Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
File:                     10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft (raw, json)
Hash identifier:          ffcOSB0o5lh1CKY77XullN351xB0aeOoimxai+ShjXg=
Subject key identifier:   9B:32:55:D9:18:E4:ED:E3:3F:09:72:93:21:98:25:28:A9:C3:49:FC
Authority key identifier: D7:49:8C:D3:27:EA:33:BF:F8:62:9D:7F:49:D6:BE:3A:DC:5F:F3:2C
Certificate issuer:       /CN=d7498cd327ea33bff8629d7f49d6be3adc5ff32c
Certificate serial:       019EBE4833C18AE9802EC7DE9AC484F92885
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 00:01:03 +0000
Manifest this update:     Sat 13 Jun 2026 00:01:03 +0000
Manifest next update:     Sun 14 Jun 2026 00:01:03 +0000
Files and hashes:         1: 10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl (hash: tgk40xE2POkjpGoyh7tKzSZY/PMmbhPIjHldyzX5J9Q=)
                          2: c4zkb26v95y_D2sc6nv7fdxn9Lc.roa (hash: bMZY04nBemF6cIkhBuUz9nxHZyNkGpj8Eh/OlRIxJ2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:48:33:c1:8a:e9:80:2e:c7:de:9a:c4:84:f9:28:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7498cd327ea33bff8629d7f49d6be3adc5ff32c
        Validity
            Not Before: Jun 13 00:01:03 2026 GMT
            Not After : Jun 14 00:01:03 2026 GMT
        Subject: CN=9b3255d918e4ede33f09729321982528a9c349fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:20:5e:a5:37:f9:5c:53:50:f5:7c:0b:fd:3b:
                    40:d5:f1:52:00:d0:5d:cf:8c:b7:33:af:00:70:5b:
                    7e:0a:34:dd:c2:ed:c8:52:8e:a3:f7:04:80:0d:ff:
                    c9:60:40:29:6f:17:80:96:46:fe:d5:02:2f:d7:c8:
                    d3:7e:0b:c0:e6:6c:20:08:e1:89:f3:92:71:16:99:
                    43:11:34:e7:db:27:1b:c6:c3:cc:69:f1:84:04:85:
                    47:5f:8b:63:9b:b1:53:30:99:13:f5:ef:73:ab:ea:
                    18:e8:b5:60:f1:c2:df:e0:09:1e:b5:84:f7:c5:fe:
                    0a:0a:b5:a9:8b:e1:28:b5:1f:f5:9a:d6:27:18:50:
                    58:78:29:76:44:35:92:43:28:b9:67:e5:e7:22:17:
                    40:35:fb:ac:5c:4e:0c:65:18:4d:53:76:50:67:80:
                    07:4b:82:f7:7f:d5:f7:37:37:da:49:50:e3:01:6d:
                    23:0d:c4:a4:ea:00:a6:6b:36:fc:d4:0e:50:19:fc:
                    7c:d8:cb:1e:3b:c2:7f:cb:03:10:ac:28:87:1c:f1:
                    1f:53:5a:67:5b:61:83:57:92:d6:ca:4f:67:f1:25:
                    72:3a:e0:08:ff:52:ae:c1:b3:58:d1:6b:b7:15:71:
                    68:4e:ae:53:cf:6a:a6:f7:c4:e9:c7:cf:0f:92:bf:
                    5a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:32:55:D9:18:E4:ED:E3:3F:09:72:93:21:98:25:28:A9:C3:49:FC
            X509v3 Authority Key Identifier:
                keyid:D7:49:8C:D3:27:EA:33:BF:F8:62:9D:7F:49:D6:BE:3A:DC:5F:F3:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:65:69:67:0d:74:ee:9d:6e:a7:92:bb:47:1c:cb:cd:69:94:
         a7:bc:8d:22:47:1d:5a:44:c5:c7:71:60:b9:c2:1a:ec:bb:97:
         fa:32:e9:26:44:7d:d2:ee:03:e8:17:c1:68:ff:b9:f6:33:a8:
         7f:8e:f4:3c:37:60:bd:81:13:18:b1:3f:95:b2:a3:e1:66:d8:
         30:78:4f:44:ea:78:ad:b6:bc:6f:00:ae:04:d1:71:bd:40:ea:
         d4:60:43:16:bc:93:d0:26:99:9c:37:7c:c4:4b:63:33:f3:49:
         8e:75:37:a5:1a:30:dc:0b:d6:18:a1:cd:bd:96:ec:8e:4a:3f:
         a6:5a:77:e8:20:ee:b2:4f:79:f0:33:f3:ec:5c:41:65:ac:d5:
         eb:5d:64:2f:f0:72:0a:f6:40:1e:e6:3c:7f:fb:0a:14:52:13:
         d0:4e:aa:10:93:20:2a:51:eb:cd:79:79:69:4a:a7:09:ca:8f:
         ee:57:ee:ee:7b:b0:5a:22:b3:fe:1d:2b:6b:f1:5f:28:52:56:
         8a:d9:23:30:38:ac:6f:59:fa:6a:66:eb:16:63:b9:d8:0f:ee:
         54:3b:ad:5a:78:5e:03:5b:af:1c:76:1f:49:9d:91:b1:b0:bb:
         e4:b7:5a:47:c2:39:d0:29:90:98:22:6e:d6:c8:52:e6:be:3d:
         52:10:95:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:04:20 2026 by rpki-client