Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
File:                     1bFX6mgu908PHvZ_oekWDRfNLpM.mft (raw, json)
Hash identifier:          gcmmk30FqLAn7iVYtjRgvPXa74HNeR8dI7Wto9dqP5I=
Subject key identifier:   29:35:DA:28:85:62:8D:FF:2E:50:7C:89:78:CF:59:80:69:6C:98:57
Authority key identifier: D5:B1:57:EA:68:2E:F7:4F:0F:1E:F6:7F:A1:E9:16:0D:17:CD:2E:93
Certificate issuer:       /CN=d5b157ea682ef74f0f1ef67fa1e9160d17cd2e93
Certificate serial:       019EBE7FE60D3B1599BB681AA7B4FA08BB18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 01:01:53 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:53 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:53 +0000
Files and hashes:         1: 1bFX6mgu908PHvZ_oekWDRfNLpM.crl (hash: R1Z5buAnWXSyUAkxmvV+sbWziUCvrKqXMB/6pljJxfg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:e6:0d:3b:15:99:bb:68:1a:a7:b4:fa:08:bb:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5b157ea682ef74f0f1ef67fa1e9160d17cd2e93
        Validity
            Not Before: Jun 13 01:01:53 2026 GMT
            Not After : Jun 14 01:01:53 2026 GMT
        Subject: CN=2935da2885628dff2e507c8978cf5980696c9857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a6:c5:c5:8b:0b:9e:8d:35:f9:7c:bc:bf:b4:
                    07:70:83:ac:c0:49:ce:b3:ac:69:f5:9a:3e:1a:78:
                    77:b1:a7:82:78:65:cd:7e:62:8d:2e:2f:6d:f9:af:
                    29:dc:81:64:52:2d:fe:9a:7f:72:17:af:8b:0e:1e:
                    70:0c:2a:fc:ff:8e:52:cb:3c:a6:49:9c:e5:03:f1:
                    75:b7:52:70:1c:94:32:d0:b4:50:ac:83:63:b0:8b:
                    7d:c4:67:a3:39:15:30:d9:41:10:01:b5:a2:b7:2e:
                    1c:81:1c:d6:e4:25:3e:ba:0e:fc:f9:ba:34:19:0c:
                    b2:7c:e2:00:c0:3d:cd:d6:d1:22:e4:a5:18:d6:bc:
                    da:cd:95:c4:42:c6:51:14:5b:29:f7:a0:af:60:65:
                    22:49:f7:d0:38:c5:c7:17:cf:c3:da:28:df:9f:25:
                    39:55:c3:32:da:74:0d:03:96:8e:31:5d:2a:2d:86:
                    31:07:00:97:9f:b3:65:c3:91:f2:b2:65:e7:7b:2d:
                    a7:e0:55:9d:2b:e9:e9:c2:cd:96:00:37:a1:26:d8:
                    95:51:a0:f5:4c:99:3f:8e:97:c4:56:29:b6:0b:db:
                    36:93:b3:a1:f3:91:53:b4:57:94:68:de:9d:c7:5c:
                    8a:74:29:a1:9b:11:85:7d:6c:70:23:2f:1d:57:1a:
                    21:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:35:DA:28:85:62:8D:FF:2E:50:7C:89:78:CF:59:80:69:6C:98:57
            X509v3 Authority Key Identifier:
                keyid:D5:B1:57:EA:68:2E:F7:4F:0F:1E:F6:7F:A1:E9:16:0D:17:CD:2E:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:13:cb:7d:21:33:05:8e:eb:6d:74:85:61:6c:ac:b8:20:7e:
         54:5c:b6:e6:66:b7:82:70:8e:c9:f5:5d:c2:57:7d:9f:a8:97:
         79:92:c0:53:b3:c4:ad:b2:49:8e:78:b1:f4:04:6b:58:35:8a:
         33:b8:6d:3f:cd:5f:a2:fb:4e:d9:25:8c:bf:af:3f:b1:a7:77:
         bd:dd:56:0e:7b:6d:85:75:e5:0f:c0:bf:ee:90:a4:d7:cb:e4:
         0c:23:f1:55:ae:64:e7:8a:e6:73:90:1a:58:4e:26:37:1e:f2:
         54:d6:46:f3:c8:e0:13:e5:3a:35:cc:74:4a:e5:7e:a0:0e:52:
         af:dc:2c:54:8c:e1:17:3b:49:ca:5d:f3:61:f0:32:a3:e6:63:
         a5:67:0e:9d:6c:1c:de:d8:d1:5d:c9:30:70:58:f1:d0:e8:ca:
         b7:db:d2:12:05:bd:aa:96:c4:07:bc:40:3b:02:4d:be:19:83:
         2f:17:75:32:1e:1e:d9:b5:fd:11:e0:1b:03:70:c4:70:f8:10:
         76:9c:ed:76:e7:8a:80:91:32:e4:27:ba:af:77:6e:d9:3c:21:
         55:1a:3d:37:8c:e0:a8:8c:e7:89:82:d6:6a:6c:53:f8:e2:e6:
         af:b2:d7:be:7e:c2:02:69:fc:9f:ee:e2:5e:be:27:a8:c8:c7:
         08:74:cf:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+f+YNOxWZu2gap7T6CLsYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YjE1N2VhNjgyZWY3NGYwZjFlZjY3ZmExZTkxNjBkMTdj
ZDJlOTMwHhcNMjYwNjEzMDEwMTUzWhcNMjYwNjE0MDEwMTUzWjAzMTEwLwYDVQQD
EygyOTM1ZGEyODg1NjI4ZGZmMmU1MDdjODk3OGNmNTk4MDY5NmM5ODU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qbFxYsLno01+Xy8v7QHcIOswEnO
s6xp9Zo+Gnh3saeCeGXNfmKNLi9t+a8p3IFkUi3+mn9yF6+LDh5wDCr8/45Syzym
SZzlA/F1t1JwHJQy0LRQrINjsIt9xGejORUw2UEQAbWity4cgRzW5CU+ug78+bo0
GQyyfOIAwD3N1tEi5KUY1rzazZXEQsZRFFsp96CvYGUiSffQOMXHF8/D2ijfnyU5
VcMy2nQNA5aOMV0qLYYxBwCXn7Nlw5HysmXney2n4FWdK+npws2WADehJtiVUaD1
TJk/jpfEVim2C9s2k7Oh85FTtFeUaN6dx1yKdCmhmxGFfWxwIy8dVxohxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCk12iiFYo3/LlB8iXjPWYBpbJhXMB8GA1UdIwQY
MBaAFNWxV+poLvdPDx72f6HpFg0XzS6TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWJGWDZtZ3U5MDhQSHZaX29la1dEUmZOTHBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9mNzZlOGMtODJiMy00N2Q0LWI0YjYt
MDIxYzllZWMwMDc3LzEvMWJGWDZtZ3U5MDhQSHZaX29la1dEUmZOTHBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9mNzZlOGMtODJiMy00N2Q0LWI0YjYtMDIxYzllZWMwMDc3
LzEvMWJGWDZtZ3U5MDhQSHZaX29la1dEUmZOTHBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHxPLfSEz
BY7rbXSFYWysuCB+VFy25ma3gnCOyfVdwld9n6iXeZLAU7PErbJJjnix9ARrWDWK
M7htP81fovtO2SWMv68/sad3vd1WDntthXXlD8C/7pCk18vkDCPxVa5k54rmc5Aa
WE4mNx7yVNZG88jgE+U6Ncx0SuV+oA5Sr9wsVIzhFztJyl3zYfAyo+ZjpWcOnWwc
3tjRXckwcFjx0OjKt9vSEgW9qpbEB7xAOwJNvhmDLxd1Mh4e2bX9EeAbA3DEcPgQ
dpztdueKgJEy5Ce6r3du2TwhVRo9N4zgqIzniYLWamxT+OLmr7LXvn7CAmn8n+7i
Xr4nqMjHCHTPpA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:27:58 2026 by rpki-client