Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
File:                     iTr-zXEXBcR2t4XQyG71TCEkNUw.mft (raw, json)
Hash identifier:          5WuhkgCY6V56vuyw7J2drn3OczmrIVqSbgBuQpCDUuo=
Subject key identifier:   AE:92:04:1B:8B:A2:98:21:0E:BC:38:58:69:CF:D2:08:AB:ED:53:25
Authority key identifier: 89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C
Certificate issuer:       /CN=893afecd711705c476b785d0c86ef54c2124354c
Certificate serial:       019EC782808BFD54674AE2F30E6BFFB12139
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
Manifest number:          195E
Signing time:             Sun 14 Jun 2026 19:01:18 +0000
Manifest this update:     Sun 14 Jun 2026 19:01:18 +0000
Manifest next update:     Mon 15 Jun 2026 19:01:18 +0000
Files and hashes:         1: 1-Ks480-iPBy-Vm_4dlD2KLww4y8.roa (hash: +0tlrIhz57IHGfgs8oqzQyrPKsieu75TXgBbupvdSQo=)
                          2: 19q6g12AmjkGcmyGxKaaVzALCeA.roa (hash: iBTDfCJQ7QsiUqJhoY25FarZtvdsyDb2KrTGMVJdhAM=)
                          3: VlaHlKRWDcOcGuVgnteAb200G78.roa (hash: 0o9r3pak+CL/qWrBSr2iB7II/28BBOkaW9ePbk7/cdQ=)
                          4: iTr-zXEXBcR2t4XQyG71TCEkNUw.crl (hash: GEAkcVs3+9CSvm1WlZ1391ovPVPJQM5GRutru6amP9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 18:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c7:82:80:8b:fd:54:67:4a:e2:f3:0e:6b:ff:b1:21:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=893afecd711705c476b785d0c86ef54c2124354c
        Validity
            Not Before: Jun 14 19:01:18 2026 GMT
            Not After : Jun 15 19:01:18 2026 GMT
        Subject: CN=ae92041b8ba298210ebc385869cfd208abed5325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7a:b7:41:49:ab:eb:5b:2f:9b:f7:a0:11:08:
                    89:22:8e:d3:43:e6:e4:91:0f:e6:c2:55:66:35:f2:
                    59:21:28:79:10:32:13:22:da:a9:d3:f5:64:53:cd:
                    f3:97:41:3a:5a:ec:4f:c4:dc:5c:4c:11:ad:41:ec:
                    65:80:c1:89:ea:1a:41:4a:65:3c:71:5d:fd:01:33:
                    e6:7f:62:d6:c3:d5:95:7d:26:82:29:fa:88:0d:17:
                    21:30:30:ea:e0:53:ec:53:f8:f3:52:42:05:6a:37:
                    34:10:47:a6:45:ee:2b:55:6c:74:a4:4d:cf:ec:f8:
                    bf:25:a6:8f:11:e0:81:5d:98:30:2d:df:c2:71:c0:
                    b7:2f:c3:05:c8:ae:d3:da:de:eb:4d:4c:39:f1:49:
                    01:05:f8:4d:8b:2d:6b:87:ea:31:72:35:69:5b:51:
                    d8:fd:a3:bd:08:fa:f3:51:bb:a1:f9:ab:00:19:14:
                    c6:8e:10:7a:7a:ee:c9:cc:53:08:03:34:98:80:9a:
                    f4:9b:7c:a8:4d:3a:3b:e1:7b:d8:e6:42:87:53:68:
                    3f:42:18:33:92:b5:9c:f4:46:84:4c:0e:91:32:77:
                    e1:7a:1e:98:9d:73:ed:9c:0d:40:49:52:62:17:c7:
                    2e:9e:c4:2f:2e:70:05:1c:f9:9f:de:b1:06:45:c7:
                    2a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:92:04:1B:8B:A2:98:21:0E:BC:38:58:69:CF:D2:08:AB:ED:53:25
            X509v3 Authority Key Identifier:
                keyid:89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:24:43:34:52:d2:ba:75:1d:f3:aa:d3:36:d6:3e:c5:49:34:
         ac:89:e5:79:44:fb:24:d7:8a:e1:48:52:a4:56:94:73:f1:c2:
         58:4c:c0:9d:28:d9:92:36:87:e6:ef:0a:b4:7a:09:f6:75:c3:
         ef:d6:b5:c2:1c:34:9c:7f:a4:71:ea:e7:cf:fa:51:ca:ae:51:
         ae:0b:5a:ab:a8:03:e2:3a:eb:e2:1f:f5:d8:c2:2d:10:a8:eb:
         33:29:3c:d0:ec:a4:9c:45:e7:e2:7d:ed:80:3d:18:84:d2:d7:
         c3:d2:8e:45:e1:eb:4c:ab:0a:dc:28:1e:32:73:8b:74:b0:bb:
         35:ef:88:c4:f5:25:8d:2e:fa:e0:f5:1d:f4:54:c0:69:33:53:
         7d:c9:34:8a:f0:c2:74:04:6d:4c:04:7a:f5:e4:e6:d8:af:aa:
         25:fa:46:0b:43:29:1e:92:d5:de:74:b9:81:18:30:93:6f:ed:
         1a:70:13:07:4f:a3:53:f7:ce:68:47:dc:6a:4a:e3:e7:9c:57:
         c2:2e:ad:b2:16:bc:4d:20:c3:88:6f:cb:3e:39:80:bf:ff:b5:
         c8:c1:03:44:71:2a:ac:d3:21:c0:f1:c4:5e:df:68:9e:a7:9c:
         dd:3e:a7:cf:79:c3:01:c5:66:a2:55:93:25:79:af:fb:cb:83:
         32:35:59:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7HgoCL/VRnSuLzDmv/sSE5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5M2FmZWNkNzExNzA1YzQ3NmI3ODVkMGM4NmVmNTRjMjEy
NDM1NGMwHhcNMjYwNjE0MTkwMTE4WhcNMjYwNjE1MTkwMTE4WjAzMTEwLwYDVQQD
EyhhZTkyMDQxYjhiYTI5ODIxMGViYzM4NTg2OWNmZDIwOGFiZWQ1MzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnq3QUmr61svm/egEQiJIo7TQ+bk
kQ/mwlVmNfJZISh5EDITItqp0/VkU83zl0E6WuxPxNxcTBGtQexlgMGJ6hpBSmU8
cV39ATPmf2LWw9WVfSaCKfqIDRchMDDq4FPsU/jzUkIFajc0EEemRe4rVWx0pE3P
7Pi/JaaPEeCBXZgwLd/CccC3L8MFyK7T2t7rTUw58UkBBfhNiy1rh+oxcjVpW1HY
/aO9CPrzUbuh+asAGRTGjhB6eu7JzFMIAzSYgJr0m3yoTTo74XvY5kKHU2g/Qhgz
krWc9EaETA6RMnfheh6YnXPtnA1ASVJiF8cunsQvLnAFHPmf3rEGRccq3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6SBBuLopghDrw4WGnP0gir7VMlMB8GA1UdIwQY
MBaAFIk6/s1xFwXEdreF0Mhu9UwhJDVMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVRyLXpYRVhCY1IydDRYUXlHNzFUQ0VrTlV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9jYTNiNWYtMDIyMS00M2FkLThhYmQt
MWMxMzIwNmE4MTIzLzEvaVRyLXpYRVhCY1IydDRYUXlHNzFUQ0VrTlV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9jYTNiNWYtMDIyMS00M2FkLThhYmQtMWMxMzIwNmE4MTIz
LzEvaVRyLXpYRVhCY1IydDRYUXlHNzFUQ0VrTlV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgSRDNFLS
unUd86rTNtY+xUk0rInleUT7JNeK4UhSpFaUc/HCWEzAnSjZkjaH5u8KtHoJ9nXD
79a1whw0nH+kcernz/pRyq5Rrgtaq6gD4jrr4h/12MItEKjrMyk80OyknEXn4n3t
gD0YhNLXw9KOReHrTKsK3CgeMnOLdLC7Ne+IxPUljS764PUd9FTAaTNTfck0ivDC
dARtTAR69eTm2K+qJfpGC0MpHpLV3nS5gRgwk2/tGnATB0+jU/fOaEfcakrj55xX
wi6tsha8TSDDiG/LPjmAv/+1yMEDRHEqrNMhwPHEXt9onqec3T6nz3nDAcVmolWT
JXmv+8uDMjVZug==
-----END CERTIFICATE-----
Generated at Mon Jun 15 04:29:34 2026 by rpki-client