Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
File:                     SGUQoxFpcvztleiova_W5FXe0Lo.mft (raw, json)
Hash identifier:          jimNIkQmWfxMh0m6YbIwhUbh907Jfdzem0914s/J2WA=
Subject key identifier:   FB:79:AF:D1:92:20:D4:2D:E4:0B:F4:43:55:8E:34:A8:08:C2:10:26
Authority key identifier: 48:65:10:A3:11:69:72:FC:ED:95:E8:A8:BD:AF:D6:E4:55:DE:D0:BA
Certificate issuer:       /CN=486510a3116972fced95e8a8bdafd6e455ded0ba
Certificate serial:       019EBF91075A11C0EA8E1DA7E1786B8E020B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
Manifest number:          195F
Signing time:             Sat 13 Jun 2026 06:00:13 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:13 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:13 +0000
Files and hashes:         1: 1-_tolY0Ku6cjK7uWuGIDT-aOsUM.roa (hash: zHmw/JUfBT58tzI52qKI6ZXBHiMslg81gZfcAbrW9BY=)
                          2: 1cDQdypkn0cjo9FfkDhM0paatNY.roa (hash: +ByPIkalEzr2Rwt/bFmRxra3ZwfCDb/OP1YXhCyI2zk=)
                          3: SGUQoxFpcvztleiova_W5FXe0Lo.crl (hash: qcJYMCDqtahzq9DOfDwem6Cn4EYp2m+xkO6/A8BO4mM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:07:5a:11:c0:ea:8e:1d:a7:e1:78:6b:8e:02:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=486510a3116972fced95e8a8bdafd6e455ded0ba
        Validity
            Not Before: Jun 13 06:00:13 2026 GMT
            Not After : Jun 14 06:00:13 2026 GMT
        Subject: CN=fb79afd19220d42de40bf443558e34a808c21026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d4:79:50:c5:9d:6d:0f:86:6d:88:c8:01:23:
                    b1:3c:98:e1:62:6d:2c:c1:68:1e:8f:b5:28:3f:49:
                    0b:08:d9:a5:06:11:34:cb:60:9a:a3:18:f6:6c:5e:
                    27:af:e6:8b:fc:2c:64:45:fd:d9:33:09:cb:fc:c9:
                    52:ce:f0:18:8b:89:a0:d3:88:3a:6f:4e:8a:7b:9c:
                    62:cb:d6:52:57:00:58:76:d5:f5:8f:a0:be:da:64:
                    ac:13:92:84:cf:9f:bc:a3:56:87:43:f9:c3:08:1b:
                    9b:ed:60:ff:01:f2:5b:05:ae:a1:ba:84:3b:9b:cb:
                    ee:37:a4:f9:f0:a5:d7:ee:39:c5:dd:62:fa:a7:90:
                    3e:01:cb:56:84:4a:18:53:fe:fd:31:11:af:f7:92:
                    bc:2c:f8:25:66:87:9d:28:ab:3f:ba:d3:5a:38:5d:
                    2c:28:41:2d:5e:9e:7e:8b:97:db:ce:5e:ed:83:59:
                    6a:17:75:0a:13:7d:8d:70:1f:e5:ff:8a:d7:ef:ee:
                    be:d5:d2:f9:88:36:2a:88:85:e8:61:29:24:ad:3b:
                    32:22:e8:c1:63:4e:c6:9a:0b:39:00:c8:d9:9d:ef:
                    92:9f:97:ab:4e:98:c0:94:97:e6:c3:d0:5d:c7:d7:
                    f2:36:2f:83:0b:78:6e:a3:78:4f:78:6b:d4:2a:9f:
                    29:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:79:AF:D1:92:20:D4:2D:E4:0B:F4:43:55:8E:34:A8:08:C2:10:26
            X509v3 Authority Key Identifier:
                keyid:48:65:10:A3:11:69:72:FC:ED:95:E8:A8:BD:AF:D6:E4:55:DE:D0:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGUQoxFpcvztleiova_W5FXe0Lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeae3f-af4d-4eee-b284-a5f6c0aa11de/1/SGUQoxFpcvztleiova_W5FXe0Lo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:c0:a2:5c:2b:57:ff:18:f9:05:c6:d5:99:fd:b8:5d:10:10:
         f9:fa:83:20:53:27:ce:19:e3:7e:74:f3:5b:0f:89:2a:ee:17:
         71:0a:9e:14:ae:df:74:0a:07:17:42:4b:79:6b:4c:0e:9f:b4:
         8d:f7:72:07:bb:e2:83:50:08:24:09:49:e3:d2:96:2c:3b:12:
         1a:4c:f6:ca:b8:43:71:80:54:7c:ea:dd:5c:b3:ab:70:e2:b2:
         c5:20:25:fd:2a:f0:26:de:9c:81:e0:e9:eb:82:c2:76:38:6d:
         a2:49:40:bf:43:62:07:71:fe:f6:79:29:3f:fe:39:06:d2:6a:
         fc:b7:5f:5b:53:c4:07:74:56:34:ef:9e:01:be:6d:c3:90:72:
         cc:ad:8c:bf:fd:ad:3f:f1:6f:ff:a6:03:be:b6:ce:27:34:10:
         06:fa:fb:43:f3:bc:ec:f7:f4:2b:3a:92:f0:a1:5e:86:e9:c3:
         ff:64:c6:bf:78:da:cc:ee:02:5c:da:21:73:51:17:e5:ad:9a:
         a4:56:20:0f:1d:f1:95:d5:1e:1f:c5:64:d8:79:8c:ed:0c:91:
         ae:0f:0b:b0:61:a2:c2:18:51:80:5b:20:cc:1c:78:48:95:18:
         30:9b:9c:76:1f:b2:27:2a:25:d2:ef:63:18:45:b4:6e:5b:c6:
         ea:17:7a:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/kQdaEcDqjh2n4XhrjgILMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NjUxMGEzMTE2OTcyZmNlZDk1ZThhOGJkYWZkNmU0NTVk
ZWQwYmEwHhcNMjYwNjEzMDYwMDEzWhcNMjYwNjE0MDYwMDEzWjAzMTEwLwYDVQQD
EyhmYjc5YWZkMTkyMjBkNDJkZTQwYmY0NDM1NThlMzRhODA4YzIxMDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09R5UMWdbQ+GbYjIASOxPJjhYm0s
wWgej7UoP0kLCNmlBhE0y2Caoxj2bF4nr+aL/CxkRf3ZMwnL/MlSzvAYi4mg04g6
b06Ke5xiy9ZSVwBYdtX1j6C+2mSsE5KEz5+8o1aHQ/nDCBub7WD/AfJbBa6huoQ7
m8vuN6T58KXX7jnF3WL6p5A+ActWhEoYU/79MRGv95K8LPglZoedKKs/utNaOF0s
KEEtXp5+i5fbzl7tg1lqF3UKE32NcB/l/4rX7+6+1dL5iDYqiIXoYSkkrTsyIujB
Y07Gmgs5AMjZne+Sn5erTpjAlJfmw9Bdx9fyNi+DC3huo3hPeGvUKp8p4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPt5r9GSINQt5Av0Q1WONKgIwhAmMB8GA1UdIwQY
MBaAFEhlEKMRaXL87ZXoqL2v1uRV3tC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0dVUW94RnBjdnp0bGVpb3ZhX1c1RlhlMExvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9hZWFlM2YtYWY0ZC00ZWVlLWIyODQt
YTVmNmMwYWExMWRlLzEvU0dVUW94RnBjdnp0bGVpb3ZhX1c1RlhlMExvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9hZWFlM2YtYWY0ZC00ZWVlLWIyODQtYTVmNmMwYWExMWRl
LzEvU0dVUW94RnBjdnp0bGVpb3ZhX1c1RlhlMExvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOMCiXCtX
/xj5BcbVmf24XRAQ+fqDIFMnzhnjfnTzWw+JKu4XcQqeFK7fdAoHF0JLeWtMDp+0
jfdyB7vig1AIJAlJ49KWLDsSGkz2yrhDcYBUfOrdXLOrcOKyxSAl/SrwJt6cgeDp
64LCdjhtoklAv0NiB3H+9nkpP/45BtJq/LdfW1PEB3RWNO+eAb5tw5ByzK2Mv/2t
P/Fv/6YDvrbOJzQQBvr7Q/O87Pf0KzqS8KFehunD/2TGv3jazO4CXNohc1EX5a2a
pFYgDx3xldUeH8Vk2HmM7QyRrg8LsGGiwhhRgFsgzBx4SJUYMJucdh+yJyol0u9j
GEW0blvG6hd6+A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:26:02 2026 by rpki-client