Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
File:                     r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft (raw, json)
Hash identifier:          QW8aK9Jr8jrY1yQSO6U5oOqWuIzZLQuOwcCVe7/XXz8=
Subject key identifier:   EC:11:01:8F:4F:11:8D:75:16:C2:56:EA:D6:C7:04:6B:47:22:26:AC
Authority key identifier: AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
Certificate issuer:       /CN=af782dae3d40caf2223262541c4054e62945d933
Certificate serial:       019EC3379CFE17FC13BD7E195C03B3D7A6C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 23:01:02 +0000
Manifest this update:     Sat 13 Jun 2026 23:01:02 +0000
Manifest next update:     Sun 14 Jun 2026 23:01:02 +0000
Files and hashes:         1: bWD35slaNU4G8WoJ3kljEx_CXmQ.roa (hash: CiE8YvQDdxY0SzfoYEi10FyebaWkuSk6ub1WO85b5Q8=)
                          2: r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl (hash: xqHlf6/SLz1lwhHVaDElFVJgfsnJWd0xEdQNUNh+l1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 23:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:37:9c:fe:17:fc:13:bd:7e:19:5c:03:b3:d7:a6:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af782dae3d40caf2223262541c4054e62945d933
        Validity
            Not Before: Jun 13 23:01:02 2026 GMT
            Not After : Jun 14 23:01:02 2026 GMT
        Subject: CN=ec11018f4f118d7516c256ead6c7046b472226ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e2:79:22:c1:5c:71:25:f5:cc:94:11:66:5f:
                    05:06:3b:77:55:fd:f1:13:77:1e:8b:80:e2:de:c0:
                    1f:2b:51:cb:2b:89:e5:2c:21:7f:bc:d9:fc:88:20:
                    d9:14:f6:40:2a:38:7f:21:54:94:03:7f:86:76:84:
                    9e:a4:7b:78:cf:f2:ec:e4:8c:fc:9e:3f:4b:63:d2:
                    1d:33:ad:0c:8c:51:97:9c:ef:fd:1c:c4:d6:44:88:
                    21:d8:eb:04:2c:b4:b5:d2:30:84:a6:1e:12:97:53:
                    2c:38:8d:ec:cc:91:82:50:34:84:42:82:d0:c4:ce:
                    0f:24:c7:dd:89:b4:5c:7e:b3:f4:da:3d:a5:8e:be:
                    a6:0d:49:cf:e9:18:01:58:3e:a6:b6:0b:0c:b9:cb:
                    8f:ec:23:58:70:9b:fc:96:57:ee:73:3c:f9:c2:97:
                    1f:4d:0c:54:c0:4c:09:7d:dd:b9:da:25:5e:3c:34:
                    58:0c:3c:05:0a:30:ac:20:00:a4:03:81:31:98:b9:
                    f2:a6:84:4c:0e:64:43:9f:fc:b7:27:b8:ba:ad:aa:
                    75:3c:49:f2:db:31:9e:20:70:32:9c:55:cd:cd:ac:
                    9b:ed:30:e5:13:18:db:e5:2c:1a:5e:d7:a3:b9:6b:
                    80:69:b8:dc:88:be:dc:0b:71:d6:fb:3d:c0:be:b9:
                    b1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:11:01:8F:4F:11:8D:75:16:C2:56:EA:D6:C7:04:6B:47:22:26:AC
            X509v3 Authority Key Identifier:
                keyid:AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:46:c7:a2:72:78:94:0c:8e:be:25:92:d0:a9:9a:31:dd:2c:
         39:13:ab:40:2b:4e:58:05:2a:71:f5:6f:e0:d6:37:02:89:ee:
         0a:75:05:d6:2b:7e:b1:29:0f:dc:5e:3e:09:9a:ed:16:ae:7e:
         69:82:2d:59:47:3f:11:b7:ca:56:f8:52:30:e8:78:a7:cb:61:
         e2:cf:74:03:59:e5:30:ac:e7:23:6c:7c:58:b4:69:9f:19:41:
         36:73:22:0e:d1:ae:a6:87:6a:b7:3c:ad:79:39:bc:5a:4f:94:
         7d:fc:d8:79:f3:a0:aa:55:9c:5d:15:c1:14:89:3b:9b:8f:3f:
         13:e0:1c:00:bd:41:2a:c1:da:f0:51:f6:bf:fa:62:be:dc:ab:
         5e:92:c3:a4:31:ae:c2:4a:ac:43:16:9e:c6:41:c8:26:41:57:
         4a:fe:fb:2b:be:96:ae:7a:b4:8d:2b:a6:65:67:e9:b3:ec:1a:
         23:7d:29:90:41:d5:54:4e:3f:e5:8a:14:d5:e4:15:94:fa:ee:
         49:40:f1:28:4b:5f:2d:ad:b6:73:20:2e:4a:de:3d:e2:9a:42:
         26:81:ea:82:bc:b0:d8:56:22:28:94:d9:07:45:12:86:a5:06:
         63:a4:16:68:63:a9:90:c8:29:1c:05:a9:7f:43:cf:3a:45:cd:
         85:73:b5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:09:15 2026 by rpki-client