Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
File:                     uSEnfz55VKSvVSCpkEL7CJOvgE0.mft (raw, json)
Hash identifier:          K+vYW0Lrd7aHZiJEwDfI+41vbF3h2JMadnVtVGhMUPQ=
Subject key identifier:   4D:48:62:88:6A:76:FB:35:13:E6:72:84:94:63:28:2D:27:0C:DA:6F
Authority key identifier: B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D
Certificate issuer:       /CN=b921277f3e7954a4af5520a99042fb0893af804d
Certificate serial:       019EC25C9FD6A91B2ED5FDE90DE49F4570CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 19:01:50 +0000
Manifest this update:     Sat 13 Jun 2026 19:01:50 +0000
Manifest next update:     Sun 14 Jun 2026 19:01:50 +0000
Files and hashes:         1: 7XorW7ITUOWgP4pU38fX3RKpcv0.roa (hash: dhKstKlCZm4b7W0PXvIWJClLT8IvcIHMNCKR+Y++DYI=)
                          2: hTUAMk4ivW-zcf6qV0iH6m50Tko.roa (hash: VBCrCjN466HYq/3fbWnNr2nU6AFrUJpSz4d+MsDsH6k=)
                          3: po2AjEIA0cEB2DRz3ItNN0tLtJA.roa (hash: emEIyu5B7Cay8ES1oJZR9gyFPVy8pKl4tqO8qQcgwDQ=)
                          4: uSEnfz55VKSvVSCpkEL7CJOvgE0.crl (hash: Ntuoipjyx1iWz5lfx5uZ05WA46ro80WHH3kUjBgZdtE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5c:9f:d6:a9:1b:2e:d5:fd:e9:0d:e4:9f:45:70:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b921277f3e7954a4af5520a99042fb0893af804d
        Validity
            Not Before: Jun 13 19:01:50 2026 GMT
            Not After : Jun 14 19:01:50 2026 GMT
        Subject: CN=4d4862886a76fb3513e672849463282d270cda6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f4:40:7b:68:9c:b4:c3:24:11:06:24:b2:02:
                    68:04:7d:0c:22:61:42:1a:ed:42:78:60:94:22:c8:
                    59:c9:71:72:ca:82:3b:32:21:a6:c7:73:f7:e3:8c:
                    2f:c5:89:b9:df:c5:a4:13:9e:e7:7f:cd:50:57:02:
                    1f:a1:e6:10:f1:d4:27:d8:c5:bc:12:5f:75:d9:e3:
                    40:6c:b6:37:bf:df:7e:80:06:9a:6e:1f:70:7c:f7:
                    cf:b6:0c:75:e5:be:88:24:84:8c:41:22:89:93:d0:
                    e9:43:9b:e6:cf:07:06:ab:f3:c0:5f:05:b2:50:9f:
                    b7:1f:8d:4b:41:09:4e:1b:86:a8:ce:41:ff:f4:d6:
                    61:d8:1b:b3:e4:cd:9a:3a:60:8b:68:2a:1c:12:fe:
                    a2:ae:cb:0e:e6:bb:15:67:13:0c:53:ee:9e:db:53:
                    a1:8c:31:6f:49:ba:9b:73:87:bc:81:f6:7b:0d:59:
                    c3:d5:27:d0:4f:ca:20:c1:3e:04:ac:45:d1:50:a6:
                    b7:82:fa:28:64:a1:1f:61:24:bf:bc:a1:d8:8f:89:
                    20:8f:76:db:60:f3:5d:7b:f9:c0:ca:16:fb:2d:ca:
                    b7:70:87:4b:a0:47:df:44:d0:75:de:bd:fe:74:fc:
                    48:99:d4:d3:72:de:6f:b1:3b:fe:67:ec:aa:08:27:
                    54:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:48:62:88:6A:76:FB:35:13:E6:72:84:94:63:28:2D:27:0C:DA:6F
            X509v3 Authority Key Identifier:
                keyid:B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:12:06:2a:06:34:1e:7e:71:6f:09:1c:3a:39:76:00:e8:96:
         97:00:37:d4:e5:1d:81:73:d7:3c:a3:8d:10:0c:1d:c7:e5:2e:
         0e:1b:a0:9b:35:85:b0:b4:07:f3:6c:9e:b9:3b:10:90:e6:2d:
         35:b2:bc:77:a2:d2:eb:04:61:3f:28:e5:79:93:01:08:26:58:
         17:d9:39:7d:e8:3b:70:bf:36:f1:95:bd:b2:16:ae:18:f9:a6:
         1f:1e:6b:bd:79:51:0c:e1:7a:bc:f2:4f:8a:df:6f:43:6e:a8:
         91:f8:22:61:1f:89:53:e9:12:6f:02:84:69:9f:c6:c7:6a:1f:
         9f:f6:f4:50:36:2a:73:3a:2b:c6:d5:78:5a:ef:f2:b8:86:6a:
         26:a0:f0:97:db:0b:85:4f:3a:e5:b8:11:ad:10:e4:e8:e6:d1:
         c2:53:5a:48:5f:f5:4d:db:30:03:61:d2:89:37:e5:dc:7a:e8:
         43:6f:b3:3d:d4:fa:f2:4a:ff:6b:e6:f6:de:2b:3e:0c:d8:05:
         cd:54:6e:20:21:45:7f:fc:8a:b6:af:4a:3c:aa:97:01:ed:d2:
         93:a9:82:4c:75:dc:ad:4b:f4:3f:90:50:6c:95:70:a5:8a:c9:
         8f:4e:26:03:38:43:17:4f:11:9a:ea:04:7d:5d:56:80:2c:c3:
         b3:f4:01:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:27:14 2026 by rpki-client