Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.mft
File:                     00J0yPw5e9vGx1haFcgyErBQIh8.mft (raw, json)
Hash identifier:          ago8St9oQAxxXssf5dlzVaYzHZslpQ7lGO3+QYWry4s=
Subject key identifier:   DA:E8:05:CC:86:B9:8A:29:38:9A:10:5B:1D:CC:35:1A:F9:F3:73:09
Authority key identifier: D3:42:74:C8:FC:39:7B:DB:C6:C7:58:5A:15:C8:32:12:B0:50:22:1F
Certificate issuer:       /CN=d34274c8fc397bdbc6c7585a15c83212b050221f
Certificate serial:       019EC06DC4056842ECEDE62F1FBCABBEF9A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/00J0yPw5e9vGx1haFcgyErBQIh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 10:01:19 +0000
Manifest this update:     Sat 13 Jun 2026 10:01:19 +0000
Manifest next update:     Sun 14 Jun 2026 10:01:19 +0000
Files and hashes:         1: 00J0yPw5e9vGx1haFcgyErBQIh8.crl (hash: 7URosENnjkGxpDMewGXruL970NCgpayxHkUG58RExLU=)
                          2: i6kBtCsAIrjCwUpHjGwj5ys2Jrk.roa (hash: zMudQcER0t4uUPhQ5L2fTWT4s9Z4p0bv0wrDyCzzObY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/00J0yPw5e9vGx1haFcgyErBQIh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:c4:05:68:42:ec:ed:e6:2f:1f:bc:ab:be:f9:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d34274c8fc397bdbc6c7585a15c83212b050221f
        Validity
            Not Before: Jun 13 10:01:19 2026 GMT
            Not After : Jun 14 10:01:19 2026 GMT
        Subject: CN=dae805cc86b98a29389a105b1dcc351af9f37309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:98:41:cf:84:53:12:f0:ce:03:8f:1b:7a:ff:
                    6d:aa:b7:b7:53:32:e7:1a:e0:cc:f4:cd:2a:90:44:
                    53:2c:bf:d7:0e:95:6a:c2:ac:a2:aa:1c:63:1a:32:
                    8e:f2:a7:eb:76:09:ba:e6:fb:63:72:3d:f0:4d:c9:
                    45:3c:f3:01:5d:e2:af:8d:82:41:d9:23:66:34:7c:
                    e1:25:b5:b4:15:64:8e:e8:f5:4b:50:75:7e:58:0b:
                    9c:5c:f4:3b:00:1b:6f:be:20:21:4d:80:4f:5d:29:
                    27:45:84:1c:1f:7e:de:b9:4f:dd:68:f9:da:7b:bb:
                    96:b4:ec:39:6e:27:7a:8d:09:0e:2e:c8:e7:64:c7:
                    0e:b9:23:fc:1c:ed:4b:8d:31:16:5b:c4:55:f6:5f:
                    94:2a:ee:ba:73:04:eb:07:d7:93:91:67:e0:13:06:
                    4b:23:d9:fc:f6:16:d9:99:20:33:59:e9:20:0d:5f:
                    28:e7:cb:a7:3c:41:82:3a:3d:1a:51:6e:29:60:98:
                    ff:69:ae:53:c5:32:c7:aa:7e:08:df:70:ec:3b:52:
                    09:3f:12:19:de:c7:82:2c:28:43:13:aa:0d:1a:80:
                    43:6c:fc:ec:93:ec:b3:8c:0a:32:00:a8:81:65:40:
                    77:99:b7:18:27:e4:1a:6a:d8:c7:9c:d5:30:e0:fc:
                    53:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E8:05:CC:86:B9:8A:29:38:9A:10:5B:1D:CC:35:1A:F9:F3:73:09
            X509v3 Authority Key Identifier:
                keyid:D3:42:74:C8:FC:39:7B:DB:C6:C7:58:5A:15:C8:32:12:B0:50:22:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00J0yPw5e9vGx1haFcgyErBQIh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:56:40:15:12:26:dd:e7:61:cf:18:86:6b:4a:b6:b9:c7:93:
         6c:e5:b2:72:52:7e:5d:c2:79:9a:fd:75:69:a9:18:98:1d:5e:
         23:d9:40:2c:f8:ef:95:92:64:21:90:ef:37:9e:ee:e5:ca:97:
         1c:34:07:09:ea:c5:f2:18:4b:5e:f8:38:f4:11:22:f6:21:0a:
         7a:96:b8:19:be:71:1d:fe:ef:4e:bd:ae:58:02:bb:93:bb:91:
         d7:16:56:f2:94:74:7a:95:9c:e2:5e:32:8a:d6:7e:90:7d:e4:
         bb:a1:65:83:6e:64:89:2c:bc:82:8b:3a:f8:62:64:04:11:0e:
         72:2b:f3:9a:be:58:5c:66:94:ac:0d:b0:76:b2:53:4c:1a:e3:
         e0:24:a2:62:a7:1c:12:5c:33:43:5a:dd:27:c0:26:7a:c7:e3:
         b4:a6:dc:25:7a:f2:78:cd:1a:c7:8b:ce:e8:d6:9d:de:b6:c1:
         8d:98:2e:bb:f3:a9:7d:e9:9b:3a:73:4c:82:b9:71:89:fd:30:
         54:9b:3b:50:fc:f2:1f:01:b2:af:a9:60:bb:db:9b:c3:03:03:
         af:46:81:6e:c5:71:ea:be:36:aa:c9:f6:19:58:f8:f7:81:de:
         45:b4:97:01:d7:f7:da:6f:d6:7d:c7:3f:49:9c:cd:c0:e5:05:
         1c:f1:d0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:03:58 2026 by rpki-client