Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
File:                     iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft (raw, json)
Hash identifier:          cRXf1rYoJrwS+Bt8dj0r1mXbTPnpUL9a+MSJbfTQbV0=
Subject key identifier:   33:AC:C6:03:45:4C:54:1E:A5:C3:0F:84:95:04:74:6B:DD:2F:1A:10
Authority key identifier: 89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC
Certificate issuer:       /CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc
Certificate serial:       019EE77B873CB83365F6EB1566F5B6AA4B39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
Manifest number:          196D
Signing time:             Sun 21 Jun 2026 00:01:32 +0000
Manifest this update:     Sun 21 Jun 2026 00:01:32 +0000
Manifest next update:     Mon 22 Jun 2026 00:01:32 +0000
Files and hashes:         1: iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl (hash: CrkJAH0rRlKKomef7rwsijCkxsyXVqhj6ddTGgzC0w0=)
                          2: nad2__VH-nPmq_Iqmre5nLL_imw.roa (hash: ELA9kRHRklvIfsJMuSHF+76tgBdN55pzj5QMVhLOw9Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Jun 2026 21:52:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e7:7b:87:3c:b8:33:65:f6:eb:15:66:f5:b6:aa:4b:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc
        Validity
            Not Before: Jun 21 00:01:32 2026 GMT
            Not After : Jun 22 00:01:32 2026 GMT
        Subject: CN=33acc603454c541ea5c30f849504746bdd2f1a10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:30:9a:f7:64:75:13:25:a4:45:b9:bf:86:33:
                    c5:e8:6a:e5:c0:ef:71:25:13:d7:6a:2f:56:1b:13:
                    fe:b4:ff:b9:1b:00:96:a2:74:64:c5:f3:8b:c4:64:
                    85:01:c8:f7:45:7b:f4:ff:ce:63:a9:24:af:c3:61:
                    88:92:cd:f5:19:3f:31:9e:18:fc:22:4e:0e:5a:90:
                    5a:c0:c4:5e:16:8c:1b:6b:23:74:f9:3c:58:b7:9e:
                    1e:85:c9:d3:c4:eb:0f:c1:2b:40:cd:b2:56:51:e5:
                    32:57:8c:3d:3c:85:4d:59:23:b2:6d:4c:3b:44:1c:
                    4e:10:34:80:2b:65:3a:f2:a7:40:a1:79:1a:cc:f2:
                    d1:75:7f:cc:88:3b:47:d9:de:6b:32:6e:f1:ca:b3:
                    ad:ea:ce:b1:d0:25:13:2c:cb:06:7f:20:19:f2:8d:
                    1e:8c:57:e2:f1:67:ce:4d:22:53:84:e5:81:41:54:
                    cc:a7:4f:aa:df:60:b8:9f:51:54:d4:c6:e1:22:15:
                    62:93:3b:6f:d3:a5:f7:3f:68:6d:d2:38:82:8b:49:
                    76:0b:89:3c:24:4b:b9:5e:67:13:c5:ab:78:3b:6d:
                    63:e4:59:84:70:fb:e5:e0:dd:bf:44:d1:1d:02:a6:
                    37:34:7d:d3:8c:29:49:03:1c:06:76:66:a0:8b:ea:
                    1e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:AC:C6:03:45:4C:54:1E:A5:C3:0F:84:95:04:74:6B:DD:2F:1A:10
            X509v3 Authority Key Identifier:
                keyid:89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:9a:79:43:eb:c1:45:55:93:4a:42:a3:f1:b8:61:0a:62:9a:
         d2:6a:60:35:66:f3:c3:b2:db:da:90:c9:f6:54:6f:fa:13:db:
         93:4a:66:2a:41:b4:47:cc:76:a9:cf:07:cb:7c:33:ff:0b:1d:
         be:11:eb:eb:20:cd:9b:c2:c2:3a:c4:6e:6c:f1:ed:c9:16:65:
         7c:4a:0b:e2:b9:70:29:ca:85:7c:c3:48:9f:75:a3:9e:2f:bc:
         ca:a5:dd:05:b8:77:b2:35:89:4a:d5:03:e0:57:31:f5:a3:ed:
         69:90:17:6a:96:57:8d:85:37:75:5b:23:7b:2c:7c:00:c8:41:
         67:46:aa:bf:6e:80:9e:1c:3c:7a:32:c8:4f:23:83:7c:33:cf:
         78:73:ea:9c:b3:8f:44:69:3f:0c:02:d4:d8:22:26:1c:8d:35:
         79:a3:b7:e5:bc:df:d1:f1:39:ec:1f:a2:b5:07:50:98:12:dc:
         87:b3:51:67:81:4b:12:8a:80:97:af:28:af:97:97:1e:7c:a3:
         78:5f:75:99:db:b7:f0:af:6f:97:af:a3:be:23:b5:b5:cf:8e:
         23:30:50:ee:24:da:1c:9d:91:8f:64:2f:20:57:ce:88:cd:d9:
         50:35:30:59:bb:e2:ea:e1:7f:94:83:da:ab:94:71:c1:5f:3f:
         72:c9:76:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 08:31:37 2026 by rpki-client