Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
File:                     RusRr5NV2porXfc-zdf9CWektYw.mft (raw, json)
Hash identifier:          yrreueYjIyHUyj0OtJDatgL4QuDT/qLgcjulS2CDREI=
Subject key identifier:   2C:11:72:60:28:F3:73:9D:19:B9:39:CB:8A:36:B0:9A:15:9C:CB:E3
Authority key identifier: 46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
Certificate issuer:       /CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Certificate serial:       019ED34FB1A4DA3FA4DA53B0514F73388BEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
Manifest number:          196C
Signing time:             Wed 17 Jun 2026 02:01:15 +0000
Manifest this update:     Wed 17 Jun 2026 02:01:15 +0000
Manifest next update:     Thu 18 Jun 2026 02:01:15 +0000
Files and hashes:         1: RQrjDU4V5o7Y6FMae1KeS7H872g.roa (hash: 8xk+8pGV1p6Nt4ziixJs8iuoymfnnWJ5uoc1S8n08z8=)
                          2: RusRr5NV2porXfc-zdf9CWektYw.crl (hash: vbhnx/dXSA1qyHi1yrSDBegdzRlDC2AUTL7ltCmfE6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 02:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:4f:b1:a4:da:3f:a4:da:53:b0:51:4f:73:38:8b:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
        Validity
            Not Before: Jun 17 02:01:15 2026 GMT
            Not After : Jun 18 02:01:15 2026 GMT
        Subject: CN=2c11726028f3739d19b939cb8a36b09a159ccbe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d4:af:cd:41:df:92:d8:31:07:b3:77:b9:e3:
                    fb:ed:02:84:2c:89:6b:90:03:5e:20:5f:92:0d:ef:
                    f0:ed:38:28:6c:1f:4d:7e:91:5d:e0:8b:35:1b:ba:
                    ea:8d:f4:c2:c9:01:3a:b0:39:cd:79:7b:63:66:5f:
                    a8:bc:4d:41:65:74:4d:05:81:08:7e:44:9e:eb:1d:
                    2a:fd:23:7f:b3:42:14:73:16:e3:89:8d:fc:20:70:
                    5e:4c:86:0d:9b:81:09:2e:54:32:f5:11:8a:37:77:
                    12:58:24:37:d6:a1:06:ac:ff:c1:66:b6:49:73:00:
                    bc:f3:04:03:60:c3:3b:4f:14:20:7a:ca:2c:40:ca:
                    72:57:32:f8:ba:b8:1c:42:ca:c9:28:5e:cb:e4:ee:
                    9d:36:33:4b:4f:c8:0a:f1:01:a2:f0:0f:cd:ac:1b:
                    13:9b:eb:dc:43:64:ff:e3:e7:a9:4a:6d:a7:15:e3:
                    33:e3:f8:05:4d:01:4a:7d:c7:e2:44:53:1b:e3:ec:
                    42:e8:57:34:b1:f9:d3:9b:83:f1:e3:f1:ae:06:b0:
                    33:98:8a:2e:68:fd:33:ee:73:c3:c6:04:d4:75:aa:
                    95:52:51:90:b7:86:ac:74:14:2f:c1:1f:43:25:c8:
                    91:73:df:e6:50:a5:b9:cf:d3:b0:dc:2c:3f:04:9f:
                    01:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:11:72:60:28:F3:73:9D:19:B9:39:CB:8A:36:B0:9A:15:9C:CB:E3
            X509v3 Authority Key Identifier:
                keyid:46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:f8:ac:d9:f8:5d:0b:2d:81:9a:57:b1:55:34:87:ae:a3:0b:
         8a:78:7b:31:be:ed:94:0f:38:6a:79:5f:49:d4:c9:31:af:08:
         19:46:a9:bd:b5:28:9b:ec:b9:a0:1f:78:44:fa:21:4c:08:b9:
         29:01:d4:1c:a1:6a:20:92:97:8d:55:31:e0:d6:41:03:50:13:
         c6:59:9a:49:3b:03:ae:a1:1e:cd:55:50:bf:a8:8c:00:39:ef:
         7a:62:3d:8f:92:88:b6:c6:ea:ad:ac:47:c5:d1:a8:55:dd:93:
         0c:ac:8b:9e:ad:09:f6:e9:cb:b5:7f:02:25:4c:1c:2a:05:8c:
         7c:6e:6d:8a:65:06:91:b1:04:85:a9:4d:c0:cf:97:75:b2:f0:
         e4:4d:7d:17:92:e4:2d:17:fc:8e:c4:2a:db:c8:bb:e8:e7:60:
         f0:78:b3:29:05:9c:ab:f9:57:b5:45:f3:0f:bc:3a:8f:eb:9d:
         6b:13:16:31:01:0e:ba:f4:cb:73:4c:e0:7e:73:4d:f0:8d:42:
         02:e7:ed:b3:0d:48:ed:bb:ea:6c:ca:cd:7b:eb:8c:8c:48:0c:
         82:b3:cd:85:3d:7e:37:3f:61:43:36:e0:df:ed:8f:0c:04:a5:
         bf:62:9f:fc:1b:37:8d:8d:2b:a5:04:a7:6a:77:39:0d:9c:2e:
         13:f1:66:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7TT7Gk2j+k2lOwUU9zOIvuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZWIxMWFmOTM1NWRhOWEyYjVkZjczZWNkZDdmZDA5Njdh
NGI1OGMwHhcNMjYwNjE3MDIwMTE1WhcNMjYwNjE4MDIwMTE1WjAzMTEwLwYDVQQD
EygyYzExNzI2MDI4ZjM3MzlkMTliOTM5Y2I4YTM2YjA5YTE1OWNjYmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dSvzUHfktgxB7N3ueP77QKELIlr
kANeIF+SDe/w7TgobB9NfpFd4Is1G7rqjfTCyQE6sDnNeXtjZl+ovE1BZXRNBYEI
fkSe6x0q/SN/s0IUcxbjiY38IHBeTIYNm4EJLlQy9RGKN3cSWCQ31qEGrP/BZrZJ
cwC88wQDYMM7TxQgesosQMpyVzL4urgcQsrJKF7L5O6dNjNLT8gK8QGi8A/NrBsT
m+vcQ2T/4+epSm2nFeMz4/gFTQFKfcfiRFMb4+xC6Fc0sfnTm4Px4/GuBrAzmIou
aP0z7nPDxgTUdaqVUlGQt4asdBQvwR9DJciRc9/mUKW5z9Ow3Cw/BJ8BKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwRcmAo83OdGbk5y4o2sJoVnMvjMB8GA1UdIwQY
MBaAFEbrEa+TVdqaK133Ps3X/QlnpLWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnVzUnI1TlYycG9yWGZjLXpkZjlDV2VrdFl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8xYTQzZjAtYzAyNy00ZmRjLTg1MTUt
NDVmNDk2ZjJmZTc1LzEvUnVzUnI1TlYycG9yWGZjLXpkZjlDV2VrdFl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8xYTQzZjAtYzAyNy00ZmRjLTg1MTUtNDVmNDk2ZjJmZTc1
LzEvUnVzUnI1TlYycG9yWGZjLXpkZjlDV2VrdFl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIfis2fhd
Cy2BmlexVTSHrqMLinh7Mb7tlA84anlfSdTJMa8IGUapvbUom+y5oB94RPohTAi5
KQHUHKFqIJKXjVUx4NZBA1ATxlmaSTsDrqEezVVQv6iMADnvemI9j5KItsbqraxH
xdGoVd2TDKyLnq0J9unLtX8CJUwcKgWMfG5timUGkbEEhalNwM+XdbLw5E19F5Lk
LRf8jsQq28i76Odg8HizKQWcq/lXtUXzD7w6j+udaxMWMQEOuvTLc0zgfnNN8I1C
Auftsw1I7bvqbMrNe+uMjEgMgrPNhT1+Nz9hQzbg3+2PDASlv2Kf/Bs3jY0rpQSn
anc5DZwuE/FmHA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 12:06:33 2026 by rpki-client