Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
File:                     7cOYioT5-7QYXqSsW3IYRcooA34.mft (raw, json)
Hash identifier:          TxdXBO414Tdms2ZbaXY1nKxLhUUbPdmYdACMZjaTFJg=
Subject key identifier:   3C:1E:F1:5C:E0:2F:FE:D8:94:FC:E2:5B:D4:41:9F:86:5A:CE:99:A5
Authority key identifier: ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E
Certificate issuer:       /CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e
Certificate serial:       019EBFFF5AB71E5B8DD8F6FEFCF91C402D34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 08:00:43 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:43 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:43 +0000
Files and hashes:         1: 7cOYioT5-7QYXqSsW3IYRcooA34.crl (hash: Xg/E3H1L6cftY8IndKtCpO44OX8AXeqtSAILe80wJrE=)
                          2: SEU-eUTm-6iORlN5RtiJHEwSdwc.roa (hash: rXL5N4BdgulO5NRgIVf5AGGcYxix/8Lxb7TWkibxEWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:ff:5a:b7:1e:5b:8d:d8:f6:fe:fc:f9:1c:40:2d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e
        Validity
            Not Before: Jun 13 08:00:43 2026 GMT
            Not After : Jun 14 08:00:43 2026 GMT
        Subject: CN=3c1ef15ce02ffed894fce25bd4419f865ace99a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:38:f0:af:51:3e:20:18:2c:3a:1f:61:fe:81:
                    12:2e:ec:a0:b7:76:d2:1c:db:b0:c0:c3:71:58:64:
                    77:8d:f3:42:b0:7a:ec:15:96:a6:c7:96:cb:63:20:
                    d4:8f:e1:74:30:a3:a7:8b:e0:1e:7f:1c:af:c5:57:
                    56:17:e3:d2:d0:2f:75:8a:d9:37:8d:9c:9f:d0:ff:
                    ad:78:98:bd:65:81:77:a7:ad:55:4e:c2:ea:47:15:
                    ce:02:62:ef:0b:75:20:50:4a:88:06:2e:e2:4e:ce:
                    06:f9:47:6b:01:3e:08:4c:00:2c:d6:ac:00:12:86:
                    c5:ee:0e:3a:66:cd:61:18:d0:ec:53:ee:a7:35:e1:
                    b1:71:d9:a6:48:cb:de:d1:e6:52:bb:e6:69:7e:5e:
                    fa:c1:58:9c:83:1f:17:ef:32:82:1f:75:ac:05:30:
                    0f:2a:60:80:2e:b3:1c:15:cd:a8:b9:b3:16:49:3a:
                    c1:7a:0c:77:b7:5b:5a:e3:37:2f:46:20:61:31:34:
                    41:73:26:15:06:ed:11:96:3d:59:be:8c:72:90:0c:
                    c4:28:7e:ff:f0:76:10:f4:d8:ba:e6:26:bc:3b:67:
                    19:46:4e:82:21:2f:8d:e0:9e:f7:35:79:ff:05:20:
                    c8:d9:ae:2f:77:df:a9:a0:6d:8b:75:fb:1d:b3:8b:
                    87:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:1E:F1:5C:E0:2F:FE:D8:94:FC:E2:5B:D4:41:9F:86:5A:CE:99:A5
            X509v3 Authority Key Identifier:
                keyid:ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:b6:39:2f:90:19:86:48:6f:8b:9d:8c:bd:0c:5f:e1:3f:67:
         5e:ca:b7:b6:4f:00:ac:28:e8:14:76:6d:3e:e2:fe:80:09:82:
         0c:b7:d6:2f:1b:61:f5:2e:5a:11:3d:7f:a1:8f:84:8c:c1:ba:
         e2:b0:e9:58:b9:a8:39:42:29:27:d2:93:40:e7:f8:10:11:95:
         56:cb:42:7f:b7:5d:2c:91:c1:09:de:f1:35:ed:53:81:96:ee:
         c4:5c:5e:f3:63:97:38:4b:f8:f7:83:8f:fd:0b:22:2b:51:6b:
         41:f4:1c:a7:3c:ef:f8:7a:e7:96:22:d6:32:0f:65:65:88:63:
         ed:e9:3c:4c:c3:c4:a3:10:bb:ef:09:8b:48:49:e8:cf:74:15:
         9b:e2:f6:25:3f:37:0f:e8:bd:ff:f7:29:73:82:98:33:15:55:
         6e:55:af:5f:e5:a7:e9:9d:75:ba:cf:99:5f:39:7e:39:6f:2b:
         b6:3f:45:6a:5e:1a:e2:58:cc:a9:da:6f:79:56:8e:95:ce:24:
         49:7f:54:67:a6:4e:21:95:63:fb:a6:f8:e7:6d:d4:13:6f:46:
         a1:de:bc:4c:57:4e:85:58:95:37:ef:2f:81:40:e1:1c:a8:7a:
         22:53:7a:65:21:40:f7:c8:44:01:a5:59:e5:ce:fc:2a:da:b1:
         93:2f:e4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:48:17 2026 by rpki-client