Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
File:                     AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft (raw, json)
Hash identifier:          3McRBeNcfEZkdF5YEzqeo+r9noG6Nq99yOQUgXVA0TA=
Subject key identifier:   9E:60:B4:8A:04:92:1B:AA:DD:3A:00:3A:BF:E0:AC:45:86:D5:9E:F9
Authority key identifier: 01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
Certificate issuer:       /CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Certificate serial:       019EBEB6577FD91B12FDCE3BE3FFAACB328D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
Manifest number:          197B
Signing time:             Sat 13 Jun 2026 02:01:21 +0000
Manifest this update:     Sat 13 Jun 2026 02:01:21 +0000
Manifest next update:     Sun 14 Jun 2026 02:01:21 +0000
Files and hashes:         1: 3lE-OFcZg5HBfiXy0gupENM3iyk.roa (hash: bLLbFDCXQ+hwG1ZI2hchMxCwkBA94qpajMIUIPVAa8Q=)
                          2: 3yN1WaImxLytELQ8orv8zRs2JTc.roa (hash: xMQ9DHu/OHk2/N1Hs4FxQtyh2D3+E7jpj/gCToK104o=)
                          3: 6tH2d7DuA0R1l2Pidcpu6hElWDI.roa (hash: CfNi98riUNvkPkY0puJ/adG9NQhrM30w+euigtAJ/Sw=)
                          4: AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl (hash: Pa/HkI9UcxCfmEt/zU7VDzOznrQxrCoof/FPgOQTJBY=)
                          5: TzbPsDZ-cxzqjv8-LwUqnZiNDVA.roa (hash: Fw/wCqm5ct+1+LFhxRHPMU/lUojt4L4OVaEyFt+zO+s=)
                          6: ddUJNLSqBtnSmNldI4m1ICrrXaA.roa (hash: 3+OVO0aN+wd5+fw851/RNy2HHQdglPinsg8QGb8dxQo=)
                          7: eJhW9z5ku9_qhNiO6iw_ATXoEHw.roa (hash: EPkgNIk6bKUUZeeYQssHTaftEyd1+IqUJt3qVX40j0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b6:57:7f:d9:1b:12:fd:ce:3b:e3:ff:aa:cb:32:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
        Validity
            Not Before: Jun 13 02:01:21 2026 GMT
            Not After : Jun 14 02:01:21 2026 GMT
        Subject: CN=9e60b48a04921baadd3a003abfe0ac4586d59ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c8:ca:55:62:31:0b:d1:a7:86:ed:7b:5b:ce:
                    7e:d9:d6:41:a3:28:75:71:c9:a7:9a:82:1d:38:a6:
                    2e:29:f6:9a:ae:8f:a6:35:76:11:03:f1:2f:97:39:
                    ac:51:94:d5:be:e1:3a:b1:da:17:c0:9a:6b:14:45:
                    57:ab:57:7f:e8:77:f5:93:f1:69:5c:ae:47:39:e6:
                    69:e7:81:6c:a9:b7:e2:b0:c8:85:c3:e0:ec:28:5f:
                    a0:80:8d:a8:06:6f:18:f0:d5:95:13:c0:b8:59:ed:
                    fd:bf:88:49:9b:9a:73:79:1a:4c:cc:63:3f:23:d1:
                    28:a8:0d:99:97:6c:3e:bf:f7:0e:56:d5:1a:9a:1f:
                    b8:dd:8f:72:14:08:17:91:6a:a8:f6:ac:90:d3:30:
                    ed:7c:d8:15:b2:2e:a8:3c:3d:1a:10:44:42:b8:9b:
                    9d:55:e9:59:96:45:10:36:4b:65:3e:34:73:06:bf:
                    4c:eb:8f:7b:c0:dc:62:7e:c1:a3:aa:54:09:f5:7c:
                    3f:3a:a1:9b:87:ea:f9:20:4b:e2:13:e3:2e:86:0a:
                    f2:bb:c1:a8:fb:0b:90:21:6c:60:aa:51:f3:34:00:
                    62:f2:8a:39:b6:24:58:6a:f5:74:05:a2:46:71:ed:
                    45:16:3e:eb:3b:10:5a:38:1a:1b:97:d0:c2:2d:a7:
                    78:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:60:B4:8A:04:92:1B:AA:DD:3A:00:3A:BF:E0:AC:45:86:D5:9E:F9
            X509v3 Authority Key Identifier:
                keyid:01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:a1:96:46:11:00:3e:58:86:05:e8:21:4c:4d:87:4a:3a:31:
         70:a3:08:f2:03:68:0f:52:4c:e3:d3:73:95:52:a8:a8:6b:5a:
         e3:78:f0:9d:11:66:d2:4e:5c:2a:2e:2b:3a:9a:2d:b0:6a:54:
         c6:bf:5d:f0:29:ad:bd:6f:18:90:b6:fa:1d:2c:ca:fd:48:3d:
         c7:ec:cf:0f:43:cf:bc:dc:dc:17:1e:e2:11:3a:bc:e3:55:31:
         51:5e:ff:9f:4a:98:21:03:32:f5:de:cb:22:50:81:eb:80:a8:
         c6:8b:95:27:da:31:f0:76:9a:f8:2e:43:35:2f:79:1f:e8:6e:
         57:2e:6e:be:b0:58:9d:9b:2e:90:7a:2c:2e:9b:85:fc:49:28:
         9a:d5:55:85:65:40:3f:dd:4c:6a:c5:4e:33:3a:e7:02:12:74:
         ad:69:37:25:dd:31:c9:aa:bc:36:f4:be:d1:6b:af:86:e2:da:
         da:ab:09:a6:42:83:a2:80:00:25:3a:c4:f3:b6:cb:3d:9b:41:
         7b:4c:64:f3:7b:9f:5c:16:f5:26:27:50:20:0c:3b:f5:00:09:
         f8:cf:41:f0:26:0c:cd:2d:2a:ef:6b:d1:e3:5b:2b:fa:2e:a4:
         57:92:40:7b:7c:d9:1a:57:97:cb:87:8b:38:ca:ec:9c:13:34:
         be:f0:03:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:51:12 2026 by rpki-client