Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
File:                     zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft (raw, json)
Hash identifier:          KbLwrkCdF1DRTvqiSJQR74mI3ojoYlVQ30HP9zLiKQk=
Subject key identifier:   69:AC:A9:84:E5:7E:27:B1:26:F6:4A:55:6B:43:70:11:13:48:5E:39
Authority key identifier: CE:56:49:DB:BA:59:2F:1C:9F:3F:28:89:BC:F8:1F:D2:25:98:93:67
Certificate issuer:       /CN=ce5649dbba592f1c9f3f2889bcf81fd225989367
Certificate serial:       019EC29290C547ACDEE492C6F519FB9BE37A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 20:00:45 +0000
Manifest this update:     Sat 13 Jun 2026 20:00:45 +0000
Manifest next update:     Sun 14 Jun 2026 20:00:45 +0000
Files and hashes:         1: hP6LOiB-JXjzIxcAoNUeheYCC_w.roa (hash: Am0rp7j+BYvMadHXe785VdV8wLgqVi6auP8kJTGDcRE=)
                          2: zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl (hash: XeyjFSWsTuEWvCeSXSNiB7kopyJO/7HdJr910V31vy8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:90:c5:47:ac:de:e4:92:c6:f5:19:fb:9b:e3:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce5649dbba592f1c9f3f2889bcf81fd225989367
        Validity
            Not Before: Jun 13 20:00:45 2026 GMT
            Not After : Jun 14 20:00:45 2026 GMT
        Subject: CN=69aca984e57e27b126f64a556b43701113485e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9c:b2:5e:a7:23:c6:68:14:14:b1:7a:f3:96:
                    bf:35:74:ce:5f:63:5d:24:16:13:20:c4:64:0f:9c:
                    0b:0e:ed:56:0f:ba:4b:99:e2:c4:62:c2:19:03:23:
                    db:33:1f:df:96:21:a8:76:6b:f1:1b:93:91:af:1d:
                    bc:89:3b:fa:92:e4:77:2c:bf:ec:05:06:7f:3e:a2:
                    13:d3:19:93:8d:07:46:38:24:08:51:65:84:aa:13:
                    59:a2:61:ca:27:11:c2:8a:bc:b8:f8:18:fa:7f:7f:
                    79:7d:7b:62:d3:8b:31:3b:e0:16:1c:4f:00:ba:6b:
                    66:d2:2e:10:27:14:b3:11:e5:0c:be:e1:2e:1f:50:
                    99:b9:88:d6:9b:4c:4a:47:5a:2e:de:e6:ce:6f:61:
                    ab:eb:d6:12:41:da:f1:d2:31:0c:7d:b4:ad:e0:bd:
                    42:da:85:f5:72:7f:9d:bf:7b:83:57:04:54:36:ac:
                    41:aa:64:7a:d3:26:42:9a:e7:98:8e:fd:7f:8c:7e:
                    95:50:75:08:3e:7b:cc:6e:6b:6f:16:fa:f6:30:8d:
                    bc:12:20:64:ca:cc:01:be:d9:06:27:52:26:7c:ec:
                    51:ca:8a:33:2c:40:bc:55:2b:56:97:c3:0d:11:2b:
                    a5:3b:d7:b6:ea:6f:94:77:90:a1:d4:d1:85:dc:38:
                    b1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:AC:A9:84:E5:7E:27:B1:26:F6:4A:55:6B:43:70:11:13:48:5E:39
            X509v3 Authority Key Identifier:
                keyid:CE:56:49:DB:BA:59:2F:1C:9F:3F:28:89:BC:F8:1F:D2:25:98:93:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:e4:dd:eb:68:25:d9:09:64:e0:f8:b4:b3:39:6d:fa:20:80:
         66:18:ca:ac:9c:fe:1a:57:00:7b:c2:df:fc:4a:6c:3f:7d:6e:
         68:cb:f5:2e:83:8a:d0:8c:81:42:22:d5:d4:e7:70:3c:6c:c5:
         61:7a:6c:32:fa:e5:12:19:ca:a1:ac:db:ee:ea:5b:26:f5:c0:
         73:eb:8a:bf:3a:37:98:45:d6:b8:af:f8:db:4d:59:5a:94:e9:
         84:02:be:87:60:2e:4d:1e:b9:49:de:ea:96:67:68:d1:2d:d5:
         de:a6:41:a8:9c:0f:21:6a:bd:11:d2:7f:d9:05:8e:21:a5:43:
         d2:46:5c:35:fa:e6:b3:8d:c6:4c:52:05:f9:9b:05:71:05:5d:
         23:58:f1:a7:20:9f:96:4b:ec:ee:6e:48:09:66:09:62:93:49:
         cb:4f:17:ce:3e:93:19:d0:ec:23:a5:69:7e:53:a9:69:46:4f:
         37:7c:d7:d4:c3:f3:39:b2:c0:fa:18:0d:aa:61:15:13:d2:bc:
         87:b0:bc:f0:09:ef:b9:f3:21:ee:af:a3:e2:26:87:0e:64:77:
         2b:70:eb:a1:d0:3a:25:c6:f9:8e:dc:b3:c2:71:6e:dd:1c:9a:
         47:a7:46:b6:6f:6f:a1:78:7c:9b:fd:20:17:e5:c0:64:45:a3:
         f4:8a:0c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:53:25 2026 by rpki-client