Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft
File:                     46dKvLE4LCK5GtQH_UM5q4uoG4I.mft (raw, json)
Hash identifier:          ruSZEZT6TcmGcdZ319TAIWgTSWkgLdqrtgsq84yhdLk=
Subject key identifier:   E0:C9:A7:92:8F:56:CB:16:D1:51:A1:78:90:3C:0F:28:17:54:4B:EF
Authority key identifier: E3:A7:4A:BC:B1:38:2C:22:B9:1A:D4:07:FD:43:39:AB:8B:A8:1B:82
Certificate issuer:       /CN=e3a74abcb1382c22b91ad407fd4339ab8ba81b82
Certificate serial:       019EBFC8052C5D87890EA0D1362C072ED574
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 07:00:17 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:17 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:17 +0000
Files and hashes:         1: 46dKvLE4LCK5GtQH_UM5q4uoG4I.crl (hash: JBDzJqTci/WEFXY+E3AhLByb+REwusNvCSWP0lLmBc8=)
                          2: gM8ofdQeGubU92gq-aGGa-zvY6Q.roa (hash: 3xpADweqEfrOHaBnc8vO2OLZLCKpNhwxUy/JAhbOyTM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:05:2c:5d:87:89:0e:a0:d1:36:2c:07:2e:d5:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3a74abcb1382c22b91ad407fd4339ab8ba81b82
        Validity
            Not Before: Jun 13 07:00:17 2026 GMT
            Not After : Jun 14 07:00:17 2026 GMT
        Subject: CN=e0c9a7928f56cb16d151a178903c0f2817544bef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2e:33:06:0d:8d:90:c3:a8:56:46:ae:2b:c1:
                    0a:19:22:24:3e:52:36:50:e7:9a:a4:11:b2:79:26:
                    5f:b3:c0:21:3b:cc:3c:b0:43:78:d2:d7:50:20:82:
                    6a:48:a2:3b:ff:e3:6a:e5:35:9e:85:4e:90:9f:87:
                    96:b6:79:90:8b:13:db:4a:11:a6:1a:29:b5:b4:66:
                    01:57:3a:b2:b1:77:47:42:72:75:c3:f4:9c:14:56:
                    32:e3:af:f1:1d:ff:4a:12:4c:8e:32:29:e3:e2:aa:
                    b2:86:7d:e5:13:d2:0e:d9:21:f2:a7:61:17:71:52:
                    cc:78:f1:79:e2:08:db:a2:0a:eb:86:0d:d3:f6:62:
                    6e:01:1a:64:26:f1:0b:ab:0b:1e:6b:e5:76:98:6c:
                    06:5e:a9:ab:8e:20:17:ea:d9:0d:9b:92:fa:25:4d:
                    73:69:f4:b6:0e:85:11:19:87:41:2a:82:83:88:3d:
                    40:7e:3b:62:ff:ed:2d:62:9e:db:34:8d:da:18:7e:
                    c3:ab:63:c6:69:7e:0e:01:04:85:4b:47:4c:89:2b:
                    51:c4:eb:54:f6:54:1f:18:ea:16:b7:23:3c:ba:ea:
                    48:e3:0b:6f:55:d7:76:4f:ce:03:fe:ee:e9:0d:60:
                    aa:48:e6:4c:10:13:47:3f:ec:da:f0:b1:76:2e:bc:
                    26:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C9:A7:92:8F:56:CB:16:D1:51:A1:78:90:3C:0F:28:17:54:4B:EF
            X509v3 Authority Key Identifier:
                keyid:E3:A7:4A:BC:B1:38:2C:22:B9:1A:D4:07:FD:43:39:AB:8B:A8:1B:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:57:79:94:03:6f:8a:65:28:6d:89:99:c0:60:a5:a8:dc:42:
         cf:e1:41:43:f7:aa:3c:86:16:c7:4b:83:81:e6:08:41:fc:fa:
         91:5b:ec:27:d5:01:7c:41:50:e2:72:fc:c4:70:1c:74:6b:89:
         a8:d5:34:89:27:44:75:82:a8:79:7c:e5:61:21:1d:c3:d8:00:
         eb:88:5b:ca:6a:c9:ae:d2:dd:17:6a:31:9f:a4:7b:01:ee:21:
         33:dd:e7:ef:86:36:5a:97:cd:1a:7d:12:82:e1:c4:3b:10:62:
         4e:33:44:d8:d6:f4:33:4f:84:dc:f4:a6:cf:ec:84:03:96:c0:
         4e:f8:bb:73:9f:9b:fa:53:91:27:07:28:d2:4a:89:dc:9d:48:
         71:20:63:b9:2a:9e:1b:28:fe:fb:45:e2:ce:52:c5:3c:1a:98:
         1f:b7:0f:63:7a:90:6e:2c:96:29:3b:62:c6:83:3e:21:03:aa:
         43:b2:5f:1a:13:df:af:0a:65:97:21:cf:ec:d7:f3:d8:27:91:
         d8:84:8c:e3:57:62:5d:ec:c2:9b:53:fb:14:a8:f9:5b:81:a6:
         c0:e0:b3:d6:fc:d0:f0:e9:c7:86:6d:49:31:07:9e:77:f8:6c:
         f1:ba:1a:b7:3a:e8:bb:88:8e:6e:8b:dc:19:a7:3a:33:4d:09:
         96:fa:62:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:37:32 2026 by rpki-client