Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
File:                     0VK0wfXUhO78KxWX9FUAOrZUsFU.mft (raw, json)
Hash identifier:          +zJG0FAvsSrsiMJ4a5PqkHvDW2tNe2ezfSrDP2ezCyU=
Subject key identifier:   A7:E4:CC:1D:50:C5:E1:C9:EF:3A:B2:35:E1:B7:9A:E9:59:1F:47:81
Authority key identifier: D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55
Certificate issuer:       /CN=d152b4c1f5d484eefc2b1597f455003ab654b055
Certificate serial:       019EC14935032DBB1C67E18D0217B9196245
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 14:01:00 +0000
Manifest this update:     Sat 13 Jun 2026 14:01:00 +0000
Manifest next update:     Sun 14 Jun 2026 14:01:00 +0000
Files and hashes:         1: 0VK0wfXUhO78KxWX9FUAOrZUsFU.crl (hash: Xvs/B/Jv1ldJDiVsLqmwzOq8/TEndQy2bf735uBqM/M=)
                          2: NP9SfFGYsYXsch7Dr3qELq74PLU.roa (hash: fuLAQTL3YUInXQtx9TnphHOeZzSHEh2X+xButoDoLCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:49:35:03:2d:bb:1c:67:e1:8d:02:17:b9:19:62:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d152b4c1f5d484eefc2b1597f455003ab654b055
        Validity
            Not Before: Jun 13 14:01:00 2026 GMT
            Not After : Jun 14 14:01:00 2026 GMT
        Subject: CN=a7e4cc1d50c5e1c9ef3ab235e1b79ae9591f4781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:cf:59:c2:bd:92:d8:68:18:c4:c7:f1:32:69:
                    3f:f6:9c:4c:a8:30:12:fc:e3:92:ef:ee:04:d9:f4:
                    36:15:37:be:05:ac:33:d6:52:0f:d0:7a:ab:c8:5d:
                    f6:b2:41:57:19:1a:d7:0c:fc:6b:b9:c3:18:62:03:
                    cd:96:26:13:d1:fb:df:dd:86:5c:f3:46:72:f5:95:
                    e0:86:13:ef:1f:e7:a0:89:2e:96:7d:13:99:13:15:
                    23:dd:76:70:21:73:d9:57:ec:90:24:71:b5:bd:93:
                    01:49:c8:fb:aa:0f:66:c8:7e:87:36:ea:08:07:75:
                    ae:86:88:16:72:b8:8d:a9:97:8a:9a:ad:38:b2:17:
                    17:f3:cf:7a:c8:05:e8:35:e5:58:ae:36:3b:03:01:
                    9d:c9:e1:0d:68:db:eb:11:40:a4:f9:27:b1:fc:5a:
                    47:1a:64:2e:d2:fd:95:fd:fb:f5:33:3c:1a:a4:41:
                    71:57:26:02:f9:2e:1b:4c:f9:47:46:99:49:8d:1c:
                    91:4f:c6:11:3d:24:82:b3:60:31:d0:0e:39:1d:5c:
                    54:cb:32:a9:c0:e2:13:73:46:17:d9:ed:8c:92:de:
                    3d:08:49:a4:a4:3f:b6:a9:e9:bb:b7:67:28:57:3f:
                    6a:76:4f:b2:fb:84:7c:91:b0:b5:86:44:ff:b5:46:
                    ce:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E4:CC:1D:50:C5:E1:C9:EF:3A:B2:35:E1:B7:9A:E9:59:1F:47:81
            X509v3 Authority Key Identifier:
                keyid:D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:07:8b:de:d7:0f:92:48:54:1d:85:06:20:04:2f:61:1f:7f:
         4a:cc:ca:f0:bd:7d:e2:2f:e7:f6:17:52:d6:b8:a4:63:b2:b6:
         6a:b1:d2:ec:e8:1a:76:35:d6:da:22:16:f2:d1:aa:2d:17:c8:
         54:24:73:5a:fb:98:15:f8:c8:7d:e0:b6:2a:9d:0a:d0:6b:82:
         75:55:b4:c6:1e:54:ea:e9:f9:0d:0e:4c:e8:24:db:58:6e:a8:
         58:f3:3a:bd:f5:ae:0a:f4:26:66:6a:58:62:cc:f5:f0:8b:8c:
         aa:4c:b5:2e:7a:63:55:17:99:8f:35:af:7b:99:0d:97:7a:10:
         2d:50:07:eb:1f:21:31:1f:95:de:b9:b1:d5:a1:c1:50:7f:f2:
         f1:f1:bf:ff:69:b4:d9:5a:cd:47:59:b3:3f:86:27:20:33:14:
         23:19:9a:8d:21:9c:9b:d5:1d:6a:d9:28:dd:ee:a5:1f:3e:9d:
         ef:27:95:9d:7b:84:f0:cf:2c:9c:39:92:8e:d0:7a:ba:53:22:
         f1:ed:e5:8e:94:3f:95:e2:6c:05:c9:84:d2:fc:38:1f:c9:1a:
         fe:a2:0e:35:5f:f2:18:ea:e2:a0:f2:99:f9:1a:f4:fa:1c:bb:
         f0:03:21:15:68:18:bd:6b:60:f4:72:ac:26:4c:5a:5a:dd:64:
         75:1c:87:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:39:57 2026 by rpki-client