Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
File:                     5D8j1ok3SUKI38x6Dv4f50ogNuE.mft (raw, json)
Hash identifier:          8lVYoKEIXYJ3/oK+6jMxXNbEN0HQu2BPnqcBFpRY4qg=
Subject key identifier:   0D:80:37:DF:C2:7B:06:EF:20:3A:DA:A0:29:D4:5A:9E:20:40:06:2A
Authority key identifier: E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1
Certificate issuer:       /CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1
Certificate serial:       019EC36E8B9411E76606CF21518695632123
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
Manifest number:          195E
Signing time:             Sun 14 Jun 2026 00:01:02 +0000
Manifest this update:     Sun 14 Jun 2026 00:01:02 +0000
Manifest next update:     Mon 15 Jun 2026 00:01:02 +0000
Files and hashes:         1: 5D8j1ok3SUKI38x6Dv4f50ogNuE.crl (hash: Ck3eVa2OOzuYmQ6NDF9mvTnyKpBx90wkTe5Q7ggjBPk=)
                          2: Ir27xg9dLc2jCmst038CD7aSTUE.roa (hash: oSA2uezGmOSkDFovORRhwQlbzwF4ltfNZW/lvc676ZY=)
                          3: WDTYJfU4GmC_Z6SmZBDA6liuL48.roa (hash: FJHas3EZqiie/GgKCvyAh7bXL6nc+V2NXzO+Cw5KyLA=)
                          4: pwYTinLuDu67XvmsuR-F4t51_KA.roa (hash: eNI+YaNU/hzM1s49lx5C1dDOoIT3b4beF5vq3z+7/TI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:6e:8b:94:11:e7:66:06:cf:21:51:86:95:63:21:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1
        Validity
            Not Before: Jun 14 00:01:02 2026 GMT
            Not After : Jun 15 00:01:02 2026 GMT
        Subject: CN=0d8037dfc27b06ef203adaa029d45a9e2040062a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f7:6f:10:0f:31:80:ff:40:fb:7d:24:ee:38:
                    7e:2e:5c:b9:90:56:1d:65:54:30:ac:bb:f5:2c:13:
                    71:af:71:dc:5b:27:7a:5c:15:e5:4f:1f:38:c7:f8:
                    7c:57:67:86:c4:d0:02:05:25:d5:1c:07:e8:8b:1c:
                    c1:07:b9:a6:82:ed:f5:1f:f8:1f:14:76:ce:1d:59:
                    0f:30:62:c6:2f:e7:39:5c:a4:ce:33:5f:3a:de:2c:
                    8b:70:81:eb:53:0c:bc:22:05:cb:cd:90:1c:25:0c:
                    81:dd:7e:42:a3:8c:44:71:c2:03:ab:e4:ef:be:c1:
                    ad:20:18:28:e5:30:17:95:14:bb:79:b9:4a:0b:b0:
                    b5:80:f5:e3:ea:51:5f:03:6c:89:a1:af:93:02:3a:
                    52:0d:df:dd:43:2b:91:4d:8f:37:14:7a:9d:86:e6:
                    5e:b2:68:5b:a8:73:c8:1d:b8:55:a6:ba:23:e1:32:
                    64:3d:c0:8c:dd:31:03:14:da:1c:6a:23:04:7b:6c:
                    61:e5:bd:52:a6:0b:21:d1:ea:20:73:0b:22:14:97:
                    9d:1c:7f:27:c2:fd:96:8a:e0:9f:5e:95:f7:14:00:
                    73:33:65:b9:19:e4:07:86:bf:c2:d2:b7:24:a8:7d:
                    e2:b0:dc:a0:b4:65:37:62:ca:ab:1a:3c:24:6a:d8:
                    54:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:80:37:DF:C2:7B:06:EF:20:3A:DA:A0:29:D4:5A:9E:20:40:06:2A
            X509v3 Authority Key Identifier:
                keyid:E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:2f:45:9a:ee:cf:3b:de:73:1e:62:4a:f8:59:67:37:e6:d2:
         7d:e2:09:e4:1a:a5:36:20:05:a5:5a:34:0a:ae:14:c6:42:5c:
         92:58:ca:74:08:7e:bf:bc:26:dc:17:a9:a5:c1:89:dd:02:0c:
         f2:ff:e2:4a:d3:2d:18:44:2d:ab:08:06:4b:71:c5:7e:24:4a:
         8a:20:15:04:52:00:46:81:ff:35:e6:2f:06:e9:e9:d7:28:2c:
         99:c5:70:cc:34:7b:37:aa:26:83:ae:95:04:1e:92:97:66:89:
         28:da:8f:14:75:ac:c3:2e:f1:a4:bc:b8:3e:cb:3f:9e:75:26:
         8c:b1:bc:50:a8:ca:c6:bb:85:e8:50:f1:4a:51:1a:41:7a:8f:
         9f:21:5f:73:27:20:81:17:9c:3e:08:bb:fb:dc:af:38:ea:97:
         aa:91:6d:02:4a:76:9d:4f:83:f0:fc:6d:73:52:ae:64:66:59:
         48:75:35:8b:75:7f:96:56:c9:7e:ee:90:ed:b8:0f:ac:f1:26:
         cd:eb:33:1f:af:0d:cc:4b:2d:62:56:5e:a0:35:85:5f:bc:11:
         b5:46:a5:c7:73:cc:92:d2:69:a0:d5:86:b1:a9:a5:8e:37:82:
         77:23:d7:1f:62:bf:77:c2:38:ef:2b:b9:4e:bc:9f:52:ff:8a:
         29:a3:34:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:52:39 2026 by rpki-client