Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
File:                     RFZsGig9VT7z9lb1ciOYTdp8NV8.mft (raw, json)
Hash identifier:          j2kuCEAKX1gpcmyHsIHqJydOPCORXoQPmjt1Zn3fEPQ=
Subject key identifier:   8C:A0:E4:EC:63:A1:D0:44:8A:6C:0B:CC:1F:D6:ED:70:ED:B5:EB:86
Authority key identifier: 44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F
Certificate issuer:       /CN=44566c1a283d553ef3f656f57223984dda7c355f
Certificate serial:       019EC2249F15E32AC1676B055626D6CA82A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
Manifest number:          195F
Signing time:             Sat 13 Jun 2026 18:00:40 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:40 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:40 +0000
Files and hashes:         1: RFZsGig9VT7z9lb1ciOYTdp8NV8.crl (hash: Xreu3OVUIW6TqQLIntKUUJzvr8i7DzgLtCmE7tXT7aE=)
                          2: sg6tgAybBjXrNxu4j4vvtnhkeRs.roa (hash: znWkPFTjms0Q4dHid9C/SISTIFSJsDcguftIuJobD7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 18:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:9f:15:e3:2a:c1:67:6b:05:56:26:d6:ca:82:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44566c1a283d553ef3f656f57223984dda7c355f
        Validity
            Not Before: Jun 13 18:00:40 2026 GMT
            Not After : Jun 14 18:00:40 2026 GMT
        Subject: CN=8ca0e4ec63a1d0448a6c0bcc1fd6ed70edb5eb86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fb:1f:08:de:a2:b7:01:33:51:63:93:1c:ff:
                    fd:fe:84:0b:c4:31:c7:ed:ed:cb:5f:6a:35:0c:b1:
                    a6:83:41:b1:1f:d2:1a:d7:f9:e4:60:55:2b:48:f8:
                    87:0a:4a:c3:59:12:61:7b:86:2f:03:c5:23:7f:92:
                    6a:40:91:6a:02:69:fe:1b:d7:c0:fd:7e:40:89:79:
                    67:4f:bb:d4:59:3b:49:c1:3d:1a:5f:d8:97:9a:84:
                    3d:f0:11:70:8d:65:61:71:69:a4:b0:62:8d:af:ef:
                    d1:61:94:52:ed:bb:7a:a5:57:0e:c6:ae:73:d5:73:
                    78:e7:ed:b2:58:83:f6:bb:ad:fb:c5:a0:6c:70:86:
                    1c:14:e9:4f:ff:ef:73:ff:2e:16:68:c8:2a:f5:b7:
                    d7:8a:84:41:88:4e:9d:8a:16:91:56:87:dd:48:7f:
                    dc:6f:85:1c:39:1e:4a:34:c7:89:d6:ab:00:31:8c:
                    42:22:56:5f:bc:ed:4e:9b:ab:ab:eb:ac:f4:d2:b3:
                    b0:a2:96:ed:8f:30:62:b1:c7:f1:3e:1d:16:a0:ea:
                    81:41:42:ae:dc:48:2d:88:32:3c:99:0f:7f:9c:28:
                    81:67:33:ec:cb:aa:ad:53:82:b5:11:7c:5a:48:88:
                    de:da:8a:56:98:98:75:94:a0:7c:e8:15:9a:35:5d:
                    51:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A0:E4:EC:63:A1:D0:44:8A:6C:0B:CC:1F:D6:ED:70:ED:B5:EB:86
            X509v3 Authority Key Identifier:
                keyid:44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:20:25:6f:02:ab:6a:b9:a6:36:f4:b6:d1:af:10:16:b4:6c:
         e5:3a:b4:15:dc:c9:e8:e6:4c:36:40:da:85:1b:e9:04:50:3f:
         e9:e2:d9:79:79:d4:c1:4c:b1:69:e7:3d:b7:f0:20:ce:60:13:
         5e:21:92:32:cd:1d:33:41:a4:da:50:73:a2:f5:d1:6f:75:da:
         a1:08:2b:14:83:88:9a:09:f1:62:99:e6:ac:ca:84:28:96:70:
         e3:3f:ad:5d:6a:65:fa:ac:d5:71:d7:75:40:0c:57:2b:3a:48:
         3e:d6:74:b7:16:5e:b5:d9:8f:c6:2d:2a:df:4e:89:52:42:d9:
         f1:48:8f:72:0a:62:0a:b9:2d:59:67:6a:9d:bf:4c:3f:5a:05:
         67:bd:02:f3:39:1b:84:f4:85:a9:90:95:4d:3b:c1:21:c7:6c:
         a7:79:65:05:ab:90:ac:86:af:a4:cf:94:10:5d:cc:f8:05:b8:
         6c:2e:72:da:31:98:80:a1:be:80:a7:6a:d7:88:ef:27:fc:39:
         60:b9:4c:e3:36:3b:6e:6a:cc:52:73:0b:f9:d2:e0:15:37:ac:
         88:ab:0d:2f:20:5a:79:09:99:7c:57:96:5e:2e:25:01:83:0e:
         b8:bf:9b:2a:86:64:4e:a3:cc:49:1a:0d:05:78:68:79:7f:b6:
         f7:3d:b4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:09:45 2026 by rpki-client