Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
File:                     ERhPtlA6dgZX-QJw4naj_LULjo8.mft (raw, json)
Hash identifier:          8qfXhpho+60NOuVKkuKr23aKXYlyIZLiHTgdr1Wswx0=
Subject key identifier:   F1:EA:10:F8:EA:46:D7:CB:F7:FD:74:4E:06:50:28:03:03:7A:66:97
Authority key identifier: 11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F
Certificate issuer:       /CN=11184fb6503a760657f90270e276a3fcb50b8e8f
Certificate serial:       019EBF5AB38D7C109B62F09317046DAF2091
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 05:00:52 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:52 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:52 +0000
Files and hashes:         1: ERhPtlA6dgZX-QJw4naj_LULjo8.crl (hash: 2VS5ODbhRJPLqcW7HQWH8XzhiGA89JuIH0ROF+hVnNg=)
                          2: I9hNFsiUppOM9VZIcAfH4qbXw_k.roa (hash: W4bc2pkEjBkLLPhivhIIPW+Vl4uMQLKBx8OjNwjL98A=)
                          3: lypKNyumbp3Rx5Ca8OfilFGC6co.roa (hash: 1pqIQQrSkAL4LQAupUembuigh5NslsCnzhntmGy1wNg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:b3:8d:7c:10:9b:62:f0:93:17:04:6d:af:20:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11184fb6503a760657f90270e276a3fcb50b8e8f
        Validity
            Not Before: Jun 13 05:00:52 2026 GMT
            Not After : Jun 14 05:00:52 2026 GMT
        Subject: CN=f1ea10f8ea46d7cbf7fd744e06502803037a6697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:61:35:ef:d1:92:75:6e:bd:d5:dd:9e:06:19:
                    c8:59:10:91:e7:6e:79:f0:c1:3f:11:ef:01:9e:c0:
                    74:1a:1e:fd:18:29:ff:e3:fe:16:97:00:b8:3b:5f:
                    67:51:4c:aa:8b:b5:b5:08:5c:ec:5d:dd:f5:c3:48:
                    2b:dd:97:4b:3e:84:0f:25:bf:13:7c:7e:75:e9:58:
                    a6:4d:24:3c:e8:71:97:9b:a2:f9:7a:39:02:9b:a2:
                    b8:f9:79:f3:e2:18:43:7c:f0:52:ee:dc:9f:09:ea:
                    51:39:f1:72:d2:ad:04:00:87:44:bd:f6:f7:69:74:
                    3e:d7:0f:07:e2:1e:79:48:ae:b0:09:38:99:47:e9:
                    82:59:af:1f:4b:9d:e6:98:a8:93:fa:09:9f:43:d4:
                    12:0d:12:3a:9e:6d:26:ab:36:1a:e9:bd:48:88:ec:
                    bf:ad:84:20:e3:9d:bc:90:18:5d:56:b9:85:fd:43:
                    5a:31:15:e9:c0:cb:55:48:91:5b:86:f1:c8:96:30:
                    da:6a:25:da:8c:70:8c:b6:33:e5:67:e0:df:ad:4e:
                    11:60:6c:a1:e6:bc:25:c1:92:12:a0:cf:28:33:27:
                    dc:fe:57:4b:47:65:3d:0a:11:06:63:78:36:f7:d8:
                    14:53:36:0b:3d:62:69:a0:83:59:42:be:6f:4d:0c:
                    71:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:EA:10:F8:EA:46:D7:CB:F7:FD:74:4E:06:50:28:03:03:7A:66:97
            X509v3 Authority Key Identifier:
                keyid:11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:16:26:0f:ea:b2:8f:7d:4e:2d:ed:4a:19:01:39:2e:5f:e6:
         5d:0d:08:3c:dc:1e:53:6d:f5:b0:92:c6:75:07:01:62:8e:98:
         85:1d:ca:f5:16:bb:fe:86:50:73:3b:47:27:37:e8:a8:5d:4d:
         c2:bc:74:22:c2:cd:84:78:07:7c:d4:fa:22:8e:82:f5:46:1f:
         07:52:c2:86:b4:f1:bb:ed:f7:39:c5:66:6f:85:16:cb:a3:b9:
         e5:b0:59:2a:7d:b2:69:95:43:cd:46:3d:89:61:65:14:e2:4a:
         2b:4a:59:80:d8:97:42:f1:bb:4b:f9:95:99:18:c1:c4:78:b3:
         91:7b:77:aa:c5:85:0b:a1:70:9c:6c:cf:43:99:c7:ab:5c:82:
         b0:b6:26:17:6f:3b:79:3e:46:b0:c4:6c:7f:1d:3f:55:e2:01:
         22:be:b9:27:ec:63:d5:f8:84:ff:98:44:b5:bc:1c:25:45:e7:
         64:1f:1d:fb:68:27:7a:e3:99:0f:2b:24:c9:2f:52:3a:42:87:
         c2:b6:08:28:a0:26:9b:ff:cc:8e:93:87:60:c1:47:9d:ae:89:
         ee:c0:bf:6d:00:39:36:e0:ff:46:1e:ff:78:b7:ea:3d:86:98:
         70:15:07:30:25:cf:4e:f9:25:17:43:b8:b0:bf:38:5a:84:23:
         f4:f4:d5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:37:58 2026 by rpki-client