Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
File:                     F0G9doUTjcUdWmsM03gPRmtX_RM.mft (raw, json)
Hash identifier:          wFgipLCSUIkRUwlJ4UMF6nKmJOgMy3sKBD6w5Fba3vg=
Subject key identifier:   5A:24:17:B7:DC:6E:72:91:10:97:58:17:89:B4:97:65:55:6D:0E:26
Authority key identifier: 17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13
Certificate issuer:       /CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13
Certificate serial:       019EB9FD19576284233DCDEA3F035A0C06F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
Manifest number:          195B
Signing time:             Fri 12 Jun 2026 04:00:32 +0000
Manifest this update:     Fri 12 Jun 2026 04:00:32 +0000
Manifest next update:     Sat 13 Jun 2026 04:00:32 +0000
Files and hashes:         1: F0G9doUTjcUdWmsM03gPRmtX_RM.crl (hash: Q4WdU41vQFKznkqLVLVX/4lLx0ezOogW2gf7DGK5SZw=)
                          2: bZtAv7jof-AuwEu0cxY9E17KiEM.roa (hash: GmHiN36XVNHoznaH+f5s8+gOGqjQoGIfCLxDgTEZBEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:fd:19:57:62:84:23:3d:cd:ea:3f:03:5a:0c:06:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13
        Validity
            Not Before: Jun 12 04:00:32 2026 GMT
            Not After : Jun 13 04:00:32 2026 GMT
        Subject: CN=5a2417b7dc6e72911097581789b49765556d0e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:69:4e:c7:6a:d7:29:d2:1b:5a:df:0e:07:97:
                    7a:10:c1:ae:f7:ba:59:2c:92:85:d9:f4:65:59:4a:
                    80:83:4f:56:37:d6:b0:e2:87:65:9f:54:33:64:75:
                    41:12:75:3e:91:6a:61:d3:9e:ab:4d:63:04:5b:cb:
                    7e:e8:50:c9:a2:f7:9b:db:da:6b:5d:a9:28:ab:49:
                    c7:43:e4:f7:e6:71:11:45:1e:48:fd:b2:4a:74:04:
                    0b:5c:6c:32:e2:2c:6e:e3:81:08:56:59:7c:32:8e:
                    08:f2:47:81:1b:36:5c:df:95:26:d5:73:62:0a:9f:
                    38:40:8a:d3:a2:d4:53:d8:f4:6f:2a:a8:35:84:4a:
                    1e:83:3d:ee:db:31:3c:cd:37:af:69:e0:af:4b:8d:
                    74:47:0b:9a:e6:12:aa:28:bb:2d:78:3b:74:f4:9b:
                    e8:61:1b:d2:1b:9f:81:71:d5:63:ec:e4:6c:ba:4a:
                    a3:33:20:3c:08:5c:a4:55:89:bc:b8:49:6d:91:49:
                    cc:71:0f:19:5d:ea:08:a6:80:3d:2f:4d:5e:01:85:
                    f9:23:65:2e:12:f9:09:75:fc:17:45:6e:8c:a5:eb:
                    ee:09:6e:f4:99:ee:62:a5:84:d6:41:f0:f0:fb:f3:
                    19:83:97:b8:80:e5:ff:1f:fc:41:25:f0:99:8f:c0:
                    3c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:24:17:B7:DC:6E:72:91:10:97:58:17:89:B4:97:65:55:6D:0E:26
            X509v3 Authority Key Identifier:
                keyid:17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:4c:95:05:ee:8e:3d:3a:05:08:63:b6:27:63:cc:f1:8e:15:
         8f:4c:55:bb:ec:69:e5:18:52:16:da:c0:db:3e:3e:14:b9:8d:
         81:44:25:62:a9:c3:1b:58:cd:46:2e:92:28:0b:19:f4:aa:bb:
         90:05:92:7e:bb:9f:82:41:af:b7:13:2a:3e:0d:c2:ec:6b:28:
         9e:15:e2:f5:a5:b0:c9:23:f3:69:73:be:f2:e7:14:11:47:14:
         21:bf:5c:74:29:a3:9b:40:9b:8c:1d:d7:81:00:35:37:9d:b0:
         fa:f1:f1:df:0a:01:13:9e:43:26:67:9d:17:85:b4:9e:8d:7a:
         e1:58:81:cb:83:c0:22:ca:7e:1f:52:a6:a1:69:97:78:53:bc:
         19:94:7a:36:6d:f9:68:94:87:58:a7:4c:a3:d9:29:08:c4:58:
         9a:f1:96:43:fe:9c:a9:f1:17:1e:11:4c:d1:e1:d8:f6:43:cb:
         d2:04:7c:5b:aa:f0:2a:ad:f0:fa:e3:b7:31:5c:22:6b:bb:63:
         51:36:f9:7b:40:09:c5:e0:2b:33:2c:d2:b4:b0:56:86:a9:a6:
         f6:54:3f:58:a6:17:d3:f9:27:4f:e0:68:9a:d3:2a:84:0a:b8:
         37:37:b0:bc:21:d3:b7:a1:a3:9b:f5:dd:90:e5:f7:0c:eb:89:
         ab:78:ac:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:26:24 2026 by rpki-client