Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
File:                     2eEBm74RtVEUh0yWFxbrI4oRzU4.mft (raw, json)
Hash identifier:          zIlUPkfX0XGaSDf7rO60ZaJbLDbFOatVUA32pgkPvOU=
Subject key identifier:   63:28:B8:B2:AE:C8:37:69:C6:04:B4:27:D6:4A:30:41:45:09:3E:CF
Authority key identifier: D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E
Certificate issuer:       /CN=d9e1019bbe11b55114874c961716eb238a11cd4e
Certificate serial:       019EBFC8FB446435A30A90A2520753FAB725
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 07:01:20 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:20 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:20 +0000
Files and hashes:         1: 2eEBm74RtVEUh0yWFxbrI4oRzU4.crl (hash: 0r+47RynVBKQirT7hmQG9nzs/h9r/1OoUqRDhawbR1g=)
                          2: F6-tR7vg6L_c0tc5N_XzUYnc5Hs.roa (hash: 4XFHQlUZw+5vTRxUTYeT4+YjnJnMJyoXfBSAScrWHnE=)
                          3: vJl1BXhZ3zRMbOos6LDoB38KE4Q.roa (hash: VDAC21VKqXFo8f4kpCzGmv5zrcQUyhDkUhgQDzFTnGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:fb:44:64:35:a3:0a:90:a2:52:07:53:fa:b7:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9e1019bbe11b55114874c961716eb238a11cd4e
        Validity
            Not Before: Jun 13 07:01:20 2026 GMT
            Not After : Jun 14 07:01:20 2026 GMT
        Subject: CN=6328b8b2aec83769c604b427d64a304145093ecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:34:e2:28:ca:dd:13:96:ed:dd:e2:51:78:d5:
                    c5:e4:98:e0:f1:b9:f9:16:f6:0e:06:1c:d2:2e:b1:
                    5a:e1:3b:ab:7f:d2:e0:8c:c7:f8:03:92:4a:4b:f7:
                    7f:f1:f9:be:2f:dd:bb:d7:46:90:4a:9f:d3:99:51:
                    cc:13:66:47:3c:60:50:8c:f9:67:ce:d7:29:d4:9d:
                    30:b7:3f:df:e1:ec:15:dd:40:57:d9:a3:da:16:07:
                    14:4f:8c:cc:8a:72:f9:7b:a1:51:a7:eb:a2:d6:90:
                    b6:30:d6:dd:f1:d2:39:f6:11:03:9b:2b:9e:54:43:
                    9d:c7:ca:4e:6f:51:d7:bd:a9:2a:32:1a:dd:86:ba:
                    f2:d2:01:7e:ee:aa:e9:10:32:30:11:9c:00:6d:ba:
                    27:48:3d:b5:72:a6:29:dc:01:9b:f3:fe:2e:f1:61:
                    26:fd:9e:0a:d4:0d:ab:5b:2c:0d:bf:77:4b:10:8f:
                    07:9d:e0:7e:9f:43:33:66:c1:bf:b7:cf:2f:9f:f4:
                    dc:0d:91:23:92:e5:dd:8c:e1:6a:a8:c2:e9:e1:b9:
                    20:8d:ea:ad:9b:5e:d1:4f:c0:fa:54:79:1d:ea:5c:
                    7f:2e:c1:14:58:30:76:08:0c:c6:f2:2d:55:a8:f9:
                    21:c6:b3:d3:dd:13:6e:b5:da:bd:b8:d5:f9:06:bf:
                    8c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:28:B8:B2:AE:C8:37:69:C6:04:B4:27:D6:4A:30:41:45:09:3E:CF
            X509v3 Authority Key Identifier:
                keyid:D9:E1:01:9B:BE:11:B5:51:14:87:4C:96:17:16:EB:23:8A:11:CD:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eEBm74RtVEUh0yWFxbrI4oRzU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0e19fe-0ad9-48e0-9b7b-452561935031/1/2eEBm74RtVEUh0yWFxbrI4oRzU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:9f:89:cf:06:a5:26:c5:65:7d:fb:ac:be:0c:f3:0a:5e:32:
         e9:01:e4:fa:6b:8e:aa:de:8f:3a:4a:b2:a3:b1:34:0b:ed:60:
         1f:73:ed:2b:fb:83:99:70:25:c5:df:84:e4:38:51:fc:65:f3:
         dc:74:fc:c7:05:3a:99:f2:d0:23:46:69:3d:57:15:0f:35:ee:
         ce:08:4c:4f:97:75:1c:e7:26:c7:28:e0:cc:1e:d4:14:7c:9f:
         d8:7a:46:69:e3:b8:16:47:1b:31:1b:bf:ef:8d:89:fb:97:13:
         8b:c1:39:82:ec:96:c6:e9:e8:cb:e0:c8:08:b9:00:1f:b7:da:
         f4:87:14:b7:f1:9b:70:90:a8:71:44:75:1f:1b:6c:39:fe:99:
         bf:7a:7e:8a:f6:ff:e1:3c:d3:a6:1c:d9:77:47:52:7c:bd:c2:
         96:83:25:29:7f:40:fc:2a:69:a8:40:37:16:65:db:1b:c0:a6:
         1b:11:2f:ec:c8:e1:b4:48:18:4f:d1:91:ca:d2:0d:52:20:55:
         1a:5f:61:aa:d7:33:bd:1d:2a:7c:a3:98:51:72:1d:0c:ae:e5:
         e4:b2:e4:98:d1:64:eb:79:b4:e6:89:8d:cf:6c:30:5f:47:df:
         41:fc:eb:3f:36:e1:2f:8c:ab:f8:e2:79:08:f5:81:41:7a:1d:
         65:26:d2:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/yPtEZDWjCpCiUgdT+rclMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZTEwMTliYmUxMWI1NTExNDg3NGM5NjE3MTZlYjIzOGEx
MWNkNGUwHhcNMjYwNjEzMDcwMTIwWhcNMjYwNjE0MDcwMTIwWjAzMTEwLwYDVQQD
Eyg2MzI4YjhiMmFlYzgzNzY5YzYwNGI0MjdkNjRhMzA0MTQ1MDkzZWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTTiKMrdE5bt3eJReNXF5Jjg8bn5
FvYOBhzSLrFa4Turf9LgjMf4A5JKS/d/8fm+L92710aQSp/TmVHME2ZHPGBQjPln
ztcp1J0wtz/f4ewV3UBX2aPaFgcUT4zMinL5e6FRp+ui1pC2MNbd8dI59hEDmyue
VEOdx8pOb1HXvakqMhrdhrry0gF+7qrpEDIwEZwAbbonSD21cqYp3AGb8/4u8WEm
/Z4K1A2rWywNv3dLEI8HneB+n0MzZsG/t88vn/TcDZEjkuXdjOFqqMLp4bkgjeqt
m17RT8D6VHkd6lx/LsEUWDB2CAzG8i1VqPkhxrPT3RNutdq9uNX5Br+M2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMouLKuyDdpxgS0J9ZKMEFFCT7PMB8GA1UdIwQY
MBaAFNnhAZu+EbVRFIdMlhcW6yOKEc1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmVFQm03NFJ0VkVVaDB5V0Z4YnJJNG9SelU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wZTE5ZmUtMGFkOS00OGUwLTliN2It
NDUyNTYxOTM1MDMxLzEvMmVFQm03NFJ0VkVVaDB5V0Z4YnJJNG9SelU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8wZTE5ZmUtMGFkOS00OGUwLTliN2ItNDUyNTYxOTM1MDMx
LzEvMmVFQm03NFJ0VkVVaDB5V0Z4YnJJNG9SelU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR5+Jzwal
JsVlffusvgzzCl4y6QHk+muOqt6POkqyo7E0C+1gH3PtK/uDmXAlxd+E5DhR/GXz
3HT8xwU6mfLQI0ZpPVcVDzXuzghMT5d1HOcmxyjgzB7UFHyf2HpGaeO4FkcbMRu/
742J+5cTi8E5guyWxunoy+DICLkAH7fa9IcUt/GbcJCocUR1HxtsOf6Zv3p+ivb/
4TzTphzZd0dSfL3CloMlKX9A/CppqEA3FmXbG8CmGxEv7MjhtEgYT9GRytINUiBV
Gl9hqtczvR0qfKOYUXIdDK7l5LLkmNFk63m05omNz2wwX0ffQfzrPzbhL4yr+OJ5
CPWBQXodZSbS7w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:51:11 2026 by rpki-client