Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
File:                     hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft (raw, json)
Hash identifier:          p8/n+J7u0tCvKdJkRUye9KXZYHcrWmSu4SwXqE5/4Fo=
Subject key identifier:   C2:50:B0:F4:E4:2E:EF:E7:77:3E:BF:04:C6:9B:36:3F:D8:D5:77:5F
Authority key identifier: 85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
Certificate issuer:       /CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Certificate serial:       019EC3DC864408CBBBAF816DC43C5D45F1AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
Manifest number:          195F
Signing time:             Sun 14 Jun 2026 02:01:09 +0000
Manifest this update:     Sun 14 Jun 2026 02:01:09 +0000
Manifest next update:     Mon 15 Jun 2026 02:01:09 +0000
Files and hashes:         1: Bgb4R3FK8PY34Yz-lvynRT-9XWQ.roa (hash: St6uFsBRyQsJnyTTYPZwyzlv1Byj/hyZ5kqADUUKKnM=)
                          2: hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl (hash: Tur/F3edMfRitTdK7pQzLlBNjQdtzoPyHa3kYVdWIpc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:dc:86:44:08:cb:bb:af:81:6d:c4:3c:5d:45:f1:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
        Validity
            Not Before: Jun 14 02:01:09 2026 GMT
            Not After : Jun 15 02:01:09 2026 GMT
        Subject: CN=c250b0f4e42eefe7773ebf04c69b363fd8d5775f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d8:d9:3d:79:1e:79:b1:0b:bb:84:7b:0a:b8:
                    ab:d3:5f:03:7d:f4:87:c1:7f:31:46:75:65:8a:91:
                    a6:b3:57:c4:41:fb:5c:05:52:56:c2:64:ce:15:4d:
                    c4:f9:ef:2c:84:e1:1d:10:59:37:09:ba:57:8f:16:
                    26:e4:c1:4f:b0:78:5c:5d:21:ea:a9:e3:4d:76:01:
                    c2:57:60:ea:e3:4b:02:1f:48:9c:d7:37:02:01:a1:
                    48:43:3f:d3:d9:b7:86:56:d4:37:26:6c:7b:05:86:
                    50:ff:2a:5c:02:a0:c6:61:e5:0f:1f:7a:b9:b3:16:
                    a5:eb:2b:12:6f:86:51:f1:9a:a0:43:24:51:ac:9b:
                    4c:f1:b2:49:c4:ce:a2:38:d8:29:fc:3a:dc:73:72:
                    8a:71:74:06:16:7d:16:fd:43:14:e6:7a:a9:b4:46:
                    46:35:5e:f2:31:17:0b:6f:b7:51:c6:92:9a:59:21:
                    d0:8d:4a:48:e4:61:ad:52:0d:d8:84:5a:b0:4a:3d:
                    4a:86:23:b0:4d:7f:1c:fc:89:0a:d6:2f:7b:e3:13:
                    eb:15:0c:96:8f:2a:3c:26:0f:62:34:92:c3:6c:6c:
                    cd:ef:93:6f:a4:2c:28:4f:20:e8:e9:cd:f9:81:bd:
                    ec:62:04:10:cb:ab:c1:a4:e8:49:c9:28:23:10:ed:
                    86:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:50:B0:F4:E4:2E:EF:E7:77:3E:BF:04:C6:9B:36:3F:D8:D5:77:5F
            X509v3 Authority Key Identifier:
                keyid:85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:24:05:c7:65:86:a2:34:db:d4:a7:3b:6c:71:fd:37:11:00:
         67:ef:27:ed:b1:73:51:62:dd:87:76:15:25:8d:77:4d:08:b6:
         67:93:71:42:b1:cb:ba:33:9a:ba:4c:92:3d:b4:8a:50:d1:60:
         18:e6:8f:e1:4f:70:4c:35:3c:48:f6:fb:66:58:6e:00:8e:8c:
         94:36:6f:a4:75:0c:54:cc:14:4d:ea:37:9f:26:f6:b0:83:c5:
         aa:6c:6d:aa:1d:64:22:9b:47:46:f9:9b:05:6b:b1:58:08:96:
         90:3a:3e:ac:32:0e:5f:e3:a5:e6:e6:88:c9:07:4a:95:8c:b1:
         a7:f8:f6:1b:8c:e1:d1:6b:ac:e9:51:e3:d1:e9:2c:08:ca:41:
         34:07:0e:64:db:31:98:80:c1:99:54:a1:7b:d1:59:b6:26:ec:
         bf:3d:8d:4f:62:49:d9:6e:39:90:13:06:04:fb:58:80:a0:94:
         f7:e6:1e:16:d4:8c:0e:fd:d3:23:49:0b:43:1a:83:42:2a:03:
         58:30:1c:4a:a6:01:8c:6c:8f:bb:b7:fb:01:05:f3:16:3e:03:
         bd:e4:7d:ef:25:f1:ef:1a:00:50:a9:27:83:49:07:ac:47:29:
         de:d1:4d:1a:48:d0:a8:31:42:71:07:4d:89:88:8b:8e:c9:6e:
         c3:58:ac:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7D3IZECMu7r4FtxDxdRfGvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NGUxMDNhYWVjNDMyZmMxOTFkNDk4MTliZDFhYjcxZmUx
Y2ZhODAwHhcNMjYwNjE0MDIwMTA5WhcNMjYwNjE1MDIwMTA5WjAzMTEwLwYDVQQD
EyhjMjUwYjBmNGU0MmVlZmU3NzczZWJmMDRjNjliMzYzZmQ4ZDU3NzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49jZPXkeebELu4R7Crir018DffSH
wX8xRnVlipGms1fEQftcBVJWwmTOFU3E+e8shOEdEFk3CbpXjxYm5MFPsHhcXSHq
qeNNdgHCV2Dq40sCH0ic1zcCAaFIQz/T2beGVtQ3Jmx7BYZQ/ypcAqDGYeUPH3q5
sxal6ysSb4ZR8ZqgQyRRrJtM8bJJxM6iONgp/Drcc3KKcXQGFn0W/UMU5nqptEZG
NV7yMRcLb7dRxpKaWSHQjUpI5GGtUg3YhFqwSj1KhiOwTX8c/IkK1i974xPrFQyW
jyo8Jg9iNJLDbGzN75NvpCwoTyDo6c35gb3sYgQQy6vBpOhJySgjEO2GoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJQsPTkLu/ndz6/BMabNj/Y1XdfMB8GA1UdIwQY
MBaAFIVOEDquxDL8GR1JgZvRq3H+HPqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFU0UU9xN0VNdndaSFVtQm05R3JjZjRjLW9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi82NWY0YTItNWY2OS00NjViLTg4OTEt
OWMwMWRmN2I5ZTY2LzEvaFU0UU9xN0VNdndaSFVtQm05R3JjZjRjLW9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi82NWY0YTItNWY2OS00NjViLTg4OTEtOWMwMWRmN2I5ZTY2
LzEvaFU0UU9xN0VNdndaSFVtQm05R3JjZjRjLW9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAniQFx2WG
ojTb1Kc7bHH9NxEAZ+8n7bFzUWLdh3YVJY13TQi2Z5NxQrHLujOaukySPbSKUNFg
GOaP4U9wTDU8SPb7ZlhuAI6MlDZvpHUMVMwUTeo3nyb2sIPFqmxtqh1kIptHRvmb
BWuxWAiWkDo+rDIOX+Ol5uaIyQdKlYyxp/j2G4zh0Wus6VHj0eksCMpBNAcOZNsx
mIDBmVShe9FZtibsvz2NT2JJ2W45kBMGBPtYgKCU9+YeFtSMDv3TI0kLQxqDQioD
WDAcSqYBjGyPu7f7AQXzFj4DveR97yXx7xoAUKkng0kHrEcp3tFNGkjQqDFCcQdN
iYiLjsluw1isRw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:36:45 2026 by rpki-client