Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
File:                     XDDZUEYzG9zjAYt__g8T2_n8cY0.mft (raw, json)
Hash identifier:          n5SF95hGLDNcGOgZPe0+yt2m9Bs2552m5yKdEJycV6Y=
Subject key identifier:   3B:52:CD:15:13:F4:6B:EB:6B:D4:34:DB:E4:7C:8F:23:5B:17:C9:17
Authority key identifier: 5C:30:D9:50:46:33:1B:DC:E3:01:8B:7F:FE:0F:13:DB:F9:FC:71:8D
Certificate issuer:       /CN=5c30d95046331bdce3018b7ffe0f13dbf9fc718d
Certificate serial:       019EC25C815F1D62C2A0DCF81A5313D2941E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 19:01:42 +0000
Manifest this update:     Sat 13 Jun 2026 19:01:42 +0000
Manifest next update:     Sun 14 Jun 2026 19:01:42 +0000
Files and hashes:         1: XDDZUEYzG9zjAYt__g8T2_n8cY0.crl (hash: YMtymPwV68yfKteGqIxte23zO88GNzuVQQNVh789i40=)
                          2: i7ahmmzCoN5G9N5UQomOHHe69RA.roa (hash: GGCZiPMQLo6nn63tOlWXS7/n5qwIMxP1oeej8rFYFvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5c:81:5f:1d:62:c2:a0:dc:f8:1a:53:13:d2:94:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c30d95046331bdce3018b7ffe0f13dbf9fc718d
        Validity
            Not Before: Jun 13 19:01:42 2026 GMT
            Not After : Jun 14 19:01:42 2026 GMT
        Subject: CN=3b52cd1513f46beb6bd434dbe47c8f235b17c917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d7:ec:f3:e2:03:13:6d:42:9c:6f:15:36:fd:
                    16:c2:98:5a:d4:1e:e8:7c:a1:0b:80:7f:b2:bb:d7:
                    b4:15:35:35:02:a0:b4:97:dc:53:74:09:07:dd:f2:
                    42:e9:7a:ef:69:42:40:94:53:84:18:19:c4:7f:8a:
                    ee:bf:9d:2e:89:cc:05:c6:ab:07:6d:e8:e0:6a:a0:
                    61:98:9f:58:58:f7:76:8f:bf:ec:d8:20:20:c4:41:
                    8e:e1:c2:83:45:d6:d5:56:08:ef:67:a7:66:03:81:
                    f5:e5:e1:75:5d:0a:e1:fb:d9:c8:48:30:13:86:63:
                    67:9e:56:78:61:13:ce:8f:eb:55:25:5a:ca:41:76:
                    9a:8c:4f:6d:b8:bb:3d:e6:0d:48:ad:24:60:66:59:
                    90:31:96:bd:bf:2e:12:2c:d4:ad:47:4f:0a:b2:5d:
                    a3:27:e2:42:cc:12:fd:b8:56:27:47:56:14:d4:8b:
                    0c:58:25:ed:9b:77:e8:53:01:da:28:8f:5b:98:a9:
                    45:76:71:08:39:f8:93:f1:06:29:c0:6b:33:48:4a:
                    d1:72:c8:77:54:d0:0e:50:de:b6:4c:06:06:a8:5e:
                    ef:ef:9b:f0:67:b5:ed:7f:b2:89:71:51:24:66:d9:
                    4c:58:0a:01:ae:ce:4f:e7:3c:ec:17:af:c2:b2:23:
                    d9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:52:CD:15:13:F4:6B:EB:6B:D4:34:DB:E4:7C:8F:23:5B:17:C9:17
            X509v3 Authority Key Identifier:
                keyid:5C:30:D9:50:46:33:1B:DC:E3:01:8B:7F:FE:0F:13:DB:F9:FC:71:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:c1:b9:62:d1:4f:a7:63:f6:b2:5f:9e:4b:20:b2:3a:00:b2:
         3f:fd:1b:52:cb:64:f7:ac:73:a3:8d:f2:92:3a:03:70:28:80:
         ee:db:cb:bb:e8:b1:78:08:66:6b:0a:db:a8:b7:cc:ef:8c:ef:
         60:68:6e:73:81:f4:10:b2:3e:43:45:cf:22:1b:80:97:8b:f6:
         a0:8c:56:84:83:08:af:84:d7:bb:81:3b:73:cf:8a:3a:65:e4:
         73:9f:5c:6b:b9:b7:8c:28:48:b8:fb:43:a3:d4:84:cb:7b:fa:
         54:22:3f:27:98:4e:74:62:13:49:af:a9:ad:f6:c7:cc:03:79:
         71:13:c0:a6:76:21:e8:a3:83:de:91:8f:88:91:bb:c9:df:c2:
         79:c5:7a:0f:6b:5d:d6:5f:bd:ba:48:0b:75:eb:8d:c2:7b:aa:
         dd:c3:d1:6b:24:5e:a4:96:ae:17:a0:aa:70:e4:cf:f5:21:2d:
         1b:77:b1:7c:ea:bf:37:28:39:c6:de:95:6a:87:b8:21:ff:61:
         47:7e:c5:3a:ac:53:3a:8b:d5:4b:f3:cb:a3:78:c7:24:83:ef:
         f5:45:99:d6:12:5f:7e:8d:c2:ee:a4:2a:d3:81:e3:c5:7b:88:
         c7:33:a4:84:9f:37:e4:1d:c7:10:95:c5:e7:40:95:e8:c5:9f:
         93:20:c1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:31:18 2026 by rpki-client