Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft
File:                     7V6DgxLgSu-flTbiDNQSg6e4t3s.mft (raw, json)
Hash identifier:          r3PG8ppStefl7SIo1PfwhZ/N+bgeAe5m89SkO0wyEwU=
Subject key identifier:   6A:01:8D:62:20:B2:B2:9E:66:17:67:CC:4C:9D:2D:1D:B6:67:03:63
Authority key identifier: ED:5E:83:83:12:E0:4A:EF:9F:95:36:E2:0C:D4:12:83:A7:B8:B7:7B
Certificate issuer:       /CN=ed5e838312e04aef9f9536e20cd41283a7b8b77b
Certificate serial:       019EBEEC374D14C567731B30BAC03B403D71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7V6DgxLgSu-flTbiDNQSg6e4t3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 03:00:12 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:12 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:12 +0000
Files and hashes:         1: 1tXKvbccZVqmGCzOIY3BaiKWNpI.roa (hash: ZMIDM8rVxwZQ46a51953kpL3cP7HCn+o1QL6WgtS1ZM=)
                          2: 7V6DgxLgSu-flTbiDNQSg6e4t3s.crl (hash: DS0H7NnXyR7l0527Fjk+oIYgXMsRCrZf6VeC1CSJA9Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7V6DgxLgSu-flTbiDNQSg6e4t3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:37:4d:14:c5:67:73:1b:30:ba:c0:3b:40:3d:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed5e838312e04aef9f9536e20cd41283a7b8b77b
        Validity
            Not Before: Jun 13 03:00:12 2026 GMT
            Not After : Jun 14 03:00:12 2026 GMT
        Subject: CN=6a018d6220b2b29e661767cc4c9d2d1db6670363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0a:21:70:f6:72:93:e6:8b:6d:cb:26:3b:fb:
                    15:95:03:17:3f:af:21:71:0e:ac:a4:fe:bd:51:91:
                    f4:7c:c0:48:fc:ab:1d:70:fc:31:37:3a:58:9c:63:
                    11:41:c9:06:a6:52:13:19:e2:c9:4c:2a:39:52:e7:
                    5f:dd:b8:d1:45:07:3c:64:f3:c3:b0:0e:e5:8a:6f:
                    45:6c:29:38:63:5a:48:3b:a9:5c:d9:c5:c2:f5:70:
                    1e:2f:c5:52:69:ad:96:58:aa:81:1a:d6:e2:09:7e:
                    8b:dc:f0:d6:a2:8a:9e:5c:72:b3:b5:33:29:46:e2:
                    57:52:de:64:d5:7f:da:c0:db:47:5b:f1:e0:9a:b1:
                    3b:c1:ce:f4:c1:a8:30:8e:73:bb:cf:29:4c:19:c6:
                    d0:8c:fa:ce:88:93:7f:c4:f5:01:fa:9f:cf:ed:1b:
                    19:d0:bc:d5:ee:2d:00:32:64:71:eb:a0:6f:13:3f:
                    95:4d:23:45:40:e8:42:c3:ae:32:f5:16:1a:41:76:
                    fd:67:2c:90:ad:17:7a:02:df:cd:b4:27:06:c5:a7:
                    32:70:ad:71:15:1a:96:ba:d6:3e:16:03:a6:35:f1:
                    fb:f6:62:50:b9:8e:90:29:43:37:61:35:ba:04:ee:
                    eb:8d:84:55:9a:c9:e7:3e:7d:61:7f:79:37:c7:eb:
                    d0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:01:8D:62:20:B2:B2:9E:66:17:67:CC:4C:9D:2D:1D:B6:67:03:63
            X509v3 Authority Key Identifier:
                keyid:ED:5E:83:83:12:E0:4A:EF:9F:95:36:E2:0C:D4:12:83:A7:B8:B7:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7V6DgxLgSu-flTbiDNQSg6e4t3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:aa:f6:d4:0d:20:76:a6:bd:fb:d8:94:e8:35:b4:88:79:82:
         fb:1b:b0:52:a0:6e:ab:f5:dd:45:17:5e:91:ba:4f:13:8c:e2:
         3c:e7:50:49:20:c3:52:73:51:4a:b7:3e:85:18:03:0e:58:96:
         27:71:c0:c2:e5:65:81:3f:47:1e:d1:71:f8:91:71:e2:b3:32:
         ea:f8:13:d3:d6:b8:4c:d1:66:33:b6:39:0b:a8:e8:b9:65:63:
         97:08:06:e9:17:c2:c8:48:90:8c:b1:ef:6a:cd:ad:ba:f5:18:
         34:37:c7:22:6d:d6:35:cb:86:4f:6f:8f:f9:17:7f:d1:c7:c0:
         f0:8a:2b:3c:47:a2:f5:d2:d3:1e:d5:5a:17:38:7e:ee:a6:05:
         1b:21:6b:70:5e:0c:10:50:5d:fe:ba:a8:fe:82:13:f1:41:64:
         bf:5e:5b:fb:16:f5:e3:d5:35:5e:6a:f2:61:c1:90:0b:a5:7a:
         af:8e:4a:d8:fa:3b:e2:67:c2:53:6c:4b:1f:e7:e9:ca:ca:fc:
         af:0e:6d:3c:db:2a:c9:2e:45:bc:40:bd:f4:f1:cb:ab:a9:21:
         cb:cc:d4:0d:28:2d:b7:09:56:21:3b:89:7b:11:41:a8:92:17:
         19:51:a2:26:3a:fe:e7:7c:a7:18:67:21:92:9e:57:3c:9a:a5:
         2d:d9:7a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:18:43 2026 by rpki-client