Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
File:                     Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft (raw, json)
Hash identifier:          w2g/QdrBamSZYR/F9AfJhHBik9LV9BaKWLNsCvwawDM=
Subject key identifier:   AD:99:4C:85:AA:FA:69:D6:87:D7:72:1A:71:84:25:A9:32:6A:7B:E4
Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
Certificate issuer:       /CN=15ffa042114301368b4069abd68a1efbac47fdce
Certificate serial:       019ED2AAEEBAE40A3BA2580250DE8FBC893A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
Manifest number:          198E
Signing time:             Tue 16 Jun 2026 23:01:18 +0000
Manifest this update:     Tue 16 Jun 2026 23:01:18 +0000
Manifest next update:     Wed 17 Jun 2026 23:01:18 +0000
Files and hashes:         1: 1Yk3wLsSFqIceQz9okyZeYwSmUU.roa (hash: XuNQlAxXibSKzFFM3alxNEJs9SFC+R0bjfD85sz3lps=)
                          2: 2rNvx3N9jKo76idv1HsGHAcnnwk.roa (hash: eczcKAWkF5L/9LrtvswF4lmskTN97duPXq74deE4ZjY=)
                          3: 89TNYzq_U7xA7Y9BxvWtQuf55Qw.roa (hash: gJOB7b6DwbK+XopIODXerFY7Dl/1i2NMhMaK+LjT9Lk=)
                          4: Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl (hash: 8B7BZigmZVHMy1oiNo5Ch7GXkZUOmtpH6Hl1CFAK6tk=)
                          5: I50Xdmc2vD7Yx16IjkscqSWGByc.roa (hash: RDUO+YNn3phd3/QIVNJIvwDgBTmufyoyrH3ITgLGClY=)
                          6: XGgIS2kdMhFLyP-i-D0W3B8JW7A.roa (hash: eJBUNPOd5UiGzU5DENLhYsoGYS/OErO6pyZfCeZ9+DI=)
                          7: Z-AEi0EtQTiXIQZyMMd-Bg1cjpI.roa (hash: yIwR/WFk+tPJZkyXjHRduYJCHgmO7w46d3yBhaQ1ujQ=)
                          8: _AlvkImBx9fT_58A-ot68g3ZAWg.roa (hash: msAI/PDOB8nUEhgzHGsqD3SG29keFYFQtvJbuYgfbh4=)
                          9: pc9jqeFvGm_Ya7ftOHGOywYXqHk.roa (hash: hvmbpnMOx6aLgariBv7H4no6hWJ9AktUdxssOvOvSNs=)
                          10: wEsor2MQvIFzGGLmwfUZgbYVkto.roa (hash: asdhK4hFtXHqOa5kFwrF3vv+JxQieRNKL69DY1/povE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d2:aa:ee:ba:e4:0a:3b:a2:58:02:50:de:8f:bc:89:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce
        Validity
            Not Before: Jun 16 23:01:18 2026 GMT
            Not After : Jun 17 23:01:18 2026 GMT
        Subject: CN=ad994c85aafa69d687d7721a718425a9326a7be4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:09:43:81:c0:c6:7c:35:10:80:f8:42:69:56:
                    41:a5:8a:75:6c:c8:c5:34:c7:8a:75:26:98:d1:03:
                    6e:79:e9:18:d9:de:0e:58:de:e1:d4:45:c7:2f:15:
                    42:ec:9d:2d:e9:4f:69:d8:e9:ae:e9:e9:1d:1b:83:
                    60:04:7c:3c:67:7c:0e:5b:11:bc:17:48:3f:50:6e:
                    85:dc:d3:a3:17:b5:5f:b1:f1:d9:13:ec:8d:f8:25:
                    bf:62:fe:47:79:b0:cc:3d:a9:b2:f5:02:52:c8:a4:
                    f7:30:e9:c3:8f:42:1c:19:6f:e5:ae:56:ee:51:ca:
                    1d:84:07:6b:42:a8:20:1f:f7:be:94:55:6e:9e:89:
                    53:cb:d9:19:91:bc:13:3c:3e:1f:16:a7:c7:40:54:
                    29:52:ae:87:80:45:6b:83:3c:13:e2:84:65:35:f1:
                    b5:0a:8d:c8:45:9b:e1:ce:75:e0:2c:f7:f8:28:45:
                    61:88:82:8e:b6:6f:dc:39:80:e8:cf:71:45:2f:58:
                    f2:3a:7a:cb:38:c9:7b:0b:7a:87:16:52:37:5e:55:
                    fa:4a:f1:4a:55:8a:23:e9:80:6e:7d:aa:2a:a3:52:
                    8b:e8:c5:fa:8c:3d:69:3f:6f:5b:b7:c0:1f:93:e4:
                    35:f0:70:bc:3f:93:b6:03:88:5a:e9:46:a7:66:f1:
                    43:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:99:4C:85:AA:FA:69:D6:87:D7:72:1A:71:84:25:A9:32:6A:7B:E4
            X509v3 Authority Key Identifier:
                keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:4f:a9:3a:f3:c9:5b:1b:f0:db:94:7b:93:01:b4:ea:ab:01:
         dd:64:6e:c1:92:1a:d5:ec:e1:0e:dc:7a:5b:7c:28:0f:f3:99:
         bb:39:91:c4:c7:fb:ad:77:16:00:98:4b:ad:dc:ee:6a:21:4c:
         50:35:0a:58:9a:5f:e4:1b:c2:af:4e:06:2c:bd:44:d4:55:34:
         5e:d6:40:d3:7c:0a:84:72:e8:58:29:88:28:b6:14:70:33:1e:
         4c:52:f3:81:60:e0:42:cd:12:66:91:41:c9:44:01:80:10:e2:
         24:73:94:aa:03:f3:78:60:4e:9b:fc:5a:0b:d3:a3:c7:55:4c:
         be:6d:47:83:38:c1:25:cc:9a:28:e0:db:05:39:58:c0:81:d5:
         c2:b3:f7:89:b7:b2:1b:7a:e2:8e:7b:62:1d:98:c8:c4:90:71:
         fc:55:cd:3e:ab:e1:8b:58:65:db:ca:3e:26:04:13:59:b1:88:
         44:40:5a:2d:df:dc:af:e0:83:21:b8:f2:a0:c1:7a:68:d0:a5:
         cd:d9:a4:7a:72:5a:38:22:7e:d1:30:ab:5a:97:3c:4a:9a:14:
         1b:c0:46:a5:eb:36:33:cd:30:36:0a:54:3b:c6:6f:ef:c2:f7:
         9c:02:ec:71:99:e3:1e:2f:65:ab:87:b4:e5:94:07:d7:9a:67:
         56:65:af:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:55:39 2026 by rpki-client