Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
File:                     1MOxLI1jUZDskoQ3u9bLDow4-ak.mft (raw, json)
Hash identifier:          0DDX1hja9+88v1TrVwQIkcSoBIc89WjRMqVdaYidSGs=
Subject key identifier:   2C:FF:2D:55:4A:74:CF:95:05:84:87:F3:5B:FD:A4:C1:2C:6E:21:D8
Authority key identifier: D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9
Certificate issuer:       /CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
Certificate serial:       019EBFC8D597F876AE83BF4FB805AE6ABE90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
Manifest number:          196A
Signing time:             Sat 13 Jun 2026 07:01:10 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:10 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:10 +0000
Files and hashes:         1: 0xrZEj05nZklKXgoWScPIF2_55I.roa (hash: /xHv98UagMpY7p7/l707cOwppDtpfGRBySWTV/pX6Bo=)
                          2: 1MOxLI1jUZDskoQ3u9bLDow4-ak.crl (hash: J4TlEA+7SosJaEGAB2YNas5VqDp78MSF1CDUQ6bpzeE=)
                          3: 2_chmdN9KFFBZIvF9VY89f23PGs.roa (hash: oIVNlGlquIUtlwcT49BOjBM2tIxXAOLbTnaR8cakqIw=)
                          4: oSGKhwEc_oyA4GgI1H0hJOveCVI.roa (hash: 1SINNHx3FHxT/JXf8IpEHqdou86CS2g7FnWo+nB+dSQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:d5:97:f8:76:ae:83:bf:4f:b8:05:ae:6a:be:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
        Validity
            Not Before: Jun 13 07:01:10 2026 GMT
            Not After : Jun 14 07:01:10 2026 GMT
        Subject: CN=2cff2d554a74cf95058487f35bfda4c12c6e21d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:82:a0:68:41:c0:15:0f:9c:0b:74:01:01:57:
                    ce:b7:84:2d:17:3c:6b:25:86:20:90:20:b8:db:f0:
                    4a:ed:93:19:82:1a:a9:eb:0d:c6:1b:70:41:8b:9d:
                    93:85:1b:f1:41:25:06:8f:30:b4:87:a2:00:bd:9d:
                    2d:40:e5:1d:d8:f5:76:e8:be:99:13:6a:9e:f5:18:
                    48:6f:c8:9d:89:42:aa:ef:43:c1:a7:c6:fe:b0:2f:
                    f0:18:e8:77:7c:7b:4b:b4:31:7e:22:95:d3:95:43:
                    dc:1b:d4:3f:27:e8:4b:68:f2:62:53:92:3c:e9:ba:
                    56:67:25:88:45:2b:76:5f:bd:4a:31:aa:f2:c0:77:
                    52:af:89:31:dd:63:9e:e0:73:73:f3:48:34:28:fe:
                    a7:b4:71:9a:b3:f8:c5:97:ea:a1:31:76:04:2f:de:
                    f3:c8:85:aa:c2:7f:14:6f:8c:a8:a1:03:d1:40:60:
                    8e:a6:35:44:31:67:09:c3:01:b4:32:05:c7:e0:06:
                    07:f8:ac:82:96:22:c8:7b:72:bf:5b:0b:f0:a6:30:
                    37:c8:80:16:0a:5c:b1:3c:43:53:6e:69:33:1e:d4:
                    67:42:51:14:5b:3e:2b:56:d2:de:30:68:83:79:a6:
                    c2:fc:36:71:41:a2:0e:14:8d:22:60:9b:bf:d9:a8:
                    57:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:FF:2D:55:4A:74:CF:95:05:84:87:F3:5B:FD:A4:C1:2C:6E:21:D8
            X509v3 Authority Key Identifier:
                keyid:D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:17:5a:bc:50:d5:2f:af:5f:d1:59:99:53:f9:f9:d9:7b:da:
         a1:94:b1:9b:99:c0:f5:59:a6:cf:e7:63:ff:c4:e7:a2:10:b1:
         79:3e:d8:fb:99:64:dd:2e:0b:5c:2e:86:c3:d6:bb:dd:4f:e7:
         09:3a:92:3f:b6:51:c7:5e:13:7e:cb:eb:d5:e9:c4:be:0e:5c:
         2f:0f:01:93:91:a5:ce:43:95:a4:0f:9d:08:5c:4b:db:54:84:
         3e:87:38:3e:12:6e:48:11:db:32:72:d2:ee:ba:33:5f:64:ce:
         a5:7c:d9:90:ba:f1:d1:98:f7:80:16:af:2f:a2:78:4a:60:df:
         c2:7b:64:e6:66:cb:48:4c:b4:46:37:cf:ab:30:93:3d:07:6e:
         c0:a8:4a:68:49:8a:c1:ff:ed:ca:29:bd:74:f7:d7:f7:cc:69:
         9a:c0:36:fa:5c:69:d0:f5:a7:e8:a9:75:d7:82:ba:99:22:2b:
         8f:c3:6e:ba:9d:b4:0c:16:30:26:e0:4f:22:b7:63:ff:57:35:
         e1:b4:e7:29:18:a8:7a:fb:af:5d:41:64:72:8f:83:69:be:21:
         dc:2c:a0:4b:1a:4f:f0:7a:bb:49:09:80:dc:fd:32:f6:3b:70:
         b8:58:f4:ef:42:dd:b6:0b:2b:a7:1c:6b:17:c2:cf:c1:7f:88:
         6e:e3:bf:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:17:01 2026 by rpki-client