Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/ca1cf4-acac-4555-bc40-e4322c9dde9c/1/55b_u99E78Ho4QIA1J2o7tCjtx4.mft
File:                     55b_u99E78Ho4QIA1J2o7tCjtx4.mft (raw, json)
Hash identifier:          a/tFszQ+mtKXOnLt3nJoDUO2k+qgirt868CmkGDpvFw=
Subject key identifier:   87:8E:62:CD:81:4C:D8:95:90:CD:FD:47:6E:5B:AB:F5:C2:C8:78:08
Authority key identifier: E7:96:FF:BB:DF:44:EF:C1:E8:E1:02:00:D4:9D:A8:EE:D0:A3:B7:1E
Certificate issuer:       /CN=e796ffbbdf44efc1e8e10200d49da8eed0a3b71e
Certificate serial:       019EBEB5DC6B689F7F691494C57F26982D1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/55b_u99E78Ho4QIA1J2o7tCjtx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/ca1cf4-acac-4555-bc40-e4322c9dde9c/1/55b_u99E78Ho4QIA1J2o7tCjtx4.mft
Manifest number:          195D
Signing time:             Sat 13 Jun 2026 02:00:49 +0000
Manifest this update:     Sat 13 Jun 2026 02:00:49 +0000
Manifest next update:     Sun 14 Jun 2026 02:00:49 +0000
Files and hashes:         1: 55b_u99E78Ho4QIA1J2o7tCjtx4.crl (hash: axL+rOC/6kEyEhzr3myJVZsGARQliRxKk6irmlpkelA=)
                          2: 6_7eZf24isCNW4I6xx_t7mR7qHQ.roa (hash: K+RrpBJZJgRykfH3os4A5wEvK1ISeCA14xU5M4pO5jk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/ca1cf4-acac-4555-bc40-e4322c9dde9c/1/55b_u99E78Ho4QIA1J2o7tCjtx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/ca1cf4-acac-4555-bc40-e4322c9dde9c/1/55b_u99E78Ho4QIA1J2o7tCjtx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/55b_u99E78Ho4QIA1J2o7tCjtx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b5:dc:6b:68:9f:7f:69:14:94:c5:7f:26:98:2d:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e796ffbbdf44efc1e8e10200d49da8eed0a3b71e
        Validity
            Not Before: Jun 13 02:00:49 2026 GMT
            Not After : Jun 14 02:00:49 2026 GMT
        Subject: CN=878e62cd814cd89590cdfd476e5babf5c2c87808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c9:c8:0b:17:9f:b5:e2:cd:c9:00:7a:17:4c:
                    c2:55:90:22:f8:58:d0:27:4a:b9:82:d7:cd:b7:8f:
                    27:36:46:18:1e:4f:ac:b8:d5:32:5d:99:02:18:1b:
                    f7:25:5b:ac:b7:86:77:87:26:ce:56:03:a3:ff:3c:
                    22:d1:17:b7:65:bf:6d:32:1e:cb:67:5a:d3:02:1f:
                    3d:a4:76:79:fc:5f:c2:f5:04:aa:9f:76:05:a0:e6:
                    75:9f:4f:0b:08:1f:a6:fb:e3:a0:33:59:d3:bb:f1:
                    05:aa:99:be:b6:dc:7b:4a:f3:32:b3:17:3f:53:b2:
                    c8:80:6d:8d:42:d4:4a:94:89:1e:03:95:86:4e:bc:
                    b1:10:dc:89:fa:73:67:20:e6:63:9b:32:f8:6b:cf:
                    98:b6:e5:76:1d:57:38:c2:82:1f:81:2b:9a:a6:bb:
                    cc:8c:4c:a1:69:1a:e3:fe:ce:07:b6:c8:ef:44:95:
                    b6:15:d7:64:98:6b:21:2b:ad:14:f0:07:fb:25:a9:
                    f7:b9:40:e9:28:6f:af:af:67:31:83:b5:cb:84:65:
                    ab:d9:ca:39:6e:fa:f0:af:6b:ef:61:86:e0:69:23:
                    88:96:21:11:01:c1:b0:68:b7:e5:3f:b2:96:ec:bc:
                    fb:41:b9:32:f2:61:23:85:2d:92:8c:b3:38:14:08:
                    27:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8E:62:CD:81:4C:D8:95:90:CD:FD:47:6E:5B:AB:F5:C2:C8:78:08
            X509v3 Authority Key Identifier:
                keyid:E7:96:FF:BB:DF:44:EF:C1:E8:E1:02:00:D4:9D:A8:EE:D0:A3:B7:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55b_u99E78Ho4QIA1J2o7tCjtx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca1cf4-acac-4555-bc40-e4322c9dde9c/1/55b_u99E78Ho4QIA1J2o7tCjtx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca1cf4-acac-4555-bc40-e4322c9dde9c/1/55b_u99E78Ho4QIA1J2o7tCjtx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:ef:09:e2:b9:a8:c5:f6:70:e5:91:ca:a3:89:24:25:47:a4:
         fa:9b:47:f3:d7:ac:c6:4f:83:4a:ae:b0:2b:b1:d8:99:4b:63:
         37:61:06:2d:d0:e0:43:dc:f5:ea:c7:ac:ea:04:f3:27:2f:50:
         70:08:df:2c:9e:1b:62:8c:9a:62:d6:0f:23:19:0d:dc:aa:70:
         83:eb:75:17:e2:71:20:ef:36:5c:df:3f:d5:59:f4:b7:15:44:
         06:dd:72:42:3e:f7:94:65:ca:bd:e0:d4:4f:65:f6:a5:7d:b4:
         e2:ad:38:04:26:0c:2b:b3:23:7c:5b:ea:61:29:d3:f9:4f:b9:
         69:94:a6:89:14:9b:5a:a3:9a:2e:b4:35:a6:9d:7e:3f:f6:90:
         a5:64:c5:cc:48:ec:26:c0:c5:ba:27:6d:b7:24:57:e7:57:4d:
         2f:d8:dc:d9:86:ed:36:35:00:bf:2f:b8:76:ff:b6:9d:07:c2:
         4c:ad:9e:8a:63:66:fa:e9:88:88:30:8a:6b:84:de:d0:69:6b:
         55:12:81:f1:41:bc:bf:fd:0c:66:f9:3f:5f:38:2b:3d:e8:65:
         dd:dc:b0:24:92:5b:a5:c6:97:ed:49:66:13:8e:75:d1:d4:eb:
         8f:97:07:55:e7:13:27:5d:0a:eb:5b:64:48:d3:d5:f0:82:42:
         e1:ca:20:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+tdxraJ9/aRSUxX8mmC0cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3OTZmZmJiZGY0NGVmYzFlOGUxMDIwMGQ0OWRhOGVlZDBh
M2I3MWUwHhcNMjYwNjEzMDIwMDQ5WhcNMjYwNjE0MDIwMDQ5WjAzMTEwLwYDVQQD
Eyg4NzhlNjJjZDgxNGNkODk1OTBjZGZkNDc2ZTViYWJmNWMyYzg3ODA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusnICxefteLNyQB6F0zCVZAi+FjQ
J0q5gtfNt48nNkYYHk+suNUyXZkCGBv3JVust4Z3hybOVgOj/zwi0Re3Zb9tMh7L
Z1rTAh89pHZ5/F/C9QSqn3YFoOZ1n08LCB+m++OgM1nTu/EFqpm+ttx7SvMysxc/
U7LIgG2NQtRKlIkeA5WGTryxENyJ+nNnIOZjmzL4a8+YtuV2HVc4woIfgSuaprvM
jEyhaRrj/s4HtsjvRJW2FddkmGshK60U8Af7Jan3uUDpKG+vr2cxg7XLhGWr2co5
bvrwr2vvYYbgaSOIliERAcGwaLflP7KW7Lz7Qbky8mEjhS2SjLM4FAgnYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIeOYs2BTNiVkM39R25bq/XCyHgIMB8GA1UdIwQY
MBaAFOeW/7vfRO/B6OECANSdqO7Qo7ceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTViX3U5OUU3OEhvNFFJQTFKMm83dENqdHg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9jYTFjZjQtYWNhYy00NTU1LWJjNDAt
ZTQzMjJjOWRkZTljLzEvNTViX3U5OUU3OEhvNFFJQTFKMm83dENqdHg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9jYTFjZjQtYWNhYy00NTU1LWJjNDAtZTQzMjJjOWRkZTlj
LzEvNTViX3U5OUU3OEhvNFFJQTFKMm83dENqdHg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHO8J4rmo
xfZw5ZHKo4kkJUek+ptH89esxk+DSq6wK7HYmUtjN2EGLdDgQ9z16ses6gTzJy9Q
cAjfLJ4bYoyaYtYPIxkN3Kpwg+t1F+JxIO82XN8/1Vn0txVEBt1yQj73lGXKveDU
T2X2pX204q04BCYMK7MjfFvqYSnT+U+5aZSmiRSbWqOaLrQ1pp1+P/aQpWTFzEjs
JsDFuidttyRX51dNL9jc2YbtNjUAvy+4dv+2nQfCTK2eimNm+umIiDCKa4Te0Glr
VRKB8UG8v/0MZvk/XzgrPehl3dywJJJbpcaX7UlmE4510dTrj5cHVecTJ10K61tk
SNPV8IJC4cog4g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:13:46 2026 by rpki-client