Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
File:                     gz4OSAQRuciOkW3vkPw6kBAmOUo.mft (raw, json)
Hash identifier:          jzRTKHgzr3IhZRuXdcvMtLPAdQ2itjQu9SKMIPoG/eU=
Subject key identifier:   CD:8C:EC:D6:FE:DD:C4:57:8F:47:D4:34:D9:5C:29:8C:D0:C9:7D:EC
Authority key identifier: 83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
Certificate issuer:       /CN=833e0e480411b9c88e916def90fc3a901026394a
Certificate serial:       019EBF23799151F47C4EB706718B585B405F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 04:00:33 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:33 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:33 +0000
Files and hashes:         1: 5gSf1-VDKOYVBkqkgnQrEMypzTg.roa (hash: z6ZcdBsDa7Hg3rkYAPzvBooMd+rknZS/02yCZUcFlGI=)
                          2: CmZeg0QZClyASLrlfEFcbEqzniE.roa (hash: hxAFIZw4RCC07UgvikV6JR0Y6MOvZuFKg3XrUhhJ604=)
                          3: Ih_bDVPWPg40meMVUQH52Q_SiqE.roa (hash: WQr9CRYz6MHyRZSZGa17nV7pgtE8mhzsKExO1LfYlFY=)
                          4: gz4OSAQRuciOkW3vkPw6kBAmOUo.crl (hash: EaBcnwQZCZwdfv/6zKY2XBUmGaYLz5ePFoHQ83te7Pc=)
                          5: yhvjZUqxn_FUY-Mlri4ogZjyLBM.roa (hash: L0ywjyagm2bruEE3Ewodq3fXEbUNJSk+4fnvkwsHn6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:79:91:51:f4:7c:4e:b7:06:71:8b:58:5b:40:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=833e0e480411b9c88e916def90fc3a901026394a
        Validity
            Not Before: Jun 13 04:00:33 2026 GMT
            Not After : Jun 14 04:00:33 2026 GMT
        Subject: CN=cd8cecd6feddc4578f47d434d95c298cd0c97dec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f3:24:0e:cb:d5:27:cd:5c:2f:a5:3b:07:51:
                    30:48:57:71:ef:57:11:75:62:1b:7b:72:32:9d:93:
                    08:17:b6:ec:c5:40:66:bd:eb:08:88:dc:f6:19:15:
                    b2:7a:6a:34:5e:53:e9:06:43:89:2b:c0:a2:4c:e0:
                    2e:d1:15:88:6b:c6:d5:49:8a:ea:90:35:13:2b:4c:
                    1a:ac:61:57:65:bc:1d:e6:0c:7a:6e:80:22:a1:5f:
                    11:b6:13:dd:10:bb:ab:a0:52:7d:73:17:09:5c:fb:
                    59:58:76:7a:e2:88:70:04:21:1e:ee:08:15:08:6e:
                    db:b6:d9:69:c3:5c:b5:c4:9f:fd:64:87:39:f0:9a:
                    1c:ee:b8:dc:20:67:5c:0a:81:04:ab:6f:e2:11:3f:
                    d3:50:c9:bd:a8:e0:61:1f:68:16:46:86:dc:ad:7b:
                    51:a3:87:bc:fd:9c:b0:ae:07:3d:51:03:3d:3a:14:
                    86:66:7a:06:0d:6e:83:1b:b0:f1:80:d2:83:1d:41:
                    1e:72:e6:51:04:9f:8a:6e:9a:bd:26:2c:12:c2:74:
                    61:b0:aa:cb:54:c7:a5:b2:b1:c8:ab:ac:9f:57:d8:
                    97:05:a8:d0:da:c7:7e:4f:46:2a:93:1c:36:e3:10:
                    4f:c4:64:43:e8:5e:72:7a:21:ef:06:64:0e:79:f2:
                    10:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:8C:EC:D6:FE:DD:C4:57:8F:47:D4:34:D9:5C:29:8C:D0:C9:7D:EC
            X509v3 Authority Key Identifier:
                keyid:83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:4f:a5:64:72:88:ac:d9:f6:6a:04:10:52:37:67:5d:a2:6a:
         1a:e1:63:53:ba:17:65:9d:2d:ab:19:6d:5d:1f:94:39:e0:a3:
         bb:69:31:30:1c:74:04:27:c6:6e:57:34:f7:43:b3:f4:f7:77:
         5f:21:d2:2f:40:5b:3d:1d:73:97:98:6e:6e:fd:f1:d2:3e:b5:
         22:40:bf:97:d4:fa:b3:9c:95:91:9b:69:15:a8:9b:9d:52:86:
         09:a1:c6:51:80:3d:70:7a:30:55:4f:2e:bc:d1:e5:d5:51:4c:
         e6:14:68:a5:14:65:43:8c:c7:5f:84:bd:23:71:06:13:46:50:
         fa:a9:4f:ea:81:b9:ac:fe:d8:16:a7:fe:45:f4:02:77:d8:01:
         b7:97:b5:e3:4c:57:66:ce:6a:97:62:de:31:b0:06:f0:2b:30:
         43:d6:80:87:fb:e2:8c:5e:64:89:71:7e:09:1a:bd:8e:be:44:
         67:fe:bd:ad:54:66:1c:d5:de:64:43:de:a2:c5:19:c7:4b:e1:
         a0:df:ee:df:36:75:15:2c:87:6b:7b:99:93:77:39:8a:f8:86:
         84:f2:43:4f:7a:39:5c:14:85:17:63:40:d0:df:c7:40:4e:e1:
         76:72:ce:47:a1:4c:cf:eb:93:24:22:a8:56:5c:1f:df:43:09:
         21:7a:0e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:21:46 2026 by rpki-client