Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft
File:                     mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft (raw, json)
Hash identifier:          s+lZyh0MByWUK1p7DOd95xtcUmge3z0Y/4eqbSwjIpg=
Subject key identifier:   FF:7B:21:8C:02:43:26:0E:8F:1F:E8:6A:53:C3:84:85:A6:FE:C6:91
Authority key identifier: 98:84:55:84:AC:80:94:C1:80:6B:73:A6:F5:3E:46:B9:A2:8E:81:2B
Certificate issuer:       /CN=98845584ac8094c1806b73a6f53e46b9a28e812b
Certificate serial:       019EC292A77DDDC83699E14ED7FCAC839E36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 20:00:51 +0000
Manifest this update:     Sat 13 Jun 2026 20:00:51 +0000
Manifest next update:     Sun 14 Jun 2026 20:00:51 +0000
Files and hashes:         1: celudLIkwqQs5BVcabVek4AUA_8.roa (hash: Z6ja4JJYaOm0UOAS7DT4QbK0buCK6md62bjvBxBcr0o=)
                          2: mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl (hash: oE+v7wra8Vd2tU+WRYRVYL6+YNUvfej3JI9NBepqyDc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:a7:7d:dd:c8:36:99:e1:4e:d7:fc:ac:83:9e:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98845584ac8094c1806b73a6f53e46b9a28e812b
        Validity
            Not Before: Jun 13 20:00:51 2026 GMT
            Not After : Jun 14 20:00:51 2026 GMT
        Subject: CN=ff7b218c0243260e8f1fe86a53c38485a6fec691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ac:bb:79:0e:3d:a4:7d:e9:65:f6:a6:87:7d:
                    02:81:e6:e5:38:6b:53:6d:bf:c3:a2:5c:82:89:09:
                    61:e8:fd:03:29:9a:8c:1c:b3:e9:94:aa:c4:f5:06:
                    58:37:4c:f5:ec:a8:d4:df:90:df:49:70:01:ac:84:
                    2b:0b:bc:c7:b2:52:5e:13:97:ba:0d:e6:e3:9a:14:
                    e5:e5:fb:29:2f:00:64:95:9d:ad:8a:06:bc:cf:39:
                    cd:1e:62:b3:cf:9b:5c:68:f4:7d:f2:65:4d:33:a7:
                    76:8e:8c:b9:2d:ad:08:ee:fe:9b:eb:d6:51:f3:1e:
                    22:28:fc:f7:de:c8:c5:d6:55:6c:6a:d8:37:c0:c9:
                    b1:97:3b:2f:54:c3:73:e3:82:ae:17:6c:45:27:39:
                    22:ea:85:02:b2:d7:02:f0:21:11:c4:39:60:4b:16:
                    de:c4:de:79:b6:dc:5e:96:6c:df:5c:45:ff:9a:09:
                    73:74:0b:8e:7c:2f:7b:a7:89:1f:9b:13:d1:9e:25:
                    96:84:5d:28:b4:cc:65:b2:7d:0c:32:ff:00:0a:1f:
                    46:7b:af:1b:2a:b2:a4:2f:f6:dd:36:b7:c4:19:45:
                    33:8e:99:15:93:f2:7d:f8:5d:19:7d:4b:0f:d2:03:
                    6c:f1:ef:b8:00:51:c5:d6:db:10:ce:a8:f1:f0:02:
                    42:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:7B:21:8C:02:43:26:0E:8F:1F:E8:6A:53:C3:84:85:A6:FE:C6:91
            X509v3 Authority Key Identifier:
                keyid:98:84:55:84:AC:80:94:C1:80:6B:73:A6:F5:3E:46:B9:A2:8E:81:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:b3:6a:c7:8d:a9:90:3c:15:7b:85:65:45:68:fa:e8:17:c0:
         88:63:c1:ae:9a:ee:c9:81:ef:4f:81:be:f2:54:d1:54:e0:44:
         36:2e:04:b8:f7:58:31:6e:00:09:62:9c:6a:f5:65:a5:a1:00:
         af:1b:23:7f:fa:ec:e9:de:29:55:be:59:50:61:1d:ab:36:69:
         c0:be:a2:e3:8d:9b:be:9f:44:e7:31:9c:d5:2b:a6:9e:f8:ed:
         05:cd:74:39:80:d4:25:04:51:c7:41:03:fb:32:ce:b3:d7:1a:
         66:25:69:da:b0:f4:c2:fb:40:67:7e:b9:49:2c:d9:7e:53:8f:
         78:34:c5:63:88:ff:dd:5e:4e:cf:ad:95:b0:05:19:d9:db:56:
         89:9c:43:8b:88:1b:b4:56:82:4c:80:8e:b3:89:e2:cf:79:4c:
         41:26:df:f3:14:6a:62:bc:de:e1:0f:6c:f5:2b:97:a3:f4:0e:
         ba:5d:8a:f4:88:a3:ec:7b:c6:63:6d:65:09:80:3e:cb:0e:0e:
         f3:99:20:99:84:cb:59:87:d5:a0:c4:82:10:2d:fc:c6:e5:a8:
         54:bd:a4:06:ec:fc:16:2b:80:92:d2:2a:5c:66:9b:12:3d:9f:
         04:7d:40:fa:d5:28:2b:37:66:22:3e:92:7a:14:c2:7a:76:a1:
         1c:29:0d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:05:37 2026 by rpki-client