Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
File:                     _dlCLeliA-XYc-CZVZGjppDdPZI.mft (raw, json)
Hash identifier:          +6Lk7N/ygxSTcl5HzrCPCt8nSSGrPQgqFcsvaR/OlH4=
Subject key identifier:   31:EA:AE:ED:48:8C:DF:22:07:6F:F4:76:28:C7:D9:A9:1C:E1:1C:C8
Authority key identifier: FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92
Certificate issuer:       /CN=fdd9422de96203e5d873e0995591a3a690dd3d92
Certificate serial:       019EB7D7EA513BAD2C2E3447F9AD17E04F02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
Manifest number:          195C
Signing time:             Thu 11 Jun 2026 18:00:41 +0000
Manifest this update:     Thu 11 Jun 2026 18:00:41 +0000
Manifest next update:     Fri 12 Jun 2026 18:00:41 +0000
Files and hashes:         1: 1-ijVMFl6GCcC6GGP7jpRptAbkME.roa (hash: 6WwqDb4fLLuH7fqrOWTiw7oz+ZLJGp2PJoPRlWydUCs=)
                          2: 41PdyGaqWfuZrGCiI7A6Pe8er08.roa (hash: fqabz9d9YrXMSNvuc4clJBMP1zUaniqoWE3YHtZWSoc=)
                          3: RpRW9hgIjPMfAZ842QdrIrNI7fk.roa (hash: 3sOUZl0+LvcVI79+33YVuGWAx3JxO70FfZgzplNUMc0=)
                          4: _dlCLeliA-XYc-CZVZGjppDdPZI.crl (hash: lTMG0hOC+NFWNm+KoHHkz4E3giyg+R5+3d+F6/MAQy8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:d7:ea:51:3b:ad:2c:2e:34:47:f9:ad:17:e0:4f:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd9422de96203e5d873e0995591a3a690dd3d92
        Validity
            Not Before: Jun 11 18:00:41 2026 GMT
            Not After : Jun 12 18:00:41 2026 GMT
        Subject: CN=31eaaeed488cdf22076ff47628c7d9a91ce11cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:62:bf:82:c5:50:ad:da:61:ae:4c:6a:79:2c:
                    ad:10:c6:59:78:24:d4:46:54:df:a9:6b:e4:aa:83:
                    7b:a2:be:cb:16:2d:8c:3e:d9:99:33:a2:0b:c4:4c:
                    ef:01:21:5f:01:ba:c8:0d:c1:30:8e:ce:5a:4e:ef:
                    04:1e:f3:ea:e6:cd:30:bf:61:24:1f:dd:13:ba:84:
                    33:42:75:3b:cb:f4:ed:8e:70:1e:ee:d0:23:e8:13:
                    cc:ff:fa:52:54:2e:fd:32:9a:e2:06:7a:29:f5:49:
                    8f:d9:f7:45:07:c3:9c:68:e2:f5:2a:fc:da:a7:e1:
                    46:37:a1:62:14:63:88:e5:24:36:dc:ac:39:57:9b:
                    be:28:59:17:e1:0b:df:0f:98:ff:48:e8:cf:02:a4:
                    6d:5f:e4:5f:ae:80:0b:3e:14:0e:67:c0:e5:e0:ab:
                    00:5b:2e:ed:dd:5f:9d:1a:a6:ce:83:aa:d3:aa:02:
                    b0:c7:41:df:13:74:3c:58:4c:87:a3:a5:4d:90:82:
                    91:c1:0f:dd:1e:b1:c6:f0:5d:54:19:4e:24:1e:5f:
                    2a:32:5f:9d:76:07:05:a6:6f:c4:ad:9a:e7:13:f1:
                    5e:93:4f:8d:fa:7a:b9:0c:7c:81:06:9c:ac:a3:27:
                    fe:88:45:9e:8a:3e:dc:4e:77:da:fe:ff:4e:34:ea:
                    80:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:EA:AE:ED:48:8C:DF:22:07:6F:F4:76:28:C7:D9:A9:1C:E1:1C:C8
            X509v3 Authority Key Identifier:
                keyid:FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:73:a9:ce:f4:4f:03:e5:ee:2f:10:6a:c5:70:c1:e1:18:5b:
         c2:1b:af:6f:e4:cd:02:fb:7a:24:08:db:31:4b:fe:24:d8:7a:
         8e:88:93:86:84:e3:cf:53:70:22:28:4b:a3:ee:0a:c6:a3:c6:
         90:69:03:4d:eb:95:e3:bc:52:85:a0:b6:3d:67:8e:ad:f9:6d:
         14:0a:53:73:27:11:b3:de:8d:6f:19:4b:8d:de:2c:7a:45:45:
         59:fb:a6:92:70:98:9f:b5:55:36:8f:30:2b:db:ba:e0:d6:af:
         80:7b:58:b4:cf:31:72:79:18:4b:3a:38:55:ee:03:06:f4:05:
         d1:28:80:82:92:50:89:c8:a1:da:76:17:9e:85:a4:2b:bf:59:
         46:94:c3:b1:cb:58:71:01:e4:20:09:79:d8:92:fb:c4:84:f8:
         4b:cc:5a:86:5e:d7:b2:7f:08:44:2f:83:1b:8f:62:b8:fa:a5:
         e5:07:39:4b:38:d7:a3:a5:85:00:a4:2b:8f:52:65:a9:28:97:
         05:b4:67:0d:59:22:23:14:f0:0e:7d:b4:c9:a5:cf:1a:18:05:
         18:8e:e2:a6:69:01:3b:fc:d8:e4:21:37:18:7c:31:fb:1b:77:
         f3:6f:3f:0a:4d:80:ec:d0:63:7e:64:ad:1e:39:eb:e8:93:41:
         d0:3d:98:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ631+pRO60sLjRH+a0X4E8CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDk0MjJkZTk2MjAzZTVkODczZTA5OTU1OTFhM2E2OTBk
ZDNkOTIwHhcNMjYwNjExMTgwMDQxWhcNMjYwNjEyMTgwMDQxWjAzMTEwLwYDVQQD
EygzMWVhYWVlZDQ4OGNkZjIyMDc2ZmY0NzYyOGM3ZDlhOTFjZTExY2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2K/gsVQrdphrkxqeSytEMZZeCTU
RlTfqWvkqoN7or7LFi2MPtmZM6ILxEzvASFfAbrIDcEwjs5aTu8EHvPq5s0wv2Ek
H90TuoQzQnU7y/TtjnAe7tAj6BPM//pSVC79MpriBnop9UmP2fdFB8OcaOL1Kvza
p+FGN6FiFGOI5SQ23Kw5V5u+KFkX4QvfD5j/SOjPAqRtX+RfroALPhQOZ8Dl4KsA
Wy7t3V+dGqbOg6rTqgKwx0HfE3Q8WEyHo6VNkIKRwQ/dHrHG8F1UGU4kHl8qMl+d
dgcFpm/ErZrnE/Fek0+N+nq5DHyBBpysoyf+iEWeij7cTnfa/v9ONOqAzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDHqru1IjN8iB2/0dijH2akc4RzIMB8GA1UdIwQY
MBaAFP3ZQi3pYgPl2HPgmVWRo6aQ3T2SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2RsQ0xlbGlBLVhZYy1DWlZaR2pwcERkUFpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9hY2YyZTYtYzhkZC00OGM0LTgzODkt
YTE4NTUwYTY5ZjY2LzEvX2RsQ0xlbGlBLVhZYy1DWlZaR2pwcERkUFpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9hY2YyZTYtYzhkZC00OGM0LTgzODktYTE4NTUwYTY5ZjY2
LzEvX2RsQ0xlbGlBLVhZYy1DWlZaR2pwcERkUFpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwXOpzvRP
A+XuLxBqxXDB4Rhbwhuvb+TNAvt6JAjbMUv+JNh6joiThoTjz1NwIihLo+4KxqPG
kGkDTeuV47xShaC2PWeOrfltFApTcycRs96NbxlLjd4sekVFWfumknCYn7VVNo8w
K9u64NavgHtYtM8xcnkYSzo4Ve4DBvQF0SiAgpJQicih2nYXnoWkK79ZRpTDsctY
cQHkIAl52JL7xIT4S8xahl7Xsn8IRC+DG49iuPql5Qc5SzjXo6WFAKQrj1JlqSiX
BbRnDVkiIxTwDn20yaXPGhgFGI7ipmkBO/zY5CE3GHwx+xt3828/Ck2A7NBjfmSt
Hjnr6JNB0D2YoA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:32:15 2026 by rpki-client