Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
File:                     LS-TOfu4yzPFInUcUw86IKdTVHw.mft (raw, json)
Hash identifier:          0uQHWhgfj63OlMoi/mWueK+hD5CIEIppcLgnBQfPeNE=
Subject key identifier:   57:4A:9E:10:6A:7E:93:F0:01:85:02:9F:66:8E:BF:BD:F3:22:C3:4D
Authority key identifier: 2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
Certificate issuer:       /CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Certificate serial:       019EBEED44628D186E7FB8B7DDD5C509D69E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
Manifest number:          195F
Signing time:             Sat 13 Jun 2026 03:01:20 +0000
Manifest this update:     Sat 13 Jun 2026 03:01:20 +0000
Manifest next update:     Sun 14 Jun 2026 03:01:20 +0000
Files and hashes:         1: G2RDv2bQMM6VkTN7V-5M9yZ4tFE.roa (hash: vsyuYrOVDwT5WEpdCQyY3/LeFAhiTt0ioFA3ViytW0w=)
                          2: Gqk3HeaV0au9T4DEhe8Q6dNAwh8.asa (hash: sHOLc6rxic8mt40+Kc4tGFD0dGCTe4h6CEWIfcWi1Ak=)
                          3: LS-TOfu4yzPFInUcUw86IKdTVHw.crl (hash: x0snSvpOW1ROL8QQRFmQ4LDHCAW4qzJKoJYHhsa1Il4=)
                          4: lK_21cfqHhmJDzSShJrfpf28gUs.roa (hash: kBqpwIbu+aOiILYXAzJqhtjAR9DT0AhDNrOMT8mT30s=)
                          5: mMjQwsKF24ZKL7c4zTHAfg4rumM.roa (hash: G+TwoGVMZse5gGI9aYgtJxQEsuU/r7y/8I2CjknEOrk=)
                          6: rhnuSlklAcRfdNDcijpokrlLKnY.asa (hash: fPv+G1Wx6OcUMrSLYnbyLQb9ZbCwNUGOah/2QiGmDMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ed:44:62:8d:18:6e:7f:b8:b7:dd:d5:c5:09:d6:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
        Validity
            Not Before: Jun 13 03:01:20 2026 GMT
            Not After : Jun 14 03:01:20 2026 GMT
        Subject: CN=574a9e106a7e93f00185029f668ebfbdf322c34d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:76:75:34:58:4c:4d:dc:cf:2c:93:cf:f9:e7:
                    16:f1:28:37:63:eb:79:ce:7b:00:11:fa:0d:d4:88:
                    29:c5:d7:12:ea:2c:84:90:aa:13:1c:33:b3:33:aa:
                    45:2b:01:e2:d3:75:97:0c:2a:fe:a2:3f:66:57:24:
                    54:77:f2:d2:cf:1c:d6:93:d1:00:a5:40:e8:d7:a1:
                    c7:69:31:f7:52:d1:9b:03:da:16:fd:86:85:69:e9:
                    db:62:ab:5e:b2:9e:84:13:87:a5:46:9b:4a:5d:7e:
                    64:9b:65:99:13:36:c9:8b:5c:ce:fb:ee:d2:c3:b8:
                    aa:a1:5f:66:c0:c7:f4:1a:0c:ff:72:af:e8:9d:d0:
                    ba:ee:cd:76:35:44:f8:7a:0f:5e:8c:eb:57:dd:76:
                    96:c4:ca:3b:ba:79:2c:19:97:b0:6b:6a:65:e6:df:
                    b6:3c:86:8a:ba:b5:e7:27:b8:29:2c:da:55:3a:46:
                    09:00:8f:61:d7:9d:5b:a9:8f:47:cd:53:30:12:f0:
                    11:4c:a7:ff:df:f2:bf:0d:24:f5:c6:96:0d:09:e7:
                    56:3e:11:28:6d:85:fa:39:33:67:17:8d:cf:d5:73:
                    8a:aa:11:ac:b7:36:8f:9b:91:71:f2:e9:9e:e9:5b:
                    05:b4:5e:ea:6f:2f:b5:a5:c3:2b:db:bd:de:7d:b4:
                    26:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:4A:9E:10:6A:7E:93:F0:01:85:02:9F:66:8E:BF:BD:F3:22:C3:4D
            X509v3 Authority Key Identifier:
                keyid:2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:7d:0a:da:12:a4:80:04:71:6c:78:db:93:0f:ba:09:e1:f7:
         65:8b:44:42:be:e2:ad:78:94:08:a2:89:29:6f:95:a6:cc:b9:
         76:f6:3b:2a:e1:00:77:16:f9:d7:69:c4:00:bd:cb:98:80:c8:
         ba:1b:2e:2b:56:f6:3e:ac:8d:04:dd:b4:ca:5d:e7:3e:d6:78:
         ba:f1:a0:3e:01:4b:5f:f2:24:fb:7d:4f:4f:f9:fd:49:d1:68:
         19:1f:b9:d4:d2:45:a9:5a:fd:da:c4:9e:29:2f:a0:85:6a:8f:
         26:43:5f:41:17:8d:2d:c4:23:e2:d8:d4:b9:9c:5c:69:4e:8b:
         05:25:16:a1:ad:f6:d8:18:81:5f:b6:2c:2d:de:d1:6c:a9:a1:
         6d:87:00:3e:5e:52:c9:aa:30:5f:a5:78:a4:ff:59:53:11:49:
         10:62:c2:39:de:e4:b5:0d:2e:aa:e4:a3:15:64:62:3b:30:af:
         c0:41:7e:19:eb:4f:8d:fd:2d:e7:e9:51:b6:0d:73:2e:24:3c:
         42:78:e3:1c:5d:de:85:f2:fe:bc:a7:a6:5c:dc:37:11:98:31:
         1c:db:1c:03:f0:99:cb:2b:03:f6:0e:fa:a8:d6:14:5d:b1:0f:
         3f:f3:a0:2a:d7:c2:48:14:17:d1:ae:19:fa:fd:cf:2b:c4:43:
         b8:f5:71:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:41:49 2026 by rpki-client