Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
File:                     xpZo80fFWt13rFF-kzHd5_w1VqY.mft (raw, json)
Hash identifier:          8M2OSkSvJ7CeQ4v0NX5MySX06KVvB91r2Zhk0jXeQL0=
Subject key identifier:   C1:7F:E6:1B:2F:19:61:DC:42:44:E3:19:A7:D3:BD:E0:77:C2:95:EB
Authority key identifier: C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6
Certificate issuer:       /CN=c69668f347c55add77ac517e9331dde7fc3556a6
Certificate serial:       019EC300E1FA1F5CA1AE7FDD7C3477414DA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
Manifest number:          195F
Signing time:             Sat 13 Jun 2026 22:01:15 +0000
Manifest this update:     Sat 13 Jun 2026 22:01:15 +0000
Manifest next update:     Sun 14 Jun 2026 22:01:15 +0000
Files and hashes:         1: SQgk14LJvQD58GJwhzmdHvEGMpA.roa (hash: 9nEhhW/HaWe0QsWNlFcb5L1Nm0I/W7PdcIHoewo3ZNU=)
                          2: xpZo80fFWt13rFF-kzHd5_w1VqY.crl (hash: 064+ctsVR6ERmYXVgLaJM3QIcY7Ub9A1adi+Tb9+27w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 22:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:00:e1:fa:1f:5c:a1:ae:7f:dd:7c:34:77:41:4d:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69668f347c55add77ac517e9331dde7fc3556a6
        Validity
            Not Before: Jun 13 22:01:15 2026 GMT
            Not After : Jun 14 22:01:15 2026 GMT
        Subject: CN=c17fe61b2f1961dc4244e319a7d3bde077c295eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d9:75:f2:38:96:1c:f8:af:7c:bd:d8:96:ec:
                    c2:75:1a:3a:d8:cc:d0:5d:91:0e:19:85:7f:a8:72:
                    78:64:55:2c:cf:93:46:7a:f2:29:c1:90:64:a0:90:
                    c0:d1:5e:91:c6:53:93:a6:04:6f:9c:55:e7:f6:32:
                    2e:e5:02:34:92:a2:9e:61:31:d8:4b:cc:2b:1e:9a:
                    fc:76:e1:0b:f9:e8:d7:b6:97:36:65:2d:20:62:d5:
                    b3:97:89:d7:f9:99:79:c6:16:ea:6e:42:cb:18:14:
                    c2:36:b4:b8:40:ab:9f:6d:39:88:ca:64:4d:32:b4:
                    a6:f5:d3:df:7e:4c:d6:c2:e4:a4:40:36:b2:d2:02:
                    67:4c:ec:56:f7:e3:41:bd:00:63:87:6d:40:8a:4c:
                    ab:3d:49:b3:74:c7:7b:b6:63:c0:19:cd:05:9e:cc:
                    4b:38:7f:81:86:2d:83:ee:d0:e6:44:94:a2:9e:10:
                    c6:43:e9:90:a1:b9:1f:86:29:ed:2e:45:bb:83:d1:
                    d2:8f:e0:bf:b4:a0:50:11:3e:f2:ea:da:2a:cd:f2:
                    1a:70:39:78:5f:9c:38:6f:3f:75:c9:75:06:7f:56:
                    0e:9e:ca:1f:3b:74:2b:6f:a4:b9:47:d4:dc:2c:f7:
                    c3:0e:d4:bf:41:35:67:ff:bd:b7:cf:fe:1c:9f:53:
                    fc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:7F:E6:1B:2F:19:61:DC:42:44:E3:19:A7:D3:BD:E0:77:C2:95:EB
            X509v3 Authority Key Identifier:
                keyid:C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:2b:40:26:50:c8:a6:8c:18:97:b4:48:75:db:21:d5:f7:28:
         5d:f5:1f:71:13:19:a6:98:bd:2c:2a:24:09:eb:ec:2f:a1:33:
         56:04:08:5d:6e:3f:5c:74:06:68:80:59:2d:85:05:0b:3e:e2:
         37:31:e4:06:02:fc:e2:86:b6:86:a1:52:e8:02:7d:7d:32:07:
         12:3e:a0:bc:d1:61:47:bf:78:14:8c:b1:da:e1:09:6b:89:00:
         b3:df:ec:48:28:be:f0:cf:e2:25:dd:02:b2:0d:ab:06:9d:74:
         40:24:ea:82:ab:db:a7:d9:ec:f9:a3:4d:71:ad:be:c2:c5:69:
         01:a8:30:90:a8:63:3c:bd:89:40:64:6b:01:71:ec:bd:d2:4d:
         67:fe:1f:7e:7a:ee:86:ca:0f:32:3b:fb:eb:18:4c:96:ad:b7:
         99:bd:42:a7:1b:b1:5f:17:70:57:f3:d5:9f:aa:fd:4a:bb:cd:
         93:7b:47:50:7e:7f:d4:26:13:fc:10:bc:9d:12:01:a9:4b:65:
         e7:5e:ad:ff:91:15:56:f9:08:97:99:4d:a2:94:d1:f7:06:8e:
         aa:b4:c3:dd:70:79:27:d3:8d:16:de:aa:6a:8e:c8:6d:83:ad:
         45:58:55:ef:2a:78:b5:83:af:fd:26:e5:1f:d8:1a:48:ea:17:
         a3:3c:11:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:12:02 2026 by rpki-client