Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
File:                     1Xd1ecxneERUvNkaBr1pNarvc_k.mft (raw, json)
Hash identifier:          0s36Qk9P6AdPp2vx4MZJ0h7wnZvWlUx3+qSMW26oreg=
Subject key identifier:   6A:70:51:66:CB:8D:DC:F9:E1:93:A8:DD:78:F4:65:19:EE:88:61:8B
Authority key identifier: D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
Certificate issuer:       /CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Certificate serial:       019EC0DA99D9F6AD291F6DE6BEFDB3CBAA21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
Manifest number:          195D
Signing time:             Sat 13 Jun 2026 12:00:12 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:12 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:12 +0000
Files and hashes:         1: 1Xd1ecxneERUvNkaBr1pNarvc_k.crl (hash: mY+DKSRdc1ZxEX4mfuKYkDQJEs41iGgGGH73GMseXTE=)
                          2: E66SedHd_vPzIOdI_rSea-dozpY.roa (hash: esa1VAeAMDp/AD53evHUHJNFCVMH1Oxb2JFWktl2xMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:da:99:d9:f6:ad:29:1f:6d:e6:be:fd:b3:cb:aa:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5777579cc67784454bcd91a06bd6935aaef73f9
        Validity
            Not Before: Jun 13 12:00:12 2026 GMT
            Not After : Jun 14 12:00:12 2026 GMT
        Subject: CN=6a705166cb8ddcf9e193a8dd78f46519ee88618b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a0:dc:94:92:fa:9d:c9:82:83:6a:7b:b3:3c:
                    e7:43:7f:b2:6f:45:55:ff:0d:bc:54:34:25:9d:34:
                    e1:92:9e:87:ee:31:65:af:97:14:35:a1:a4:f0:f3:
                    8d:4b:66:66:29:db:c8:90:5e:c1:6d:93:35:26:0e:
                    3a:8b:34:71:ae:6e:a2:b4:e3:3b:d2:7c:8b:9a:45:
                    fa:33:6c:25:d1:46:29:eb:a4:b6:f5:ba:75:01:8e:
                    ef:80:61:01:ee:d3:46:49:aa:ad:71:54:03:6d:08:
                    55:5a:15:28:67:7c:09:05:90:6f:2e:d9:0e:e2:d8:
                    02:12:63:82:a3:f0:fa:53:f9:0e:7a:03:de:17:83:
                    99:77:00:c9:3d:00:bb:bc:44:09:86:4b:39:05:42:
                    7f:b8:11:9d:68:bb:d2:0a:b1:a9:d1:4d:08:f2:5d:
                    82:45:dc:11:e1:aa:e2:2f:92:df:88:4d:07:25:00:
                    6b:6b:29:50:dc:b1:0b:3a:83:ec:54:ab:95:25:cd:
                    0b:d9:fd:c4:de:e5:90:0b:54:bf:4c:ef:b9:52:7a:
                    da:e0:cc:4b:02:f1:90:4c:ad:65:8c:db:71:93:23:
                    67:63:4f:bb:91:f5:78:55:f2:d5:db:7b:fc:c0:d3:
                    bd:c5:7a:5b:c9:36:b2:25:44:2f:55:7d:74:92:f8:
                    21:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:70:51:66:CB:8D:DC:F9:E1:93:A8:DD:78:F4:65:19:EE:88:61:8B
            X509v3 Authority Key Identifier:
                keyid:D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:57:2d:d2:c1:fb:71:81:7c:00:6b:83:77:b4:28:d1:5d:4d:
         8d:86:f8:3c:e7:b3:1c:65:a8:8b:47:d4:da:56:c6:0c:3d:91:
         85:e2:01:3f:40:86:07:ca:1d:2e:08:34:57:f9:33:a9:0b:9d:
         a2:35:14:70:91:31:b1:b6:9e:0d:f2:e3:5e:09:5b:87:df:3c:
         52:e1:b1:3a:e7:1c:88:ed:3f:f2:bc:01:5f:8a:25:37:32:e4:
         2a:a3:75:32:ad:cf:b6:62:46:e3:e6:d9:3a:7e:26:79:ab:dc:
         ef:84:e3:6b:fe:2c:92:f4:6f:2b:48:04:85:54:43:dd:ed:46:
         3c:a5:72:da:03:ba:6a:3e:34:75:5b:9c:e2:c8:a9:4d:b1:46:
         48:6d:c1:62:e3:30:96:cf:3e:3d:73:95:fd:b3:d6:47:23:a3:
         c4:09:4a:16:3e:35:74:5e:a0:87:76:2a:be:37:cc:9f:00:9e:
         33:79:ad:1e:c5:02:c9:48:d4:61:cf:92:0b:7b:66:7c:19:6d:
         71:3a:73:d3:50:73:22:39:d2:a2:25:00:01:9e:3e:3b:3a:bd:
         b8:79:f0:27:38:d3:0f:ee:52:76:6f:1c:d3:97:1d:34:65:9a:
         59:c2:38:5f:b9:6c:d7:45:65:ef:cb:19:a2:2e:75:da:de:db:
         e7:17:0b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:49:53 2026 by rpki-client