Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
File:                     ook6SyhKy12KQWQokEVJIQlRFog.mft (raw, json)
Hash identifier:          D3CKSgk8I0gKC0orm2OOkIUHkzGmOILrLRCOLggtLo0=
Subject key identifier:   7F:FD:BF:6B:C4:5B:93:EF:1B:90:8C:F7:35:DF:4D:46:13:A1:4F:5E
Authority key identifier: A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
Certificate issuer:       /CN=a2893a4b284acb5d8a4164289045492109511688
Certificate serial:       019EBE479DBF039A0D13342905BB43AF640D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 00:00:24 +0000
Manifest this update:     Sat 13 Jun 2026 00:00:24 +0000
Manifest next update:     Sun 14 Jun 2026 00:00:24 +0000
Files and hashes:         1: 4QHKJAt_J6Dk7DS-fI90Y5fyecM.roa (hash: /2OJEfbC2dma7BW4mnYblDtLqxXKsA1Bb6esmzFMKVw=)
                          2: J4Me2HY4xHGWyE1Tp-R8f3Ui9Q8.roa (hash: tQW9ueGnv8G7jNjqLoCvmaNsDJOWMXM0waQOLK2+m+U=)
                          3: OSMOWPw5_NNyYhC4AJAUWNDj5xI.roa (hash: ThZPinIztYZdRJgEkaP3N9iyXW8sDTnUnnqJV/mG1Tc=)
                          4: ook6SyhKy12KQWQokEVJIQlRFog.crl (hash: 5gtTZXmNNvBIccmcOJaVYYVklxD37GrK3g7MKvpNT5s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:47:9d:bf:03:9a:0d:13:34:29:05:bb:43:af:64:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2893a4b284acb5d8a4164289045492109511688
        Validity
            Not Before: Jun 13 00:00:24 2026 GMT
            Not After : Jun 14 00:00:24 2026 GMT
        Subject: CN=7ffdbf6bc45b93ef1b908cf735df4d4613a14f5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:76:c7:29:6a:15:23:40:bf:5f:57:ac:98:c6:
                    ba:95:12:77:4e:6f:57:33:77:e1:26:cc:52:87:28:
                    5a:93:ab:02:3e:4e:22:70:fa:24:ab:b3:20:50:f5:
                    25:32:b3:b8:0a:d4:58:1e:f6:0a:6a:33:49:d7:3c:
                    59:86:62:72:5e:21:da:6d:24:ae:8e:4a:1f:b8:4d:
                    06:74:df:48:73:48:86:2e:24:59:57:a0:f7:d2:ae:
                    70:3b:e8:d9:65:99:a4:cb:98:76:20:5e:bb:13:fd:
                    d5:a8:ec:d6:22:0d:0c:2d:a1:55:c4:17:af:b7:bf:
                    ff:90:fc:35:84:63:c4:a3:95:d7:46:1f:7a:9b:ab:
                    3c:4f:43:65:17:0b:51:7c:cd:fe:09:b4:81:0a:b9:
                    40:25:72:43:20:96:7a:76:32:bf:84:09:49:87:d8:
                    21:51:6d:4e:d8:56:09:1e:7c:98:4f:98:e0:ee:80:
                    8f:10:80:af:e0:6f:ea:ed:d4:6d:cc:d4:f0:a5:99:
                    68:2c:eb:12:08:e8:72:e2:96:af:2e:86:89:dd:1c:
                    a0:af:97:6c:20:e4:d8:b6:3f:db:d7:57:f3:62:fd:
                    e6:a4:85:bc:73:b1:c7:95:96:02:8f:52:f6:dc:93:
                    c5:48:89:ea:2b:cb:d1:09:eb:f6:03:7c:ff:f1:5a:
                    3f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:FD:BF:6B:C4:5B:93:EF:1B:90:8C:F7:35:DF:4D:46:13:A1:4F:5E
            X509v3 Authority Key Identifier:
                keyid:A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:b0:69:e4:f2:f7:25:76:ab:ad:e3:6d:20:fe:2a:48:21:27:
         0f:7a:4b:0a:1f:a6:de:41:6d:7f:8e:47:05:46:d8:b1:26:56:
         2e:d1:2f:e8:59:7b:bd:c2:88:31:47:cb:3e:42:02:65:a1:cf:
         c9:f0:2c:bd:4b:a5:16:80:6a:2d:8d:01:1c:b2:0e:6f:d1:93:
         e6:6a:d0:b0:d8:ca:27:19:c7:86:05:f4:01:f3:0c:a8:fe:d6:
         3b:0e:0a:99:e8:79:57:86:5c:87:1a:82:02:21:e4:be:1c:59:
         45:9c:03:aa:af:d5:8e:0b:ce:64:88:c1:6d:d8:12:80:03:f7:
         60:2c:b1:23:b1:47:d3:0f:4c:8e:53:ae:97:29:00:21:ae:31:
         37:4b:0c:99:23:e1:2e:39:7c:02:c4:24:6c:4b:ee:b9:43:a6:
         a1:91:a2:72:01:f4:36:0d:d5:5b:82:65:9f:32:52:e8:60:4a:
         50:6d:59:3f:72:4e:e1:81:be:03:6c:56:b7:52:b2:26:2d:07:
         f5:3c:02:7d:d2:41:fd:98:38:a4:88:33:ea:18:1d:6e:f8:f4:
         fa:96:5e:a5:4e:c4:4c:1e:2d:c3:92:16:6f:26:d5:9f:2e:e8:
         a3:7f:29:7c:30:1b:16:61:be:77:7f:98:30:80:f0:d2:9b:3c:
         d1:9a:8d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:23:13 2026 by rpki-client