Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
File:                     aDg_-p8gvwIcCQJimUIS1xZn7QI.mft (raw, json)
Hash identifier:          0h0n9bBaa3Y0muP/1anzvhTePruJwJMhxSEyNgIAOeQ=
Subject key identifier:   F9:3C:9F:FE:EE:A8:20:63:36:D0:5E:9B:1C:BA:A5:19:46:65:B5:90
Authority key identifier: 68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02
Certificate issuer:       /CN=68383ffa9f20bf021c090262994212d71667ed02
Certificate serial:       019EBF5AA83190AB0DDFE2751D98BBF714A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 05:00:49 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:49 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:49 +0000
Files and hashes:         1: 1U6aj4iJ-y4osFcsxDSCV5GyIkA.roa (hash: UcR0Wdw86ylcwoNswSuJ+itYBJCzYFEmZPLbaTiKVvU=)
                          2: IGOtfSCHb-PcgN6otd-LjwgBgcY.roa (hash: mIaFqnuv58vVdHvIIehpAChWeIDBu6nXZiEhEu38H88=)
                          3: QgnGVYDtjT7Xiv9bSXAiMYcOfC4.roa (hash: 7jyRblRC2U+uJRMS8zI6UzI2pyhKabixPwkdu8GGav8=)
                          4: aDg_-p8gvwIcCQJimUIS1xZn7QI.crl (hash: 17y5fLfdNVPeOENcQGKj0Flw/y2Rqi+IxoRUn7LqhdQ=)
                          5: rgfQ7RnUFYhCryuejjkJdBuljlI.roa (hash: zzWPOS9zzP/+5hzXtVsNoePksI2Qor0wOj+9tNGbjH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:a8:31:90:ab:0d:df:e2:75:1d:98:bb:f7:14:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68383ffa9f20bf021c090262994212d71667ed02
        Validity
            Not Before: Jun 13 05:00:49 2026 GMT
            Not After : Jun 14 05:00:49 2026 GMT
        Subject: CN=f93c9ffeeea8206336d05e9b1cbaa5194665b590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1a:d9:3a:0d:44:43:ed:8a:96:bf:ed:4b:2f:
                    71:22:b4:58:38:19:67:06:92:90:1a:78:48:f2:ce:
                    fb:93:42:f2:9b:19:c6:37:ee:78:5b:a7:8c:02:bd:
                    fe:39:b6:75:17:de:60:80:11:e3:be:bf:a2:9e:77:
                    83:ae:a1:5f:38:e6:ae:9d:17:20:24:16:25:84:77:
                    ee:44:0d:ce:52:e4:6c:45:0d:2b:dc:6a:84:bf:1d:
                    a9:b8:fd:22:f2:4e:d3:23:81:63:ab:74:78:b7:dd:
                    35:98:21:25:53:0b:54:08:0c:7f:34:dc:52:d5:62:
                    56:26:79:13:70:7f:88:ee:af:16:06:0a:c7:0c:0d:
                    d0:94:f0:3c:a7:2b:ef:fc:99:fb:c1:a7:39:6c:fc:
                    fc:18:c6:71:af:89:04:9c:00:e1:26:a5:6a:3a:7c:
                    ed:35:94:e9:af:d1:7c:4e:5f:f8:af:8e:50:9e:4f:
                    c9:2e:15:13:7f:f5:b4:e1:9a:c3:c9:90:7c:4e:98:
                    a9:aa:ae:e7:c4:cb:b2:20:e6:a2:d5:17:55:4a:9f:
                    34:8e:07:cb:d1:ec:b3:5c:13:bb:d8:14:36:01:ae:
                    26:87:57:25:83:0c:52:4a:ca:a0:71:1a:b1:c8:bb:
                    56:4b:cf:e0:19:d8:ac:6b:e4:2b:04:2a:c2:74:6e:
                    4e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3C:9F:FE:EE:A8:20:63:36:D0:5E:9B:1C:BA:A5:19:46:65:B5:90
            X509v3 Authority Key Identifier:
                keyid:68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:39:01:61:d9:7d:c1:d2:54:e7:5d:5e:47:9e:91:2f:e6:e6:
         4c:66:00:db:fc:52:d9:73:de:f2:7d:3e:2e:59:8a:07:60:03:
         67:21:5d:97:f9:b1:50:a7:d8:5c:8a:29:f0:9b:44:ac:77:c1:
         56:25:cd:93:e4:fc:ee:70:83:bd:cf:b0:24:21:28:4a:e0:59:
         ed:88:71:d8:03:60:70:64:8e:e1:90:11:13:0c:cd:cc:a8:dd:
         67:04:8f:1b:dc:f5:53:15:85:fa:7b:39:aa:31:8c:81:90:e6:
         94:04:d3:60:41:4e:f0:54:e3:f0:45:0f:e4:f0:41:a4:25:ff:
         1f:d2:80:9f:56:dd:93:45:1a:fb:bc:1c:0c:4f:73:7b:82:d2:
         f8:31:af:88:81:50:de:09:fb:ea:1c:15:3f:e5:ac:6c:49:10:
         10:ad:ea:68:90:12:ef:ac:8f:a4:d8:b7:2b:95:f3:c5:28:03:
         41:0e:57:df:d0:84:62:dc:25:76:59:c4:b6:25:b5:b2:45:13:
         b4:db:2e:42:f2:9d:de:b8:1d:22:5d:54:08:13:00:63:3b:aa:
         1c:3d:87:75:e6:96:3b:51:7d:0c:57:05:93:76:02:b5:db:b9:
         8f:0e:d5:6e:02:60:db:ef:7e:2c:a1:37:cb:ba:58:36:0f:d7:
         0f:cd:ca:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WqgxkKsN3+J1HZi79xSmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MzgzZmZhOWYyMGJmMDIxYzA5MDI2Mjk5NDIxMmQ3MTY2
N2VkMDIwHhcNMjYwNjEzMDUwMDQ5WhcNMjYwNjE0MDUwMDQ5WjAzMTEwLwYDVQQD
EyhmOTNjOWZmZWVlYTgyMDYzMzZkMDVlOWIxY2JhYTUxOTQ2NjViNTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BrZOg1EQ+2Klr/tSy9xIrRYOBln
BpKQGnhI8s77k0LymxnGN+54W6eMAr3+ObZ1F95ggBHjvr+inneDrqFfOOaunRcg
JBYlhHfuRA3OUuRsRQ0r3GqEvx2puP0i8k7TI4Fjq3R4t901mCElUwtUCAx/NNxS
1WJWJnkTcH+I7q8WBgrHDA3QlPA8pyvv/Jn7wac5bPz8GMZxr4kEnADhJqVqOnzt
NZTpr9F8Tl/4r45Qnk/JLhUTf/W04ZrDyZB8Tpipqq7nxMuyIOai1RdVSp80jgfL
0eyzXBO72BQ2Aa4mh1clgwxSSsqgcRqxyLtWS8/gGdisa+QrBCrCdG5O4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPk8n/7uqCBjNtBemxy6pRlGZbWQMB8GA1UdIwQY
MBaAFGg4P/qfIL8CHAkCYplCEtcWZ+0CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYURnXy1wOGd2d0ljQ1FKaW1VSVMxeFpuN1FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iOGU5NDAtMjIwMS00MDZlLThhYWYt
NDA2MGU5ZWVlYjllLzEvYURnXy1wOGd2d0ljQ1FKaW1VSVMxeFpuN1FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9iOGU5NDAtMjIwMS00MDZlLThhYWYtNDA2MGU5ZWVlYjll
LzEvYURnXy1wOGd2d0ljQ1FKaW1VSVMxeFpuN1FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgzkBYdl9
wdJU511eR56RL+bmTGYA2/xS2XPe8n0+LlmKB2ADZyFdl/mxUKfYXIop8JtErHfB
ViXNk+T87nCDvc+wJCEoSuBZ7Yhx2ANgcGSO4ZAREwzNzKjdZwSPG9z1UxWF+ns5
qjGMgZDmlATTYEFO8FTj8EUP5PBBpCX/H9KAn1bdk0Ua+7wcDE9ze4LS+DGviIFQ
3gn76hwVP+WsbEkQEK3qaJAS76yPpNi3K5XzxSgDQQ5X39CEYtwldlnEtiW1skUT
tNsuQvKd3rgdIl1UCBMAYzuqHD2HdeaWO1F9DFcFk3YCtdu5jw7VbgJg2+9+LKE3
y7pYNg/XD83Kow==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:23:01 2026 by rpki-client