Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft
File:                     DASLX4FSNcOT_qdh4H64uLv4f9M.mft (raw, json)
Hash identifier:          K65uUMLTio3AF7K40J5jndPVsktzwJGd/kSlJf12eO8=
Subject key identifier:   7D:1E:AF:FC:E4:B2:AF:9E:44:BA:F4:A5:AA:9A:28:66:73:85:56:96
Authority key identifier: 0C:04:8B:5F:81:52:35:C3:93:FE:A7:61:E0:7E:B8:B8:BB:F8:7F:D3
Certificate issuer:       /CN=0c048b5f815235c393fea761e07eb8b8bbf87fd3
Certificate serial:       019EBEEC5336DCD5D301EF99713A26A3BD07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft
Manifest number:          195F
Signing time:             Sat 13 Jun 2026 03:00:19 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:19 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:19 +0000
Files and hashes:         1: 1-KiwJ7_SOfhMSL1wh3lOIzJdqf0.roa (hash: Q/Tsqdd7rd4T6xRRkiE1SIt+/mkcRs5YGJIeO2ihizo=)
                          2: DASLX4FSNcOT_qdh4H64uLv4f9M.crl (hash: tGNVKmeMndriyh99S2RLDV2TJOyC7bDEX7vbfhzI4VQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:53:36:dc:d5:d3:01:ef:99:71:3a:26:a3:bd:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c048b5f815235c393fea761e07eb8b8bbf87fd3
        Validity
            Not Before: Jun 13 03:00:19 2026 GMT
            Not After : Jun 14 03:00:19 2026 GMT
        Subject: CN=7d1eaffce4b2af9e44baf4a5aa9a286673855696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e8:a9:f2:f6:66:fa:da:2c:39:d3:a1:71:ef:
                    76:bd:07:8f:32:97:fb:d0:86:8c:89:d6:4a:60:6b:
                    0c:b7:0a:84:48:9e:82:47:a4:e1:23:9d:94:c1:20:
                    cf:7c:69:3f:e8:d7:b3:ba:d7:03:a7:47:f8:35:a9:
                    2a:12:4e:5f:34:43:cd:4a:6c:4d:e8:32:6e:cb:69:
                    ed:5e:a0:ba:47:88:b2:a4:b6:12:96:2c:8a:17:cd:
                    3a:ee:7c:ce:53:8c:82:60:4c:5d:7c:31:d1:8c:5d:
                    0d:a7:21:96:a2:45:5e:65:6d:32:a2:9f:36:b9:ad:
                    30:9b:50:e2:1b:d6:1b:ee:97:f2:c0:fa:28:91:3d:
                    44:2f:80:7c:b4:39:cd:c2:4e:4e:92:c6:0c:5e:18:
                    0c:b9:6f:4f:f5:35:12:ab:90:3d:58:26:dc:46:80:
                    e8:db:cd:8b:07:33:11:5d:ba:9a:a6:c2:a2:27:c7:
                    1b:5d:69:03:1d:3b:c6:38:d9:c4:d7:f4:1b:53:1d:
                    8c:e5:84:80:c7:38:f0:00:b9:ec:c7:c3:38:1b:9d:
                    af:8d:33:08:9d:c6:b9:32:44:cb:b1:b6:e4:d1:4c:
                    3e:42:1c:4a:da:ff:1c:2d:f4:a6:81:ad:bb:ea:97:
                    6e:f7:ed:58:95:80:57:83:4d:af:9f:19:42:b7:c1:
                    4d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:1E:AF:FC:E4:B2:AF:9E:44:BA:F4:A5:AA:9A:28:66:73:85:56:96
            X509v3 Authority Key Identifier:
                keyid:0C:04:8B:5F:81:52:35:C3:93:FE:A7:61:E0:7E:B8:B8:BB:F8:7F:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:75:14:f7:6d:1c:91:f8:cf:59:34:38:df:36:e9:28:fb:df:
         9a:49:d3:0c:94:4b:7a:13:ca:b2:29:41:37:f5:69:92:b7:50:
         ee:ae:4e:93:12:86:57:5c:9f:21:f7:44:2e:ad:96:47:92:be:
         ec:0f:6b:59:16:af:77:2f:f3:19:7f:37:a5:87:ff:16:e0:ec:
         05:77:3b:19:65:2f:86:ae:e6:c3:9d:31:4d:f9:38:8a:89:47:
         35:16:13:4e:48:3a:94:70:b8:65:db:8c:06:c6:aa:c9:7e:27:
         19:7b:59:31:6e:37:65:c7:a9:14:73:48:ef:bd:e0:09:bb:d0:
         a8:7a:ba:39:0c:32:fa:24:9e:db:4a:39:2f:fb:2d:f1:f9:88:
         1a:90:c2:76:45:2c:bc:dc:60:86:d9:e4:21:b2:62:ef:18:0c:
         80:5b:62:aa:9e:1b:32:cd:a8:4a:a3:16:9f:f8:b0:49:2a:a9:
         9e:91:79:57:a5:ac:a4:80:b6:ca:80:e2:ad:7c:dc:90:ac:76:
         5d:21:39:4b:b0:ba:fd:84:40:13:08:79:53:39:05:2c:56:01:
         a0:97:1b:e5:2a:74:88:3e:07:df:91:76:d7:50:da:4d:4f:9e:
         9f:0f:6c:f0:7c:b6:26:22:d7:32:a9:88:7f:92:15:db:dd:b0:
         a8:35:df:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+7FM23NXTAe+ZcTomo70HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMDQ4YjVmODE1MjM1YzM5M2ZlYTc2MWUwN2ViOGI4YmJm
ODdmZDMwHhcNMjYwNjEzMDMwMDE5WhcNMjYwNjE0MDMwMDE5WjAzMTEwLwYDVQQD
Eyg3ZDFlYWZmY2U0YjJhZjllNDRiYWY0YTVhYTlhMjg2NjczODU1Njk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuip8vZm+tosOdOhce92vQePMpf7
0IaMidZKYGsMtwqESJ6CR6ThI52UwSDPfGk/6NezutcDp0f4NakqEk5fNEPNSmxN
6DJuy2ntXqC6R4iypLYSliyKF8067nzOU4yCYExdfDHRjF0NpyGWokVeZW0yop82
ua0wm1DiG9Yb7pfywPookT1EL4B8tDnNwk5OksYMXhgMuW9P9TUSq5A9WCbcRoDo
282LBzMRXbqapsKiJ8cbXWkDHTvGONnE1/QbUx2M5YSAxzjwALnsx8M4G52vjTMI
nca5MkTLsbbk0Uw+QhxK2v8cLfSmga276pdu9+1YlYBXg02vnxlCt8FNHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0er/zksq+eRLr0paqaKGZzhVaWMB8GA1UdIwQY
MBaAFAwEi1+BUjXDk/6nYeB+uLi7+H/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREFTTFg0RlNOY09UX3FkaDRINjR1THY0ZjlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My82ZDdjMWMtOGViZC00MjQ2LTgzZjkt
NWYzY2MzMThmMTgwLzEvREFTTFg0RlNOY09UX3FkaDRINjR1THY0ZjlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My82ZDdjMWMtOGViZC00MjQ2LTgzZjktNWYzY2MzMThmMTgw
LzEvREFTTFg0RlNOY09UX3FkaDRINjR1THY0ZjlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqHUU920c
kfjPWTQ43zbpKPvfmknTDJRLehPKsilBN/VpkrdQ7q5OkxKGV1yfIfdELq2WR5K+
7A9rWRavdy/zGX83pYf/FuDsBXc7GWUvhq7mw50xTfk4iolHNRYTTkg6lHC4ZduM
BsaqyX4nGXtZMW43ZcepFHNI773gCbvQqHq6OQwy+iSe20o5L/st8fmIGpDCdkUs
vNxghtnkIbJi7xgMgFtiqp4bMs2oSqMWn/iwSSqpnpF5V6WspIC2yoDirXzckKx2
XSE5S7C6/YRAEwh5UzkFLFYBoJcb5Sp0iD4H35F211DaTU+enw9s8Hy2JiLXMqmI
f5IV292wqDXf8w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:08:29 2026 by rpki-client