Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft
File:                     0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft (raw, json)
Hash identifier:          koGOxuBPKLRcnewRgLZNMCXwyuAusUcAl7lYru6gamA=
Subject key identifier:   D4:30:26:A6:56:82:40:9D:64:DB:7E:78:09:ED:D8:33:B1:F9:68:38
Authority key identifier: D0:BD:40:EF:34:06:64:71:5C:8C:2C:FA:50:E3:D6:1B:A2:86:E0:37
Certificate issuer:       /CN=d0bd40ef340664715c8c2cfa50e3d61ba286e037
Certificate serial:       019EC0A3D126B0D317FEE7B6337DD248FC7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 11:00:21 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:21 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:21 +0000
Files and hashes:         1: 0L1A7zQGZHFcjCz6UOPWG6KG4Dc.crl (hash: zFjiZzdoTQmfPNnqXVglbRDSQLcUdWnlx7pcOb921Vg=)
                          2: 9Bpiuh903cf2KUyc3B43Sh-h6cU.roa (hash: vOwl8xFJY0duh2VdVAScqH5k4a2xL8x3qVJv4PynVyI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a3:d1:26:b0:d3:17:fe:e7:b6:33:7d:d2:48:fc:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0bd40ef340664715c8c2cfa50e3d61ba286e037
        Validity
            Not Before: Jun 13 11:00:21 2026 GMT
            Not After : Jun 14 11:00:21 2026 GMT
        Subject: CN=d43026a65682409d64db7e7809edd833b1f96838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:75:e5:0f:95:90:1a:40:9e:13:29:6f:8e:fd:
                    b5:86:a2:9e:d4:fd:5a:b2:7e:a6:03:a5:5e:5c:de:
                    c1:93:f5:8f:d4:e9:b8:05:ee:28:aa:34:41:66:99:
                    87:66:13:c6:ae:4c:2d:61:44:fa:df:ed:f3:13:4a:
                    7f:99:b4:b9:03:3d:65:c3:b3:c7:4b:9d:25:9a:de:
                    27:11:b7:88:27:0f:93:07:a1:e4:f5:5f:cb:bd:c3:
                    be:fa:4b:73:d9:99:6c:a7:80:55:10:d6:5f:8a:c5:
                    c7:1c:16:f6:f7:7f:65:4d:70:b7:0b:df:62:68:d8:
                    cd:85:94:b6:f7:c1:a8:7d:13:26:ec:f3:7f:d3:79:
                    7f:29:b8:5a:0a:90:33:c9:78:90:0f:30:cd:5d:9d:
                    54:05:57:72:40:ef:83:26:e1:f7:1a:7b:cf:57:7c:
                    7d:6b:bd:45:df:6f:be:4c:9a:4e:19:f2:4a:52:b9:
                    09:cb:3d:75:8d:03:59:50:c0:8e:2f:76:12:4c:1b:
                    d8:a3:c3:df:f5:bf:e2:08:a1:73:31:94:85:2a:38:
                    87:52:c8:14:f2:d2:c4:05:4a:b0:c3:de:ec:a1:d2:
                    e4:f3:94:ae:38:05:ea:0f:76:a7:6f:13:86:52:52:
                    de:86:e3:98:59:1e:af:3c:45:3a:1b:09:2b:b8:2e:
                    fc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:30:26:A6:56:82:40:9D:64:DB:7E:78:09:ED:D8:33:B1:F9:68:38
            X509v3 Authority Key Identifier:
                keyid:D0:BD:40:EF:34:06:64:71:5C:8C:2C:FA:50:E3:D6:1B:A2:86:E0:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:1a:78:1a:0d:5b:bb:8e:7e:94:71:cb:f3:0f:73:9e:80:07:
         91:6c:b0:b7:56:e7:c7:19:67:5d:b1:2a:8d:2f:61:87:33:4b:
         f6:27:91:9f:de:35:5d:15:26:1b:40:a4:c9:e4:6c:03:b2:bb:
         90:78:d1:3e:3e:58:17:ec:17:d4:43:bc:98:23:e9:76:46:a4:
         57:04:d0:f7:44:32:eb:43:50:f2:61:7c:a9:c6:86:eb:40:ce:
         55:0f:eb:f6:25:6d:d1:b0:cd:03:07:32:5c:eb:9a:22:af:e5:
         a8:52:0c:02:2f:b6:7e:37:f2:d1:33:25:ab:46:61:e9:2f:78:
         8b:8a:04:d0:db:22:6b:e0:b1:d8:4f:c1:02:22:40:30:e8:46:
         71:45:b7:2d:5d:cf:e4:f3:3f:3f:1e:35:a5:2e:d9:05:4b:35:
         15:b5:56:52:38:92:0b:0a:ce:2f:c7:1d:58:41:08:76:df:e5:
         bc:b8:af:17:4c:fb:6a:0f:be:dc:e1:e2:47:01:7c:7f:d5:7c:
         38:9e:95:7e:20:27:36:8d:1b:d5:9d:cb:01:28:e0:27:1b:24:
         0b:95:1a:81:8c:44:56:d6:df:68:f9:53:bd:1b:88:a8:40:ac:
         43:5d:5d:ae:d2:f9:63:fc:ed:f5:40:2e:86:5f:4b:1b:b8:26:
         00:a0:a9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:18:31 2026 by rpki-client