Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
File:                     tqFlTa6WxTJXjOHfHruCIdu2gUU.mft (raw, json)
Hash identifier:          tVWkIWE+VoRnTMWyjYPLxwvEoBiGGJJ1fenxmr3x+gI=
Subject key identifier:   0C:C5:23:4B:6C:B2:A4:69:82:9E:71:4B:E6:E3:6F:5F:97:1C:75:22
Authority key identifier: B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
Certificate issuer:       /CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Certificate serial:       019EC111A7307739EECA55915A135296350D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 13:00:20 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:20 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:20 +0000
Files and hashes:         1: QW73u8rMuH1v1Kv7BEJQbwmdG30.roa (hash: 86pULR+fbjp+HIMXs4j+2SEmIr4Htvw47MfRZHiRzRU=)
                          2: ehZg7NVKRiPcTGHWVyISklSxV_0.roa (hash: Dyhn6Vhbep1Q3HKDE2Bpn72ONwXFiRAQ/djQCOZfQXE=)
                          3: tqFlTa6WxTJXjOHfHruCIdu2gUU.crl (hash: uczAU/ckZY+GehAvw/McbwLM+/7kIBOtRe1fNKgQihY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:11:a7:30:77:39:ee:ca:55:91:5a:13:52:96:35:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
        Validity
            Not Before: Jun 13 13:00:20 2026 GMT
            Not After : Jun 14 13:00:20 2026 GMT
        Subject: CN=0cc5234b6cb2a469829e714be6e36f5f971c7522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:82:57:0b:41:eb:9c:fc:5e:ad:fb:06:67:94:
                    6d:7b:09:a7:b3:ff:f0:87:93:9e:d8:dc:1a:0f:44:
                    5b:8f:77:1d:0a:55:c1:f8:52:3a:c2:b6:93:7c:01:
                    91:ab:59:f3:7c:2a:34:79:d5:43:cc:ec:f3:00:f3:
                    2c:d3:59:12:6d:f7:3c:24:6d:f8:64:95:da:50:8d:
                    39:66:5a:16:9d:bc:e9:58:c1:2b:5a:6d:c1:35:f5:
                    58:27:0e:3d:6a:f6:50:65:e5:96:07:29:20:96:80:
                    28:76:12:92:99:c9:5c:0d:d8:d8:2b:ae:d3:b5:8c:
                    9e:6c:4a:26:c0:84:4c:81:1b:8d:a5:a3:2f:5a:5a:
                    e8:f5:5d:44:a3:c6:ea:4d:45:e8:ef:97:15:e6:3f:
                    c1:49:1e:8c:35:32:8b:f0:06:28:b3:a1:0b:ce:be:
                    7c:0d:16:94:6c:8f:90:fd:4d:c4:27:05:1d:2b:30:
                    96:9a:f6:9b:de:e9:ef:8f:97:09:c6:0e:23:8f:95:
                    88:f9:84:5e:2b:42:0c:ed:f0:67:1b:be:73:37:b2:
                    37:b3:73:cb:86:63:51:56:76:f1:ec:83:60:7c:ce:
                    1f:a6:1a:af:2b:56:13:48:0a:a6:e4:64:67:10:8b:
                    6f:70:fb:b9:25:7f:9b:3f:0f:02:2a:e2:08:0c:f2:
                    eb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C5:23:4B:6C:B2:A4:69:82:9E:71:4B:E6:E3:6F:5F:97:1C:75:22
            X509v3 Authority Key Identifier:
                keyid:B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:3f:27:3e:e6:7c:ca:e8:df:41:27:fc:2c:69:3f:6e:48:8c:
         66:40:42:f1:4b:ea:90:e6:5e:84:30:cf:be:42:a9:f0:ac:e1:
         2c:27:30:62:fa:0b:6d:fa:ab:b8:01:48:2d:7b:54:ab:89:2b:
         d0:65:4d:a2:e4:31:f3:53:a5:8a:a8:6a:db:b2:f6:eb:b2:05:
         d2:09:98:c0:ca:82:d3:ee:ae:2c:ad:0b:db:98:a0:a8:b2:50:
         39:24:2c:83:a2:64:26:cb:64:ce:2e:d8:6d:91:9f:a1:2f:d7:
         c1:fa:81:4f:5c:f2:d8:f8:85:ca:87:d5:87:4e:5c:5c:40:d3:
         ed:3d:d9:89:89:8b:9b:1f:aa:b0:d4:2c:71:ef:e7:63:b1:e3:
         17:66:eb:41:4a:d5:d6:f6:eb:16:07:b6:d4:e2:94:9c:49:ba:
         20:6c:e0:f5:a6:c7:e0:b8:c1:2d:60:a1:4b:03:cd:50:8d:9e:
         b5:ad:c1:51:e7:b8:80:bc:44:99:c0:b9:bc:86:15:1c:f6:70:
         40:f6:fb:7e:be:4f:38:c1:3b:28:0e:86:c4:80:a0:f6:fd:09:
         4c:18:b6:af:f3:11:b6:b7:f7:75:18:ae:97:db:db:e3:bb:22:
         92:21:02:1a:8b:a5:15:65:9a:0d:52:8b:34:d8:db:d0:c6:fb:
         01:64:29:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:57:30 2026 by rpki-client