Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft
File:                     dixgr01zclhFzq8Le1hed1cGaWU.mft (raw, json)
Hash identifier:          BlbUZjFZq8axUeIKeTcDrLQW2RDD+LdvbkSv64DIcq0=
Subject key identifier:   FE:FB:91:19:41:B3:24:60:EE:FB:B9:70:5C:62:FE:92:E7:C6:5C:76
Authority key identifier: 76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65
Certificate issuer:       /CN=762c60af4d73725845ceaf0b7b585e7757066965
Certificate serial:       019EBF5A295D27B55AEDA5C9F106631B27E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 05:00:17 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:17 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:17 +0000
Files and hashes:         1: 13ja1cIxS4cK0b0RY3CC1WL6GYs.roa (hash: c+J6Q65ZscwsVoYSvT1zs/WDV1dPfYCmK+qupBgYe50=)
                          2: 9OSGu-CL3eoRiBIUAPN11BJFt2o.roa (hash: jKTEcw4I25lyqC0/LKz20znUmkmfgUVEV6D5UsdJUAo=)
                          3: RtgqAojptg3yfsTJ-oga_8isRto.roa (hash: eyQYoF7t82yY3YtM/1jPPLvEjYoo8YlLinObPAQcXHA=)
                          4: X6IQ-q68Lu6Sm7ozgn09iKo2xDc.roa (hash: 1oM0JFaG4XNcO5zFMn1eRQw1lAJ0Or0fahaPut34poU=)
                          5: _1hB8H52OK9tZ7oTDVioeT82qgM.roa (hash: 7T2hoZDj4U/8s/AFME6VJZzf9NWdP3HcXbeV7H9Xusw=)
                          6: dixgr01zclhFzq8Le1hed1cGaWU.crl (hash: mnht/DFqmI0Pm4ZqcjzT4vPC0lwjVjfGZNMs8WoyMEg=)
                          7: taZtaRwec6TUmh7xkAuy4J_X1F4.roa (hash: CpXD+0k4LSqd3QdCbAr+w3LdfUJFfvPxHaufA8KBMW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:29:5d:27:b5:5a:ed:a5:c9:f1:06:63:1b:27:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=762c60af4d73725845ceaf0b7b585e7757066965
        Validity
            Not Before: Jun 13 05:00:17 2026 GMT
            Not After : Jun 14 05:00:17 2026 GMT
        Subject: CN=fefb911941b32460eefbb9705c62fe92e7c65c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:04:09:6c:1e:42:e3:03:80:6e:fe:88:f7:3e:
                    c8:3c:50:1c:b8:c3:3f:a7:8a:99:60:30:c8:5e:10:
                    0a:e1:06:29:cd:8b:6e:80:95:6c:17:b3:ef:67:ba:
                    05:8e:b3:eb:63:6b:a7:8b:55:5c:a7:3c:26:b5:03:
                    5b:89:57:ff:35:10:5b:0e:d1:1e:c8:29:64:95:08:
                    34:26:d4:37:d6:e5:37:44:cf:d8:ee:b9:29:7a:7f:
                    bd:47:65:10:7a:ec:15:8d:41:e9:fd:73:d5:11:f8:
                    e1:18:5f:18:54:91:48:f0:39:a2:56:36:a1:c3:cb:
                    ac:25:6c:0d:57:9c:66:70:dd:3c:08:98:02:28:ed:
                    f3:90:4e:1a:7f:db:bc:58:05:c9:92:4d:f4:7a:1c:
                    ef:d4:0c:fd:cf:c8:d1:52:f1:d3:a4:e9:d8:8b:a4:
                    11:76:00:dd:a0:23:96:21:03:6c:92:19:76:f0:2b:
                    ca:34:7c:ac:eb:3b:e9:f8:a5:e6:e7:a0:85:73:d0:
                    00:43:ee:e9:32:3f:3d:2d:a3:5f:2a:a1:4b:c1:f0:
                    5e:f6:51:a6:fa:06:af:72:79:41:8f:95:ce:85:f6:
                    36:e8:fa:f0:4b:a7:50:3b:58:51:ff:d8:99:f9:c8:
                    10:7a:17:1b:0d:92:53:8f:10:e8:ab:f9:c8:90:12:
                    00:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FB:91:19:41:B3:24:60:EE:FB:B9:70:5C:62:FE:92:E7:C6:5C:76
            X509v3 Authority Key Identifier:
                keyid:76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:6d:72:88:a5:57:2e:1b:cb:96:bd:2d:73:1e:a4:03:1a:96:
         36:90:14:0c:ef:29:bd:b5:59:bf:fd:32:74:fe:5a:1d:87:95:
         de:34:df:ec:aa:8c:0a:0f:91:c1:57:7d:17:38:49:be:1f:57:
         ec:4c:17:50:29:13:4e:b0:08:79:65:6e:18:03:c5:ad:3b:64:
         90:cc:49:99:0c:27:19:d4:c9:50:1f:93:87:96:60:4c:47:47:
         a5:10:1c:cf:f9:c3:ad:d4:89:e4:0c:90:1e:d1:12:f5:69:e0:
         e0:a6:7f:6a:02:78:d3:88:d6:bd:85:07:78:fc:e2:fd:46:91:
         1c:20:15:af:b0:f1:0c:7c:ca:dd:93:23:80:09:42:82:8c:7b:
         20:92:45:fb:6e:07:a3:5b:75:5a:ec:25:43:61:af:85:aa:20:
         1d:c3:22:e0:4b:ea:83:5f:e6:14:15:5d:c6:77:ac:e8:a8:ec:
         b7:3b:8f:66:98:19:41:95:95:97:f1:5f:85:7f:8c:3d:7f:fb:
         a0:ac:9c:60:36:0f:ca:8b:4d:2a:ae:d3:08:6f:e8:bb:a5:c7:
         88:4f:9b:8c:39:c4:37:5b:ac:2f:09:b6:58:3e:b1:16:b5:c6:
         bd:34:dc:07:2a:12:a5:59:78:38:8c:e9:8e:18:b0:4f:68:b9:
         61:94:45:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:46:28 2026 by rpki-client