Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
File:                     eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft (raw, json)
Hash identifier:          P/iWokxgvWCRhFm8DdiArXxrstIq+zHK1Mggc4jDAOk=
Subject key identifier:   15:13:43:A2:C8:24:2B:F0:13:07:15:F0:BE:2E:47:59:AF:E4:29:FE
Authority key identifier: 79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F
Certificate issuer:       /CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f
Certificate serial:       019EC3007C3326AB2961F6E3A9CB59F314A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
Manifest number:          195E
Signing time:             Sat 13 Jun 2026 22:00:49 +0000
Manifest this update:     Sat 13 Jun 2026 22:00:49 +0000
Manifest next update:     Sun 14 Jun 2026 22:00:49 +0000
Files and hashes:         1: 5zwZDxIuULUKjp1rgcwRTBY-pVU.roa (hash: mUMWXUGRFNqTfVs8CnS61wDQkaxlvFmZ/n69Cmi6CP8=)
                          2: eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl (hash: 7p9kjbaRIvXmZbB/F3dA+ChpbjCYZF6HG0hpS9N8M/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:00:7c:33:26:ab:29:61:f6:e3:a9:cb:59:f3:14:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f
        Validity
            Not Before: Jun 13 22:00:49 2026 GMT
            Not After : Jun 14 22:00:49 2026 GMT
        Subject: CN=151343a2c8242bf0130715f0be2e4759afe429fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b4:f0:70:b7:da:23:c7:09:a2:e7:37:39:9e:
                    65:9d:91:62:85:8d:06:e8:b2:ac:b6:b4:89:9d:14:
                    c9:b0:41:9b:04:3d:e0:2c:a6:cf:a6:4e:11:1c:ca:
                    0b:92:eb:c8:f7:52:7b:6e:63:ce:70:e0:ff:0d:e1:
                    8e:9e:be:a1:be:8c:e5:0a:d8:11:a5:e0:d5:b0:e3:
                    f5:f2:48:e9:fe:50:99:ec:36:0a:2e:cc:a5:ee:ad:
                    30:67:14:06:05:24:8d:11:58:42:0d:fc:39:0d:48:
                    78:21:64:e9:0d:8e:58:0b:de:c4:64:cb:e9:9a:ce:
                    19:53:53:d4:27:0f:c1:e6:a5:65:5c:73:dd:fe:a3:
                    fd:57:fa:45:d3:e7:70:8f:d4:e7:29:e1:06:6a:f1:
                    13:58:07:c7:22:60:7d:af:c2:85:97:3a:ee:cf:86:
                    eb:e7:b7:9b:77:ce:b7:46:97:f5:81:c0:2e:f4:19:
                    1b:d3:e4:c5:c4:18:fa:af:fc:3b:ab:2f:98:fe:fc:
                    7c:a8:4f:8b:f2:c0:e3:d3:e1:ea:b5:3a:dd:85:3f:
                    9e:6d:e1:77:07:90:72:a8:eb:61:1d:ad:75:c3:40:
                    f0:91:cc:ba:4e:24:3d:65:cb:1a:9a:da:bd:74:7c:
                    29:00:94:c3:4e:80:d0:0c:c3:cd:7a:89:1b:6d:9b:
                    43:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:13:43:A2:C8:24:2B:F0:13:07:15:F0:BE:2E:47:59:AF:E4:29:FE
            X509v3 Authority Key Identifier:
                keyid:79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:e9:8c:86:49:bf:86:91:60:9e:68:12:f9:f4:04:c4:83:c8:
         66:20:6d:21:96:59:2f:8f:1f:96:57:82:27:3b:a0:19:b2:4a:
         20:60:0a:45:72:40:7d:61:43:c2:f8:0f:4b:02:8c:e4:39:17:
         e2:61:8a:cf:dd:ee:70:b6:45:a7:21:68:f4:a8:ff:08:fc:19:
         f3:6a:d2:b0:7f:5f:ee:e3:b8:b1:29:1e:1f:20:74:b4:ad:ee:
         30:0d:d4:c8:af:71:8a:c7:c4:ec:34:a3:38:37:68:3b:3d:6f:
         95:39:ed:8d:85:28:68:ae:d6:5c:e6:79:45:76:da:45:9d:35:
         eb:15:ee:2f:73:7d:46:34:12:f6:81:8f:58:84:0c:38:65:c3:
         dc:16:e0:1c:0b:57:c1:7f:9d:be:92:39:b8:ad:eb:18:79:13:
         5d:b5:dc:03:75:f2:62:59:5e:a6:7a:0d:88:8f:52:88:4f:2d:
         bf:39:da:6d:f3:f8:d9:d9:16:61:ca:dd:c7:8c:40:51:8a:b3:
         6b:cc:d6:87:86:03:fa:78:7d:f6:52:49:17:43:cc:26:53:23:
         1e:0b:33:d8:1e:a2:9b:a6:ee:1c:de:bb:b0:e9:46:8f:f6:3d:
         33:06:a2:64:6b:7a:fc:2a:99:17:b0:54:24:8f:9f:69:04:ea:
         b0:85:2f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:25:14 2026 by rpki-client