Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
File:                     RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft (raw, json)
Hash identifier:          uiuP0x/ty8XHJbUI8PeBoNegtdpaeyeKBfEtrUEf8CQ=
Subject key identifier:   A9:B8:71:83:74:50:32:75:A8:42:23:3F:A5:99:F6:8B:17:C5:41:66
Authority key identifier: 44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96
Certificate issuer:       /CN=441d4b92dd150364c65b7d21299028678b0a5296
Certificate serial:       019EB76A6FA8B932C19F9B5092EFE9E9C72A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
Manifest number:          195E
Signing time:             Thu 11 Jun 2026 16:01:06 +0000
Manifest this update:     Thu 11 Jun 2026 16:01:06 +0000
Manifest next update:     Fri 12 Jun 2026 16:01:06 +0000
Files and hashes:         1: 36DzStGfXWJaTvy_DFt5js-qBkY.roa (hash: 8LA/a3S6Q/+rbVsFghMDCmBix0HHSJzG0POoZHw8My4=)
                          2: 9yn0ZWrwWlwVQcTY4DZrDaNSuqU.roa (hash: XESXJFfuiD+BaGLEcM4v4ajEMguCnVi9qwOcF7gca0c=)
                          3: E1fZi9ctnO61xdkwBdXsEigsazY.roa (hash: AfabkRw7EM5b0Hf4k7+LAG9L1ed9yMxYQaK/+/5IZY8=)
                          4: RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl (hash: 7BYRyTaRdEw5mVXiZeDE+8ENT31slAtQtRNcAT+yqa0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:6a:6f:a8:b9:32:c1:9f:9b:50:92:ef:e9:e9:c7:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=441d4b92dd150364c65b7d21299028678b0a5296
        Validity
            Not Before: Jun 11 16:01:06 2026 GMT
            Not After : Jun 12 16:01:06 2026 GMT
        Subject: CN=a9b8718374503275a842233fa599f68b17c54166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:87:ef:8b:76:26:65:36:b6:cf:57:0e:3a:00:
                    7f:b8:4a:02:c1:79:18:a9:a4:94:90:72:19:f5:42:
                    02:89:04:90:93:a7:eb:07:79:93:34:6b:63:b6:b4:
                    7f:67:84:58:1e:37:9b:e4:19:0c:1f:06:42:9c:98:
                    26:60:99:37:4c:48:3c:14:07:c6:48:b2:4d:10:6b:
                    a8:8a:d2:28:28:30:0a:5f:09:f6:54:b1:fa:09:2a:
                    c0:ca:0f:97:81:e7:18:fa:9b:2e:cd:aa:12:fb:2d:
                    6d:7a:60:6c:1d:a5:ed:2a:f4:c8:fd:d2:4d:46:63:
                    9e:9d:e2:27:86:0d:f7:b2:c7:44:00:26:5c:04:6c:
                    50:31:7f:d8:b6:79:9d:93:85:17:0e:93:7c:f4:45:
                    26:de:ce:1f:8c:aa:f3:60:25:fc:53:bd:7d:3c:2e:
                    5f:59:da:0a:83:5c:46:fe:10:58:12:f3:42:d9:30:
                    98:a4:39:16:7b:81:13:cf:53:fd:d7:b6:e8:e6:c2:
                    ab:80:ae:76:9f:e2:eb:8f:ec:85:8c:97:47:49:e8:
                    c6:32:2f:7e:49:b7:ea:87:62:4b:1b:1c:9a:40:e1:
                    86:f5:17:68:c6:88:3c:66:09:e2:0a:9d:e7:13:89:
                    0a:6a:7e:95:6b:19:d7:3a:7d:3c:12:c0:92:17:f7:
                    a8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B8:71:83:74:50:32:75:A8:42:23:3F:A5:99:F6:8B:17:C5:41:66
            X509v3 Authority Key Identifier:
                keyid:44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:79:44:b8:23:e5:0b:db:8f:19:24:d3:60:2c:81:e5:dc:19:
         28:04:22:b6:fb:fe:fa:0e:3c:dc:c6:67:fb:02:61:cc:3b:c0:
         6c:d5:82:bc:7a:67:c9:22:01:0b:34:53:99:45:05:0d:49:8a:
         ea:42:93:8d:73:4e:56:ab:b6:98:6d:8a:f3:52:e0:a0:54:9c:
         1a:e3:14:e3:8c:42:ad:08:a8:8f:af:4c:a4:db:f6:92:c8:ee:
         66:dc:fe:d3:23:0e:22:90:8c:03:bf:0a:5e:f4:fd:c5:bc:d0:
         67:3f:f1:cf:00:35:a7:27:bf:59:ff:9e:8e:85:2c:c5:81:1d:
         f6:d2:f7:d7:86:c5:4d:f3:c1:41:1f:34:ad:66:9a:eb:fd:ab:
         2f:e6:e4:c7:87:b9:90:b1:e0:34:77:15:51:78:5c:9a:c5:8d:
         11:7d:69:2e:7a:6a:1a:43:22:12:ce:71:91:55:b1:0e:c4:20:
         1f:c4:6c:de:f3:4d:63:32:c6:53:72:10:f9:9f:6e:54:39:ca:
         38:de:5b:89:57:ba:f6:db:93:e4:92:f5:ee:89:04:a9:11:0b:
         b4:54:43:90:0d:04:20:a0:bf:51:f3:14:a8:b4:e1:47:23:b8:
         53:0f:52:84:ee:59:c9:e9:93:37:86:ca:67:96:62:9a:c2:9a:
         30:dc:66:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63am+ouTLBn5tQku/p6ccqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MWQ0YjkyZGQxNTAzNjRjNjViN2QyMTI5OTAyODY3OGIw
YTUyOTYwHhcNMjYwNjExMTYwMTA2WhcNMjYwNjEyMTYwMTA2WjAzMTEwLwYDVQQD
EyhhOWI4NzE4Mzc0NTAzMjc1YTg0MjIzM2ZhNTk5ZjY4YjE3YzU0MTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIfvi3YmZTa2z1cOOgB/uEoCwXkY
qaSUkHIZ9UICiQSQk6frB3mTNGtjtrR/Z4RYHjeb5BkMHwZCnJgmYJk3TEg8FAfG
SLJNEGuoitIoKDAKXwn2VLH6CSrAyg+XgecY+psuzaoS+y1temBsHaXtKvTI/dJN
RmOeneInhg33ssdEACZcBGxQMX/Ytnmdk4UXDpN89EUm3s4fjKrzYCX8U719PC5f
WdoKg1xG/hBYEvNC2TCYpDkWe4ETz1P917bo5sKrgK52n+Lrj+yFjJdHSejGMi9+
Sbfqh2JLGxyaQOGG9Rdoxog8ZgniCp3nE4kKan6VaxnXOn08EsCSF/eoywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKm4cYN0UDJ1qEIjP6WZ9osXxUFmMB8GA1UdIwQY
MBaAFEQdS5LdFQNkxlt9ISmQKGeLClKWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkIxTGt0MFZBMlRHVzMwaEtaQW9aNHNLVXBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81ZDQ1NGItOWQxZC00ZTdkLWFlNzMt
N2Y1ZjRkNjA0NzMxLzEvUkIxTGt0MFZBMlRHVzMwaEtaQW9aNHNLVXBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS81ZDQ1NGItOWQxZC00ZTdkLWFlNzMtN2Y1ZjRkNjA0NzMx
LzEvUkIxTGt0MFZBMlRHVzMwaEtaQW9aNHNLVXBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATnlEuCPl
C9uPGSTTYCyB5dwZKAQitvv++g483MZn+wJhzDvAbNWCvHpnySIBCzRTmUUFDUmK
6kKTjXNOVqu2mG2K81LgoFScGuMU44xCrQioj69MpNv2ksjuZtz+0yMOIpCMA78K
XvT9xbzQZz/xzwA1pye/Wf+ejoUsxYEd9tL314bFTfPBQR80rWaa6/2rL+bkx4e5
kLHgNHcVUXhcmsWNEX1pLnpqGkMiEs5xkVWxDsQgH8Rs3vNNYzLGU3IQ+Z9uVDnK
ON5biVe69tuT5JL17okEqRELtFRDkA0EIKC/UfMUqLThRyO4Uw9ShO5ZyemTN4bK
Z5ZimsKaMNxm7w==
-----END CERTIFICATE-----
Generated at Thu Jun 11 22:58:18 2026 by rpki-client