Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
File:                     KJVkfZ_RahaU-AJuvod2DLUx6w4.mft (raw, json)
Hash identifier:          n8yrLzDKF6UZ3By9QUeaXutbpsbTEXMjI1M1XnYl5DU=
Subject key identifier:   80:61:1D:7B:83:6F:4D:26:54:CB:3C:D7:A8:EC:86:10:6D:70:ED:69
Authority key identifier: 28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E
Certificate issuer:       /CN=2895647d9fd16a1694f8026ebe87760cb531eb0e
Certificate serial:       019EC337DC27A5F5690FB648A0A0D7AB6DD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 23:01:18 +0000
Manifest this update:     Sat 13 Jun 2026 23:01:18 +0000
Manifest next update:     Sun 14 Jun 2026 23:01:18 +0000
Files and hashes:         1: KJVkfZ_RahaU-AJuvod2DLUx6w4.crl (hash: +b7BFnqvZgWRqDU0ARj7OYt06PVWyhkozercnrVVic4=)
                          2: SO-Fb5_RWNG-vJxWilHy0Ub7D3c.roa (hash: VzvW0l4p4/QU6FVquXlxf/LHE0LvlRpqoxeKSXp+Yqo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:37:dc:27:a5:f5:69:0f:b6:48:a0:a0:d7:ab:6d:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2895647d9fd16a1694f8026ebe87760cb531eb0e
        Validity
            Not Before: Jun 13 23:01:18 2026 GMT
            Not After : Jun 14 23:01:18 2026 GMT
        Subject: CN=80611d7b836f4d2654cb3cd7a8ec86106d70ed69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:74:89:15:73:f0:c2:a4:b4:15:8b:a6:7d:c2:
                    59:9a:7c:91:12:3a:10:bc:08:aa:88:3c:af:15:25:
                    33:4a:d5:0d:a5:ac:78:66:1a:68:14:63:27:af:9e:
                    c5:b7:5b:f5:bd:a2:d9:cf:fa:5b:3f:3e:ba:54:9d:
                    53:80:2f:60:59:2d:5d:1b:0e:d9:70:90:0d:73:26:
                    f4:ce:b8:a1:64:60:b8:95:b6:8e:9a:37:f4:6c:be:
                    5d:44:98:fc:fa:e0:30:be:dd:dd:79:cc:e0:1f:20:
                    e9:61:27:0a:b2:f8:fd:fd:bd:c7:b8:22:96:c4:8a:
                    a7:99:e2:13:88:95:d6:9d:4b:99:5e:c6:0f:19:7c:
                    32:40:25:55:0d:79:9f:d7:98:54:1f:7d:ec:54:f8:
                    dd:c5:80:e2:bf:63:f0:c4:ec:54:7d:79:2b:c2:8b:
                    f6:d6:2e:61:1e:eb:ee:d9:4f:0a:d1:fe:90:e1:51:
                    7c:d7:1d:0c:81:fe:31:4b:d2:9c:6e:9d:4d:73:1e:
                    8a:78:f7:37:52:45:bd:bb:e8:75:12:82:64:5a:93:
                    14:9d:1e:23:a6:06:86:e8:82:b8:f0:d3:0a:57:3d:
                    17:93:ed:93:c8:df:4f:56:13:cd:44:91:6b:d7:d1:
                    28:99:fc:37:c7:e2:33:59:21:3c:7b:d2:cf:f8:c5:
                    76:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:61:1D:7B:83:6F:4D:26:54:CB:3C:D7:A8:EC:86:10:6D:70:ED:69
            X509v3 Authority Key Identifier:
                keyid:28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:73:d8:cd:ee:23:e1:6f:8c:c6:a5:e9:0c:0c:b7:cb:14:16:
         2c:87:4d:05:54:37:02:1b:ed:9c:eb:0c:37:97:51:91:6f:a3:
         c5:0b:f6:31:23:32:c0:b9:16:bd:1b:0c:f9:a4:1b:74:77:9d:
         b2:f0:bd:4a:a8:77:b6:35:0a:09:63:fb:43:e6:ea:95:71:84:
         7e:3e:1a:b0:66:10:ac:dd:9d:63:c2:d8:26:5f:45:ac:6b:41:
         82:bc:3b:15:7d:13:77:45:d4:63:5e:c2:8a:ed:c9:9c:db:3c:
         63:a4:ee:3e:1f:e8:ad:ad:31:34:d7:97:b3:e4:1a:e1:3b:a9:
         82:7f:07:81:e8:89:45:61:d1:44:9c:d3:2a:e0:e8:0f:bf:ab:
         4a:19:ba:e4:68:ff:90:74:1f:8d:db:f6:98:de:1c:52:43:b8:
         b3:64:f5:3e:bf:7b:84:a9:84:69:16:51:92:07:48:01:7b:6f:
         30:d3:5a:00:89:55:f9:4c:8b:26:b0:a4:e1:fe:18:eb:33:51:
         f7:b3:e1:1c:29:85:d2:3d:2a:a9:2e:e8:78:40:55:c4:f2:85:
         d7:1d:19:e7:f3:a3:1c:de:59:02:1a:e0:8b:aa:65:d9:c4:a2:
         81:89:a7:75:52:85:91:1c:f5:4f:54:1f:10:92:99:54:a9:f0:
         b0:51:13:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:15:44 2026 by rpki-client