Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
File:                     vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft (raw, json)
Hash identifier:          1kRAVNfVy01n7AIehpA0QdpGR/Q85IUh9RhgKpQtXxM=
Subject key identifier:   9C:76:A2:D1:1E:DA:17:8B:4F:C4:4F:FC:D2:C7:B7:32:1D:D1:DC:26
Authority key identifier: BC:30:33:A1:02:B3:B7:91:2A:36:63:20:F4:43:5C:53:FB:97:73:F4
Certificate issuer:       /CN=bc3033a102b3b7912a366320f4435c53fb9773f4
Certificate serial:       019EC2244E6D2FEDCC8AA7515B3C17FE56BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
Manifest number:          195D
Signing time:             Sat 13 Jun 2026 18:00:19 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:19 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:19 +0000
Files and hashes:         1: E-AZAYW2qhUsuxgQihaSy4RhoY0.roa (hash: l+7T0JWdCWQ5tKjG5dZn2DS4OH6HFvOG8YRDG8ncZNg=)
                          2: vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl (hash: qJ/vysfRFDKfh9vxTrHysubDL66MMJr8RTjsKMbIHL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 18:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:4e:6d:2f:ed:cc:8a:a7:51:5b:3c:17:fe:56:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3033a102b3b7912a366320f4435c53fb9773f4
        Validity
            Not Before: Jun 13 18:00:19 2026 GMT
            Not After : Jun 14 18:00:19 2026 GMT
        Subject: CN=9c76a2d11eda178b4fc44ffcd2c7b7321dd1dc26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:23:c5:7d:ba:95:b3:6d:25:80:e4:1e:4e:0d:
                    cf:d8:ed:cd:af:c8:71:36:35:c5:56:fd:5a:de:bd:
                    f3:fa:7e:f4:fe:64:fd:dc:ad:94:83:92:de:2c:21:
                    ee:d9:67:f2:51:3f:45:46:9f:5e:e9:08:9c:d5:1f:
                    ee:ad:4c:81:42:94:21:de:a6:ac:e8:bc:7e:48:91:
                    ea:6d:e6:24:a5:17:34:7a:8b:3e:b5:31:32:1c:1b:
                    20:7f:6d:51:c5:ff:23:0e:5a:3f:68:fb:3f:8b:0b:
                    02:45:c6:20:69:93:0e:bd:79:d8:a3:f6:38:8a:2f:
                    d1:aa:d8:89:28:5e:cb:1b:bf:bc:92:7d:e7:75:e6:
                    f9:87:f4:3a:a5:9b:e7:7f:4f:8d:13:a6:9e:42:93:
                    0b:ef:58:88:ef:a4:86:48:56:8d:db:f8:e8:3c:a3:
                    56:db:8e:44:a6:94:cd:3f:c2:d8:3e:b0:da:d7:8f:
                    8e:f9:29:6f:e3:79:85:a8:c4:ad:f3:1b:b5:fa:05:
                    06:f4:72:ce:e1:78:ad:d7:b8:e0:21:e5:7f:3b:37:
                    a0:f0:18:4f:12:19:bd:34:4b:07:4d:ec:5f:f8:04:
                    e8:c0:2a:cf:28:58:e5:b2:0e:1e:8c:ed:a6:15:0a:
                    2b:a3:d6:3e:4a:fe:c7:ae:de:26:c2:0e:38:72:bb:
                    4b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:76:A2:D1:1E:DA:17:8B:4F:C4:4F:FC:D2:C7:B7:32:1D:D1:DC:26
            X509v3 Authority Key Identifier:
                keyid:BC:30:33:A1:02:B3:B7:91:2A:36:63:20:F4:43:5C:53:FB:97:73:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:58:8e:56:ee:08:64:b9:89:6f:6e:7d:75:f9:78:6d:1e:37:
         94:ed:ae:3d:7c:b9:58:96:a7:9c:7b:55:be:69:3f:07:24:0c:
         4d:c9:f4:d6:09:6e:34:49:f9:0a:19:68:d6:9f:cd:66:55:ce:
         cf:61:8f:4b:35:15:82:88:97:4f:f0:21:a0:07:6b:8e:d7:c2:
         ef:c4:61:b6:ff:37:6c:da:52:33:ee:0c:fe:8d:ad:a1:73:6a:
         d6:e6:7f:14:52:75:10:1c:13:7f:66:e7:79:84:8d:f7:97:18:
         3b:45:56:c9:e5:f2:d5:42:6e:c7:42:2f:fc:b1:30:e0:bd:68:
         3e:56:39:73:bc:42:92:79:5c:ba:83:01:bf:1d:4e:aa:09:bb:
         74:0e:0f:09:0e:09:04:28:8e:91:96:88:c0:d4:d6:64:bd:7f:
         8e:39:64:4d:15:d2:b9:91:22:ba:85:71:b1:bb:f8:fc:6f:eb:
         09:fe:83:ca:03:f1:e6:36:31:f8:10:55:d5:b3:59:b3:93:6e:
         0d:f0:3d:bb:18:99:d2:a9:50:f5:9b:9e:56:b9:bc:76:d2:9d:
         20:eb:22:03:de:a8:aa:a4:dc:fc:53:dd:ef:b9:02:3a:34:5e:
         99:74:63:3f:c5:ba:85:28:a4:77:89:69:d0:e1:2a:64:38:10:
         c1:c5:db:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:16:38 2026 by rpki-client