Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
File:                     rf_xvXcSh87UxN1tioUdKtdwZh0.mft (raw, json)
Hash identifier:          2bPkGjRPH6rVhKlGYWSMZicqyeOicTuY3rDgIP/UYUM=
Subject key identifier:   65:EE:02:66:D0:81:66:05:9D:A1:53:52:D0:5B:EC:30:5B:25:9C:7F
Authority key identifier: AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D
Certificate issuer:       /CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
Certificate serial:       019EC036573A9A9599CA46F0CE8A5B9238FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
Manifest number:          195D
Signing time:             Sat 13 Jun 2026 09:00:47 +0000
Manifest this update:     Sat 13 Jun 2026 09:00:47 +0000
Manifest next update:     Sun 14 Jun 2026 09:00:47 +0000
Files and hashes:         1: YHt9YKkoQObFkpk4bFMfaZH83j0.roa (hash: 4fsNZayDAjiJa4ZZH0ABpTRn6fHRN9+IikwCGEjvWBc=)
                          2: rf_xvXcSh87UxN1tioUdKtdwZh0.crl (hash: HQrMYE+z5oKSY772vGNTj4fNRPtcWJiNn2PemH10uRE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:36:57:3a:9a:95:99:ca:46:f0:ce:8a:5b:92:38:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
        Validity
            Not Before: Jun 13 09:00:47 2026 GMT
            Not After : Jun 14 09:00:47 2026 GMT
        Subject: CN=65ee0266d08166059da15352d05bec305b259c7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1a:cd:b4:31:c4:86:23:f1:f8:f4:2c:31:d7:
                    50:b6:92:20:ba:62:c5:e7:19:7b:7f:1a:cb:58:16:
                    89:32:89:e5:2b:1f:42:ba:02:ee:09:81:f3:9d:50:
                    33:1b:2f:b8:bd:12:5b:66:95:47:77:cb:35:33:b0:
                    dd:26:fa:c2:d7:db:7a:2b:3c:39:2f:eb:a9:83:eb:
                    10:d6:50:48:cf:57:eb:01:66:39:1a:9f:45:91:94:
                    0a:6a:a5:df:e0:bc:9e:2f:1a:b5:8a:5f:47:58:c7:
                    98:79:48:cb:08:31:b1:a2:ff:ab:13:9a:27:aa:a1:
                    a6:0e:3b:78:29:22:04:0b:38:07:09:dc:45:97:78:
                    2d:48:73:03:2c:95:6d:4c:a1:24:13:bc:4b:55:a5:
                    02:e5:47:ad:b8:68:ef:b8:45:b9:e7:58:5a:09:14:
                    93:16:13:4f:4a:d9:5b:6b:ed:34:5a:aa:0d:73:59:
                    58:1f:9e:d3:71:39:b6:dc:4f:47:2a:12:0b:c9:2a:
                    47:33:0c:35:09:c7:fe:44:0a:24:d5:f3:a1:34:97:
                    d8:07:3c:8f:54:37:99:4a:03:5f:10:07:41:ee:ac:
                    c5:bf:a9:39:68:e2:13:3a:38:92:81:9c:7a:38:c3:
                    36:a2:fd:61:67:dc:ab:19:26:c2:13:4e:41:c2:a5:
                    c8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:EE:02:66:D0:81:66:05:9D:A1:53:52:D0:5B:EC:30:5B:25:9C:7F
            X509v3 Authority Key Identifier:
                keyid:AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:c7:51:70:20:64:4a:80:dd:a0:6c:f9:c1:c6:ba:5f:b5:8d:
         e0:58:ff:d4:e0:19:20:9a:1f:1d:80:24:33:f9:f1:a8:f1:b4:
         94:77:bd:f4:25:3e:e5:52:10:75:a2:64:aa:19:6f:3f:9b:e8:
         3f:b2:1d:f1:86:5b:f1:96:f4:10:af:19:f6:d6:5d:f9:0c:4c:
         11:0a:d4:a3:73:ec:3c:8f:da:57:a3:23:44:e5:bf:3a:27:3f:
         8a:24:13:7c:4c:72:cc:c8:61:1b:2a:2c:25:c9:17:0a:c0:0c:
         32:aa:a1:05:97:02:cc:28:fb:50:b6:06:79:39:c7:52:dd:ce:
         80:39:4a:d4:af:99:7c:87:84:79:46:0b:93:2f:5d:fc:b6:1c:
         2f:40:a0:8f:b2:4f:3e:a1:0b:79:71:9f:0c:ea:bc:7a:91:b6:
         d3:bb:0a:f1:e8:7a:91:a8:08:38:29:a8:94:47:51:63:21:a0:
         07:aa:9b:8a:8b:c0:78:48:5c:f6:8f:93:dd:17:3c:f0:4a:b8:
         da:b9:49:ce:07:59:4e:4f:53:93:9c:a0:4f:66:21:2f:98:6c:
         f3:a7:27:3a:a5:cc:49:04:73:d3:c5:bd:c0:15:e3:ac:8b:cf:
         da:ee:8d:ee:80:b5:b6:49:ba:33:68:32:40:6d:15:5b:7f:64:
         c4:7a:dc:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:53:18 2026 by rpki-client