Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
File:                     BI3DuSPHc4-aWO6AtJvNDF59z_o.mft (raw, json)
Hash identifier:          QXh7BxEpRgl+boxQ2E0QBWFL+gPisBr5jhcebFg8QXA=
Subject key identifier:   32:F3:67:BD:1C:F9:6A:3A:1B:D7:7D:5F:53:F6:5C:E4:DE:36:2C:C7
Authority key identifier: 04:8D:C3:B9:23:C7:73:8F:9A:58:EE:80:B4:9B:CD:0C:5E:7D:CF:FA
Certificate issuer:       /CN=048dc3b923c7738f9a58ee80b49bcd0c5e7dcffa
Certificate serial:       019EBD35953DDA1D3D5065B69A18E4B33B2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
Manifest number:          195A
Signing time:             Fri 12 Jun 2026 19:01:05 +0000
Manifest this update:     Fri 12 Jun 2026 19:01:05 +0000
Manifest next update:     Sat 13 Jun 2026 19:01:05 +0000
Files and hashes:         1: BI3DuSPHc4-aWO6AtJvNDF59z_o.crl (hash: 5fvK6ZS0Nhh3PGe3oBnbeaYSnY97UV2vTcU2M0Ey2zc=)
                          2: XXIoAY-5Av7-gKbYLelSLr2VuAQ.roa (hash: JJi5E5XJ/T8+/7RMzDeJIxZnJ0RujHszIcclzG1wW/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 19:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:35:95:3d:da:1d:3d:50:65:b6:9a:18:e4:b3:3b:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048dc3b923c7738f9a58ee80b49bcd0c5e7dcffa
        Validity
            Not Before: Jun 12 19:01:05 2026 GMT
            Not After : Jun 13 19:01:05 2026 GMT
        Subject: CN=32f367bd1cf96a3a1bd77d5f53f65ce4de362cc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:85:5b:77:db:61:23:31:52:54:5c:a1:21:cd:
                    d0:36:9e:d5:64:a1:5a:5d:4f:d0:20:4e:8e:8e:39:
                    ba:c7:e3:19:b8:c3:31:8c:af:6f:e2:b9:6c:da:35:
                    bc:01:35:81:26:c8:ca:dd:bb:63:25:c2:3f:07:33:
                    95:aa:9f:ff:ff:29:cd:f5:b1:db:23:f9:77:7b:e6:
                    a8:1d:87:43:7b:8b:24:fd:54:72:96:dd:bf:fc:d8:
                    32:85:ab:1d:db:ae:92:14:70:a8:96:50:16:fb:95:
                    4a:d7:7e:a1:51:4e:66:a1:e8:1d:16:d9:cb:31:7c:
                    28:15:e6:cb:9e:54:03:22:cf:7d:a2:ed:6f:0d:35:
                    b3:3c:48:23:96:7f:6f:11:a5:a4:18:e0:03:4d:bc:
                    31:18:76:8b:32:88:c7:39:6a:7a:5b:89:d4:22:d7:
                    55:ba:10:e7:cc:25:6f:26:71:c5:4b:6c:bf:e1:d9:
                    01:c4:9a:eb:a8:9f:80:ed:6d:85:e5:62:69:89:89:
                    c5:b0:13:04:45:fb:97:35:ae:ea:9f:0d:78:c8:f6:
                    2a:30:e9:4e:75:94:e0:8f:ee:f1:fa:16:98:f9:63:
                    d8:10:fb:de:80:54:5f:ae:36:4c:39:40:0e:b3:d6:
                    53:b4:b6:8c:c3:7d:b4:80:60:ab:b6:ff:63:71:a8:
                    c1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F3:67:BD:1C:F9:6A:3A:1B:D7:7D:5F:53:F6:5C:E4:DE:36:2C:C7
            X509v3 Authority Key Identifier:
                keyid:04:8D:C3:B9:23:C7:73:8F:9A:58:EE:80:B4:9B:CD:0C:5E:7D:CF:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:03:f2:81:ee:18:64:f8:70:7c:e3:f4:53:64:43:da:bb:f2:
         19:2e:12:42:ed:ed:b3:a7:9f:61:f3:74:e8:fb:d5:39:76:e6:
         39:d3:8c:3c:35:ff:8f:4e:bb:fa:c9:3e:45:b5:7c:02:ea:aa:
         3a:4e:6e:9b:21:f3:10:32:b2:5d:a6:20:fc:90:6e:85:b6:43:
         13:7d:33:6f:e6:40:5a:d4:84:59:ce:9d:a7:c0:c1:c5:b8:e7:
         e7:3c:49:4b:3a:47:e6:ab:51:7a:72:0a:8d:07:f5:48:c8:cc:
         8b:06:4e:cd:a9:8e:a2:e2:94:29:e9:bf:d1:45:80:31:6f:bd:
         7d:ee:b3:be:e2:fa:ef:c1:11:8a:e8:99:69:bd:52:e4:53:af:
         1d:b7:e2:cb:6f:c4:cd:da:bb:57:fe:ba:21:ec:69:85:17:7b:
         2f:6a:67:39:11:f0:67:42:47:21:78:7e:5d:9b:93:34:4f:bb:
         df:0d:d5:ee:04:13:91:56:3c:81:a9:63:5a:a8:81:f1:6e:92:
         76:59:7c:26:02:31:06:dc:5d:83:d8:77:23:b6:bc:22:7b:87:
         59:07:0a:59:a6:59:16:20:0a:95:0c:5a:cb:5b:34:4b:42:6b:
         53:1b:f3:63:bf:d2:24:fc:16:71:95:0e:a2:3d:e2:f8:dd:96:
         84:3b:3b:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ69NZU92h09UGW2mhjkszsvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0OGRjM2I5MjNjNzczOGY5YTU4ZWU4MGI0OWJjZDBjNWU3
ZGNmZmEwHhcNMjYwNjEyMTkwMTA1WhcNMjYwNjEzMTkwMTA1WjAzMTEwLwYDVQQD
EygzMmYzNjdiZDFjZjk2YTNhMWJkNzdkNWY1M2Y2NWNlNGRlMzYyY2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIVbd9thIzFSVFyhIc3QNp7VZKFa
XU/QIE6Ojjm6x+MZuMMxjK9v4rls2jW8ATWBJsjK3btjJcI/BzOVqp///ynN9bHb
I/l3e+aoHYdDe4sk/VRylt2//Ngyhasd266SFHCollAW+5VK136hUU5moegdFtnL
MXwoFebLnlQDIs99ou1vDTWzPEgjln9vEaWkGOADTbwxGHaLMojHOWp6W4nUItdV
uhDnzCVvJnHFS2y/4dkBxJrrqJ+A7W2F5WJpiYnFsBMERfuXNa7qnw14yPYqMOlO
dZTgj+7x+haY+WPYEPvegFRfrjZMOUAOs9ZTtLaMw320gGCrtv9jcajBJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLzZ70c+Wo6G9d9X1P2XOTeNizHMB8GA1UdIwQY
MBaAFASNw7kjx3OPmljugLSbzQxefc/6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkkzRHVTUEhjNC1hV082QXRKdk5ERjU5el9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mOGMwMTgtYjkwZi00Zjg5LWEzZjQt
MmVjODcxNDY1NTk5LzEvQkkzRHVTUEhjNC1hV082QXRKdk5ERjU5el9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9mOGMwMTgtYjkwZi00Zjg5LWEzZjQtMmVjODcxNDY1NTk5
LzEvQkkzRHVTUEhjNC1hV082QXRKdk5ERjU5el9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYwPyge4Y
ZPhwfOP0U2RD2rvyGS4SQu3ts6efYfN06PvVOXbmOdOMPDX/j067+sk+RbV8Auqq
Ok5umyHzEDKyXaYg/JBuhbZDE30zb+ZAWtSEWc6dp8DBxbjn5zxJSzpH5qtRenIK
jQf1SMjMiwZOzamOouKUKem/0UWAMW+9fe6zvuL678ERiuiZab1S5FOvHbfiy2/E
zdq7V/66IexphRd7L2pnORHwZ0JHIXh+XZuTNE+73w3V7gQTkVY8galjWqiB8W6S
dll8JgIxBtxdg9h3I7a8InuHWQcKWaZZFiAKlQxay1s0S0JrUxvzY7/SJPwWcZUO
oj3i+N2WhDs7ng==
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:55:08 2026 by rpki-client