Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
File:                     mYS56xIiNxEcH4yldwfscwcpHug.mft (raw, json)
Hash identifier:          OyWbfVKp05J8ivXGlCd7m8+Zvs4ykbPju7Y7Ys2hVuk=
Subject key identifier:   4C:96:4A:C2:4E:A5:55:22:EA:DC:0E:63:F4:06:54:59:97:09:E3:E7
Authority key identifier: 99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
Certificate issuer:       /CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Certificate serial:       019EB921B4B53255C0902DB347B3A41FF5CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
Manifest number:          195C
Signing time:             Fri 12 Jun 2026 00:00:54 +0000
Manifest this update:     Fri 12 Jun 2026 00:00:54 +0000
Manifest next update:     Sat 13 Jun 2026 00:00:54 +0000
Files and hashes:         1: 1-M17FsedROaF_Kne-5Hqf60_ZF0.roa (hash: dEdEroRDmqUptgIx5X9EfWXuPhIB2SKqFgAL57TKHAs=)
                          2: WMPpPZf121FGb5nB2wRyHO8v-RI.asa (hash: mKLFbSlwYIzmMfnFA89CJdrlniFC0Y+HVLJcXPAW800=)
                          3: iOPKRCMcUAyvxDbxa94mSh4aVLQ.roa (hash: 853t8WhJ4kw5HbkYp7EUF9CdroSNYLBypKw+/lvJndw=)
                          4: mYS56xIiNxEcH4yldwfscwcpHug.crl (hash: tlsXvECKSW5UlHdxMUdEi0UQO8JB0m80b/Ozy7QdLC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:21:b4:b5:32:55:c0:90:2d:b3:47:b3:a4:1f:f5:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9984b9eb122237111c1f8ca57707ec7307291ee8
        Validity
            Not Before: Jun 12 00:00:54 2026 GMT
            Not After : Jun 13 00:00:54 2026 GMT
        Subject: CN=4c964ac24ea55522eadc0e63f40654599709e3e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0d:ea:8d:e9:58:44:61:92:f0:7c:59:e8:fb:
                    8f:29:4c:0e:c9:85:c1:db:0a:bf:64:91:69:bf:fe:
                    00:ac:84:f6:8e:7f:ff:ce:6c:e4:96:27:11:48:dc:
                    55:c2:9a:b3:ee:f9:49:0b:a6:b5:2b:eb:b6:3d:23:
                    b4:73:4e:34:17:aa:5b:4e:86:2f:38:d5:ed:d3:f0:
                    eb:72:56:cb:31:57:51:16:66:57:52:a6:ca:01:75:
                    e8:f0:15:9d:0f:73:64:b3:c5:db:14:f9:fe:93:4c:
                    8d:55:b1:fd:f6:4d:ab:f8:8c:6f:c7:7d:97:e3:05:
                    a6:91:4a:40:a3:d7:73:ca:aa:48:cf:53:c1:54:fd:
                    94:92:1d:df:ca:45:4e:0c:dc:ac:9b:81:e4:b3:90:
                    2e:47:c2:89:4e:34:40:fe:30:67:f7:dd:76:17:a7:
                    3a:19:99:c3:f6:af:81:6c:48:a6:d0:5c:87:d9:9f:
                    76:68:ce:5f:7e:20:9b:f0:88:7e:b1:6a:4f:dc:d3:
                    bb:5d:b1:07:31:3d:a2:2d:f2:71:7b:71:18:88:29:
                    d4:03:71:af:c6:e5:97:db:6b:c3:ea:54:fb:f9:59:
                    af:d2:a3:e9:47:e7:98:26:38:f2:1d:8e:0e:f1:ac:
                    40:fe:d4:89:77:53:39:bb:34:06:44:d3:4e:d2:1b:
                    1b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:96:4A:C2:4E:A5:55:22:EA:DC:0E:63:F4:06:54:59:97:09:E3:E7
            X509v3 Authority Key Identifier:
                keyid:99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:12:ef:92:d1:91:c8:44:4f:0a:84:03:f7:85:32:6d:80:72:
         32:86:88:d4:ad:31:f1:a7:52:25:b7:82:fa:10:6e:0d:b7:9d:
         78:e0:eb:fd:b5:9f:25:46:fd:6e:b8:ad:7e:3b:cc:65:e5:38:
         77:aa:f2:79:65:35:e4:d6:c6:08:89:e7:85:c9:0f:98:50:1b:
         16:eb:ae:44:c2:1a:4d:5b:02:bd:6f:bc:35:c8:0a:ea:2d:e4:
         df:a2:57:02:ea:db:78:8c:43:f9:b5:26:de:0a:7b:8e:48:c9:
         89:20:21:4b:a4:63:85:3d:19:82:e7:d1:46:cb:c5:4a:66:e3:
         89:86:69:70:f7:be:02:39:9f:b0:79:ba:41:01:4f:3f:64:4e:
         de:be:90:6b:18:39:3b:e6:6a:a2:d5:47:2d:06:37:c5:4c:69:
         02:0f:6f:ba:df:63:05:a2:77:d6:f1:e3:b0:6e:7f:ac:30:82:
         78:48:94:c9:b7:b6:34:38:14:47:98:79:fe:cc:f8:a1:d9:97:
         0c:e8:26:cb:76:1b:f8:d5:7d:59:29:86:20:2f:93:4f:f4:8f:
         7f:02:e1:7c:09:ce:89:30:1c:41:d7:23:02:ea:f2:ae:f6:5a:
         51:2d:c9:87:b5:65:77:aa:88:26:74:f0:76:d9:27:52:81:61:
         97:2e:dc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:36:47 2026 by rpki-client