Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
File:                     x3FxpeRVBshskBa75bFLPbi8bMM.mft (raw, json)
Hash identifier:          8JP1CYHT7VCIg/C37EiKwcq18jI2UbOvhl36OzL+vBI=
Subject key identifier:   7B:73:16:75:A1:3D:A8:B8:DF:E1:FA:0F:91:F2:A5:4B:4F:9D:D5:FB
Authority key identifier: C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3
Certificate issuer:       /CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
Certificate serial:       019EC111A1BA449C5F3142706D93294546E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 13:00:18 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:18 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:18 +0000
Files and hashes:         1: O7DvE_j0yVa8Neokc-i_HaDtXmM.roa (hash: 3lAq1Q6ERq8LruEXX9XUeCK19VsJiVKMmGnOXIPs3os=)
                          2: x3FxpeRVBshskBa75bFLPbi8bMM.crl (hash: kp1y2Pokja4cVLzER5+qP+huPXBfPA4UXjw0U6z6vqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:11:a1:ba:44:9c:5f:31:42:70:6d:93:29:45:46:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
        Validity
            Not Before: Jun 13 13:00:18 2026 GMT
            Not After : Jun 14 13:00:18 2026 GMT
        Subject: CN=7b731675a13da8b8dfe1fa0f91f2a54b4f9dd5fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:24:2a:ef:d1:54:71:ff:36:b5:9f:23:bb:4a:
                    1c:98:11:74:06:8c:45:f9:6d:ee:89:ff:91:4a:a6:
                    08:cc:58:e6:55:d4:f4:d4:3e:5b:bc:3c:87:b6:bf:
                    b0:69:83:9e:d5:3b:71:4f:0b:92:39:62:65:82:c3:
                    e1:51:9b:b7:be:75:9d:72:10:bd:8b:06:42:2c:9e:
                    50:65:43:72:97:cf:ba:4e:27:9f:d0:a9:65:e6:29:
                    c3:c0:82:3a:18:04:87:4d:e1:f2:30:db:9e:62:f7:
                    9d:00:c8:7d:fb:4a:a0:53:4e:c2:aa:25:2a:8c:43:
                    1d:95:3c:76:57:a2:9b:c3:a9:a0:f8:0e:3b:6b:29:
                    f6:a5:25:11:22:18:6d:c8:d6:38:26:e4:39:68:0e:
                    d6:a6:35:30:6b:e7:5e:22:2d:6a:50:47:74:c3:8b:
                    bd:a7:e1:57:d5:da:b7:bc:e3:b7:d8:74:a7:11:3f:
                    13:ea:0d:98:1a:3d:e8:07:1a:a7:13:e3:19:24:b2:
                    b8:4a:af:e5:cf:92:ca:14:59:60:41:36:e7:00:cb:
                    51:fa:7e:51:74:42:9b:03:55:f5:a9:dc:8c:ab:48:
                    2f:ae:ba:f8:36:8a:11:99:86:a2:3f:14:18:34:22:
                    74:a9:86:d3:ae:60:fd:76:d1:0b:34:17:b3:48:03:
                    b6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:73:16:75:A1:3D:A8:B8:DF:E1:FA:0F:91:F2:A5:4B:4F:9D:D5:FB
            X509v3 Authority Key Identifier:
                keyid:C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:17:35:76:ca:95:1a:8a:1d:ac:8c:3a:ac:46:c8:21:4d:35:
         ae:dc:fd:40:31:b1:79:6f:99:bc:ce:e1:e3:e0:c7:75:0d:2f:
         53:2a:6c:62:4b:53:45:3d:58:ff:5f:d1:d4:ef:54:20:d5:40:
         df:fd:21:a9:54:3d:f0:e3:84:85:df:a3:1b:5c:ed:38:cd:5d:
         1e:67:6a:1a:53:d5:9b:da:15:00:f4:21:c5:39:81:f3:7b:cc:
         b0:a8:1a:24:68:a2:08:b7:c7:ef:38:e6:78:6e:5d:8d:4b:0a:
         cc:af:4e:0c:e0:0d:4a:8b:9b:db:f4:90:39:a6:df:2a:b2:0c:
         71:f5:e0:c8:84:49:95:d2:99:74:74:7f:4c:d6:2d:ea:4f:69:
         1f:b3:67:87:c1:bb:05:b5:19:97:70:6d:4d:15:05:bb:4f:24:
         24:e4:6a:6a:d1:40:c0:ad:8c:68:f2:93:b8:df:b8:a0:03:1b:
         bf:92:aa:ac:ac:32:aa:e2:38:7e:5c:ea:18:03:65:aa:de:7e:
         31:42:5c:db:11:57:f8:ed:91:a0:23:dc:cc:80:75:9f:95:ef:
         eb:3d:0f:af:51:29:4e:17:9f:56:65:16:3c:76:b6:23:46:80:
         da:bf:08:82:d4:23:b7:a6:4d:1a:9e:d4:f3:0e:e1:c3:02:b1:
         6e:be:5b:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BEaG6RJxfMUJwbZMpRUbjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NzE3MWE1ZTQ1NTA2Yzg2YzkwMTZiYmU1YjE0YjNkYjhi
YzZjYzMwHhcNMjYwNjEzMTMwMDE4WhcNMjYwNjE0MTMwMDE4WjAzMTEwLwYDVQQD
Eyg3YjczMTY3NWExM2RhOGI4ZGZlMWZhMGY5MWYyYTU0YjRmOWRkNWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiQq79FUcf82tZ8ju0ocmBF0BoxF
+W3uif+RSqYIzFjmVdT01D5bvDyHtr+waYOe1TtxTwuSOWJlgsPhUZu3vnWdchC9
iwZCLJ5QZUNyl8+6Tief0Kll5inDwII6GASHTeHyMNueYvedAMh9+0qgU07CqiUq
jEMdlTx2V6Kbw6mg+A47ayn2pSURIhhtyNY4JuQ5aA7WpjUwa+deIi1qUEd0w4u9
p+FX1dq3vOO32HSnET8T6g2YGj3oBxqnE+MZJLK4Sq/lz5LKFFlgQTbnAMtR+n5R
dEKbA1X1qdyMq0gvrrr4NooRmYaiPxQYNCJ0qYbTrmD9dtELNBezSAO2jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHtzFnWhPai43+H6D5HypUtPndX7MB8GA1UdIwQY
MBaAFMdxcaXkVQbIbJAWu+WxSz24vGzDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNGeHBlUlZCc2hza0JhNzViRkxQYmk4Yk1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83ZjhmNTgtZDgzYy00NDBlLTk5MGIt
YjQzOGI1Yjg4Y2YyLzEveDNGeHBlUlZCc2hza0JhNzViRkxQYmk4Yk1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy83ZjhmNTgtZDgzYy00NDBlLTk5MGItYjQzOGI1Yjg4Y2Yy
LzEveDNGeHBlUlZCc2hza0JhNzViRkxQYmk4Yk1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfBc1dsqV
GoodrIw6rEbIIU01rtz9QDGxeW+ZvM7h4+DHdQ0vUypsYktTRT1Y/1/R1O9UINVA
3/0hqVQ98OOEhd+jG1ztOM1dHmdqGlPVm9oVAPQhxTmB83vMsKgaJGiiCLfH7zjm
eG5djUsKzK9ODOANSoub2/SQOabfKrIMcfXgyIRJldKZdHR/TNYt6k9pH7Nnh8G7
BbUZl3BtTRUFu08kJORqatFAwK2MaPKTuN+4oAMbv5KqrKwyquI4flzqGANlqt5+
MUJc2xFX+O2RoCPczIB1n5Xv6z0Pr1EpThefVmUWPHa2I0aA2r8IgtQjt6ZNGp7U
8w7hwwKxbr5bRA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:25:39 2026 by rpki-client