Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
File:                     152kZWFcYAlDcIM4ktqEyIbhxO8.mft (raw, json)
Hash identifier:          PDe17eQWJjOLm315a4p4lkh4/ipS9eLurGTCB6DYnC8=
Subject key identifier:   BE:C8:2E:6D:C7:31:62:F0:8A:75:C7:C1:77:3F:1C:D3:E4:70:78:F8
Authority key identifier: D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
Certificate issuer:       /CN=d79da465615c60094370833892da84c886e1c4ef
Certificate serial:       019F18D626450FADE2FC25EF7531C5D763BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
Manifest number:          198E
Signing time:             Tue 30 Jun 2026 14:01:55 +0000
Manifest this update:     Tue 30 Jun 2026 14:01:55 +0000
Manifest next update:     Wed 01 Jul 2026 14:01:55 +0000
Files and hashes:         1: 152kZWFcYAlDcIM4ktqEyIbhxO8.crl (hash: ndD5kQ0DSVNAa1pv6Uv9HrA5/EcQBNp7P4SrNAf/kzs=)
                          2: 9dcMnZF_hjQhvJcga50J4Lgw0oc.roa (hash: 6V2ZAOY1uWD3nVg5qScVh7xpT8E4AfFf2ucJTTSLBok=)
                          3: UZPOWsV_FJe0LaItYy8ujva8wUU.roa (hash: uIto6VX+5CDXd7vtEA+gBkH2FtA4Z4f+sQvfJ6SzABY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:d6:26:45:0f:ad:e2:fc:25:ef:75:31:c5:d7:63:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d79da465615c60094370833892da84c886e1c4ef
        Validity
            Not Before: Jun 30 14:01:55 2026 GMT
            Not After : Jul  1 14:01:55 2026 GMT
        Subject: CN=bec82e6dc73162f08a75c7c1773f1cd3e47078f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ca:80:e6:8e:55:d4:fa:e6:1e:52:93:87:5a:
                    43:af:b6:37:3c:b9:10:3a:2e:d3:aa:5e:d7:b6:c3:
                    ce:f9:f5:0b:18:03:4f:81:8d:08:58:8c:1b:0f:62:
                    dd:1b:fc:74:83:74:2f:2d:f7:c2:53:ec:a1:87:16:
                    94:7c:e2:d4:cc:b5:f8:1a:25:2b:9d:af:28:10:7c:
                    fe:15:b5:3a:f9:bb:36:d8:a4:02:83:fb:d3:ea:b4:
                    64:4c:bd:2d:c4:6d:91:1b:20:f0:c6:83:ad:94:e6:
                    ce:76:22:b0:b6:b1:68:02:81:45:e3:15:9e:e2:19:
                    ef:4b:73:68:81:9c:36:54:ee:88:c1:aa:fd:9d:d8:
                    10:5b:7b:66:92:1f:b2:d9:70:0d:a5:a3:7b:54:d5:
                    d8:3d:89:73:2d:fa:61:3b:be:58:9d:2a:0c:f7:9a:
                    9b:0a:13:e2:97:64:53:a4:9b:3d:be:7e:69:45:e7:
                    25:14:7d:0f:89:53:f1:8c:05:7d:95:ca:74:ec:28:
                    6d:a9:d9:ce:ee:ff:88:04:85:9a:e0:1c:49:37:6d:
                    ad:0d:a1:33:16:98:3b:98:bc:3c:17:cf:40:bf:da:
                    d8:e6:30:d5:fb:d6:3d:ff:dd:47:5b:23:cc:0b:e6:
                    41:2a:5c:94:a7:f1:51:53:0d:fb:ae:bc:56:12:38:
                    cd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C8:2E:6D:C7:31:62:F0:8A:75:C7:C1:77:3F:1C:D3:E4:70:78:F8
            X509v3 Authority Key Identifier:
                keyid:D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:47:e7:5e:6d:08:5b:75:fd:a8:52:1e:fc:46:04:9b:89:09:
         d4:e8:a0:9b:66:40:20:b2:69:d4:b2:3f:14:14:bf:1f:a5:f5:
         aa:45:95:d9:c7:3c:ab:07:13:3d:74:e0:4b:d3:dd:10:57:3a:
         05:73:11:bc:f7:74:bb:4f:3d:8b:6f:37:63:3a:48:ca:d6:28:
         7b:4c:a3:fd:02:3f:d4:85:5c:4d:5e:b2:83:3a:26:65:dd:55:
         7a:3a:c8:07:03:fb:3f:fd:a5:7f:42:31:c4:8b:a9:d5:ca:12:
         e9:9f:df:a9:77:c6:19:b5:fd:2d:f2:94:98:a2:13:6f:c1:69:
         b2:85:d5:18:90:60:59:c1:99:aa:5f:2c:5d:a8:e5:ac:92:2d:
         2b:00:b4:b7:60:78:e4:05:c8:a9:d7:24:52:fe:a5:ff:37:1f:
         72:65:74:1f:91:82:2c:20:8b:27:79:1d:1a:66:7f:76:34:d4:
         f2:8c:f5:f5:4f:4e:36:d2:1f:52:c4:fe:c9:18:42:8e:d9:62:
         71:f3:a8:38:b8:ed:60:02:34:f8:a1:64:85:d6:1a:0b:da:92:
         ff:d4:7a:92:b5:84:12:30:4c:31:71:2d:59:b7:21:d9:44:89:
         da:de:5c:a0:25:ef:e2:b8:25:b7:12:2d:5a:02:54:06:6f:03:
         ba:12:9c:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Y1iZFD63i/CXvdTHF12O8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OWRhNDY1NjE1YzYwMDk0MzcwODMzODkyZGE4NGM4ODZl
MWM0ZWYwHhcNMjYwNjMwMTQwMTU1WhcNMjYwNzAxMTQwMTU1WjAzMTEwLwYDVQQD
EyhiZWM4MmU2ZGM3MzE2MmYwOGE3NWM3YzE3NzNmMWNkM2U0NzA3OGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocqA5o5V1PrmHlKTh1pDr7Y3PLkQ
Oi7Tql7XtsPO+fULGANPgY0IWIwbD2LdG/x0g3QvLffCU+yhhxaUfOLUzLX4GiUr
na8oEHz+FbU6+bs22KQCg/vT6rRkTL0txG2RGyDwxoOtlObOdiKwtrFoAoFF4xWe
4hnvS3NogZw2VO6Iwar9ndgQW3tmkh+y2XANpaN7VNXYPYlzLfphO75YnSoM95qb
ChPil2RTpJs9vn5pReclFH0PiVPxjAV9lcp07ChtqdnO7v+IBIWa4BxJN22tDaEz
Fpg7mLw8F89Av9rY5jDV+9Y9/91HWyPMC+ZBKlyUp/FRUw37rrxWEjjNvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7ILm3HMWLwinXHwXc/HNPkcHj4MB8GA1UdIwQY
MBaAFNedpGVhXGAJQ3CDOJLahMiG4cTvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTUya1pXRmNZQWxEY0lNNGt0cUV5SWJoeE84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9kNzljOTgtYzI3ZC00NWIzLTg2ZDkt
ZGFkM2JiMTNjMGEyLzEvMTUya1pXRmNZQWxEY0lNNGt0cUV5SWJoeE84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9kNzljOTgtYzI3ZC00NWIzLTg2ZDktZGFkM2JiMTNjMGEy
LzEvMTUya1pXRmNZQWxEY0lNNGt0cUV5SWJoeE84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd0fnXm0I
W3X9qFIe/EYEm4kJ1Oigm2ZAILJp1LI/FBS/H6X1qkWV2cc8qwcTPXTgS9PdEFc6
BXMRvPd0u089i283YzpIytYoe0yj/QI/1IVcTV6ygzomZd1VejrIBwP7P/2lf0Ix
xIup1coS6Z/fqXfGGbX9LfKUmKITb8FpsoXVGJBgWcGZql8sXajlrJItKwC0t2B4
5AXIqdckUv6l/zcfcmV0H5GCLCCLJ3kdGmZ/djTU8oz19U9ONtIfUsT+yRhCjtli
cfOoOLjtYAI0+KFkhdYaC9qS/9R6krWEEjBMMXEtWbch2USJ2t5coCXv4rgltxIt
WgJUBm8DuhKc2w==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:34:21 2026 by rpki-client