Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/j7wQY6bvtF4nsRHpIHgnyfcyUCs.mft
File:                     j7wQY6bvtF4nsRHpIHgnyfcyUCs.mft (raw, json)
Hash identifier:          PeQQ2A65quUqZcxFKEvuj2nqmPMAhP9zHJB2aVhIWdk=
Subject key identifier:   04:B4:AE:AF:A3:05:50:91:2C:FC:5C:CF:0B:36:14:81:17:52:F4:65
Authority key identifier: 8F:BC:10:63:A6:EF:B4:5E:27:B1:11:E9:20:78:27:C9:F7:32:50:2B
Certificate issuer:       /CN=8fbc1063a6efb45e27b111e9207827c9f732502b
Certificate serial:       019EB7D7A9F0FD84A4A73E9184C08A2C69C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j7wQY6bvtF4nsRHpIHgnyfcyUCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/j7wQY6bvtF4nsRHpIHgnyfcyUCs.mft
Manifest number:          195A
Signing time:             Thu 11 Jun 2026 18:00:24 +0000
Manifest this update:     Thu 11 Jun 2026 18:00:24 +0000
Manifest next update:     Fri 12 Jun 2026 18:00:24 +0000
Files and hashes:         1: 4o-NW_B5FSFDZ4gKE1tWJ-v7s-g.roa (hash: ouFB/UvxDiRbon15aN+SKttXHEnMEz2wiPSDtRRfD6o=)
                          2: j7wQY6bvtF4nsRHpIHgnyfcyUCs.crl (hash: XS6L9HuGL4d0MeWx5u6TS6Tm7Uu49fdM5DY9KX8cdOU=)
                          3: wjsn8lOpp8oeNhpUiOsLcjurXS8.roa (hash: 2AyVEMZD7UamtPsXAJHxsf1yEBYRHdOFji/mDlkgdjI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/j7wQY6bvtF4nsRHpIHgnyfcyUCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/j7wQY6bvtF4nsRHpIHgnyfcyUCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j7wQY6bvtF4nsRHpIHgnyfcyUCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:d7:a9:f0:fd:84:a4:a7:3e:91:84:c0:8a:2c:69:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fbc1063a6efb45e27b111e9207827c9f732502b
        Validity
            Not Before: Jun 11 18:00:24 2026 GMT
            Not After : Jun 12 18:00:24 2026 GMT
        Subject: CN=04b4aeafa30550912cfc5ccf0b3614811752f465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ff:60:3a:a3:d8:a1:67:2c:af:ad:9b:1e:65:
                    a8:1e:d4:65:e5:6d:fd:e8:3c:87:a7:ff:3f:c3:54:
                    be:81:02:c6:71:00:40:1c:36:0b:9f:9b:2d:92:22:
                    d2:66:ef:cc:c1:53:28:97:ab:36:18:bd:81:d8:cc:
                    4b:e6:f0:74:42:f3:05:78:46:c2:5a:4e:72:37:7e:
                    e7:3c:30:2f:5c:8d:d7:91:cf:8d:4a:e2:9d:02:0c:
                    c8:de:6c:5c:f8:8f:3e:34:40:e3:1b:f2:66:a7:79:
                    c4:db:80:8c:ad:bb:7a:e7:df:75:97:d1:0e:04:8b:
                    5b:c6:06:cd:43:b8:88:89:7f:d5:b1:96:28:d5:2c:
                    67:e7:d6:71:e2:11:4d:3e:dd:ba:00:1b:fa:16:16:
                    68:3a:0e:1f:60:4d:bc:9c:48:9d:39:8d:ec:f1:0a:
                    4f:91:1a:3a:d9:9e:45:22:57:38:df:24:ce:ba:c5:
                    d3:94:37:3e:20:a1:16:5f:52:90:e8:3c:9b:8b:51:
                    9f:56:f7:85:c1:9c:e7:14:94:59:34:71:8c:45:9f:
                    a7:c8:22:fd:83:bc:58:ee:56:1b:e1:da:20:57:65:
                    5c:0b:3d:7d:e0:0b:4b:21:71:92:29:ff:1f:cb:1d:
                    50:80:92:c0:44:48:b6:cd:77:4d:e2:d8:7e:b2:b4:
                    43:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B4:AE:AF:A3:05:50:91:2C:FC:5C:CF:0B:36:14:81:17:52:F4:65
            X509v3 Authority Key Identifier:
                keyid:8F:BC:10:63:A6:EF:B4:5E:27:B1:11:E9:20:78:27:C9:F7:32:50:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7wQY6bvtF4nsRHpIHgnyfcyUCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/j7wQY6bvtF4nsRHpIHgnyfcyUCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/j7wQY6bvtF4nsRHpIHgnyfcyUCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:22:06:8d:2b:5e:ab:e1:25:7a:62:f5:6a:cb:71:d2:d4:4d:
         cf:79:97:56:71:d2:a2:17:77:0f:98:46:df:87:d9:24:c7:0d:
         d5:f6:cd:56:84:74:bc:43:81:e8:75:bc:79:02:16:34:60:cc:
         2e:d4:0e:de:ec:92:38:e3:bc:fb:9a:d1:60:06:b8:fa:3e:89:
         6a:bf:d2:c6:5a:fe:27:9c:f8:ac:2d:39:83:bf:57:40:cf:18:
         af:f6:7f:cb:07:af:10:59:e5:4b:13:79:93:86:0e:b6:89:b2:
         81:e2:93:b6:dd:dd:52:c2:15:e2:66:31:27:0a:ef:b7:d5:3e:
         59:6b:4f:00:2c:c3:b0:e7:11:a7:03:32:81:fd:29:c4:25:6e:
         4f:7d:6b:45:15:1f:e8:4a:b3:e4:8b:a4:ab:2d:20:0b:39:9d:
         ae:5b:cd:42:0e:04:b9:84:c4:0f:0a:47:7c:0f:4b:69:fb:33:
         b3:b3:1a:2f:0c:d3:6a:ef:19:de:83:1c:0b:a3:dc:5e:c5:7a:
         33:a7:ba:24:1f:a8:0d:f3:5c:0a:5d:7f:a4:bd:a2:2b:02:b1:
         ed:47:a5:c9:d2:81:fc:9b:d4:2e:95:d6:5f:9d:f0:79:11:5d:
         e8:66:a4:c6:fd:c1:a8:6e:82:dd:d5:32:22:a9:46:01:ba:1e:
         e1:a6:80:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:53:42 2026 by rpki-client