Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
File:                     edFXhuZE1JfLeisyU71D2S5Jxas.mft (raw, json)
Hash identifier:          YFFGKGaVNql7JiWiwnsECVNp4U6OczY5xV3dcVrMIuk=
Subject key identifier:   C8:4C:00:97:5C:3F:BF:09:C4:D0:69:B8:B9:53:3D:D4:B0:DD:1D:88
Authority key identifier: 79:D1:57:86:E6:44:D4:97:CB:7A:2B:32:53:BD:43:D9:2E:49:C5:AB
Certificate issuer:       /CN=79d15786e644d497cb7a2b3253bd43d92e49c5ab
Certificate serial:       019EC36DCBB5631A6CC71FBD640718A17E97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
Manifest number:          195A
Signing time:             Sun 14 Jun 2026 00:00:13 +0000
Manifest this update:     Sun 14 Jun 2026 00:00:13 +0000
Manifest next update:     Mon 15 Jun 2026 00:00:13 +0000
Files and hashes:         1: 1oQnHtziYZUN1dZc7QkQQyuqMPE.roa (hash: j6nJzk5ZsSd6XpFmMvEADhEDlPdaRY5G9ebbRW3253M=)
                          2: edFXhuZE1JfLeisyU71D2S5Jxas.crl (hash: 9jmeH3uulyAi3zRT7NLdWvW15vsb/hYWA+XtE1hlBOU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:6d:cb:b5:63:1a:6c:c7:1f:bd:64:07:18:a1:7e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d15786e644d497cb7a2b3253bd43d92e49c5ab
        Validity
            Not Before: Jun 14 00:00:13 2026 GMT
            Not After : Jun 15 00:00:13 2026 GMT
        Subject: CN=c84c00975c3fbf09c4d069b8b9533dd4b0dd1d88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:eb:82:e5:2a:b2:11:33:7f:50:d2:d1:96:78:
                    b2:3e:4d:a0:54:c8:a9:bc:74:5f:42:a3:5e:dc:a2:
                    49:1a:63:73:ba:9d:7f:de:22:2f:cf:7f:17:4c:db:
                    6e:e3:f6:10:95:bc:d9:8a:bc:33:db:6d:8f:09:6c:
                    2c:6c:db:6b:88:44:9c:56:10:f1:16:ce:42:2e:6d:
                    43:f7:a0:2a:27:7a:4c:52:3d:3d:15:bc:3e:de:7c:
                    a2:1f:c2:03:9f:8d:a3:1b:9b:cd:fc:f8:0d:10:ce:
                    8b:f6:a4:86:bf:7a:5b:a2:4b:42:d2:e6:67:b1:14:
                    e0:f2:67:1a:49:ea:66:39:b5:ce:cc:6c:eb:cd:fe:
                    dd:3d:52:76:83:f5:3f:ba:61:1c:11:82:94:27:49:
                    b7:b8:6b:61:57:1c:94:24:b0:1b:dc:39:49:7b:96:
                    b2:69:7f:dc:cf:03:39:0d:16:c2:02:e5:7c:5a:72:
                    a9:f4:90:8d:0d:e8:b5:43:7d:96:37:1a:71:3c:a3:
                    b3:fc:8b:61:0f:64:fb:91:4b:dd:e6:03:90:a0:ad:
                    66:97:be:d4:20:d9:39:24:82:ad:0f:a4:cd:54:5b:
                    1c:ba:bf:00:4d:bd:6b:5c:de:5c:e0:4d:18:34:69:
                    45:26:b6:ac:28:b9:c1:59:2c:a7:78:e1:dd:2a:28:
                    f2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:4C:00:97:5C:3F:BF:09:C4:D0:69:B8:B9:53:3D:D4:B0:DD:1D:88
            X509v3 Authority Key Identifier:
                keyid:79:D1:57:86:E6:44:D4:97:CB:7A:2B:32:53:BD:43:D9:2E:49:C5:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:c0:f3:c8:8e:db:04:d3:77:fe:f2:ee:b0:28:7f:fc:53:97:
         cb:60:37:f5:cd:e1:8f:be:44:79:f4:46:d2:b8:b4:71:7b:43:
         50:a2:4b:53:5e:56:e4:b5:d8:46:62:3e:5c:7d:4e:e8:b4:07:
         4f:42:cf:63:63:23:0b:8b:2d:53:92:63:82:fb:d1:99:28:12:
         dd:4f:91:95:70:a4:0e:c6:f3:aa:71:78:75:f0:27:f3:c0:26:
         5e:ba:f7:d4:7a:0f:94:fb:f2:18:11:54:d3:0c:44:8c:f2:25:
         91:58:72:67:8c:d6:1e:ac:9d:0e:fb:4e:6d:54:0c:25:ae:d1:
         be:cc:8f:7f:99:6a:7e:fd:24:64:fd:8f:a4:67:d0:a7:da:7b:
         5b:ab:55:9b:6f:7c:19:8f:8d:13:ad:46:84:c2:f3:b9:6f:0f:
         f0:33:06:6f:2a:9a:8f:fb:d6:db:64:94:81:e3:16:c8:88:48:
         87:41:42:f3:f3:b4:f1:46:69:33:01:eb:67:b0:d3:05:42:1f:
         d2:16:70:3a:63:64:54:41:6d:4a:56:f8:fe:90:eb:9c:06:c8:
         ea:64:cb:ef:72:b1:2b:78:6b:63:40:92:8e:78:31:85:ef:75:
         81:98:c3:a9:1e:0a:96:c2:c6:b3:1c:e3:50:76:94:e9:7a:36:
         dc:fc:18:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:53:32 2026 by rpki-client