        Subject: CN=a0efaba5c20064cfedcc12c6f8c8f9694eb2dc9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6c:10:3f:33:b5:e3:11:7e:6f:08:9e:de:e8:
                    54:bd:03:26:02:6b:78:15:51:cc:7b:30:8b:cc:fa:
                    29:dd:63:65:02:1a:eb:7c:33:bd:0e:9e:32:bd:98:
                    29:86:8e:e9:79:8d:ac:d8:e5:af:9b:0f:ed:48:4e:
                    0c:eb:8a:8b:55:43:3d:2a:f0:9c:f8:f1:f1:90:3e:
                    19:3f:ab:88:bf:54:b6:14:4c:e2:ba:d0:b0:a9:93:
                    c7:39:cb:6c:40:fd:53:5f:98:a8:b9:b8:2a:e3:f3:
                    d7:cf:8f:cd:a1:cc:77:eb:e9:50:ae:8e:d2:02:8b:
                    98:fd:ca:dc:59:b6:d0:e2:b5:69:ca:91:0f:49:5b:
                    43:97:65:f6:dd:f3:d6:f6:79:01:cf:9b:2d:ba:1e:
                    fe:d8:4a:be:58:5a:48:7d:e9:18:50:dc:5a:51:fe:
                    37:9e:2e:09:a9:60:e1:96:62:06:32:81:71:e4:c2:
                    6d:85:66:69:34:a3:86:cc:45:c9:fd:50:96:e7:3b:
                    8f:6e:53:75:c9:c5:d5:4f:00:5f:62:79:d6:4c:e6:
                    19:12:07:8d:84:03:09:46:a7:81:e9:f0:bf:64:57:
                    97:e6:7b:c9:4f:30:f5:2d:a6:2e:71:97:4e:d0:07:
                    12:cc:0e:80:b1:d0:bf:43:d6:cd:28:00:04:40:aa:
                    83:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:EF:AB:A5:C2:00:64:CF:ED:CC:12:C6:F8:C8:F9:69:4E:B2:DC:9A
            X509v3 Authority Key Identifier:
                keyid:83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:7f:4e:0a:38:83:89:50:05:f3:71:6e:30:61:d9:3c:f1:d2:
         d0:7a:d8:61:75:eb:3d:f4:ee:a8:29:16:59:3c:d2:63:54:7d:
         7b:6c:bd:6e:28:c8:fa:ef:c4:69:a5:60:5c:0c:17:b8:53:d8:
         21:ca:a3:c3:eb:f5:96:09:1f:9e:8f:18:9d:3d:7b:d6:c0:37:
         b4:b5:48:fd:8d:22:b3:b0:20:d7:90:34:d4:ae:5f:d7:dd:97:
         73:bb:ef:84:07:34:2c:2b:29:c2:02:ad:79:93:a8:83:74:42:
         1b:2a:31:6a:4e:36:4e:c1:4d:1b:ac:b0:3d:66:a4:b5:e7:6c:
         37:0c:b3:57:1b:b5:83:2a:14:55:c1:1f:a2:4e:56:82:21:c7:
         9b:ab:3d:2d:31:dc:56:b1:fa:73:14:cb:38:d3:49:0d:b6:88:
         c6:26:d2:92:6e:3c:f4:eb:73:d5:e5:7c:29:8b:9d:70:e6:6b:
         32:23:4f:cc:28:1a:7d:0b:9b:e7:9b:be:b3:c3:69:a4:6e:4a:
         a3:28:67:92:d4:24:03:8b:b8:ff:9d:5c:fb:ae:5e:31:e1:d6:
         fc:cb:84:bd:c2:3e:dd:65:af:0c:29:66:1c:c4:97:cc:67:73:
         47:62:1b:dc:df:4d:78:02:79:f9:aa:75:55:24:5b:b7:21:1a:
         e1:65:c7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:41:21 2026 by rpki-client