Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
File:                     1NF5zknld2uSyGwmwgsLQ_0KbLY.mft (raw, json)
Hash identifier:          x/YvqPeBIK42LPYQZoTXURevxjI4HVqfEBwcF4vOM10=
Subject key identifier:   FD:7C:B8:A5:1E:B3:73:9B:AC:F4:8D:F4:10:BF:B2:66:13:2E:DC:B8
Authority key identifier: D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
Certificate issuer:       /CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Certificate serial:       019EC0A43341B995E86E25598B422D8B4A76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 11:00:46 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:46 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:46 +0000
Files and hashes:         1: 1NF5zknld2uSyGwmwgsLQ_0KbLY.crl (hash: Ci28XSnSK5eMKYN8SdJZupJ6Fc2ssAjCRuHx+priACk=)
                          2: qI3as0zKAc7W39Wxbww7lx8HfYM.roa (hash: ++oMXlJQHbbp5tvC0c4vNfS7KWMpom3TwhUaePwlH1I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:33:41:b9:95:e8:6e:25:59:8b:42:2d:8b:4a:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
        Validity
            Not Before: Jun 13 11:00:46 2026 GMT
            Not After : Jun 14 11:00:46 2026 GMT
        Subject: CN=fd7cb8a51eb3739bacf48df410bfb266132edcb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e2:2c:17:55:33:35:f3:94:79:9e:1f:e3:f5:
                    7a:43:73:68:97:55:25:b2:c9:e6:ba:4e:30:1d:d7:
                    cf:a5:9d:fb:36:c0:3f:1f:55:85:58:34:41:71:5c:
                    ef:ed:78:8e:b1:5b:79:77:31:63:b8:b3:9f:9a:e6:
                    cc:d6:69:75:4d:01:79:07:4e:0f:a4:e1:d7:40:73:
                    87:c8:de:04:7e:38:b6:e8:31:e4:64:4e:21:39:33:
                    00:0e:f3:e2:03:c7:17:79:57:d9:70:84:5a:d0:e2:
                    96:bd:99:88:4a:be:81:3f:8a:92:96:1a:6e:89:ba:
                    56:d3:fa:c0:b0:25:3f:1e:8d:3c:b2:1b:c5:96:a1:
                    08:92:a8:c1:74:82:ac:da:49:81:54:84:c1:71:37:
                    1d:4b:cb:b0:ea:23:5a:10:cb:09:4a:dd:ca:22:27:
                    cf:25:b0:c4:37:49:66:28:89:a5:ba:5f:48:23:4c:
                    96:a4:55:dd:2c:35:99:6f:95:73:cc:c6:a6:d4:d7:
                    28:46:43:43:7f:b4:a4:69:95:d8:17:65:12:6d:35:
                    a9:63:87:a3:db:00:6e:1b:12:2f:71:c4:fb:fb:f7:
                    41:66:6e:20:e6:de:43:8c:e9:d9:07:64:4f:1c:25:
                    ec:5d:a4:c9:bb:1d:1c:ca:77:cf:1b:92:69:ff:10:
                    ca:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:7C:B8:A5:1E:B3:73:9B:AC:F4:8D:F4:10:BF:B2:66:13:2E:DC:B8
            X509v3 Authority Key Identifier:
                keyid:D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:6f:c4:aa:f5:9d:97:e9:f4:18:0c:41:b0:fc:73:ed:f4:a5:
         b4:20:2f:c3:6b:6c:5b:2b:d6:88:3f:ff:ad:0d:a1:e4:00:7a:
         24:61:f4:63:65:60:ab:2e:25:00:e1:a9:ee:17:67:f2:98:37:
         99:67:03:a7:21:0d:44:c2:6e:58:df:04:04:ee:c2:bd:fa:dd:
         35:30:9f:2f:ac:ae:e9:ac:18:79:dd:b5:7d:43:e9:e1:5d:18:
         38:58:9f:2c:a7:b1:b7:bc:e2:89:61:c0:2e:2f:dd:42:0e:7f:
         2e:c5:92:4e:b5:32:ec:ee:b5:fb:00:4e:d5:cc:71:23:63:01:
         ec:04:67:65:a3:a0:02:97:59:9d:e9:f1:9a:02:65:6e:74:75:
         4c:d4:90:fb:28:e2:b9:f3:bd:70:27:03:97:29:68:0f:2c:62:
         13:8e:b4:57:a6:ea:80:b7:1f:3b:4c:b3:87:03:fe:78:7b:ac:
         03:91:2a:71:cd:d1:6b:11:4b:78:28:2d:bf:1a:de:12:47:37:
         3f:14:b1:9f:71:b6:f6:e8:d1:e3:13:73:18:1f:92:bc:04:b7:
         ef:72:b5:da:f4:1e:f1:b1:bc:ad:49:a5:f3:c6:32:ac:3b:38:
         b5:12:f2:58:16:0e:85:cf:1f:70:a7:c4:24:78:94:dd:4d:8d:
         18:73:e1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:37:14 2026 by rpki-client