Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
File:                     0vONSutNAojbuFTR6uC9itP4Qfo.mft (raw, json)
Hash identifier:          sM27JxWVr8ntHP9ARvr+OVxnbdG9LdVY5oPohF3WWY4=
Subject key identifier:   3D:80:4A:7A:C1:27:78:4E:F7:31:57:AD:0E:91:55:FE:7B:6D:DD:9F
Authority key identifier: D2:F3:8D:4A:EB:4D:02:88:DB:B8:54:D1:EA:E0:BD:8A:D3:F8:41:FA
Certificate issuer:       /CN=d2f38d4aeb4d0288dbb854d1eae0bd8ad3f841fa
Certificate serial:       019EC17FC3FFB9A9D3AABD6AC322E3C36FEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 15:00:36 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:36 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:36 +0000
Files and hashes:         1: 0vONSutNAojbuFTR6uC9itP4Qfo.crl (hash: t3WQY4DvjFse/zEremIFio0/FxH2xuASANmDczqpUIY=)
                          2: tquIiBHdfRgZoSkv66J5g5_rmsI.roa (hash: ewRKCXj1KUDIVFZwB0RpxCjNpMk+Zl5DzmkGO5LloCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:c3:ff:b9:a9:d3:aa:bd:6a:c3:22:e3:c3:6f:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2f38d4aeb4d0288dbb854d1eae0bd8ad3f841fa
        Validity
            Not Before: Jun 13 15:00:36 2026 GMT
            Not After : Jun 14 15:00:36 2026 GMT
        Subject: CN=3d804a7ac127784ef73157ad0e9155fe7b6ddd9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:25:f5:c0:6a:3f:ed:b7:68:40:be:4a:42:f4:
                    cc:70:4c:5f:e7:41:63:c0:8e:f0:60:37:d6:e0:d6:
                    50:f5:d5:e8:b3:26:8a:62:14:9c:a0:49:26:83:b2:
                    98:0b:c0:67:83:db:71:4b:d8:1d:c3:a7:63:3c:d5:
                    29:0a:53:ab:cf:de:a6:8b:aa:84:39:f6:97:bc:f9:
                    3f:29:43:81:b9:2c:f4:f6:aa:41:59:ca:83:3b:5a:
                    da:d7:fa:3c:97:85:95:05:fc:3e:9b:80:41:84:a5:
                    72:b1:94:d8:5e:8a:e8:5c:7d:39:09:d7:64:17:47:
                    82:cb:d1:cf:46:2c:44:f1:e4:55:6a:57:a6:11:f1:
                    36:7e:7c:ee:e9:a9:f3:de:c3:37:fb:29:13:fb:06:
                    fc:e2:ee:74:e0:04:15:0c:b9:6b:39:06:1e:84:a0:
                    23:d1:37:2f:77:30:62:c7:4b:af:53:a4:d6:da:e8:
                    a9:47:73:ad:51:e7:2b:3c:ea:5c:26:ab:d0:8e:d3:
                    0d:4a:c3:89:de:38:43:0b:61:76:de:23:c9:fd:0f:
                    f7:5f:4d:4b:2e:ee:c0:55:20:50:7d:bc:a5:4a:6c:
                    ac:01:a3:26:5f:04:47:ac:9c:15:c0:f3:fb:ac:ac:
                    02:72:41:3b:b6:b1:9e:27:0a:08:3f:11:cf:4c:2f:
                    1e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:80:4A:7A:C1:27:78:4E:F7:31:57:AD:0E:91:55:FE:7B:6D:DD:9F
            X509v3 Authority Key Identifier:
                keyid:D2:F3:8D:4A:EB:4D:02:88:DB:B8:54:D1:EA:E0:BD:8A:D3:F8:41:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:60:f8:c9:10:8c:a6:34:66:3f:ec:00:ce:67:29:c4:ab:da:
         c3:2f:72:e3:e6:ce:ea:a9:f3:67:89:6e:b5:b8:f5:04:68:25:
         1c:a5:43:0e:d4:54:23:72:0a:02:10:cc:ce:c3:3f:a4:18:29:
         b6:1f:a1:f7:66:95:1c:d1:7f:e2:e8:83:f0:6f:cf:97:bd:a6:
         0e:fa:79:79:c8:e3:c7:2f:be:60:e3:c0:67:d9:a8:1a:b0:dd:
         89:ca:13:f9:a3:c9:83:87:34:26:67:0f:ad:be:23:e3:d8:9b:
         2f:7f:38:f7:09:d2:0d:b1:ac:25:cf:ae:82:6a:e3:ea:05:6c:
         6d:41:cb:43:48:4e:54:b8:3c:21:40:53:0f:3d:e3:b1:4d:6a:
         1e:ae:22:44:39:cc:8a:56:d6:21:70:df:c0:c2:89:cd:41:20:
         78:e5:9e:af:8e:38:5e:8c:b7:c3:25:16:4e:45:2c:a5:9a:8c:
         fe:e9:30:84:30:86:58:f0:f6:16:fe:22:53:a9:c1:9f:eb:35:
         25:a9:1c:c4:9c:75:47:f2:11:35:5e:a4:b8:7b:01:ae:b9:70:
         6a:81:d3:03:0c:e8:f9:d1:19:b4:9d:e0:ef:bf:5c:2a:16:bd:
         7e:66:15:10:68:8e:60:93:46:be:30:80:31:ef:d9:03:79:ef:
         96:73:1f:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Bf8P/uanTqr1qwyLjw2/qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZjM4ZDRhZWI0ZDAyODhkYmI4NTRkMWVhZTBiZDhhZDNm
ODQxZmEwHhcNMjYwNjEzMTUwMDM2WhcNMjYwNjE0MTUwMDM2WjAzMTEwLwYDVQQD
EygzZDgwNGE3YWMxMjc3ODRlZjczMTU3YWQwZTkxNTVmZTdiNmRkZDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SX1wGo/7bdoQL5KQvTMcExf50Fj
wI7wYDfW4NZQ9dXosyaKYhScoEkmg7KYC8Bng9txS9gdw6djPNUpClOrz96mi6qE
OfaXvPk/KUOBuSz09qpBWcqDO1ra1/o8l4WVBfw+m4BBhKVysZTYXoroXH05Cddk
F0eCy9HPRixE8eRValemEfE2fnzu6anz3sM3+ykT+wb84u504AQVDLlrOQYehKAj
0TcvdzBix0uvU6TW2uipR3OtUecrPOpcJqvQjtMNSsOJ3jhDC2F23iPJ/Q/3X01L
Lu7AVSBQfbylSmysAaMmXwRHrJwVwPP7rKwCckE7trGeJwoIPxHPTC8ejwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2ASnrBJ3hO9zFXrQ6RVf57bd2fMB8GA1UdIwQY
MBaAFNLzjUrrTQKI27hU0ergvYrT+EH6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHZPTlN1dE5Bb2pidUZUUjZ1QzlpdFA0UWZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS80OGVmMjctNTg1OC00MjRiLWFkZDEt
MGY2NDU1ZjA1Mjc2LzEvMHZPTlN1dE5Bb2pidUZUUjZ1QzlpdFA0UWZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS80OGVmMjctNTg1OC00MjRiLWFkZDEtMGY2NDU1ZjA1Mjc2
LzEvMHZPTlN1dE5Bb2pidUZUUjZ1QzlpdFA0UWZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkWD4yRCM
pjRmP+wAzmcpxKvawy9y4+bO6qnzZ4lutbj1BGglHKVDDtRUI3IKAhDMzsM/pBgp
th+h92aVHNF/4uiD8G/Pl72mDvp5ecjjxy++YOPAZ9moGrDdicoT+aPJg4c0JmcP
rb4j49ibL3849wnSDbGsJc+ugmrj6gVsbUHLQ0hOVLg8IUBTDz3jsU1qHq4iRDnM
ilbWIXDfwMKJzUEgeOWer444Xoy3wyUWTkUspZqM/ukwhDCGWPD2Fv4iU6nBn+s1
JakcxJx1R/IRNV6kuHsBrrlwaoHTAwzo+dEZtJ3g779cKha9fmYVEGiOYJNGvjCA
Me/ZA3nvlnMfpA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:25:06 2026 by rpki-client