Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
File:                     C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft (raw, json)
Hash identifier:          GzTJ83IAd+KThz14QccAaQNjZFsJr6p02hylryqd2NI=
Subject key identifier:   B4:DC:05:FA:D9:7E:CD:55:B4:52:FC:1F:87:CB:83:9A:F4:A3:23:B6
Authority key identifier: 0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3
Certificate issuer:       /CN=0b8e20c48e8973c331e33ce55195a321773f0ac3
Certificate serial:       019F19440984000D6C2F90A360BA0F5241FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
Manifest number:          1959
Signing time:             Tue 30 Jun 2026 16:01:56 +0000
Manifest this update:     Tue 30 Jun 2026 16:01:56 +0000
Manifest next update:     Wed 01 Jul 2026 16:01:56 +0000
Files and hashes:         1: C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl (hash: HWh6jnYCva5fzJND53M/3H2JKJNOQJ4RkTbDYOA5DSQ=)
                          2: Uv1LOQn-rihpO-VnBwQTGmMa48E.roa (hash: U1Bj99VrPaNBoxUvCEMoBEqTdDcni4KZuGxKdf2wOC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 16:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:44:09:84:00:0d:6c:2f:90:a3:60:ba:0f:52:41:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b8e20c48e8973c331e33ce55195a321773f0ac3
        Validity
            Not Before: Jun 30 16:01:56 2026 GMT
            Not After : Jul  1 16:01:56 2026 GMT
        Subject: CN=b4dc05fad97ecd55b452fc1f87cb839af4a323b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e0:14:1b:de:c3:3f:c5:84:1b:43:04:bd:13:
                    c8:08:52:28:a9:72:c1:44:ab:3b:02:fb:43:33:4b:
                    42:85:7d:b3:a2:a8:6f:22:11:3f:77:70:7b:45:16:
                    69:ae:8a:16:89:ab:12:7d:d4:b0:bc:5c:20:5e:75:
                    a9:b8:03:d3:43:d5:55:b9:75:57:62:09:83:76:7b:
                    94:7c:90:7c:64:1f:ed:8b:a3:7d:c9:3c:9d:95:2f:
                    c5:82:b8:91:76:7b:e8:0c:4f:02:41:ee:e8:2e:6c:
                    cd:5d:ae:66:e8:7d:12:ea:04:ef:d5:de:88:ef:3f:
                    60:b1:72:38:68:cf:1b:c1:c5:fa:be:d1:8f:03:74:
                    46:ea:3c:c6:5e:6c:d3:f5:69:8c:1d:cd:ee:65:66:
                    cb:b0:2e:d5:d0:a0:90:38:a2:ea:f8:07:1a:77:18:
                    c1:8d:0c:3a:d4:8a:79:a6:d4:38:04:0e:04:f1:ce:
                    37:17:c7:8f:bd:c9:7d:a6:75:c8:30:94:26:5e:c1:
                    49:5c:9f:4e:1f:c8:00:5b:73:14:85:06:91:93:35:
                    96:bb:09:a2:08:11:a8:c6:0a:a4:f2:b6:98:7f:46:
                    f2:6f:13:d7:e0:02:fd:f8:df:43:14:44:b5:4c:35:
                    88:0f:b7:86:db:c6:6b:76:73:8a:05:a3:85:48:18:
                    c8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:DC:05:FA:D9:7E:CD:55:B4:52:FC:1F:87:CB:83:9A:F4:A3:23:B6
            X509v3 Authority Key Identifier:
                keyid:0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:bc:df:9a:98:2c:f3:c9:c0:de:6b:c4:19:a8:f5:2d:dd:5c:
         d7:97:4b:d1:f0:00:72:bd:75:c2:3c:b4:fb:12:ec:e4:9b:bf:
         b0:26:5c:3f:df:9a:ce:1b:f4:89:56:46:5a:a2:ac:bf:1f:fb:
         3f:fc:05:fb:6e:ce:65:b2:b0:1d:bf:52:0c:be:1d:27:51:59:
         82:d3:90:80:41:54:92:27:c2:ac:4b:c5:84:09:4a:01:58:96:
         16:bf:59:6b:c1:12:fe:bb:0c:da:64:d1:51:e4:b3:86:36:a7:
         a8:52:79:17:05:42:0d:58:3c:a8:f2:77:8f:56:8c:da:02:d5:
         38:bf:1b:52:7b:d3:59:b9:99:43:96:fb:77:a3:b5:91:de:68:
         84:95:02:9b:1f:fb:2d:d4:8d:5b:ed:a8:0b:3d:e3:c7:89:19:
         77:4a:f5:e4:a7:ea:9c:a1:56:df:21:a3:76:5f:b4:d3:ad:93:
         de:44:f2:ea:fa:eb:db:1f:1d:49:66:ad:48:a1:b6:be:48:1d:
         1f:56:d1:17:1e:76:67:74:99:2e:c2:64:49:b2:7c:77:98:e9:
         b8:f0:e7:23:a2:e6:d2:85:be:33:d8:64:c3:55:bf:93:6f:8d:
         a4:cc:2c:46:9d:53:94:18:26:0d:6a:e8:29:64:f8:43:d1:4f:
         15:b4:97:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZRAmEAA1sL5CjYLoPUkH+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiOGUyMGM0OGU4OTczYzMzMWUzM2NlNTUxOTVhMzIxNzcz
ZjBhYzMwHhcNMjYwNjMwMTYwMTU2WhcNMjYwNzAxMTYwMTU2WjAzMTEwLwYDVQQD
EyhiNGRjMDVmYWQ5N2VjZDU1YjQ1MmZjMWY4N2NiODM5YWY0YTMyM2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuAUG97DP8WEG0MEvRPICFIoqXLB
RKs7AvtDM0tChX2zoqhvIhE/d3B7RRZprooWiasSfdSwvFwgXnWpuAPTQ9VVuXVX
YgmDdnuUfJB8ZB/ti6N9yTydlS/FgriRdnvoDE8CQe7oLmzNXa5m6H0S6gTv1d6I
7z9gsXI4aM8bwcX6vtGPA3RG6jzGXmzT9WmMHc3uZWbLsC7V0KCQOKLq+AcadxjB
jQw61Ip5ptQ4BA4E8c43F8ePvcl9pnXIMJQmXsFJXJ9OH8gAW3MUhQaRkzWWuwmi
CBGoxgqk8raYf0bybxPX4AL9+N9DFES1TDWID7eG28ZrdnOKBaOFSBjIxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTcBfrZfs1VtFL8H4fLg5r0oyO2MB8GA1UdIwQY
MBaAFAuOIMSOiXPDMeM85VGVoyF3PwrDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzQ0Z3hJNkpjOE14NHp6bFVaV2pJWGNfQ3NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80YTYxM2EtMzFlZi00YTczLThkYTQt
YTVhZjkzN2ZiYzA1LzEvQzQ0Z3hJNkpjOE14NHp6bFVaV2pJWGNfQ3NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS80YTYxM2EtMzFlZi00YTczLThkYTQtYTVhZjkzN2ZiYzA1
LzEvQzQ0Z3hJNkpjOE14NHp6bFVaV2pJWGNfQ3NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAubzfmpgs
88nA3mvEGaj1Ld1c15dL0fAAcr11wjy0+xLs5Ju/sCZcP9+azhv0iVZGWqKsvx/7
P/wF+27OZbKwHb9SDL4dJ1FZgtOQgEFUkifCrEvFhAlKAViWFr9Za8ES/rsM2mTR
UeSzhjanqFJ5FwVCDVg8qPJ3j1aM2gLVOL8bUnvTWbmZQ5b7d6O1kd5ohJUCmx/7
LdSNW+2oCz3jx4kZd0r15KfqnKFW3yGjdl+0062T3kTy6vrr2x8dSWatSKG2vkgd
H1bRFx52Z3SZLsJkSbJ8d5jpuPDnI6Lm0oW+M9hkw1W/k2+NpMwsRp1TlBgmDWro
KWT4Q9FPFbSXvg==
-----END CERTIFICATE-----
Generated at Wed Jul 1 02:37:19 2026 by rpki-client