Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
File:                     daWp6O8n4wJyk--E-4-NMPq25tY.mft (raw, json)
Hash identifier:          ospdxeYLieo22XdKSBMlGzhthHAldGVgJzWFD5mjkZo=
Subject key identifier:   13:88:46:CB:BF:28:F0:62:95:91:55:ED:F1:C0:70:20:A5:BC:82:36
Authority key identifier: 75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6
Certificate issuer:       /CN=75a5a9e8ef27e3027293ef84fb8f8d30fab6e6d6
Certificate serial:       019EC4EEA8D8AF3BE6C69E3FD285CD20779E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
Manifest number:          195C
Signing time:             Sun 14 Jun 2026 07:00:35 +0000
Manifest this update:     Sun 14 Jun 2026 07:00:35 +0000
Manifest next update:     Mon 15 Jun 2026 07:00:35 +0000
Files and hashes:         1: daWp6O8n4wJyk--E-4-NMPq25tY.crl (hash: wr27ErlZQVF/O8cZhzFV2mLvICXpnaKdDUGwMuz8YGw=)
                          2: nDj9PT5N_QWx4Sz5FT7RF4CSpok.roa (hash: h0RW3y25bIVEC8aKObDu/RDtNTnrw2v6jC5PsgpIK5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 04:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:ee:a8:d8:af:3b:e6:c6:9e:3f:d2:85:cd:20:77:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75a5a9e8ef27e3027293ef84fb8f8d30fab6e6d6
        Validity
            Not Before: Jun 14 07:00:35 2026 GMT
            Not After : Jun 15 07:00:35 2026 GMT
        Subject: CN=138846cbbf28f062959155edf1c07020a5bc8236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:94:91:27:5e:26:c1:34:6f:3d:f4:c2:9e:57:
                    6c:f1:45:2c:62:53:41:30:7c:87:3f:86:9a:71:90:
                    76:94:79:2c:3c:af:a5:84:39:eb:f0:1f:d7:9f:b9:
                    33:e2:4e:27:01:21:a4:98:e2:4b:41:76:2e:2f:3d:
                    89:c3:c7:d2:50:a5:0c:cf:a6:7e:d1:1f:4d:fa:57:
                    37:c9:88:02:e5:13:5e:41:52:48:84:7d:05:2b:73:
                    f4:d7:d8:e4:a5:a1:a8:01:e5:59:bb:72:d7:44:73:
                    1a:c3:3d:b1:de:3a:e3:11:e3:39:72:b0:9f:4e:b3:
                    79:53:0d:8c:d7:55:fd:29:a9:3f:50:b8:41:99:7f:
                    4b:18:1e:df:68:4f:3b:61:c9:4d:7a:50:e7:00:8b:
                    7c:ad:2c:64:dd:b2:d8:c3:67:67:83:01:85:a9:dc:
                    fd:6b:f2:19:79:02:47:a6:65:1b:43:86:d2:dc:e2:
                    94:63:fa:2d:0c:10:b3:d3:70:cf:b4:4a:68:79:60:
                    05:ec:be:41:0d:7a:4f:2f:0c:88:9a:f4:07:80:b8:
                    40:06:b0:3a:f2:79:66:8f:ef:78:6d:02:63:48:ed:
                    09:ec:79:94:72:b0:06:c9:09:9e:2f:eb:16:42:f4:
                    70:76:d6:c9:22:01:f7:5d:8c:63:02:6f:dc:08:a4:
                    a6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:88:46:CB:BF:28:F0:62:95:91:55:ED:F1:C0:70:20:A5:BC:82:36
            X509v3 Authority Key Identifier:
                keyid:75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:f2:4f:b7:c3:bc:54:f0:e8:26:5d:76:ed:b5:6c:f3:8e:ff:
         3f:39:1a:26:d9:5f:90:18:d1:b7:e9:93:d6:5f:9b:97:57:f8:
         6b:e1:f6:62:ca:43:69:4b:e3:99:09:90:30:45:ee:ec:07:4e:
         2c:72:3d:21:6b:43:8c:5d:c9:47:f9:2f:7f:0d:9b:37:2c:a0:
         4f:1f:f5:dc:41:5f:92:ad:55:0e:d5:e8:98:30:54:46:67:53:
         bc:0f:87:ad:70:96:2b:09:ae:26:ad:0b:57:dd:27:e9:da:6e:
         f9:a9:13:77:0b:a2:4f:c0:0e:69:bf:ec:89:c3:d8:af:84:97:
         e0:55:8b:91:a6:e4:f7:15:91:cf:10:75:c7:7b:d8:b5:83:0f:
         8d:b7:8e:54:66:d5:af:1e:f1:12:c0:1f:99:a0:ee:8e:e7:b9:
         4c:74:a9:21:5d:12:59:75:84:e9:df:25:c7:80:14:bd:11:c3:
         ad:21:59:fd:4e:1a:4d:19:3e:98:f3:a9:68:49:05:f6:88:3b:
         59:d5:a7:22:f1:24:62:fe:d7:5d:af:c0:80:97:7d:cf:80:ca:
         c0:89:fc:a1:e0:d0:42:24:21:09:02:ab:bd:c1:53:69:d0:fc:
         3a:b4:b9:db:a2:0a:8a:1e:46:3c:11:55:f7:fb:ca:d3:fa:f3:
         18:56:f6:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7E7qjYrzvmxp4/0oXNIHeeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YTVhOWU4ZWYyN2UzMDI3MjkzZWY4NGZiOGY4ZDMwZmFi
NmU2ZDYwHhcNMjYwNjE0MDcwMDM1WhcNMjYwNjE1MDcwMDM1WjAzMTEwLwYDVQQD
EygxMzg4NDZjYmJmMjhmMDYyOTU5MTU1ZWRmMWMwNzAyMGE1YmM4MjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5SRJ14mwTRvPfTCnlds8UUsYlNB
MHyHP4aacZB2lHksPK+lhDnr8B/Xn7kz4k4nASGkmOJLQXYuLz2Jw8fSUKUMz6Z+
0R9N+lc3yYgC5RNeQVJIhH0FK3P019jkpaGoAeVZu3LXRHMawz2x3jrjEeM5crCf
TrN5Uw2M11X9Kak/ULhBmX9LGB7faE87YclNelDnAIt8rSxk3bLYw2dngwGFqdz9
a/IZeQJHpmUbQ4bS3OKUY/otDBCz03DPtEpoeWAF7L5BDXpPLwyImvQHgLhABrA6
8nlmj+94bQJjSO0J7HmUcrAGyQmeL+sWQvRwdtbJIgH3XYxjAm/cCKSmTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOIRsu/KPBilZFV7fHAcCClvII2MB8GA1UdIwQY
MBaAFHWlqejvJ+MCcpPvhPuPjTD6tubWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGFXcDZPOG40d0p5ay0tRS00LU5NUHEyNXRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9jYTZmNjktNmZlYy00NzUzLWFkNzct
ZWI2ZjlkZjA0NWIyLzEvZGFXcDZPOG40d0p5ay0tRS00LU5NUHEyNXRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9jYTZmNjktNmZlYy00NzUzLWFkNzctZWI2ZjlkZjA0NWIy
LzEvZGFXcDZPOG40d0p5ay0tRS00LU5NUHEyNXRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAvJPt8O8
VPDoJl127bVs847/PzkaJtlfkBjRt+mT1l+bl1f4a+H2YspDaUvjmQmQMEXu7AdO
LHI9IWtDjF3JR/kvfw2bNyygTx/13EFfkq1VDtXomDBURmdTvA+HrXCWKwmuJq0L
V90n6dpu+akTdwuiT8AOab/sicPYr4SX4FWLkabk9xWRzxB1x3vYtYMPjbeOVGbV
rx7xEsAfmaDujue5THSpIV0SWXWE6d8lx4AUvRHDrSFZ/U4aTRk+mPOpaEkF9og7
WdWnIvEkYv7XXa/AgJd9z4DKwIn8oeDQQiQhCQKrvcFTadD8OrS526IKih5GPBFV
9/vK0/rzGFb2OQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 14:04:18 2026 by rpki-client