Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
File:                     sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft (raw, json)
Hash identifier:          j83lwM1Jep7A6wgZe5vMEaRQN0oWDxhZZbxQVq5fJvA=
Subject key identifier:   42:B9:8C:D1:F0:6C:D6:41:20:64:2B:DD:DD:63:2E:FF:31:33:90:30
Authority key identifier: B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
Certificate issuer:       /CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Certificate serial:       019EC3A5FA8A547C44307524AB56769AD820
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
Manifest number:          195A
Signing time:             Sun 14 Jun 2026 01:01:35 +0000
Manifest this update:     Sun 14 Jun 2026 01:01:35 +0000
Manifest next update:     Mon 15 Jun 2026 01:01:35 +0000
Files and hashes:         1: RxwpeJEtkWGwK-FiT9nGtEZel1w.roa (hash: nRWo2u6OOJDMeQ+Qn8P1QxPMq9RxzCeIuOjLATj51Ms=)
                          2: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl (hash: L89YRblgIyW3aGb/468BIXvocMxv6ooVtP07UvzEo9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:a5:fa:8a:54:7c:44:30:75:24:ab:56:76:9a:d8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
        Validity
            Not Before: Jun 14 01:01:35 2026 GMT
            Not After : Jun 15 01:01:35 2026 GMT
        Subject: CN=42b98cd1f06cd64120642bdddd632eff31339030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d5:04:7a:ae:fc:da:cc:14:7e:d4:f4:e3:02:
                    21:5b:9b:f6:9e:86:91:54:37:34:4f:8e:2f:a6:ae:
                    55:ee:0c:18:93:26:92:e1:d4:2f:79:47:5c:07:d0:
                    74:0f:6b:d8:b0:f7:bd:cd:8a:41:9e:de:ff:38:e0:
                    f4:0c:ce:88:9c:ad:47:ec:ee:46:3b:07:ff:70:8a:
                    fe:f9:51:11:c5:31:0e:ef:24:d5:c4:65:39:8f:17:
                    df:01:cd:f4:37:ef:b7:b2:f8:08:e9:31:a2:49:02:
                    21:0c:5b:05:a8:83:b1:6b:45:56:bb:24:8f:f8:69:
                    9f:54:35:fe:0d:0b:e9:09:9d:3d:b0:75:37:92:d4:
                    82:32:d3:b2:5d:82:e1:2e:48:9c:65:ee:fd:74:0f:
                    37:2c:07:e7:ff:82:8b:71:e9:e7:99:de:44:d5:80:
                    90:31:8b:ff:7b:34:ca:b8:be:41:6f:e1:0a:63:13:
                    c1:dc:83:37:ec:1a:56:65:f7:44:98:30:d6:63:ac:
                    a6:43:0a:3f:c6:b2:91:60:39:51:7d:aa:cf:09:c6:
                    95:b8:ab:e6:9b:62:82:b7:0e:9c:fd:c5:84:96:42:
                    f6:b1:9f:f6:d4:14:b8:69:2d:46:7d:c1:ec:ab:a3:
                    7f:fe:d4:2f:78:da:12:8b:29:34:3f:0f:29:f0:4f:
                    a1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B9:8C:D1:F0:6C:D6:41:20:64:2B:DD:DD:63:2E:FF:31:33:90:30
            X509v3 Authority Key Identifier:
                keyid:B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:33:cb:2f:9c:ab:94:93:b7:b8:70:4f:8c:b4:00:cf:97:fa:
         cb:59:e9:06:42:d5:61:28:30:73:13:e7:15:06:0c:74:86:ee:
         a0:fa:31:42:06:28:8b:c2:3c:84:56:7c:2a:12:ba:35:2e:31:
         ba:ae:fa:20:8b:90:ef:85:9b:6f:ae:6d:7e:42:17:fd:58:79:
         22:6c:80:e2:a0:68:78:6a:6a:fa:4e:e3:96:38:52:08:62:65:
         6b:ad:91:3e:7c:2c:fe:8f:17:f1:48:38:27:e5:7b:26:ee:ef:
         2a:58:b4:75:f5:e6:19:eb:19:23:35:8d:ae:f4:06:9a:e7:bf:
         96:23:1d:78:0b:63:41:8b:17:df:ae:dc:bf:b4:be:29:bf:ff:
         d5:32:0d:bb:6a:66:c3:c0:06:5e:08:4d:54:ac:a2:db:86:88:
         e3:43:c9:76:9c:a8:47:8b:94:88:35:be:5f:be:fe:77:d3:92:
         1e:90:4f:e3:3b:9e:00:e0:95:36:f9:ae:cc:e7:99:90:03:b8:
         6e:a9:b6:58:15:8a:5b:48:37:c9:48:4d:4b:f2:74:b6:77:fb:
         8d:f2:8e:9d:76:cf:b3:ba:77:ba:0f:98:c6:04:ea:f2:70:74:
         84:33:81:71:ba:f4:10:67:f0:e0:2c:40:14:cb:b4:b8:ea:f8:
         6a:e2:04:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:30:26 2026 by rpki-client