Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
File:                     StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft (raw, json)
Hash identifier:          R964Z+e+FuWZM6s/lvL8ViDbMyeW8Z5I673Bn2l7c9E=
Subject key identifier:   70:45:F3:68:9D:22:41:E7:04:4E:C6:04:31:87:54:33:E8:FB:80:CA
Authority key identifier: 4A:D1:E9:18:5E:AA:8B:5C:71:C8:9F:AB:E6:FB:E2:AC:F7:EA:98:24
Certificate issuer:       /CN=4ad1e9185eaa8b5c71c89fabe6fbe2acf7ea9824
Certificate serial:       019EBFFF5E702F74FDCA6F16460B3153C328
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 08:00:44 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:44 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:44 +0000
Files and hashes:         1: StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl (hash: 3Ynx71yW5PVakpl9QbBVhvb/1l4/tjG2Nao/2X46+rM=)
                          2: krwQ_58rpuR7vh46Z5jxUh2os1c.roa (hash: aD7W1qZcEisQdWcAvIDFWWzHQesvPWcQVTbTh9Rofrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:ff:5e:70:2f:74:fd:ca:6f:16:46:0b:31:53:c3:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ad1e9185eaa8b5c71c89fabe6fbe2acf7ea9824
        Validity
            Not Before: Jun 13 08:00:44 2026 GMT
            Not After : Jun 14 08:00:44 2026 GMT
        Subject: CN=7045f3689d2241e7044ec60431875433e8fb80ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7a:66:9c:42:f7:5c:01:fa:0a:0a:78:20:d0:
                    11:8e:e0:ca:8f:7c:2c:49:a8:61:16:9d:10:8b:06:
                    cf:f9:b2:18:2f:35:55:d0:f3:48:44:44:db:66:93:
                    ff:dd:81:65:bc:61:15:89:8a:eb:e5:d0:09:aa:18:
                    d0:f0:f0:f1:e3:1a:be:ca:e4:ac:32:3e:60:03:ab:
                    4c:77:e3:c5:54:65:ad:d1:d8:5a:72:32:5c:d3:a8:
                    3d:df:f0:0e:b7:c0:21:8f:7a:2f:49:6e:de:a8:f3:
                    1e:dc:88:0b:ac:b3:38:84:19:0e:53:b6:b2:5e:88:
                    d2:cb:39:5d:70:70:a0:8d:a7:a0:47:b5:31:93:2c:
                    2d:7d:aa:37:76:a5:df:18:0f:29:75:2f:09:4f:8d:
                    9f:5a:d0:6d:82:3a:51:27:18:20:d7:96:d0:f5:01:
                    dd:49:82:16:b1:73:fb:ad:31:cb:fb:c5:a9:f8:41:
                    3f:47:cd:70:d6:91:ed:81:77:eb:f3:27:39:00:c6:
                    3b:7b:59:df:ab:1e:55:75:49:f9:89:2d:bf:d5:fa:
                    8c:8b:55:ad:87:54:72:b5:00:17:f8:57:ea:c9:df:
                    ce:fb:9d:23:85:a9:3c:5a:57:d9:7c:b3:7c:e8:8c:
                    65:d9:3a:a8:19:ba:6f:c5:82:d0:31:66:bf:7b:e3:
                    47:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:45:F3:68:9D:22:41:E7:04:4E:C6:04:31:87:54:33:E8:FB:80:CA
            X509v3 Authority Key Identifier:
                keyid:4A:D1:E9:18:5E:AA:8B:5C:71:C8:9F:AB:E6:FB:E2:AC:F7:EA:98:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:24:87:de:0f:07:9a:71:e2:92:1a:e7:80:31:2d:84:b9:18:
         a1:01:18:15:88:9a:aa:5a:71:30:fb:26:b1:ee:f6:3e:9f:ee:
         a9:ed:94:59:83:3a:d0:33:af:da:fe:20:02:f4:47:54:7b:99:
         4f:11:3b:f9:02:67:28:ac:22:77:4e:ea:75:8f:53:36:3a:1f:
         26:be:f2:6c:f5:3f:c5:0c:b1:35:06:11:7a:d1:29:ab:f7:7e:
         83:71:67:e0:a0:19:b4:09:81:38:07:72:6e:88:78:41:39:cb:
         f3:f4:0a:bc:81:94:ab:b2:e2:8d:77:ae:52:2a:a7:87:70:22:
         cb:68:f7:42:17:1b:85:2c:f2:eb:79:3b:43:2c:3a:cb:d2:93:
         a8:fe:51:3a:59:ce:b6:b9:71:91:cb:9c:9d:0d:a1:1c:52:31:
         b0:59:71:bf:b1:9c:82:23:2e:40:c3:0b:a3:fc:fb:2a:80:b7:
         39:71:74:6e:38:25:49:43:71:45:a3:1f:10:ca:dc:21:23:5b:
         87:6d:ac:37:d9:55:d3:a0:15:b4:2a:a1:92:c0:f9:7b:41:21:
         40:f1:6c:1b:0c:d8:e2:80:37:5a:f9:e1:78:32:12:e5:7b:5a:
         a2:b5:e0:46:6a:c2:85:2d:42:15:72:f9:c6:41:6e:f5:a0:7f:
         b9:96:be:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:20:27 2026 by rpki-client