Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
File:                     3g2da2l8ochlcMJWhi5oWLR5nIU.mft (raw, json)
Hash identifier:          zvLHmIglhpX8IiZt+p2Ir5HSOXky6MmNlp0KvzDRml8=
Subject key identifier:   0D:A3:F2:4B:66:10:77:28:F3:CA:1B:29:E4:07:DF:0A:F7:A8:68:B5
Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
Certificate issuer:       /CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Certificate serial:       019EBFC81E1D58284B856F969C7EF39E748E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
Manifest number:          196F
Signing time:             Sat 13 Jun 2026 07:00:23 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:23 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:23 +0000
Files and hashes:         1: 3g2da2l8ochlcMJWhi5oWLR5nIU.crl (hash: 1VJEp/kc3Ytg5c+5yuCywxCv6S6AooWFZuSig5K7ldA=)
                          2: Pe_0_3RXeg0_K2j9ghGT_HDZm50.roa (hash: dq4vcwGpi9Xg3PIMEP+w0b/UoMg+2lIHLeWnB9sLO5M=)
                          3: QYmlQUAnB-0RA7OiPmhnGtJDWRg.roa (hash: 9MlbxaPMBipZRlyW5FOSHulBh31JEbALxF1O0eX7spY=)
                          4: Sl3slTlmy5eFtqo76SlKQ9CnbUM.roa (hash: DVZMz6p8+NCTnVKJba2KiAUqUvaQ9KTQclo1bNgr4hM=)
                          5: fvZVLt2jJxSwkZIVsLw5-Ya7ZRI.roa (hash: fRu3ed4NqNa0Gx+wvKVb9ozSMChmEYjpHTUHm+NNTxQ=)
                          6: hneKOL6xKV3cr3gP56n-PmBtpXI.roa (hash: GxqGClH9UHGqcmyTREy95vx88t5aKLbmXG/YE4t9Tqg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:1e:1d:58:28:4b:85:6f:96:9c:7e:f3:9e:74:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85
        Validity
            Not Before: Jun 13 07:00:23 2026 GMT
            Not After : Jun 14 07:00:23 2026 GMT
        Subject: CN=0da3f24b66107728f3ca1b29e407df0af7a868b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:42:f0:29:8b:37:60:1c:d5:42:9d:3a:64:50:
                    c1:02:de:c1:f8:4e:c4:74:bf:72:d1:ac:aa:81:04:
                    3a:8e:d8:6d:be:f7:b0:c5:cb:97:33:61:81:b9:7e:
                    18:e5:61:37:39:d9:9a:87:60:cc:7a:68:16:2a:3f:
                    10:a5:f5:9b:9b:3f:a2:d7:71:2a:7e:3c:07:a6:9c:
                    b6:9c:e1:9a:30:82:ed:e7:5b:80:df:22:6b:2b:e6:
                    59:a7:0e:b3:1b:c8:fc:aa:28:e4:18:f4:ec:db:b6:
                    ac:45:15:9a:8d:78:22:1b:85:57:61:94:86:52:ed:
                    bc:70:7e:87:ae:8f:fc:42:0c:51:fb:cc:25:c4:9b:
                    c1:29:39:5f:50:e5:6b:e9:5e:f9:c4:01:25:6f:00:
                    f7:56:68:75:c5:0a:99:ba:90:87:5e:4e:b3:56:b9:
                    90:5f:fa:d5:46:a6:da:7a:46:64:8a:84:52:4c:c8:
                    06:3b:44:fc:64:23:45:00:99:00:a7:c2:55:a9:ac:
                    11:81:92:b4:42:a7:43:43:a5:f9:ae:ba:60:cc:00:
                    fc:07:76:79:a2:9b:28:f9:a9:ff:c2:14:6b:8c:01:
                    22:03:30:68:7a:b7:f6:a7:55:fe:5c:ed:35:72:a3:
                    0a:7d:43:a1:29:46:95:f6:b9:a8:82:40:d2:e7:12:
                    0e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A3:F2:4B:66:10:77:28:F3:CA:1B:29:E4:07:DF:0A:F7:A8:68:B5
            X509v3 Authority Key Identifier:
                keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:39:35:39:6d:f9:cb:46:25:b7:59:61:04:06:34:fc:51:f5:
         32:9d:9d:5c:25:a9:5f:79:aa:71:74:26:db:4a:f5:ec:62:b7:
         b0:13:9b:44:d1:e3:10:a9:82:13:28:d6:75:ad:53:54:bd:6a:
         be:1e:74:d2:3d:8c:f9:eb:18:5f:5c:85:e2:75:0b:9a:b7:c2:
         1b:56:0e:a4:ac:32:31:4d:8e:69:fc:1f:ab:5f:a6:d1:d8:ef:
         f5:d7:01:a5:cc:ee:51:b6:e4:a5:8a:96:29:91:1d:c8:16:d3:
         c0:fa:60:15:93:3a:6e:91:d1:39:9d:91:1f:15:13:3c:0d:ad:
         70:50:05:07:ee:ca:46:62:96:4c:c1:05:ad:06:f9:55:e0:33:
         f9:db:32:b0:df:bb:c2:f7:aa:47:c8:22:e1:c3:ab:82:47:6e:
         87:d2:bd:d9:31:45:d0:e7:a4:c9:42:6f:b7:a0:ad:99:e8:68:
         3d:4d:49:f6:14:98:f1:12:11:aa:7b:c2:a0:15:eb:11:1c:77:
         c3:74:2c:9b:7a:f6:1d:f1:c0:eb:7e:af:c9:2b:16:5a:cc:30:
         ad:2f:cf:47:e6:d4:63:9d:5e:ed:bb:4b:dc:32:a7:53:e5:0f:
         2c:6f:f4:12:89:d9:87:31:29:5b:64:f3:65:46:ec:17:62:96:
         1c:94:58:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:45:19 2026 by rpki-client