Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
File:                     T2qURK2qUjxXaOn2vhQGUYOsIKg.mft (raw, json)
Hash identifier:          7yC12iF+7lCFUGihoNBIss8sQGQWv4A8kVLvxNBxqHg=
Subject key identifier:   02:C2:E0:CD:3B:89:F1:36:BD:7F:9C:55:26:C2:E8:D6:16:40:D6:DF
Authority key identifier: 4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8
Certificate issuer:       /CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
Certificate serial:       019EC11288C636DE8E57C6301A35CAC27D51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 13:01:17 +0000
Manifest this update:     Sat 13 Jun 2026 13:01:17 +0000
Manifest next update:     Sun 14 Jun 2026 13:01:17 +0000
Files and hashes:         1: T2qURK2qUjxXaOn2vhQGUYOsIKg.crl (hash: dnBd1xhMbztwhM6Q9BXma402LmEMB1c/5SWkh2Djc7k=)
                          2: o8tO8stgvhxVUDIUNSKHy-JW2fo.roa (hash: Z08VgX0ivNPtY5zzCzl8jQ6u6U/EFae5aPOCebjGd+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:12:88:c6:36:de:8e:57:c6:30:1a:35:ca:c2:7d:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
        Validity
            Not Before: Jun 13 13:01:17 2026 GMT
            Not After : Jun 14 13:01:17 2026 GMT
        Subject: CN=02c2e0cd3b89f136bd7f9c5526c2e8d61640d6df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7e:34:8c:b1:6b:86:29:6e:d4:1e:4c:64:6a:
                    a3:61:92:a1:b2:56:f7:d7:f2:70:71:88:9e:55:af:
                    67:b5:5f:81:3d:91:31:3c:d2:fe:48:9b:43:dc:c5:
                    4d:46:c0:ee:d8:00:fb:a0:75:90:df:0c:30:a4:8a:
                    bb:50:da:fd:f8:6a:f3:0b:7d:69:bf:74:a4:16:ff:
                    d6:33:8a:e8:55:df:16:b5:b5:b4:35:f8:52:42:8d:
                    69:27:64:28:e7:fa:9a:7c:dc:60:56:b1:79:68:6b:
                    7f:d9:91:3f:65:80:74:53:0c:7c:b2:ab:ef:41:bf:
                    78:5d:9a:d9:97:5b:6c:16:98:12:6d:21:a7:1c:de:
                    3c:e2:1e:6e:0b:f2:d1:15:67:ba:20:ef:00:6d:d3:
                    59:f9:ef:a9:40:69:e2:f7:42:c5:44:aa:d0:1f:8d:
                    83:b1:87:a3:b6:00:39:b7:f3:a1:d8:45:cf:8c:80:
                    fe:64:ad:4a:94:60:f9:df:2a:7c:9f:c9:99:d8:42:
                    9c:26:c5:f2:9c:3d:87:13:b7:1a:e3:3e:84:c0:ce:
                    41:c0:34:86:09:59:0a:e9:cd:65:37:5c:2a:a0:c3:
                    fd:d5:6c:82:04:5f:c6:cb:92:6f:0b:ed:e9:49:ea:
                    d4:9c:ec:4a:c9:e4:91:8b:b4:a1:de:c3:f0:83:2d:
                    d7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C2:E0:CD:3B:89:F1:36:BD:7F:9C:55:26:C2:E8:D6:16:40:D6:DF
            X509v3 Authority Key Identifier:
                keyid:4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:9c:6a:56:f2:8c:8a:fa:32:9c:7b:45:54:47:61:1b:71:42:
         09:89:63:6e:85:26:86:64:87:9f:23:89:57:2c:47:f7:54:dc:
         c5:0c:5d:c8:4c:bc:05:9f:93:41:53:0a:5b:8f:25:aa:b2:61:
         44:61:fe:cc:07:46:31:19:b5:53:8d:88:03:bf:4e:55:33:f6:
         69:7d:57:75:b4:78:97:e4:45:66:37:41:c5:ab:27:ee:84:28:
         6d:a3:d8:f5:b4:d5:66:fe:78:67:03:1d:15:96:5d:53:ad:5e:
         66:0b:02:68:a8:89:c5:15:88:85:cc:40:04:4b:73:29:24:60:
         69:5f:47:95:a1:92:3f:21:d4:52:08:04:0b:e3:b0:6c:f7:23:
         b7:48:01:ee:23:74:ef:16:b4:d5:46:47:8c:f7:0d:ea:14:e8:
         05:39:3d:8c:71:01:7f:3b:08:53:c9:19:08:51:8b:f4:66:78:
         97:5a:0b:b0:eb:07:81:0b:53:80:99:75:f6:12:e9:b9:9b:87:
         1a:83:8f:8f:16:db:27:84:8c:53:05:33:74:75:6b:2f:3a:4b:
         fc:04:aa:b3:ed:b8:60:e8:4a:9f:96:c7:d9:54:d1:06:81:e6:
         3c:cb:9c:53:a5:86:5d:4b:66:59:25:53:4f:f0:8e:1c:52:e7:
         66:62:dc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:34:57 2026 by rpki-client