Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
File:                     LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft (raw, json)
Hash identifier:          m97WbLGCH25SZZCFjkwZe3sbNRFTlyLuz+KCgyiwN0I=
Subject key identifier:   FC:D2:03:A5:E0:DE:16:CD:3F:66:13:14:47:B3:9B:10:76:41:8E:16
Authority key identifier: 2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
Certificate issuer:       /CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Certificate serial:       019EBF918007808FC4B789D8F6DABACD05A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 06:00:44 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:44 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:44 +0000
Files and hashes:         1: LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl (hash: YDsvSYwR3uT995RXa35eWRoVnounfClVBRg9xnIeohs=)
                          2: SizhTkIG2sATNsv1VQNzH4wHchc.roa (hash: 2PYBEpDEAGt3SnEGmQvvCFiLA489Fe6L2n4/O/hryFQ=)
                          3: cMMwTPV9hTcR-LW3CCNoNNI7ghU.roa (hash: D27oXJgFuXlMx0AdNp5xIFlLxsheQv6fczl4XU0D9Lc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:80:07:80:8f:c4:b7:89:d8:f6:da:ba:cd:05:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c83dfb24629c16779350b4a777b5b280fc59d44
        Validity
            Not Before: Jun 13 06:00:44 2026 GMT
            Not After : Jun 14 06:00:44 2026 GMT
        Subject: CN=fcd203a5e0de16cd3f66131447b39b1076418e16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e9:60:32:22:10:d0:03:db:26:fc:7c:e5:2f:
                    85:01:a3:7b:41:76:eb:4d:d1:36:74:c8:21:ed:1e:
                    6d:09:a0:ee:2a:47:61:38:48:5b:52:2e:e5:47:9f:
                    d5:66:cc:68:9e:e4:6f:36:8f:a8:af:43:28:88:39:
                    d5:3b:32:d2:ed:8d:4b:be:b0:5e:39:13:fe:59:11:
                    b6:69:83:76:32:60:12:e6:d7:3d:a7:b7:36:fd:80:
                    a7:be:83:9f:b3:d6:af:8f:87:ac:d0:ea:08:54:97:
                    ac:4c:f4:cf:16:78:18:b8:1a:f8:2b:3b:15:d0:fb:
                    cc:07:47:ea:4f:87:ec:db:e6:63:9e:1c:1b:e0:97:
                    7c:63:38:82:26:f9:f1:c7:2a:96:27:4f:76:b4:f3:
                    3a:1c:ae:66:ab:0b:5b:bb:b4:ee:36:96:e2:75:88:
                    c2:e5:ec:79:d4:5d:a1:02:c1:f3:32:af:d8:97:b8:
                    22:26:86:91:2c:b6:cf:46:76:86:2f:b8:b8:9b:6b:
                    bc:3a:8c:8a:47:18:7d:9d:a2:94:01:97:60:51:7b:
                    d1:26:89:1d:27:ad:33:7a:06:cd:17:0b:38:3b:9f:
                    29:6d:4e:69:45:e2:93:89:16:56:dc:cc:e5:0d:af:
                    47:9b:1a:12:7b:58:1e:78:a6:ba:35:a9:95:a4:a9:
                    20:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D2:03:A5:E0:DE:16:CD:3F:66:13:14:47:B3:9B:10:76:41:8E:16
            X509v3 Authority Key Identifier:
                keyid:2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:19:c0:b9:c2:0a:32:e0:09:8a:87:64:83:8e:45:92:52:95:
         85:87:65:f6:97:4e:ba:e2:40:2c:1d:28:4f:b6:a0:36:93:6d:
         6e:e2:90:74:b9:e7:0c:99:92:6c:aa:af:9b:46:91:73:7e:f0:
         f6:96:0b:e2:22:c9:0f:75:a3:05:f4:c0:1c:57:ac:39:68:1e:
         a8:7f:4f:b8:71:30:8c:5c:eb:d6:89:24:de:60:e8:0c:3a:05:
         fc:cb:7c:02:27:d8:12:8c:2c:98:4d:95:92:80:e6:a4:e5:bb:
         54:8e:94:a6:e9:2d:ee:14:15:50:05:48:be:5b:7e:4c:82:a0:
         e7:58:14:09:d2:28:f4:94:c3:af:d3:e8:b4:c8:f1:4a:1e:9e:
         d7:65:dc:99:28:67:e4:e1:4a:bd:94:7b:8c:f5:91:33:26:a4:
         42:94:18:37:03:2b:20:f9:6c:36:03:02:47:ae:7a:f0:0c:ce:
         97:bd:bd:c0:94:9c:10:ce:5c:7f:83:96:79:6b:e4:35:a4:0b:
         88:2d:10:5c:67:08:d1:25:63:4b:02:b6:95:4f:d8:69:33:06:
         4a:f5:f7:7f:35:58:d7:94:16:84:46:af:ea:59:b9:1f:f6:95:
         71:c8:3b:1f:45:64:cb:c6:f1:88:89:9a:40:59:38:31:f8:56:
         24:60:f4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:58:45 2026 by rpki-client