Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
File:                     M69dxinNSTdZfz_NhYylyA7ZfFA.mft (raw, json)
Hash identifier:          FsjpBRw6lKsEUEvvXYEg7lC2YDQGL1enpA4+xz8DGvA=
Subject key identifier:   30:46:24:E5:61:C7:4E:D0:ED:DD:3E:1E:08:C9:E0:04:1F:12:97:CC
Authority key identifier: 33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50
Certificate issuer:       /CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50
Certificate serial:       019EC0DB82B91C3B5740D97CAFCE14AA39CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
Manifest number:          195D
Signing time:             Sat 13 Jun 2026 12:01:11 +0000
Manifest this update:     Sat 13 Jun 2026 12:01:11 +0000
Manifest next update:     Sun 14 Jun 2026 12:01:11 +0000
Files and hashes:         1: M69dxinNSTdZfz_NhYylyA7ZfFA.crl (hash: +FX7DSnGvwLn35sUMieqFUY9XljMZySFP0mfuWN7zew=)
                          2: O_VDSTEuqOGqu70pCxRmCW-6TUA.roa (hash: 9GMoYD3Uj1noF4pEvupjpvPMeufwxuuOufErPrD7SRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 12:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:82:b9:1c:3b:57:40:d9:7c:af:ce:14:aa:39:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50
        Validity
            Not Before: Jun 13 12:01:11 2026 GMT
            Not After : Jun 14 12:01:11 2026 GMT
        Subject: CN=304624e561c74ed0eddd3e1e08c9e0041f1297cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:06:be:bb:8a:7b:9e:13:31:21:cf:e2:8c:fd:
                    5f:61:bc:59:90:23:21:94:1d:15:6c:7d:25:88:14:
                    ff:a0:79:f6:8c:8f:b8:65:2b:40:81:d5:c9:b5:01:
                    26:ea:91:75:51:7c:3d:5f:6c:ee:ed:29:62:04:80:
                    74:a4:8e:34:e7:ab:6f:38:c1:c1:76:21:34:75:c4:
                    bf:fe:96:58:75:aa:b7:3d:5a:95:7b:e5:4a:97:05:
                    2d:44:28:12:79:58:73:be:5f:df:cc:b5:70:6b:35:
                    fc:cd:99:a3:3f:2e:c7:3d:cb:d1:c5:f1:9d:01:a7:
                    d8:23:7b:3e:6f:b7:a6:77:f1:db:d1:cb:0b:00:ba:
                    3c:72:98:c5:61:cb:bb:17:c8:ca:d6:fd:cc:70:25:
                    94:bf:16:f0:10:a5:aa:22:57:b8:aa:52:a0:a2:e3:
                    f0:ce:5b:ea:d6:ca:29:32:b1:a3:26:8e:52:b7:a5:
                    86:33:6e:9d:80:53:3b:3b:28:f4:34:56:40:5e:e9:
                    26:7d:5a:79:65:36:b1:89:ba:48:35:94:a8:9e:0d:
                    99:28:a9:5b:63:0b:15:f1:1a:59:b2:7a:5f:15:21:
                    03:36:28:c0:d1:89:18:0b:77:9d:c6:30:32:08:ae:
                    17:94:4f:f0:9e:6a:8e:7e:35:03:36:75:f1:cc:b6:
                    72:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:46:24:E5:61:C7:4E:D0:ED:DD:3E:1E:08:C9:E0:04:1F:12:97:CC
            X509v3 Authority Key Identifier:
                keyid:33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:f1:b5:b3:47:59:84:eb:16:47:8a:e8:06:3c:08:68:bc:f3:
         d7:da:85:1c:fe:ce:14:9d:c5:ba:58:58:8a:df:a7:c0:2e:be:
         72:34:e4:79:24:a7:9e:9a:1a:55:fe:5a:05:6d:20:5c:49:cf:
         49:28:4b:54:ea:04:6a:b4:4a:6a:c3:a1:02:ce:c8:b8:88:1a:
         05:96:07:36:47:46:8f:6b:5a:13:3b:63:e5:a1:e4:41:66:57:
         0b:b0:ea:bf:56:88:d0:16:b5:86:58:8c:97:f6:93:94:64:af:
         fe:8f:c9:cb:17:53:d4:d2:2c:62:b5:12:ef:47:e6:b7:19:67:
         ae:e9:49:3c:a1:d2:7e:41:2f:ed:c0:52:09:7b:e5:53:0b:33:
         52:a0:08:72:a9:16:9b:e0:f5:8c:e0:d6:d7:35:ea:f1:8d:8b:
         0e:b7:c0:a0:80:3c:35:eb:02:c8:61:fa:c1:7f:48:7e:59:17:
         2c:e7:92:00:aa:2d:0d:59:d5:2f:75:47:e8:21:c3:b1:9d:03:
         14:63:cd:af:f2:ad:7c:96:36:66:26:5e:e9:a6:60:5e:64:76:
         ef:6c:10:83:84:9c:ee:06:0f:5c:c7:10:8d:1f:98:e9:5e:86:
         9c:43:46:c3:c2:51:8d:ef:e0:5b:7b:31:0d:73:90:14:7b:c8:
         33:a5:b6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:56:27 2026 by rpki-client