Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft
File:                     MH2IfALgfJ5HTR-OIQScqmzj-9M.mft (raw, json)
Hash identifier:          /nUp8eS+3X5k4gs5A5t87xFN6OTKmuI6XLi7PWUmYkc=
Subject key identifier:   EC:A4:97:E1:90:1F:A1:CA:6B:67:D8:73:4A:FC:1E:F9:BA:E1:E7:2E
Authority key identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3
Certificate issuer:       /CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3
Certificate serial:       019EC224D3ED5DBAEFE68E9F2A769A846517
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft
Manifest number:          195F
Signing time:             Sat 13 Jun 2026 18:00:53 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:53 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:53 +0000
Files and hashes:         1: 0zd4nb5fhm2xTq0WOAi4Xp6bvJc.roa (hash: uMgyt3DoicP5DNjGaZ/5LrHhGzYKFxFylJxozZr11JQ=)
                          2: 15U-P8KVPY8JhMDqgw8L5oM6fO4.roa (hash: A8TF8Z+NTCSo1JvC6AkpIA17zqlpHZI++mBawEefOjM=)
                          3: DN1S1WAl_2K3M6Ai-2AoagxMibw.roa (hash: CSPU47hBScO03u7drTuu7JPSF8DLvvXRvBS1TUE4BwI=)
                          4: MH2IfALgfJ5HTR-OIQScqmzj-9M.crl (hash: Wm1c30i9ch0VeOenv7CFyj/DFS/I4LuEiz2TxMMAS1s=)
                          5: NA8tG2G3hFFALFYl7Venv99NrVc.roa (hash: bJB0cpk0QWUKw0RjswA5Ubr/IfiAoQmBJm3f3NwKfgQ=)
                          6: NC0UAgfuyICWUK07pGjses6Gmp4.roa (hash: srG5DwbOiKT6ED23Q54cQarx7hW7qMuLeBg5bvdOCes=)
                          7: OAN3WdNCBOx9GAH-afVSq5R89fo.roa (hash: /EI4b5flaVJsTGBAEIzkodT4ndbdEXX0V5sGa/1LzJE=)
                          8: OQ88iyxgykv-UuMoZwpp0BBgiSI.roa (hash: 8tW2X/On0vJs7AepnWjVBDXaTpJx0zYz1Hi+i0/YSxY=)
                          9: abnIXAgJEhW9VldO5YpGFgSVzcA.roa (hash: XCRB0tR9DLtvsf6qW2UBqKQDVi6//m3IqU34W2mRyLA=)
                          10: kyDGRd8zbEMUETtukg77Ui7V8qY.roa (hash: devk2rJm/x4h0LaLa8i6gGbkJIFyEo6sNK4CrBpAYrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:d3:ed:5d:ba:ef:e6:8e:9f:2a:76:9a:84:65:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3
        Validity
            Not Before: Jun 13 18:00:53 2026 GMT
            Not After : Jun 14 18:00:53 2026 GMT
        Subject: CN=eca497e1901fa1ca6b67d8734afc1ef9bae1e72e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:38:d9:92:be:6d:90:98:c1:dd:71:b8:fa:e9:
                    fe:88:7c:76:db:f6:60:2c:77:f5:ee:e9:6f:56:61:
                    b7:81:73:5f:b6:57:8f:d3:74:72:b8:54:59:01:2b:
                    13:52:66:54:6e:14:29:f9:e8:c1:29:d0:aa:83:2f:
                    a5:88:58:c4:b3:ec:b4:c8:6a:10:48:49:4c:62:d8:
                    55:c7:d4:4a:b3:12:19:62:6b:fe:c4:a4:83:ef:9a:
                    40:40:00:10:27:36:8e:f1:29:a5:25:62:de:65:e9:
                    41:cd:f4:fb:3a:4f:08:17:86:e7:f2:49:c4:13:02:
                    96:2a:9f:4e:fb:c8:db:94:e9:e7:42:cf:b1:89:fa:
                    26:dc:78:57:d6:e8:2c:cf:5a:39:a5:21:f0:b6:94:
                    a8:16:12:25:6c:ec:c2:14:7d:98:f0:b4:28:23:73:
                    35:d5:70:a2:55:78:99:4d:bc:cd:4e:59:44:79:fe:
                    26:11:a4:81:23:d7:bf:09:5a:39:ea:a2:80:d7:43:
                    4b:cb:fc:c0:39:51:20:79:e2:19:29:71:25:9b:e0:
                    eb:a4:c4:2d:7b:6c:41:bf:d3:73:c3:a5:67:59:10:
                    44:de:21:eb:9c:1e:bf:f7:4b:d7:3f:eb:76:a8:97:
                    23:e7:0f:9f:5d:0c:41:d8:32:3f:0d:d3:fe:78:de:
                    fc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A4:97:E1:90:1F:A1:CA:6B:67:D8:73:4A:FC:1E:F9:BA:E1:E7:2E
            X509v3 Authority Key Identifier:
                keyid:30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:45:51:da:c4:c4:4a:6e:09:bd:0d:ff:a8:b6:58:5a:ce:f7:
         85:c7:58:61:0a:67:54:b7:73:36:43:cf:c6:73:a7:d8:08:12:
         41:5f:60:1a:ff:58:93:10:68:98:f2:c1:29:39:e5:dd:f4:d3:
         fe:6e:c7:59:83:b6:17:d8:ce:d1:52:cb:00:13:09:dc:bb:77:
         06:71:d1:53:e2:7f:fb:25:bc:ee:8d:e9:01:bc:dd:bf:da:bb:
         d3:b5:d8:d9:17:fe:36:4e:33:7a:ed:ae:dd:d7:e5:0e:73:89:
         5d:4d:2a:07:a1:85:dd:5c:71:ee:02:ad:c5:2c:b7:5d:5a:9d:
         bc:1a:5e:23:f9:f7:db:2d:9d:4e:dd:e0:ef:4d:9c:aa:37:dd:
         1a:ec:48:27:cd:14:bd:04:3f:d1:b6:c9:12:d1:15:c7:84:2b:
         bb:fc:14:5f:fb:4a:e0:c8:15:3a:d7:3f:23:a0:7e:48:73:b5:
         69:98:5e:a3:04:c8:fa:f7:4a:47:e9:30:d8:b7:a8:23:c9:ae:
         02:85:5a:e2:12:39:16:9c:00:94:4a:33:b2:37:e0:12:b1:c8:
         8e:27:e8:d2:9e:51:a3:9d:5e:74:5e:a7:01:31:8c:df:d5:34:
         97:c0:c8:12:20:53:b5:3f:08:22:7f:c4:26:a2:44:4e:e2:9f:
         1e:c3:09:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:58:55 2026 by rpki-client