Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
File:                     v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft (raw, json)
Hash identifier:          /xOHW6RureIXWYuCqcx2UupijKPc/IVPo6yZJKYMv8U=
Subject key identifier:   2B:50:97:2E:73:38:00:AD:9A:14:86:8F:93:A5:CB:2E:67:42:E5:2B
Authority key identifier: BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49
Certificate issuer:       /CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
Certificate serial:       019EBF9102245E014EFEE529835BAAEDAC43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 06:00:11 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:11 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:11 +0000
Files and hashes:         1: 440C9nJzfAwzFQHbbTSsKGKGkig.roa (hash: 9GaUDae42NdjzGOSW1+fUpuBNX675/CDIy2pT/BeZSI=)
                          2: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl (hash: p12O4hO4531fFQ12gRKhuOMiFVCQEtelTG+pRPKPpNc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:02:24:5e:01:4e:fe:e5:29:83:5b:aa:ed:ac:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
        Validity
            Not Before: Jun 13 06:00:11 2026 GMT
            Not After : Jun 14 06:00:11 2026 GMT
        Subject: CN=2b50972e733800ad9a14868f93a5cb2e6742e52b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d8:91:13:af:60:65:0c:96:17:95:70:71:9b:
                    9e:2d:d7:4f:be:54:7d:a5:1b:b0:56:6b:14:f9:ef:
                    a1:cc:4d:19:84:d8:ee:ed:4b:2a:1d:bf:6c:7e:0d:
                    36:3e:68:41:7c:2f:db:de:6c:8c:a8:43:5f:9f:72:
                    a8:86:b2:20:95:d6:dd:0a:b0:4e:ce:a5:e6:b9:73:
                    99:26:30:7c:06:6b:ae:24:50:42:79:d4:a4:7e:88:
                    83:a7:a7:ce:15:7a:63:cc:62:47:db:2c:a0:54:c5:
                    c1:1a:26:14:8c:d7:3d:cc:8a:a5:40:b6:7a:89:79:
                    65:02:3b:3a:0e:91:17:0b:61:fe:1d:4c:35:25:62:
                    64:c9:cb:fc:90:68:8b:96:f3:37:31:e7:39:42:9d:
                    45:1f:0e:cf:83:71:07:7b:66:5f:5f:5d:12:7f:18:
                    4d:ef:29:6b:cd:d2:1a:27:87:a3:9b:bb:4c:ea:14:
                    03:d5:ed:b1:07:c7:39:74:c9:91:fa:82:0c:62:04:
                    d8:01:01:38:e1:4f:9d:6e:01:3c:07:f3:67:b4:32:
                    f7:df:c2:88:33:fa:54:f3:0a:2c:db:d5:59:51:04:
                    fe:69:2d:57:8f:94:8c:de:d1:c6:08:59:e7:b5:30:
                    57:49:0e:57:8a:1c:71:88:da:5d:86:1c:f1:f6:16:
                    4c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:50:97:2E:73:38:00:AD:9A:14:86:8F:93:A5:CB:2E:67:42:E5:2B
            X509v3 Authority Key Identifier:
                keyid:BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:52:b1:8d:e4:e0:b8:94:aa:bb:43:5b:09:5b:9c:f9:8d:f1:
         a0:fc:47:9c:8a:23:8b:ca:79:80:e5:99:48:b5:af:5f:d4:51:
         6a:9d:98:ae:b7:c8:cc:24:3c:64:3f:40:00:63:be:15:ba:12:
         e2:2c:a1:7a:ff:df:df:1b:3b:2a:a0:aa:8f:44:e5:21:ba:f1:
         1b:2f:e1:e4:68:a9:03:b2:b1:f5:95:cf:29:36:4a:e2:81:da:
         59:53:29:ff:62:7a:00:68:6b:48:7e:27:47:db:86:3d:18:1c:
         41:4b:cb:5b:4a:41:f3:c2:e2:c9:c9:8f:1d:c5:3b:57:c9:37:
         f0:38:16:ae:8f:6a:14:6b:7f:50:a9:76:5b:24:46:24:5e:72:
         41:eb:19:9a:02:7e:0d:d7:42:3d:93:bd:13:28:4a:ae:b4:84:
         94:c1:25:89:a5:d5:f2:96:f0:68:ce:d5:af:0f:70:80:6b:62:
         bd:4a:c0:a9:96:d5:5c:03:eb:57:52:eb:d6:22:df:37:46:1e:
         91:de:f2:5f:bf:6b:58:dc:89:09:9f:a9:0b:66:02:ac:bd:d8:
         f7:f6:ee:38:63:d7:89:a5:ea:1a:26:bb:d0:c5:e6:99:7c:2e:
         4a:dc:5c:9f:3b:37:10:b5:ff:0c:81:41:37:63:a4:c3:ff:98:
         74:9b:74:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:58:49 2026 by rpki-client