Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
File:                     0nXXqLrAR39VCd_xG5GVymDfh9o.mft (raw, json)
Hash identifier:          qVoqyawA8zj/ydG9cpvBtkpDa3/sW45hVx9yer5zAcM=
Subject key identifier:   BB:62:23:D4:F8:FC:D7:44:15:89:D2:8D:D5:30:52:83:15:48:83:C3
Authority key identifier: D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
Certificate issuer:       /CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Certificate serial:       019EC17FF50C41B822FA3B7F25AEF6370062
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
Manifest number:          196F
Signing time:             Sat 13 Jun 2026 15:00:48 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:48 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:48 +0000
Files and hashes:         1: 0nXXqLrAR39VCd_xG5GVymDfh9o.crl (hash: iNKBGkxeIpSXsMY2Gyk6iw2I1dz5rRdqbSMlNw7xTW0=)
                          2: FYE5Q3Mlv51odwTBANvIYF0s6IA.roa (hash: r/sE12BhKzVBtzNy9xBdk9/yYXwH8MFHHau2SN5trWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 15:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:f5:0c:41:b8:22:fa:3b:7f:25:ae:f6:37:00:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d275d7a8bac0477f5509dff11b9195ca60df87da
        Validity
            Not Before: Jun 13 15:00:48 2026 GMT
            Not After : Jun 14 15:00:48 2026 GMT
        Subject: CN=bb6223d4f8fcd7441589d28dd5305283154883c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:cd:cf:fc:ff:71:2c:db:ec:b3:58:ee:00:1a:
                    cd:af:c4:53:09:b0:65:10:2d:44:ea:ad:e6:2c:b3:
                    2d:a4:c8:63:b7:cc:e5:83:48:4a:1a:3f:94:d1:3a:
                    a9:f5:e1:f1:57:b6:ba:25:23:71:a7:e3:0f:8d:f8:
                    eb:7d:b3:60:e2:2d:58:ce:bc:32:c5:19:68:ac:35:
                    50:ec:75:7b:67:bd:18:64:b3:0e:2e:3b:48:f7:c5:
                    9e:24:dd:cd:22:3b:cd:df:fd:f2:f1:e2:c6:b6:e0:
                    fa:6e:60:24:e8:f2:d1:ea:38:38:5d:49:46:d5:bb:
                    49:d4:d5:45:f4:a7:0a:75:0b:32:59:20:73:5e:62:
                    2d:b6:2f:b7:4f:82:25:10:9a:fe:6e:19:23:cf:90:
                    92:2f:b3:08:e6:0d:ef:85:f6:e1:24:99:f7:c8:a9:
                    04:7e:2f:fa:e4:65:a6:05:d0:8b:38:f3:72:21:2f:
                    2b:6e:72:01:15:5d:b9:4d:25:07:ad:77:5c:d5:be:
                    22:e8:1e:42:df:f6:12:b6:17:12:1a:d6:51:50:a8:
                    d2:a7:58:43:47:a3:6a:00:c4:a1:0c:4d:54:97:1f:
                    85:c1:27:da:08:ba:d9:c4:db:99:e7:79:ce:bf:63:
                    10:cc:6d:ea:be:e6:7c:78:32:db:89:08:8a:7b:4c:
                    cb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:62:23:D4:F8:FC:D7:44:15:89:D2:8D:D5:30:52:83:15:48:83:C3
            X509v3 Authority Key Identifier:
                keyid:D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:65:a8:ac:ba:3e:b1:9e:f3:37:48:f4:06:71:ef:85:e6:f7:
         fe:ac:37:64:27:b9:cd:87:4d:24:eb:e9:4d:69:31:0d:ae:9e:
         1f:f1:72:c9:ed:35:fa:d5:a8:93:42:5a:62:e5:02:6c:a3:27:
         87:ea:ed:0b:97:6c:ee:70:30:12:27:9d:67:c1:49:ae:4b:01:
         d9:85:ef:38:08:3c:ea:2f:de:dd:72:66:f7:51:76:79:44:ac:
         e9:f2:88:bf:16:a9:aa:14:48:8b:de:b2:00:cf:29:37:6a:51:
         63:1b:8e:06:b4:f5:5f:5c:30:a9:cc:1c:d7:4a:ef:8b:c2:b3:
         20:fb:52:70:07:00:2c:e4:88:c5:c7:72:53:2a:cd:41:d1:20:
         ef:02:f1:c8:8b:f3:d4:43:72:9d:09:55:54:ac:c3:e2:9d:97:
         bb:9d:4a:33:78:5f:e9:f0:39:7c:70:1c:f3:3f:2e:95:4f:30:
         51:24:c3:a6:50:2e:41:44:ab:13:37:1e:63:9e:1a:18:52:eb:
         d1:2e:be:1b:43:9e:65:9a:e6:ea:06:e6:ac:70:3f:ea:21:e0:
         8e:8f:e2:b6:36:68:f0:52:5c:93:27:ea:d5:6d:8b:fc:a3:b9:
         ec:9f:eb:32:e4:8c:9e:98:9d:ff:e7:2c:a6:22:4f:e4:66:4a:
         4a:15:54:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:38:48 2026 by rpki-client