Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft
File:                     60GVbRLcuYK-1HqfrEp-SOd4fHk.mft (raw, json)
Hash identifier:          djpIEQ+cNNFIJlY1odcW4h6O+HW+K6Dl/4EFOXNpxs8=
Subject key identifier:   A7:77:59:A7:23:9D:DE:AA:FD:B5:DC:3F:EC:C2:96:8F:47:04:F8:94
Authority key identifier: EB:41:95:6D:12:DC:B9:82:BE:D4:7A:9F:AC:4A:7E:48:E7:78:7C:79
Certificate issuer:       /CN=eb41956d12dcb982bed47a9fac4a7e48e7787c79
Certificate serial:       019EBEED1455C2D8E307EDEF194E7BC45791
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/60GVbRLcuYK-1HqfrEp-SOd4fHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 03:01:08 +0000
Manifest this update:     Sat 13 Jun 2026 03:01:08 +0000
Manifest next update:     Sun 14 Jun 2026 03:01:08 +0000
Files and hashes:         1: 60GVbRLcuYK-1HqfrEp-SOd4fHk.crl (hash: YAkpP5aks40ldbcKRi5OqVgFnyIgnln8X9iWESRRTsE=)
                          2: rQtAzEA3IuNuehdcnThK_xXRMt4.roa (hash: cRYFONZaNIX4ZtEkAVHlLM1U8vITX1Zqs8J2LZhQlqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/60GVbRLcuYK-1HqfrEp-SOd4fHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ed:14:55:c2:d8:e3:07:ed:ef:19:4e:7b:c4:57:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb41956d12dcb982bed47a9fac4a7e48e7787c79
        Validity
            Not Before: Jun 13 03:01:08 2026 GMT
            Not After : Jun 14 03:01:08 2026 GMT
        Subject: CN=a77759a7239ddeaafdb5dc3fecc2968f4704f894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:31:5b:62:b2:a9:ee:b2:5c:76:dd:10:d0:1d:
                    5f:50:d7:25:64:44:53:17:49:6f:0b:13:19:87:51:
                    b6:52:5c:b2:fb:ac:d7:d5:9e:32:69:7b:ba:6a:47:
                    49:bc:26:9f:cd:a4:f6:02:f5:3b:40:9a:8b:e2:73:
                    f9:d6:ed:a3:d2:9e:09:f5:57:eb:34:f0:c1:c7:e7:
                    97:a6:7f:ee:e9:9f:49:67:42:bb:c5:45:74:ed:0f:
                    8b:71:f2:47:18:9f:a6:2d:cb:07:19:32:fe:f2:ae:
                    96:5f:ea:4d:fc:e0:9f:81:93:54:5d:d0:6f:fb:49:
                    e0:14:08:b9:41:c5:7d:29:9d:47:b3:84:58:93:15:
                    fc:36:97:af:6f:22:47:f1:ca:17:a1:83:4c:e7:e9:
                    62:a6:11:63:3b:d4:ea:c4:b3:f4:fc:b6:24:2b:91:
                    5d:13:a2:fb:ae:f9:96:b7:4f:7d:6b:79:71:bb:e5:
                    2a:c3:4c:f8:ea:e7:f6:e0:1f:45:43:f7:10:36:5d:
                    18:31:71:0d:67:3a:c7:78:38:b2:77:08:ac:7e:f4:
                    fb:da:df:2f:fe:d2:de:fd:3b:43:0f:b9:25:ef:7b:
                    b1:b2:0f:af:a0:9b:73:89:df:fa:e7:fc:d7:34:24:
                    de:37:16:33:aa:69:26:64:83:23:d4:98:19:e4:3c:
                    af:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:77:59:A7:23:9D:DE:AA:FD:B5:DC:3F:EC:C2:96:8F:47:04:F8:94
            X509v3 Authority Key Identifier:
                keyid:EB:41:95:6D:12:DC:B9:82:BE:D4:7A:9F:AC:4A:7E:48:E7:78:7C:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/60GVbRLcuYK-1HqfrEp-SOd4fHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:e0:10:84:b5:74:e0:21:7c:b5:29:73:bd:55:98:89:39:6d:
         46:bf:ac:0a:72:49:8f:b8:55:17:98:b1:76:be:87:c5:1b:ce:
         d8:28:17:8d:ff:38:80:1f:04:fa:9a:b7:88:56:b8:03:6c:1a:
         f9:89:3f:60:c5:3c:ad:b0:6b:11:6b:50:89:d1:58:14:7d:da:
         69:0c:cb:5b:86:e2:7a:85:09:5b:75:83:9b:a3:58:90:2b:f1:
         2e:32:99:ff:3a:fa:92:8a:b4:de:d6:73:50:ee:89:6c:eb:47:
         77:7d:7b:14:26:96:43:04:e4:30:23:1a:a6:5f:18:6e:22:a2:
         3c:4d:5c:6c:e7:80:25:80:0b:51:56:ed:1a:29:8e:0f:ad:1b:
         63:c2:b8:c1:b4:d7:7c:c7:ff:ce:c3:6c:4c:19:47:9d:50:d7:
         8e:71:e6:51:73:61:70:fe:8b:02:16:a3:34:e1:0b:b8:fb:4b:
         53:a7:c1:bd:08:bf:ee:af:79:8a:5a:13:52:dc:5a:35:6c:9c:
         4f:66:37:4d:4b:a0:6b:27:80:68:78:30:59:86:df:d2:08:cf:
         2b:8f:2f:a6:4e:d3:5f:3e:55:c3:f2:62:95:3a:50:b1:3f:bc:
         ab:8f:df:cc:1c:31:4a:9c:30:3a:c0:1b:77:c7:92:d6:26:46:
         17:fb:e7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:18:47 2026 by rpki-client