Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
File:                     dqdYJumRIlpCn_ih5__cgEZkIN8.mft (raw, json)
Hash identifier:          R2xL7qz4ByKlAACWxQRV/4pu5y6x22x3lJfu3D+Q9U4=
Subject key identifier:   31:1C:17:85:C9:E2:56:CC:CE:2B:2E:96:C2:02:EE:35:85:AC:B4:4F
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Certificate issuer:       /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial:       019E9CCE569E6E288C123FCE3DCE8FF04C41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
Manifest number:          196C
Signing time:             Sat 06 Jun 2026 12:00:28 +0000
Manifest this update:     Sat 06 Jun 2026 12:00:28 +0000
Manifest next update:     Sun 07 Jun 2026 12:00:28 +0000
Files and hashes:         1: 1EIOosMYuD73h9CRUOVLrDf2lBk.roa (hash: BJYCiLgwQZEOXx4/ggwCHkEwe20mmZnB00Jyo+D3/6k=)
                          2: 3lVoSteGkpKcde56m2WcsA8N-s0.roa (hash: 1XrtONYMpJVe4WnBQhEVaGnetVY+4paKXOigWmRK674=)
                          3: 72qqOl08Ng_75PrEX39wChvsHq8.roa (hash: wdAGiwDNclYEAAkLFN5CEwmjhcr+4EBdtbN76kXOOjo=)
                          4: AFJzhmH9R0mG2bUCJPJT6j8bKrw.roa (hash: EzibNTyau7BTPE7oIO9TUlGehtGq8uPVCAnORk3k9nM=)
                          5: FfL73uShzwqZVNoRtUTTUlqkYtA.roa (hash: fZCZHAPoxQlmosPyGQ71gASDy0FXd3AMU+JCShnhFxI=)
                          6: HBckW3ER80MSeSiwpy-Z-q1qiGA.roa (hash: QBBHo4qiNBL+JHuv6YtHpt1D3ezGsz5yopdFgNvM84U=)
                          7: Jj6QniBhg0ekrss-TvVc94h0S2M.roa (hash: qf4l8DU2kkBt1QRzcva1hlT0ObLg86RVHmV+gl/DthY=)
                          8: M_Zrv0eTt-hhAHKM89cDFtPfvPI.roa (hash: 8QhFDfLhK8OB14NksFoRCKIZ2O0CQM/pbJL/g+vvAt4=)
                          9: Piwh6Gdq7GydD4rudpdk_H1-iJ8.roa (hash: wtN9D7HevPrfH3K/IMhwZNny7MHPmsA5+nenLp6rWiU=)
                          10: Qpq2i8QQe-hpdWa8-mCiT84iiOs.roa (hash: +5MUOaZzIe1VzHSVRTVwblP5mePcZuEKD29LwLCdvi4=)
                          11: S6Hd3FrMpHr5gvirr8r2mfbNpH0.roa (hash: 4FAbzOC5Rxxuxqqf2z3xB7vLnXd0RHMz4zlLK9WWbfU=)
                          12: dKz_j_O-lAoD6qg2pO9vZUA4BGw.roa (hash: AKN2pF1PfbziQzZH+0SJyj3F9OOfW1sRqDb4wG8eZgw=)
                          13: dNznR1-S7vVnFASVh_hci4jZkMQ.roa (hash: zQ1QJ64mxnosKyQobzETFihGQBbENfar+9z/U7xN1lc=)
                          14: dqdYJumRIlpCn_ih5__cgEZkIN8.crl (hash: YD5oD4Xh4MeZ3SIy+Hq7dVkbHQkyaw4xBtT2Y+88xpM=)
                          15: fUNqCWuIckYGiVfEbuqCIkLI6d4.roa (hash: 2XlV9ynqjk3ChcE4Iw5juKC67TwbxBsySYHKnmHonQo=)
                          16: j2x4B6ObPzHT8ea8R_EMWP2PPik.roa (hash: X9UYUryQZPrf+c81HDCEnwfx3vw9iA0hQ/eJMGoOoMU=)
                          17: qrN-Uu0M-3HDr-76__U4MO8Jem0.roa (hash: F/0Bv+YLgCLY8hUXxBuIT6dqQV4aBe4yFDyDrHdklVY=)
                          18: sN7KZAb0tSBb8kQXanj5RVDo87M.roa (hash: sNtlv5Kfns7Qub92+PG+1MiYKqG3uVLYzRGiFbw3ks8=)
                          19: u3HM98A-Q9MDGyUnaURhtvW-lGU.roa (hash: orjD4qXj9t+4NhQVjT8wKDidu8IPZ4dL81G059Mpu9c=)
                          20: vbIqeSU0561jYPf76GOTQkgqkkU.roa (hash: I6pxxL2tdL5sG8uXzs35tb/DbPA84Se4ObiynAzOPa8=)
                          21: xFb3afKCHZ5K-TLErHfTSuMJKOU.roa (hash: 6l4PHj5QdfEodyTxnZX/6jrZVq4xk62zNf4EfjYJEmo=)
                          22: y2z9eC0pey0L-F8Me0uxP0CdRNE.roa (hash: ynALlANptr3j2opU4Eof0BTlyqYbPLK8fhfTetUFwTw=)
                          23: ygWs-sHzivtfoMPPnMV6aV1UCv4.roa (hash: KjRCKq03kFFE3PyzvTA3OcOazG7q6LPfF+mD7puBZ4o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 04:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9c:ce:56:9e:6e:28:8c:12:3f:ce:3d:ce:8f:f0:4c:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
        Validity
            Not Before: Jun  6 12:00:28 2026 GMT
            Not After : Jun  7 12:00:28 2026 GMT
        Subject: CN=311c1785c9e256ccce2b2e96c202ee3585acb44f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8a:8a:a5:cf:c3:d8:f0:68:cd:20:9c:c4:20:
                    75:08:24:31:de:ec:24:1b:09:99:d4:c5:e9:16:da:
                    ab:8e:09:c7:bb:1b:a2:fd:0e:69:bd:7d:20:8b:de:
                    da:82:bb:b7:82:48:98:b4:62:bd:6e:7c:f9:53:23:
                    fb:87:a3:40:5b:08:40:af:eb:06:40:c0:90:e8:10:
                    bb:32:e3:0a:1d:ed:23:8b:d8:eb:21:d5:a1:82:1c:
                    c3:cf:66:18:8b:d6:bf:b8:ff:24:36:34:46:9b:09:
                    86:80:6e:c0:19:10:d0:04:37:5d:17:2a:c2:48:71:
                    da:60:78:05:bf:93:74:4d:da:ac:f7:de:2e:07:d3:
                    e7:48:86:7d:c1:1c:d8:7c:2e:1d:f4:a0:3c:b7:41:
                    76:4d:0f:28:f6:e3:7c:83:67:2c:d6:9c:b9:8a:89:
                    c9:2c:61:4d:15:56:be:b3:f8:b5:d5:b8:a9:ce:2d:
                    24:d4:35:06:73:51:cc:62:57:21:cb:ef:36:e1:b5:
                    5c:bd:90:b7:89:e7:58:ed:8b:06:e1:50:e6:35:00:
                    8f:8a:ea:a9:21:0a:3b:ab:0f:dc:a9:85:1d:7d:68:
                    3a:ca:c6:47:f1:bd:25:6e:93:cb:67:a8:9f:69:61:
                    a5:eb:b2:aa:ae:17:89:1d:37:4e:4e:a6:61:c0:16:
                    e1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1C:17:85:C9:E2:56:CC:CE:2B:2E:96:C2:02:EE:35:85:AC:B4:4F
            X509v3 Authority Key Identifier:
                keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:81:2f:9f:6b:d4:ff:93:03:3b:59:8d:7d:f1:bb:40:d3:43:
         97:ca:3c:27:a7:ab:2d:7d:f7:4b:96:43:10:9e:36:1c:d5:5e:
         36:d4:75:83:d3:08:e6:56:ab:f3:9b:5a:34:6f:98:c5:68:dc:
         2b:c2:4f:73:5d:25:78:f5:5e:00:31:d4:fa:b4:77:3f:65:44:
         1c:f3:9b:27:a8:06:31:d1:d4:ef:95:eb:4d:be:d9:37:01:4e:
         97:b7:fb:a8:06:0f:0e:ab:32:01:82:7c:cb:c7:a0:2a:94:38:
         2b:40:64:8e:89:d3:7f:08:39:9d:ef:5f:56:6e:60:0f:c0:5b:
         27:03:dd:01:f9:cc:86:73:e0:de:65:c2:9e:bd:cc:d8:ca:c1:
         1c:fa:80:f6:17:66:f2:c8:ab:ed:ad:1a:6c:29:9a:50:72:39:
         c3:c9:3e:d0:3f:ba:c3:89:f4:13:94:e5:1d:23:e5:f2:75:25:
         df:98:6d:7c:b3:f2:0c:e4:b6:c8:ed:b8:1d:14:5a:50:db:a4:
         53:61:dd:92:db:d8:7f:09:af:44:2f:e8:c1:da:86:11:19:5c:
         01:da:2f:26:7a:4b:21:78:90:92:de:06:a9:db:c1:44:38:fe:
         f8:aa:4d:40:19:9b:79:f2:44:e7:d1:89:92:ca:1f:d5:8e:99:
         0b:c1:5f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:20:59 2026 by rpki-client