Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
File:                     1-9JdpktGOvOLRE_zcxGxVm31_LI.mft (raw, json)
Hash identifier:          VixaN6elXF4hBcDkHH3gJz4+V60mEeJyRpxQYiPZMXA=
Subject key identifier:   01:6D:E5:5A:C4:41:EB:FB:05:BB:8E:31:87:C3:06:9F:1A:7F:6C:B5
Authority key identifier: FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2
Certificate issuer:       /CN=fbd25da64b463af38b444ff37311b1566df5fcb2
Certificate serial:       019EBF235B0C0D3B3B597579010EA687A388
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 04:00:25 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:25 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:25 +0000
Files and hashes:         1: 1-9JdpktGOvOLRE_zcxGxVm31_LI.crl (hash: ZDARwo1h9OLVj47fRLHib7WWDqgIdzcW4/uINsm4VD4=)
                          2: Vi82WamhNS_7BkMeH_Obwd9eH6o.roa (hash: /zAtnxefQ5sdQ3fDobW8m7Zl2IYqkGJl44bGBXQLVlY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 04:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:5b:0c:0d:3b:3b:59:75:79:01:0e:a6:87:a3:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbd25da64b463af38b444ff37311b1566df5fcb2
        Validity
            Not Before: Jun 13 04:00:25 2026 GMT
            Not After : Jun 14 04:00:25 2026 GMT
        Subject: CN=016de55ac441ebfb05bb8e3187c3069f1a7f6cb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:79:80:7f:bb:b6:a4:d3:9d:0f:f5:b4:05:63:
                    71:1a:68:2b:6e:fc:21:bb:8b:1f:d7:d6:63:15:51:
                    9e:fb:53:aa:ab:fa:c9:9a:93:ac:93:33:9f:a2:7b:
                    34:32:d8:4d:19:d7:51:8b:3d:12:95:4e:fb:44:97:
                    5c:8d:b3:3a:77:94:8f:7a:21:00:02:cf:01:2b:73:
                    db:c8:03:b1:90:8b:12:37:5f:fe:2b:5e:62:93:ef:
                    3e:3b:dc:b2:be:60:87:79:32:0e:1d:91:9c:b5:48:
                    55:04:04:a9:03:2e:db:b4:54:63:58:3a:d3:8d:15:
                    64:b0:7c:6c:55:13:c4:3f:ca:db:3d:23:85:fa:8b:
                    47:fc:98:93:7f:3f:6a:4f:9f:37:73:8e:c0:03:53:
                    bf:6d:7f:c8:ca:24:07:c2:99:1c:ce:25:19:96:89:
                    37:fb:33:08:64:5c:0f:0d:c6:c7:2f:d0:8d:e4:f0:
                    b3:1e:8c:8a:82:93:98:2f:c8:71:22:38:e6:bc:e1:
                    27:97:22:d3:ea:3d:2c:23:29:9e:0d:f0:b1:48:7b:
                    54:03:ba:10:ab:e0:f5:44:9d:05:9b:3a:93:da:4e:
                    ff:97:80:f2:3e:68:54:66:63:d4:40:e6:bc:e7:12:
                    c8:95:0c:e4:91:b5:5d:c5:a0:1f:4f:ea:f7:d0:58:
                    94:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:6D:E5:5A:C4:41:EB:FB:05:BB:8E:31:87:C3:06:9F:1A:7F:6C:B5
            X509v3 Authority Key Identifier:
                keyid:FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:a8:71:9d:be:14:ba:cb:79:82:5d:21:7a:47:7e:36:b7:d3:
         58:32:f3:b4:a0:08:0d:44:49:6e:12:a5:ef:69:cb:2e:2a:e2:
         cb:7d:3e:93:7c:fe:36:25:3a:43:b3:3d:b9:68:c8:56:eb:0e:
         db:dc:60:a6:9d:1f:a2:9f:32:3e:bc:db:05:c7:35:6e:89:c6:
         9a:6a:f0:38:ae:bf:92:6e:40:9b:20:05:f0:b4:e7:45:4b:f5:
         9c:a6:e4:53:95:fb:2d:cb:eb:51:bb:10:36:ae:fc:18:2b:1d:
         cd:86:44:07:a4:e4:5d:39:f9:cb:b8:48:46:71:b6:af:ba:f8:
         21:43:69:ef:d0:7b:36:51:10:42:38:16:b5:b7:00:31:2c:43:
         d9:b8:94:8a:2e:a7:ee:29:ee:06:ec:da:90:fd:bb:05:41:4b:
         0b:aa:1e:0a:1c:74:39:b1:e1:87:93:c8:a5:b2:bd:49:8c:01:
         a7:73:87:69:19:51:9d:53:16:b2:0c:73:10:3c:f6:37:4d:c1:
         24:4e:e1:a0:f8:95:7e:82:5f:14:e5:4f:ed:e3:3d:22:54:01:
         70:fb:74:e1:f0:cf:3d:e0:cc:7f:da:66:4e:a6:f7:90:f6:e5:
         de:78:70:3e:c8:50:f3:ca:8d:29:f7:17:a5:80:74:b9:cc:38:
         3c:4f:86:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:04:26 2026 by rpki-client