Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.mft
File:                     SSqOSCqB2QxFxNkKxmij8iRcDW0.mft (raw, json)
Hash identifier:          VX4BZ1hC8CnqQA3+ledh1/D20txbVKRZGkuF4tYFyFQ=
Subject key identifier:   09:14:B0:0F:D6:D8:7F:4D:73:68:99:E5:7B:CF:9F:6E:B8:A4:23:96
Authority key identifier: 49:2A:8E:48:2A:81:D9:0C:45:C4:D9:0A:C6:68:A3:F2:24:5C:0D:6D
Certificate issuer:       /CN=492a8e482a81d90c45c4d90ac668a3f2245c0d6d
Certificate serial:       019EB8B3869B35CE1CB6F7F0F1408DDDDB19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SSqOSCqB2QxFxNkKxmij8iRcDW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.mft
Manifest number:          195E
Signing time:             Thu 11 Jun 2026 22:00:33 +0000
Manifest this update:     Thu 11 Jun 2026 22:00:33 +0000
Manifest next update:     Fri 12 Jun 2026 22:00:33 +0000
Files and hashes:         1: SSqOSCqB2QxFxNkKxmij8iRcDW0.crl (hash: 5ztF04eQS79C8WNCFXbBQ+uKcSRlbaWs1PLWoHXvD88=)
                          2: Zly76sR93xiLWK-6z00JINgQw0s.roa (hash: Cwnf2YJcr7xtYOcQAYO59i1uM8hPOiSg7BcnRFcg/g0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SSqOSCqB2QxFxNkKxmij8iRcDW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:b3:86:9b:35:ce:1c:b6:f7:f0:f1:40:8d:dd:db:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=492a8e482a81d90c45c4d90ac668a3f2245c0d6d
        Validity
            Not Before: Jun 11 22:00:33 2026 GMT
            Not After : Jun 12 22:00:33 2026 GMT
        Subject: CN=0914b00fd6d87f4d736899e57bcf9f6eb8a42396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:81:44:af:a4:05:7e:bc:a7:17:51:bb:21:6e:
                    96:69:86:89:37:a8:45:25:de:7d:17:b2:64:1b:44:
                    e7:d2:b2:f8:aa:d5:39:a4:6e:d3:7e:fd:d2:15:08:
                    70:27:bd:a2:57:9a:e0:81:47:35:bb:8b:e7:eb:f7:
                    2d:ef:dd:9d:56:e9:f5:94:0d:f6:40:c2:9b:ac:c3:
                    8d:ad:ec:07:bb:69:67:19:4a:a3:51:bf:be:86:4c:
                    9a:48:20:f0:64:f3:19:f8:10:35:15:65:e1:b8:86:
                    cf:e3:e7:92:d9:8f:83:3c:74:e4:98:77:22:df:a8:
                    c1:10:85:c8:7c:46:55:cf:42:e0:55:8a:4d:f2:70:
                    de:2e:49:e0:75:d0:86:44:51:be:88:3b:6e:c2:2d:
                    bd:97:12:92:99:3e:9b:42:a3:cd:4a:ed:da:70:fc:
                    24:a6:d7:4d:29:bf:ff:9d:27:8d:74:ab:31:12:8d:
                    08:f3:52:f2:70:3b:9f:49:b9:f9:ae:e8:b8:0c:92:
                    e6:0a:42:86:0d:05:b4:12:47:78:d8:7b:ea:e2:eb:
                    33:37:f6:4e:35:49:e8:bd:9d:e7:52:3f:92:d5:b7:
                    0e:9d:38:d3:e4:d8:01:01:59:7a:8b:a9:b8:f4:fd:
                    a6:d1:94:33:a5:40:6b:42:1f:f6:f1:5b:a2:63:31:
                    d9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:14:B0:0F:D6:D8:7F:4D:73:68:99:E5:7B:CF:9F:6E:B8:A4:23:96
            X509v3 Authority Key Identifier:
                keyid:49:2A:8E:48:2A:81:D9:0C:45:C4:D9:0A:C6:68:A3:F2:24:5C:0D:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSqOSCqB2QxFxNkKxmij8iRcDW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:36:d2:04:4e:4a:98:41:6c:7d:b2:d1:f8:b1:b9:e5:25:7a:
         ca:2c:5b:97:09:0c:58:de:d2:0f:2b:ab:69:59:47:a2:a7:e7:
         00:42:14:cb:1c:c7:f6:f8:29:ea:31:a4:35:f5:0c:c2:4d:1b:
         01:82:52:7b:4b:e0:1e:4e:d3:8a:6f:97:84:be:f1:b4:17:b5:
         c5:b4:bf:db:02:3e:35:ab:ff:77:8a:78:38:b9:1a:f2:2e:b8:
         db:a4:e4:0c:c4:51:8e:41:96:7f:8a:ad:ca:b2:8d:43:15:6c:
         2b:7b:f4:9a:94:fb:83:58:91:56:fc:de:ea:c7:0e:1a:a3:a8:
         fa:e9:9a:e0:b8:4f:16:e1:54:0f:83:5f:64:92:2e:da:52:db:
         d4:04:dc:78:a5:19:cf:59:ee:81:75:24:af:cd:e6:35:38:5e:
         3b:74:26:c7:a1:c9:cf:da:a1:6a:bf:14:55:dc:25:d5:a1:d7:
         f9:97:e3:98:58:94:87:5d:25:b1:a4:a2:53:18:8a:cf:b0:79:
         5a:6c:08:94:41:3c:07:70:85:dc:7a:92:53:39:31:19:45:c6:
         ff:01:90:5e:dc:e5:5b:50:8f:f0:a3:2d:ff:b4:10:ed:2f:c1:
         0c:ae:44:f9:9c:d2:26:c5:ea:0a:42:9e:c1:76:3c:ea:e5:27:
         14:2a:7b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:16:52 2026 by rpki-client