Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
File:                     cWAmJ2eaSYC3DYreV48UGS-v65U.mft (raw, json)
Hash identifier:          A2M3tzwVfsQhzPCafA9TC2kdivqhWN1P4gt4XltLMOc=
Subject key identifier:   03:3F:86:C3:40:37:13:40:4D:11:FC:81:AE:7B:B7:18:0D:DF:15:10
Authority key identifier: 71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95
Certificate issuer:       /CN=71602627679a4980b70d8ade578f14192fafeb95
Certificate serial:       019EC14934593283DDD6E42C6AED20D43561
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 14:01:00 +0000
Manifest this update:     Sat 13 Jun 2026 14:01:00 +0000
Manifest next update:     Sun 14 Jun 2026 14:01:00 +0000
Files and hashes:         1: 1MNzVKC9htvcNDGJvI7xuyGACNU.roa (hash: 5RJpFE83PkUMhvbMNjs3KYN+COX8IjLxqtTzJmRO/6c=)
                          2: LO4YOUMQSFJh66TMDDMwnUwbqCo.roa (hash: dmbwDSHT1tN2CWO1W2a6nb7MTfEav+JXvlh9Nn0z+XQ=)
                          3: cWAmJ2eaSYC3DYreV48UGS-v65U.crl (hash: oU8WtPZXX8AbGu7qAj4FERNRrsPxfePa0AIspRXsXjI=)
                          4: fnKKRoWAVJZeKiOvGQPgr3LCZIs.roa (hash: JHOAXHnAaTWFlsyraZAXCqYuOsM3xPfPaJdjfqdyKlM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:49:34:59:32:83:dd:d6:e4:2c:6a:ed:20:d4:35:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71602627679a4980b70d8ade578f14192fafeb95
        Validity
            Not Before: Jun 13 14:01:00 2026 GMT
            Not After : Jun 14 14:01:00 2026 GMT
        Subject: CN=033f86c3403713404d11fc81ae7bb7180ddf1510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a3:1b:ba:75:fb:47:96:fa:66:bc:0f:e0:e0:
                    d3:9a:6e:8b:77:8f:7e:d6:15:04:42:45:51:ec:85:
                    dc:0c:a3:cb:e4:fd:2b:6e:0f:9e:f1:c9:74:b8:cf:
                    f1:cc:79:b0:d0:b2:2f:64:3c:bb:34:9c:56:76:c0:
                    57:d0:4e:b2:48:8b:dd:09:84:f4:9c:de:35:e2:63:
                    47:ae:c3:8c:3d:f8:96:73:f4:67:11:f1:11:69:40:
                    8d:2b:55:fb:af:f2:e7:26:89:90:aa:de:89:2f:89:
                    02:71:e2:21:38:9b:39:97:21:71:3e:17:a5:35:92:
                    b8:37:14:59:6c:4a:38:36:b7:1d:0b:15:a9:87:b9:
                    25:40:45:ba:3b:37:21:b8:2f:74:ea:ac:7f:77:04:
                    99:1d:76:7c:be:7f:87:2b:87:80:a3:f4:94:97:51:
                    59:23:61:f4:bf:e6:9a:4b:04:1b:3c:85:1e:2c:e5:
                    2f:c4:00:0d:14:ef:b8:75:52:3f:16:ea:2f:7c:6a:
                    3a:15:a3:78:4b:5b:96:34:96:e1:66:90:2f:ff:44:
                    c5:76:de:76:be:31:2f:22:96:11:12:5b:94:27:ab:
                    c5:77:84:9d:e9:77:e0:e9:40:df:10:88:ed:13:29:
                    12:02:5c:75:d1:87:58:70:cc:78:d8:be:f0:21:4a:
                    ba:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:3F:86:C3:40:37:13:40:4D:11:FC:81:AE:7B:B7:18:0D:DF:15:10
            X509v3 Authority Key Identifier:
                keyid:71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:21:32:1e:8d:ff:69:9f:70:1d:cb:a5:7a:c0:d9:5b:19:a6:
         03:eb:99:67:de:80:f2:b4:96:52:7f:16:58:63:50:fe:62:15:
         6f:37:61:4a:01:73:2a:c6:5a:2b:9c:da:0f:6a:df:6b:07:80:
         0f:8b:ef:aa:32:74:65:7d:c5:d2:4e:f5:da:3b:5b:dc:00:58:
         8b:d6:a9:71:dc:c3:5b:d3:7e:b0:bd:c8:ad:e0:47:40:a4:1a:
         91:a7:49:f5:cd:ac:7b:02:cd:c1:f7:04:22:53:7c:13:f6:56:
         1d:6d:9b:93:a5:41:16:9c:85:40:a1:51:e9:7f:78:d5:1d:cb:
         8d:ec:83:51:8e:70:e7:5f:50:9b:0e:2b:7f:62:8c:7d:56:53:
         95:1c:a6:20:ad:a3:57:2f:74:dd:4b:30:a2:3c:da:b3:b1:b1:
         13:32:3a:97:6e:95:3d:da:08:1d:f7:d2:d6:0e:64:65:f6:45:
         28:65:c7:ac:b6:e8:f5:02:7f:55:26:45:e9:98:c5:61:98:e5:
         37:7c:d0:b0:8c:59:77:99:68:be:36:0c:eb:9a:d5:1e:03:cb:
         f5:5b:f7:9d:72:bc:73:8f:e9:19:de:6f:b8:34:d0:07:1d:07:
         21:c8:b7:5b:7c:65:80:86:b4:9a:ff:9e:e9:84:53:92:0e:de:
         39:df:c2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:55:35 2026 by rpki-client