Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
File:                     Pme6gge4HBtHJjsf3o95uZWXA30.mft (raw, json)
Hash identifier:          BLJgszKd7UAYC/nLB3DH4K+nCQBnhG6R/xVxWLYOdLI=
Subject key identifier:   86:E5:F2:21:91:47:46:06:D5:A7:E6:B7:37:77:E0:DF:36:33:6E:10
Authority key identifier: 3E:67:BA:82:07:B8:1C:1B:47:26:3B:1F:DE:8F:79:B9:95:97:03:7D
Certificate issuer:       /CN=3e67ba8207b81c1b47263b1fde8f79b99597037d
Certificate serial:       019F194400050B85F3EDB80BFE7263BDAF5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
Manifest number:          191A
Signing time:             Tue 30 Jun 2026 16:01:54 +0000
Manifest this update:     Tue 30 Jun 2026 16:01:54 +0000
Manifest next update:     Wed 01 Jul 2026 16:01:54 +0000
Files and hashes:         1: DJdqiSENKGFZJ1k4CQJ0qhVj-NU.roa (hash: JPyYKilJIGfMtwMBvPqVfl8PNsFxqskM2FqefiGjuEU=)
                          2: Pme6gge4HBtHJjsf3o95uZWXA30.crl (hash: PuBUJwV+8qvfPplYjJNnxMS4T6EaCljk8qG/13eb1bk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:44:00:05:0b:85:f3:ed:b8:0b:fe:72:63:bd:af:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e67ba8207b81c1b47263b1fde8f79b99597037d
        Validity
            Not Before: Jun 30 16:01:54 2026 GMT
            Not After : Jul  1 16:01:54 2026 GMT
        Subject: CN=86e5f22191474606d5a7e6b73777e0df36336e10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a3:59:02:f0:58:e2:aa:71:21:8f:c1:f5:1b:
                    29:c5:30:d4:78:c1:df:12:59:bf:4e:43:80:da:0b:
                    52:9f:1f:28:42:d5:0c:c0:39:99:bb:e5:45:3e:4d:
                    0c:b0:75:9c:c4:04:f9:80:b2:5b:cf:23:37:96:c0:
                    94:0e:0c:13:9b:cd:88:4c:c2:5e:cb:b4:67:99:39:
                    5f:39:c5:ec:dc:fe:cb:a6:b1:a6:0e:a4:30:a3:c2:
                    1a:ee:ae:77:5e:7d:00:6d:15:e1:d9:0e:43:f9:d1:
                    52:56:04:ae:e1:ab:5e:4d:51:6b:58:5f:2d:73:3e:
                    9a:0e:6f:d1:04:a1:85:fb:c3:54:50:be:ec:e1:b4:
                    05:f1:20:04:d8:8a:3b:b3:45:5c:96:51:99:d6:49:
                    78:7a:3d:75:9b:9c:40:81:00:dd:74:0d:47:ff:b0:
                    7e:c0:da:4f:81:de:29:54:0a:da:84:69:42:3c:ab:
                    7c:24:d0:7d:5b:a2:e3:fd:5b:e6:d6:0a:d6:5b:cd:
                    1c:8c:cf:5f:f8:77:78:49:92:01:f8:c1:fc:f6:99:
                    6a:be:e2:c5:a4:fb:3f:e4:22:ba:f2:24:c4:a9:68:
                    be:e2:7c:b9:58:6d:3a:1f:4d:34:3a:d6:8a:01:90:
                    f2:28:3b:66:49:b0:79:fa:41:d6:ba:86:8a:97:cd:
                    a5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E5:F2:21:91:47:46:06:D5:A7:E6:B7:37:77:E0:DF:36:33:6E:10
            X509v3 Authority Key Identifier:
                keyid:3E:67:BA:82:07:B8:1C:1B:47:26:3B:1F:DE:8F:79:B9:95:97:03:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pme6gge4HBtHJjsf3o95uZWXA30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a02136-db9b-4bef-ae12-4c25fcbdedd1/1/Pme6gge4HBtHJjsf3o95uZWXA30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:cd:48:6c:eb:15:de:f1:c9:0a:cc:35:02:df:1b:82:03:b5:
         b5:1a:a4:1a:2c:01:b4:ac:71:08:b9:6f:87:36:9d:3c:18:06:
         6b:b5:5b:f2:9d:a9:7d:54:6a:2a:13:d1:8e:48:d6:e9:cc:6d:
         9a:b1:18:6e:ed:06:a9:7e:fc:a5:db:5e:05:64:a9:b3:86:2e:
         9b:15:97:d5:9c:c0:8f:ba:66:af:87:c3:24:7b:f9:73:a7:d8:
         11:7b:d7:bf:33:9c:0e:49:57:d7:45:cb:ab:92:ab:0b:62:0e:
         f9:81:9a:4e:86:c4:81:b4:03:6f:3d:66:bd:cf:bf:31:b1:71:
         fd:8f:9c:e3:51:ff:44:98:a6:4e:76:01:9e:59:d5:06:ad:dd:
         7a:69:45:bf:51:0b:6c:64:3c:45:e1:9f:c2:c7:40:d1:88:4a:
         e1:3d:aa:fe:25:63:48:91:e4:63:5e:5e:81:e6:83:0d:9e:dd:
         2b:ef:67:cc:4c:a4:77:40:00:6f:84:10:8f:a3:db:9f:f2:a7:
         00:5b:4b:f3:bf:42:f3:6a:84:9a:51:a1:e3:44:e3:23:cd:5d:
         c2:44:87:7a:63:5b:ad:80:c9:3e:16:0f:3a:7a:d0:3a:75:e5:
         b1:9b:02:6f:b7:f4:1f:31:1f:e8:ca:9d:c2:7f:ea:cb:bd:66:
         c7:6a:81:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:41:32 2026 by rpki-client