Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
File:                     fTXAsgkTXCLMgAWnwuIixjwTbLA.mft (raw, json)
Hash identifier:          Cknu+nU6HcgUJt3feh1Namonm/mAx57jyb9u6ybHpas=
Subject key identifier:   CD:3F:E5:64:34:96:68:93:22:23:7D:1E:2B:A6:CB:E2:EA:03:08:74
Authority key identifier: 7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
Certificate issuer:       /CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Certificate serial:       019EC2246F2C2348193B58A5D44CCA2FE433
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 18:00:28 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:28 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:28 +0000
Files and hashes:         1: fTXAsgkTXCLMgAWnwuIixjwTbLA.crl (hash: 0qaSFAUDdGCgWX1jx2VUl+xEuHBplVFVX13Vo1v6kNs=)
                          2: grQlShm9Yf4p9v0UY4WRgIC18Rg.roa (hash: 0KLMtmRL0pnGPXXoN5qSCFJywF+voZI8ebkJsYdl6wg=)
                          3: l1AVp_w4-LVuNkKZXyFJBaRiTqU.roa (hash: pv6l02vTFMwEiJ4PcQNABkmbJULiDmx5aoXWeKtSRA0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:6f:2c:23:48:19:3b:58:a5:d4:4c:ca:2f:e4:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
        Validity
            Not Before: Jun 13 18:00:28 2026 GMT
            Not After : Jun 14 18:00:28 2026 GMT
        Subject: CN=cd3fe5643496689322237d1e2ba6cbe2ea030874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0d:aa:f1:7e:3d:71:dc:f1:f1:1e:62:ce:29:
                    a6:39:68:1a:2f:a2:98:bd:4f:8c:b4:2f:c6:3c:5c:
                    c0:df:a5:88:d1:d5:7d:f3:0c:3d:06:e2:f9:71:1b:
                    2f:a2:ed:1c:5a:8c:50:2d:82:fc:eb:e5:e7:e6:07:
                    36:21:68:c5:5e:55:68:0b:54:b7:a2:4e:a7:06:9f:
                    1c:85:fa:19:a6:44:c8:90:d2:1e:a8:6f:f0:58:77:
                    01:27:6a:11:f5:38:28:29:f4:54:07:c9:fe:b0:75:
                    d1:18:6f:64:9e:b9:fb:31:29:31:2a:22:a5:83:b6:
                    94:ce:51:49:12:0c:e1:21:9b:98:3b:79:16:74:5a:
                    76:b5:8a:1b:dc:88:5d:a5:70:df:00:6a:a0:32:83:
                    bd:eb:ea:f5:ac:76:32:17:62:5d:3f:09:a0:8e:e2:
                    bf:91:b5:d7:2d:61:d1:22:a2:2e:1a:22:22:17:e8:
                    db:2e:ad:e4:9c:02:38:3c:df:fb:4d:82:65:35:38:
                    d0:ee:24:20:45:d8:1f:76:2c:4a:b9:32:b3:90:80:
                    e1:d7:2d:25:0f:37:ff:6d:29:d2:a7:7a:c9:30:d8:
                    e5:79:e0:b2:2b:b3:d8:70:b8:24:d0:37:26:75:ea:
                    49:50:77:c2:0b:10:9e:d3:ec:e9:6e:02:e7:ca:ed:
                    c5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3F:E5:64:34:96:68:93:22:23:7D:1E:2B:A6:CB:E2:EA:03:08:74
            X509v3 Authority Key Identifier:
                keyid:7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:2f:21:7c:13:a5:7e:d1:0a:c2:01:00:f7:e3:e2:f2:42:12:
         0d:2c:0e:45:30:cb:da:35:9c:66:b4:a4:ac:2f:87:19:03:46:
         99:dc:db:2c:08:b1:fc:d1:11:67:1f:23:50:59:9a:05:9b:a4:
         d4:23:c6:03:58:95:5d:b9:e7:a0:fd:bc:a2:f3:a3:76:cc:23:
         fa:c3:2f:d6:37:00:98:fc:e1:71:20:94:7c:83:6d:52:24:5f:
         94:94:55:de:6e:cb:1a:b1:22:db:0c:c2:94:f9:bc:86:a1:46:
         ea:5b:35:9c:d7:6f:ed:2e:7d:bd:1d:3a:67:6c:a4:50:17:15:
         7a:4d:1a:a2:c1:b0:20:f0:7d:61:59:75:5e:3d:7d:55:0c:33:
         34:b0:c8:db:68:7a:23:98:69:2a:a5:3a:35:1c:2b:32:e3:d5:
         a8:c3:db:87:0f:0f:6d:94:eb:e9:bf:fc:10:0f:2b:e6:cc:c1:
         0f:50:12:3a:50:87:12:d5:c8:94:72:82:e2:e0:ea:ae:34:15:
         02:b3:a1:74:99:6a:70:e4:ba:eb:5d:ae:77:7f:c5:73:c7:d2:
         42:c5:23:ce:fa:45:23:e1:36:98:de:08:04:47:20:db:93:79:
         1d:03:e1:0d:9f:ec:c4:25:8b:27:21:9c:ee:e2:3d:60:e5:e8:
         f2:44:fd:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:33:31 2026 by rpki-client