Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
File:                     TEA7xgtKE8Pao0EaySPGNy1CPrg.mft (raw, json)
Hash identifier:          g/tJ/1IoxWTfy+E+G3eziPy85y15NU1c8b474IPeENA=
Subject key identifier:   03:F5:50:BB:3E:99:77:CF:08:66:6C:ED:A4:8E:09:30:88:61:FD:41
Authority key identifier: 4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
Certificate issuer:       /CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Certificate serial:       019EBEECB8D94FB333736017AA41C818DACD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 03:00:45 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:45 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:45 +0000
Files and hashes:         1: TEA7xgtKE8Pao0EaySPGNy1CPrg.crl (hash: Qq7hAZlItZ4fDIpwPmwey01/uycrhmF3F2QMDEqYL7U=)
                          2: daxj-MhkiZarWyN8EVbWUahA0Nw.roa (hash: DXI6WwfxF6esJ4bJvCIfH7p2ed5ZUha18BtslnvRoss=)
                          3: n7q5NwtaL8-zEQXH647Qf4RaQks.roa (hash: n40KhH8cPfP863DY99KhVmZjjBSxGcmy9+bxffCu9sY=)
                          4: v7NOMk3x2Uly1ZRD2JuF1N9_0qo.roa (hash: +/eUsv8fNjsa5iAvEDJgYJR3r1TegvUrhwXeQYQizWs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 03:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:b8:d9:4f:b3:33:73:60:17:aa:41:c8:18:da:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
        Validity
            Not Before: Jun 13 03:00:45 2026 GMT
            Not After : Jun 14 03:00:45 2026 GMT
        Subject: CN=03f550bb3e9977cf08666ceda48e09308861fd41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:82:50:fc:15:7a:da:1c:6f:ef:7d:1c:79:7b:
                    11:57:0e:26:ec:b4:86:00:a2:b9:de:1d:87:af:8e:
                    eb:eb:48:f8:0e:c8:9b:ff:6a:75:14:f2:b6:0a:f6:
                    77:b8:e9:b0:fd:4c:1f:fc:fb:49:2d:cf:c3:76:68:
                    e7:22:f2:37:b8:df:91:c2:5d:c6:58:fd:65:78:31:
                    c0:a5:5d:f8:0a:62:dc:73:4f:b0:39:3c:3d:b3:97:
                    b7:ac:d1:4c:d0:97:ba:f3:80:d9:52:af:71:1b:13:
                    c8:5a:cb:74:38:6f:85:99:94:03:45:62:1e:71:05:
                    9b:a9:91:a6:ba:f3:96:93:df:6b:4a:6c:ef:94:12:
                    c2:99:0b:fa:a9:ae:2c:d7:99:24:1a:48:9a:1c:d6:
                    e8:31:2a:b7:f1:64:41:1c:25:5d:a7:ce:2f:96:8d:
                    e9:95:d7:38:aa:9d:e3:b7:c3:4b:f0:2f:d9:47:d0:
                    68:89:62:b2:f8:6f:62:2e:77:86:bd:d6:5a:07:aa:
                    04:5c:2b:f4:e4:08:c1:b2:19:f3:81:0c:ff:91:ed:
                    03:4b:cc:24:9a:d7:03:67:4b:b4:23:11:44:b7:73:
                    97:70:89:3c:5e:8e:92:78:81:19:d6:42:76:3b:d8:
                    31:e0:fd:47:17:9e:9d:d7:a5:ba:d8:87:1a:3a:ac:
                    24:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F5:50:BB:3E:99:77:CF:08:66:6C:ED:A4:8E:09:30:88:61:FD:41
            X509v3 Authority Key Identifier:
                keyid:4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:8f:26:09:3b:95:00:06:b7:e2:6f:b2:af:ce:b5:38:c2:b2:
         e5:cf:3b:54:54:9e:33:c7:9d:27:d0:87:f6:cf:ee:53:f8:13:
         9c:41:65:93:e6:5e:f7:0e:34:5d:cd:95:86:dd:b8:da:99:36:
         2c:5d:c9:97:a0:16:51:1f:1e:22:7d:51:58:96:64:fc:01:0e:
         4b:86:61:cd:87:67:4b:d1:21:f5:bf:cb:1a:86:cc:43:5e:f3:
         c8:17:11:bb:0c:15:89:8a:10:68:41:ee:8a:4b:c0:2e:32:a0:
         a7:c8:25:b0:64:ca:e1:8c:2b:37:d6:35:c0:dc:74:6c:a5:47:
         4e:a4:8c:69:e9:21:7d:4b:1b:36:d3:ae:c5:bd:0c:fc:64:13:
         33:46:59:de:85:33:f9:84:c5:52:62:76:f8:cc:34:8f:ce:be:
         e8:83:73:5a:aa:12:79:df:97:40:99:79:6f:f0:c1:ef:5d:89:
         c1:d9:87:d8:43:bd:7d:f9:de:c7:ca:c7:54:33:20:ed:97:30:
         34:59:13:02:b9:a6:fc:bb:fa:fe:5b:2a:5b:08:44:58:dd:ee:
         f8:12:ff:1d:7c:61:b5:79:6f:6c:7d:d4:4e:d4:95:50:40:ef:
         d0:00:94:77:c0:56:4f:07:13:f8:e1:d6:c4:7e:df:84:fa:6e:
         7f:75:aa:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+7LjZT7Mzc2AXqkHIGNrNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNDAzYmM2MGI0YTEzYzNkYWEzNDExYWM5MjNjNjM3MmQ0
MjNlYjgwHhcNMjYwNjEzMDMwMDQ1WhcNMjYwNjE0MDMwMDQ1WjAzMTEwLwYDVQQD
EygwM2Y1NTBiYjNlOTk3N2NmMDg2NjZjZWRhNDhlMDkzMDg4NjFmZDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYJQ/BV62hxv730ceXsRVw4m7LSG
AKK53h2Hr47r60j4Dsib/2p1FPK2CvZ3uOmw/Uwf/PtJLc/DdmjnIvI3uN+Rwl3G
WP1leDHApV34CmLcc0+wOTw9s5e3rNFM0Je684DZUq9xGxPIWst0OG+FmZQDRWIe
cQWbqZGmuvOWk99rSmzvlBLCmQv6qa4s15kkGkiaHNboMSq38WRBHCVdp84vlo3p
ldc4qp3jt8NL8C/ZR9BoiWKy+G9iLneGvdZaB6oEXCv05AjBshnzgQz/ke0DS8wk
mtcDZ0u0IxFEt3OXcIk8Xo6SeIEZ1kJ2O9gx4P1HF56d16W62IcaOqwkwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAP1ULs+mXfPCGZs7aSOCTCIYf1BMB8GA1UdIwQY
MBaAFExAO8YLShPD2qNBGskjxjctQj64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEVBN3hndEtFOFBhbzBFYXlTUEdOeTFDUHJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8wOGI5YzQtMGFmZC00ODc2LTllZjct
MmU4NGI4ZDE4ZTRlLzEvVEVBN3hndEtFOFBhbzBFYXlTUEdOeTFDUHJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8wOGI5YzQtMGFmZC00ODc2LTllZjctMmU4NGI4ZDE4ZTRl
LzEvVEVBN3hndEtFOFBhbzBFYXlTUEdOeTFDUHJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYI8mCTuV
AAa34m+yr861OMKy5c87VFSeM8edJ9CH9s/uU/gTnEFlk+Ze9w40Xc2Vht242pk2
LF3Jl6AWUR8eIn1RWJZk/AEOS4ZhzYdnS9Eh9b/LGobMQ17zyBcRuwwViYoQaEHu
ikvALjKgp8glsGTK4YwrN9Y1wNx0bKVHTqSMaekhfUsbNtOuxb0M/GQTM0ZZ3oUz
+YTFUmJ2+Mw0j86+6INzWqoSed+XQJl5b/DB712JwdmH2EO9ffnex8rHVDMg7Zcw
NFkTArmm/Lv6/lsqWwhEWN3u+BL/HXxhtXlvbH3UTtSVUEDv0ACUd8BWTwcT+OHW
xH7fhPpuf3Wqww==
-----END CERTIFICATE-----
Generated at Sat Jun 13 12:51:20 2026 by rpki-client