Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
File:                     XWlT20hASwxmoV8Npu-n-sCpNp4.mft (raw, json)
Hash identifier:          d3+FdC204Xz6zKme/kauTQjiV2wN/vBknwkbJ/Z04Lg=
Subject key identifier:   E7:79:46:9E:70:C8:95:7E:F1:79:D0:67:2F:AE:1E:D1:7A:77:37:7B
Authority key identifier: 5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E
Certificate issuer:       /CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e
Certificate serial:       019EC36E6119802C40A2196FFF42C1E569DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
Manifest number:          195B
Signing time:             Sun 14 Jun 2026 00:00:51 +0000
Manifest this update:     Sun 14 Jun 2026 00:00:51 +0000
Manifest next update:     Mon 15 Jun 2026 00:00:51 +0000
Files and hashes:         1: PnV6MRrCbEDbUgZOWZkw0F-5fTw.roa (hash: gpEq7vfgynN+KUY61gV3ilXsbaQKj+P9YjZ3SCCvLxo=)
                          2: XWlT20hASwxmoV8Npu-n-sCpNp4.crl (hash: LaoVikTfmRg9r/8RucIfRFXJHUkT8/ZCUzNl13DRxhY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:6e:61:19:80:2c:40:a2:19:6f:ff:42:c1:e5:69:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e
        Validity
            Not Before: Jun 14 00:00:51 2026 GMT
            Not After : Jun 15 00:00:51 2026 GMT
        Subject: CN=e779469e70c8957ef179d0672fae1ed17a77377b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ec:5c:fb:0f:5a:8e:65:0a:54:4c:da:17:56:
                    66:84:f9:fb:69:19:49:a9:b9:9e:b7:ee:cf:b6:9f:
                    82:64:eb:62:85:f1:56:0f:5d:d3:d1:e2:b0:ac:57:
                    59:7a:91:bd:71:8b:65:9d:05:df:0b:63:c5:23:34:
                    1a:a2:53:4a:a1:59:b9:36:dd:3e:16:a4:e9:b1:60:
                    0e:f9:5f:e0:62:1c:86:6c:43:e9:e6:83:9d:ba:bb:
                    aa:3f:ae:88:9f:ce:f4:ae:e3:af:26:47:bf:21:91:
                    10:3b:0b:73:89:09:db:41:eb:50:26:35:c1:39:bb:
                    f2:c4:d7:05:72:81:15:7d:27:4a:de:6a:68:88:fe:
                    74:d3:05:59:30:b1:c9:5c:a9:ad:cf:86:10:63:e5:
                    41:24:c4:51:44:5a:18:9d:48:3c:74:f8:85:99:f4:
                    0e:62:fb:3c:93:57:03:70:97:0d:ae:3e:be:7b:26:
                    1a:f0:73:64:68:2c:21:6b:2f:73:7c:b3:9f:88:67:
                    90:d6:d5:2c:ca:ec:06:9e:f2:fe:86:e3:d6:06:35:
                    e3:a3:eb:a1:7d:5d:2b:dc:c2:62:27:cd:93:93:3d:
                    11:e1:c6:ae:71:94:4e:5e:43:85:60:38:65:1a:ef:
                    86:76:08:32:21:03:7c:dd:4c:9f:44:15:81:8f:df:
                    19:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:79:46:9E:70:C8:95:7E:F1:79:D0:67:2F:AE:1E:D1:7A:77:37:7B
            X509v3 Authority Key Identifier:
                keyid:5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:1e:1c:25:dd:10:c9:c3:bb:6d:31:77:3b:6e:a4:b0:eb:bd:
         48:75:06:1b:95:98:49:98:0a:63:29:15:3f:ad:79:81:95:a6:
         a9:37:9f:d5:38:03:4c:b0:5d:52:45:5c:99:2d:60:7d:10:69:
         bf:de:5c:c1:bf:46:03:8e:fd:1d:e8:40:bd:cd:b0:c2:89:38:
         88:f4:23:16:33:b9:dc:fb:07:48:f8:8e:6d:38:44:76:b9:11:
         9c:8c:6c:43:09:a7:09:a7:46:f1:fd:3d:cb:a1:44:c5:1f:36:
         3a:9c:b7:03:05:a8:8f:7f:83:24:2d:59:82:a8:27:16:14:f1:
         c8:cd:50:dd:4b:f3:1e:9b:cb:8e:0a:40:9a:71:f5:46:42:37:
         6a:dd:aa:bc:1a:91:e5:95:98:3f:34:5a:64:ef:09:bf:cd:e3:
         43:0a:70:fa:31:23:5f:44:47:4e:34:45:0d:a1:44:31:f5:50:
         8a:2c:ae:fa:a5:32:b6:83:25:28:ed:1f:01:ed:e6:82:33:f9:
         08:de:2c:2f:e7:af:1d:cc:74:22:63:bc:77:08:b8:7f:b2:4d:
         5f:7e:e4:a8:5a:58:54:4b:96:44:72:b9:1c:50:e7:13:30:ab:
         ba:a5:42:f4:3e:09:cc:0e:8f:55:03:a4:0d:bc:aa:b7:3e:3e:
         ac:b3:18:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:02:26 2026 by rpki-client