Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
File:                     7gJORqdGvzs6897Agc5-vEQRAKM.mft (raw, json)
Hash identifier:          7ZPdnIcjIIRb5xJ38DosM9dosQM6Sik/KBuC5MmD//o=
Subject key identifier:   E7:B5:6A:EA:3C:43:88:A7:C6:DB:DC:25:57:BA:62:DE:68:81:22:BC
Authority key identifier: EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
Certificate issuer:       /CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Certificate serial:       019EC1B6FE74F36DC82547FBA70C30776520
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 16:00:55 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:55 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:55 +0000
Files and hashes:         1: 7gJORqdGvzs6897Agc5-vEQRAKM.crl (hash: tn2QcYudTnYHPJAeoLzwm2xeqboJSn6b+oGYsiNqebM=)
                          2: x6n822Rpr9x_ujzRReAoyI3uWJE.roa (hash: xHlOIj9K0jyV1cDKqnDaDCInd6n4ZibqQVDDfE1qwao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b6:fe:74:f3:6d:c8:25:47:fb:a7:0c:30:77:65:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
        Validity
            Not Before: Jun 13 16:00:55 2026 GMT
            Not After : Jun 14 16:00:55 2026 GMT
        Subject: CN=e7b56aea3c4388a7c6dbdc2557ba62de688122bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5e:67:d3:73:29:6d:2e:b7:de:11:8e:6c:46:
                    29:8c:4c:fc:ed:f0:57:6f:16:0c:0d:df:07:23:97:
                    88:4b:bc:94:dd:0f:47:6f:a8:0f:0c:34:4c:4c:68:
                    24:97:86:04:69:df:06:85:30:a1:3a:7a:c9:e8:76:
                    8f:f9:db:1b:02:28:5e:4f:97:3f:4b:95:9c:b0:8d:
                    f3:64:75:87:ec:37:7d:bc:2b:de:5d:94:69:17:2d:
                    37:cc:4c:b3:08:12:dd:68:00:57:c4:86:02:ab:73:
                    e7:08:b2:fc:25:5a:dd:ec:37:0f:9d:52:13:c0:79:
                    93:08:72:7d:6e:31:94:de:26:9e:7d:a7:f2:bd:03:
                    4b:60:4b:ea:94:fb:1e:e1:fa:af:07:1a:49:1a:7a:
                    cd:4b:89:84:d7:ca:d9:bd:73:5a:a1:59:ca:6e:1b:
                    f2:44:8f:3d:4c:b5:e2:09:0a:35:81:a5:f2:1a:9f:
                    81:c6:54:2f:6f:e2:d2:0c:42:c4:02:aa:22:01:f4:
                    15:f6:36:ba:c8:e1:61:fe:89:7d:6d:ba:50:e1:45:
                    32:9c:4b:e1:61:9c:68:aa:4e:25:ac:c7:75:81:63:
                    8e:32:60:3a:55:ab:df:17:e8:ed:cb:46:7e:f7:71:
                    7f:ae:19:16:ad:25:a7:46:30:2f:1f:d9:ca:1e:62:
                    86:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B5:6A:EA:3C:43:88:A7:C6:DB:DC:25:57:BA:62:DE:68:81:22:BC
            X509v3 Authority Key Identifier:
                keyid:EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:37:ce:1a:3b:1e:4a:6d:ac:04:63:91:f6:51:bc:95:7c:9b:
         1a:8d:9b:e2:6e:bf:e3:99:05:58:a6:31:45:60:5d:20:23:09:
         39:68:ff:13:24:15:64:45:c6:61:17:ae:ca:4e:04:ee:ee:5c:
         a6:18:25:7c:fe:df:e0:87:fc:bb:1c:a0:ac:df:44:0c:ce:bd:
         d5:41:b5:13:1e:ee:f3:57:85:2d:66:6b:0d:a2:b8:4c:53:02:
         92:89:93:24:8c:cc:ac:58:25:db:7c:8e:40:d0:9f:89:d3:71:
         45:73:57:0a:9f:c1:94:28:d4:1c:52:be:6e:f4:e7:be:08:df:
         51:c3:65:06:49:09:96:2a:6c:45:d0:0a:50:aa:81:a9:0a:8f:
         48:22:f0:da:87:a3:97:67:8f:5c:8a:7f:df:a0:cc:08:18:77:
         30:e6:45:2f:4c:ce:25:4f:51:12:89:3b:ea:1c:bd:4b:86:d0:
         70:b5:3d:b3:c9:93:72:b1:c8:01:92:1d:f2:d9:25:fd:4d:7c:
         1f:03:97:5d:0e:79:4a:13:54:24:d5:54:ec:9d:55:57:9a:1d:
         be:a3:c2:dd:81:36:6e:d4:6f:ee:76:72:fc:78:28:35:93:77:
         89:f2:cf:2f:e7:d4:cb:a1:6b:2a:52:f5:75:a9:f3:8c:fc:16:
         57:ea:ad:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Btv50823IJUf7pwwwd2UgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMDI0ZTQ2YTc0NmJmM2IzYWYzZGVjMDgxY2U3ZWJjNDQx
MTAwYTMwHhcNMjYwNjEzMTYwMDU1WhcNMjYwNjE0MTYwMDU1WjAzMTEwLwYDVQQD
EyhlN2I1NmFlYTNjNDM4OGE3YzZkYmRjMjU1N2JhNjJkZTY4ODEyMmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6V5n03MpbS633hGObEYpjEz87fBX
bxYMDd8HI5eIS7yU3Q9Hb6gPDDRMTGgkl4YEad8GhTChOnrJ6HaP+dsbAiheT5c/
S5WcsI3zZHWH7Dd9vCveXZRpFy03zEyzCBLdaABXxIYCq3PnCLL8JVrd7DcPnVIT
wHmTCHJ9bjGU3iaefafyvQNLYEvqlPse4fqvBxpJGnrNS4mE18rZvXNaoVnKbhvy
RI89TLXiCQo1gaXyGp+BxlQvb+LSDELEAqoiAfQV9ja6yOFh/ol9bbpQ4UUynEvh
YZxoqk4lrMd1gWOOMmA6VavfF+jty0Z+93F/rhkWrSWnRjAvH9nKHmKGQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOe1auo8Q4inxtvcJVe6Yt5ogSK8MB8GA1UdIwQY
MBaAFO4CTkanRr87OvPewIHOfrxEEQCjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wOTU0YjMtMjgwYS00Y2E2LWI4NGQt
MzExMzA0YTlhMjExLzEvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8wOTU0YjMtMjgwYS00Y2E2LWI4NGQtMzExMzA0YTlhMjEx
LzEvN2dKT1JxZEd2enM2ODk3QWdjNS12RVFSQUtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiTfOGjse
Sm2sBGOR9lG8lXybGo2b4m6/45kFWKYxRWBdICMJOWj/EyQVZEXGYReuyk4E7u5c
phglfP7f4If8uxygrN9EDM691UG1Ex7u81eFLWZrDaK4TFMCkomTJIzMrFgl23yO
QNCfidNxRXNXCp/BlCjUHFK+bvTnvgjfUcNlBkkJlipsRdAKUKqBqQqPSCLw2oej
l2ePXIp/36DMCBh3MOZFL0zOJU9REok76hy9S4bQcLU9s8mTcrHIAZId8tkl/U18
HwOXXQ55ShNUJNVU7J1VV5odvqPC3YE2btRv7nZy/HgoNZN3ifLPL+fUy6FrKlL1
danzjPwWV+qtBg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:12:20 2026 by rpki-client