Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.mft
File:                     mkM22h63IW4g7ASn8DHrShtjG7M.mft (raw, json)
Hash identifier:          8Nzo+ZSBAzw1J+DKZbpoRuRmu9kfTh/itT/RxeLRFBc=
Subject key identifier:   3B:4A:78:77:14:E1:75:02:AC:45:6B:CD:D0:44:D0:6A:26:A5:57:3E
Authority key identifier: 9A:43:36:DA:1E:B7:21:6E:20:EC:04:A7:F0:31:EB:4A:1B:63:1B:B3
Certificate issuer:       /CN=9a4336da1eb7216e20ec04a7f031eb4a1b631bb3
Certificate serial:       019EC1B723844E9E227132B7D0F50D562837
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mkM22h63IW4g7ASn8DHrShtjG7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 16:01:05 +0000
Manifest this update:     Sat 13 Jun 2026 16:01:05 +0000
Manifest next update:     Sun 14 Jun 2026 16:01:05 +0000
Files and hashes:         1: KGRZtAAx-sknvQQcwhztrA8NJos.roa (hash: uYCNY8bnQOpiSbQHGpcKZAraJm0QfOSnQkHdbbBpb7U=)
                          2: mkM22h63IW4g7ASn8DHrShtjG7M.crl (hash: g52tx1ZQNBvnRgQUoe6c9oou3bnsowkyiszM/uw+oDc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mkM22h63IW4g7ASn8DHrShtjG7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b7:23:84:4e:9e:22:71:32:b7:d0:f5:0d:56:28:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a4336da1eb7216e20ec04a7f031eb4a1b631bb3
        Validity
            Not Before: Jun 13 16:01:05 2026 GMT
            Not After : Jun 14 16:01:05 2026 GMT
        Subject: CN=3b4a787714e17502ac456bcdd044d06a26a5573e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6c:ea:0e:83:fc:b5:36:7c:de:f7:91:5a:01:
                    5c:90:77:07:27:4e:8e:5c:bb:21:5a:0f:b6:a1:d4:
                    f1:8c:11:73:7b:3c:07:bd:36:51:23:9e:1c:6f:23:
                    f1:a2:50:cb:30:48:09:ac:ae:83:06:3f:87:7f:84:
                    f5:89:43:03:70:ed:8b:b3:00:96:52:bc:f1:d7:95:
                    00:9a:c0:38:0f:8c:d1:c7:61:c7:2b:29:f3:00:ae:
                    81:da:5d:39:6d:8f:84:ac:16:18:8e:ce:29:6e:53:
                    db:26:28:0b:a9:22:ce:4f:76:e3:d9:88:08:79:76:
                    0b:dc:6a:a3:27:c9:d5:c8:55:db:57:6e:fb:ab:b3:
                    b9:a1:11:86:d9:77:6e:a6:1e:71:33:04:59:fc:a9:
                    e4:8e:06:d6:b2:94:c7:85:29:1b:99:26:ea:37:af:
                    04:14:67:3e:74:bc:27:50:28:1f:17:0c:94:41:a7:
                    92:4b:e4:01:fa:22:43:2d:14:8f:f9:c0:17:03:1d:
                    14:7e:35:b4:59:1f:ed:cc:9d:16:26:01:0c:b1:69:
                    96:4e:37:00:f9:df:b0:0b:2a:77:52:45:0e:14:2c:
                    1b:8e:bf:86:77:23:41:10:66:9b:20:03:ed:d2:92:
                    72:55:ad:3e:63:f9:66:49:ae:12:66:00:13:f7:a5:
                    b8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:4A:78:77:14:E1:75:02:AC:45:6B:CD:D0:44:D0:6A:26:A5:57:3E
            X509v3 Authority Key Identifier:
                keyid:9A:43:36:DA:1E:B7:21:6E:20:EC:04:A7:F0:31:EB:4A:1B:63:1B:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkM22h63IW4g7ASn8DHrShtjG7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a7e9b9-6bac-4538-a9e6-fa8806a024c4/1/mkM22h63IW4g7ASn8DHrShtjG7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:7d:84:da:00:56:26:5b:42:61:58:27:a0:09:c0:98:f2:18:
         bc:a8:4d:3c:de:0b:9b:07:f4:c1:12:98:0b:78:82:e9:5f:f5:
         4c:e2:f7:d0:da:bb:a0:67:6a:45:a8:2a:03:a4:e3:ef:ad:e4:
         52:bc:4d:e0:4a:35:ab:e2:41:3e:5a:d3:8e:6f:b6:ec:ec:ef:
         a7:6c:e7:e7:24:71:f1:f5:63:92:7f:2d:0f:b8:c1:d2:a4:ee:
         92:3d:d0:ea:90:88:8b:7b:ee:63:60:a2:d1:ac:55:db:d7:3e:
         8a:a9:49:a9:fe:2b:84:be:a7:5f:41:2d:6e:99:bd:5a:0c:6b:
         e1:c7:a7:cc:45:53:71:7b:03:05:d8:35:9e:30:93:c5:de:62:
         e9:c2:73:5a:e3:92:a0:73:d7:8d:d6:fb:a0:94:f9:21:3c:9e:
         2d:dc:3f:bd:0e:cf:61:d6:18:0e:0d:21:1e:df:f0:8f:43:fc:
         96:c0:2a:a8:83:d5:31:64:e4:dc:9f:b1:42:86:8b:1d:20:53:
         7d:80:70:56:8b:a0:97:a0:69:63:52:dc:4f:a0:b5:5b:1d:71:
         70:2d:53:b3:65:2f:e4:06:7b:43:49:9d:1a:ca:33:d0:4a:13:
         75:2f:f1:bd:04:d7:63:3b:79:4f:6c:c4:14:de:72:5d:65:a5:
         12:68:8d:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BtyOETp4icTK30PUNVig3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNDMzNmRhMWViNzIxNmUyMGVjMDRhN2YwMzFlYjRhMWI2
MzFiYjMwHhcNMjYwNjEzMTYwMTA1WhcNMjYwNjE0MTYwMTA1WjAzMTEwLwYDVQQD
EygzYjRhNzg3NzE0ZTE3NTAyYWM0NTZiY2RkMDQ0ZDA2YTI2YTU1NzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2zqDoP8tTZ83veRWgFckHcHJ06O
XLshWg+2odTxjBFzezwHvTZRI54cbyPxolDLMEgJrK6DBj+Hf4T1iUMDcO2LswCW
Urzx15UAmsA4D4zRx2HHKynzAK6B2l05bY+ErBYYjs4pblPbJigLqSLOT3bj2YgI
eXYL3GqjJ8nVyFXbV277q7O5oRGG2Xduph5xMwRZ/KnkjgbWspTHhSkbmSbqN68E
FGc+dLwnUCgfFwyUQaeSS+QB+iJDLRSP+cAXAx0UfjW0WR/tzJ0WJgEMsWmWTjcA
+d+wCyp3UkUOFCwbjr+GdyNBEGabIAPt0pJyVa0+Y/lmSa4SZgAT96W4VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDtKeHcU4XUCrEVrzdBE0GompVc+MB8GA1UdIwQY
MBaAFJpDNtoetyFuIOwEp/Ax60obYxuzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWtNMjJoNjNJVzRnN0FTbjhESHJTaHRqRzdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9hN2U5YjktNmJhYy00NTM4LWE5ZTYt
ZmE4ODA2YTAyNGM0LzEvbWtNMjJoNjNJVzRnN0FTbjhESHJTaHRqRzdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9hN2U5YjktNmJhYy00NTM4LWE5ZTYtZmE4ODA2YTAyNGM0
LzEvbWtNMjJoNjNJVzRnN0FTbjhESHJTaHRqRzdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYH2E2gBW
JltCYVgnoAnAmPIYvKhNPN4Lmwf0wRKYC3iC6V/1TOL30Nq7oGdqRagqA6Tj763k
UrxN4Eo1q+JBPlrTjm+27Ozvp2zn5yRx8fVjkn8tD7jB0qTukj3Q6pCIi3vuY2Ci
0axV29c+iqlJqf4rhL6nX0Etbpm9Wgxr4cenzEVTcXsDBdg1njCTxd5i6cJzWuOS
oHPXjdb7oJT5ITyeLdw/vQ7PYdYYDg0hHt/wj0P8lsAqqIPVMWTk3J+xQoaLHSBT
fYBwVougl6BpY1LcT6C1Wx1xcC1Ts2Uv5AZ7Q0mdGsoz0EoTdS/xvQTXYzt5T2zE
FN5yXWWlEmiN4A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:53:35 2026 by rpki-client