Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
File:                     DJ8RVKmhXVqDqamBenJL_FOdtZY.mft (raw, json)
Hash identifier:          jDLpkiNwvsgx94lFOEfmviO0fV1x8e3UNrkfZNOD1zM=
Subject key identifier:   44:03:9F:EC:9B:2A:E7:28:4C:C7:4B:A6:46:E8:1C:FF:3B:5A:81:FA
Authority key identifier: 0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96
Certificate issuer:       /CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596
Certificate serial:       019EC1EE3D3F59B6901595791C3BC829F8B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 17:01:16 +0000
Manifest this update:     Sat 13 Jun 2026 17:01:16 +0000
Manifest next update:     Sun 14 Jun 2026 17:01:16 +0000
Files and hashes:         1: 4qZtNptb8ER3904DdA6MFe8pZsU.roa (hash: Lxa0NTdMnJxLEjdaVFMPjQXrKW0qd4O0NLrjMIPI/ME=)
                          2: DJ8RVKmhXVqDqamBenJL_FOdtZY.crl (hash: LtH+lUyV4mgDqx0EsAp0crPilYXLuDB3Vvkmwa9THec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ee:3d:3f:59:b6:90:15:95:79:1c:3b:c8:29:f8:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596
        Validity
            Not Before: Jun 13 17:01:16 2026 GMT
            Not After : Jun 14 17:01:16 2026 GMT
        Subject: CN=44039fec9b2ae7284cc74ba646e81cff3b5a81fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c6:a7:c2:47:e4:6c:f7:c4:0b:92:77:95:81:
                    8e:92:82:21:44:0f:62:83:7e:3f:c6:be:2c:48:a5:
                    de:41:d0:41:94:9d:ee:87:2a:96:63:5f:23:be:d7:
                    6f:3c:ab:f6:cf:dc:61:c3:a3:aa:43:14:a3:30:6c:
                    4d:01:1f:37:21:cb:43:2d:dd:3b:a7:8d:fb:12:64:
                    03:64:a3:94:36:3e:8b:ed:6e:e3:95:ef:83:95:dd:
                    49:da:3d:c5:db:d0:f5:35:62:1c:1c:10:39:11:d0:
                    14:85:27:c0:ac:b9:e4:a7:bc:7e:20:db:28:41:3c:
                    92:76:84:e4:d3:26:65:09:1e:11:e1:39:78:54:43:
                    d7:04:15:5f:23:8a:e7:cb:9f:d3:41:f1:35:4a:46:
                    7f:83:0c:33:af:b9:07:15:64:e2:66:a0:87:67:6b:
                    77:7d:c7:d4:9b:ab:ca:f6:e2:64:51:c0:ed:d5:d7:
                    be:5e:12:03:71:60:16:8b:ea:3a:6b:f4:7f:c0:70:
                    99:c9:69:ce:e7:04:c8:1d:f1:d9:91:a6:02:36:a1:
                    ae:d9:c2:df:e8:23:e4:47:2f:1c:40:ea:e8:38:59:
                    1d:18:c7:d7:ef:e8:65:84:3a:2f:22:70:9f:bb:f2:
                    a6:2e:ca:46:a8:50:09:76:a0:a2:9c:28:ff:97:34:
                    ce:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:03:9F:EC:9B:2A:E7:28:4C:C7:4B:A6:46:E8:1C:FF:3B:5A:81:FA
            X509v3 Authority Key Identifier:
                keyid:0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:dd:48:ee:48:67:95:26:1b:23:b5:6c:b1:d8:df:93:13:7e:
         f5:f0:3a:88:15:3e:5c:46:18:f2:79:05:75:93:36:38:42:1c:
         aa:ad:5f:a5:c9:c0:5f:71:5c:88:fd:cd:5e:66:c1:e6:e6:ff:
         46:d8:3d:b0:32:dc:0f:3d:6f:5e:06:9c:21:2a:34:c7:7a:8c:
         59:90:22:f7:49:4f:be:46:e0:07:3c:0d:68:b3:3f:1f:61:95:
         84:75:30:4b:ef:b1:e8:80:00:df:bf:52:c4:72:16:00:97:ca:
         98:bf:b5:85:40:f7:05:7d:cf:e9:52:00:2c:43:d8:f5:69:d3:
         60:15:9e:e9:64:35:92:91:fb:7e:37:13:50:75:90:6d:8f:87:
         1e:b2:4b:ba:aa:4a:5b:af:49:38:a0:65:0b:42:1e:35:4a:7d:
         f9:c9:d4:40:36:cb:5e:5d:3f:38:81:d7:f1:2d:86:12:5d:2a:
         ed:61:e4:aa:42:4a:65:95:1a:10:41:5d:46:3a:70:d4:70:f7:
         49:91:bf:c2:0d:d9:4c:f4:65:a4:d9:ed:92:09:ea:97:19:e0:
         b2:66:bb:4d:c5:bc:03:3a:38:3a:35:65:d5:a6:ef:0f:68:2e:
         b4:c9:1b:a5:d9:a0:ba:4c:26:79:58:37:5e:a2:57:0d:a3:e0:
         1b:07:e0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:40:35 2026 by rpki-client