Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
File:                     2U8jjFx065p1pG4rxnQR6Nwi2YI.mft (raw, json)
Hash identifier:          AxDsRVJcexgVXPy9ptzkUb3mfU/Gsd6j8Kx9HnP/pvI=
Subject key identifier:   E9:23:26:51:55:01:DC:CB:7A:74:E6:BD:F0:5C:29:0F:ED:F1:90:EF
Authority key identifier: D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
Certificate issuer:       /CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Certificate serial:       019EBEECCC3FD53C688AA0C8B016BDCA1240
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
Manifest number:          195E
Signing time:             Sat 13 Jun 2026 03:00:50 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:50 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:50 +0000
Files and hashes:         1: 2U8jjFx065p1pG4rxnQR6Nwi2YI.crl (hash: k/ew3fV2/tjI14Nh0IN98Ju5SHH5lI3krUaOM+aMW5s=)
                          2: 2UPCFRYyOaCEOUtdZmUYxdw-WQE.roa (hash: QM7pJDrc503fpExXr4mMqAxNHN2VAXhAozwv2Gb8pXU=)
                          3: zvCrVq4GpGUBE37m7ZM3q3DEvk8.roa (hash: SgQbm5oNK1zxo7/T57EeuLpvE8Aw7Jxw0oduPoj3Mi8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:cc:3f:d5:3c:68:8a:a0:c8:b0:16:bd:ca:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
        Validity
            Not Before: Jun 13 03:00:50 2026 GMT
            Not After : Jun 14 03:00:50 2026 GMT
        Subject: CN=e92326515501dccb7a74e6bdf05c290fedf190ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:16:5c:cd:bc:49:da:9f:52:6f:c0:ad:62:de:
                    81:28:a2:30:8e:59:f2:9e:69:1b:79:63:83:23:fb:
                    ad:ae:3c:fc:15:6e:68:2d:b7:5f:f1:00:52:6e:6d:
                    0d:cf:f7:fd:c2:90:78:7c:63:3f:51:e4:37:c9:ef:
                    0d:06:57:cd:30:f3:17:6f:2f:05:f8:13:e3:6e:9d:
                    11:02:c7:51:8d:96:c6:8e:00:e4:66:f1:dc:bb:22:
                    10:de:3b:a5:44:ef:73:b0:92:69:bc:47:a6:f7:0e:
                    d0:23:e8:fa:b9:69:bb:e4:ed:81:90:81:45:b2:12:
                    d8:aa:0c:e5:5d:28:a9:cf:a2:71:b5:3a:00:12:86:
                    29:be:c2:5e:21:3e:75:2a:98:9d:37:89:1b:05:68:
                    7f:46:0a:df:42:19:63:4e:9d:e9:73:1e:d3:a5:1a:
                    ab:d6:45:70:f4:d3:d7:ce:72:04:1d:ee:d0:56:20:
                    33:1a:41:e8:e0:35:bf:b1:f5:73:68:bf:d6:a6:92:
                    4b:5b:60:b9:4d:84:bc:ea:b4:70:d8:eb:78:23:6e:
                    5e:2e:6b:86:0d:c4:ea:7d:6f:b0:81:c0:d5:14:1a:
                    54:93:7a:97:89:e3:f2:6d:1e:e9:c8:63:96:62:bf:
                    0f:8f:6b:ea:e8:6d:63:46:6e:88:ab:f8:75:d8:3a:
                    3e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:23:26:51:55:01:DC:CB:7A:74:E6:BD:F0:5C:29:0F:ED:F1:90:EF
            X509v3 Authority Key Identifier:
                keyid:D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:c9:2e:6a:75:3a:3e:35:1e:4c:01:75:1c:cc:4c:d1:80:88:
         4e:2b:34:ae:6f:84:10:05:cd:a9:24:48:56:bc:6b:ba:89:39:
         70:70:fc:1f:25:ed:02:05:80:e5:03:ab:21:b5:80:76:fb:a5:
         d9:e6:61:36:a6:3f:03:8e:c1:9f:ae:e7:e7:80:52:f6:21:b8:
         de:58:eb:8c:ec:a9:85:3e:16:ea:24:89:77:2c:96:6c:10:aa:
         23:cf:dd:62:74:23:3e:0a:c2:d6:5e:d2:1c:b1:0b:70:10:f9:
         52:2a:a2:5d:3e:cf:3f:04:aa:e7:98:5f:85:fe:52:43:70:aa:
         34:04:7c:fb:04:f6:ee:5c:0e:75:76:84:6a:12:e5:d6:40:df:
         81:39:aa:98:13:40:02:b4:7c:53:d3:a6:3a:6e:2b:e9:c9:1d:
         f8:4f:73:8a:62:1a:f4:af:53:ba:e1:a1:d0:b5:8f:9a:0a:3f:
         89:0d:bb:45:1d:2f:bc:71:f2:fe:73:cd:e2:56:15:4a:3c:1e:
         c6:4e:b7:88:bf:de:c3:da:31:aa:d4:8b:7d:75:c2:95:1a:13:
         34:ab:39:aa:e9:80:a8:a5:38:e4:59:3a:05:15:80:30:a5:b2:
         14:0b:07:d4:0d:f7:ac:b3:f3:bc:a2:dd:84:ad:0b:88:4d:19:
         4b:f4:a9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:42:46 2026 by rpki-client