Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
File:                     L28OoBJ6bjkhlWljgL5bsEdLAd8.mft (raw, json)
Hash identifier:          9aCQ5xdhVxNiMm0WDL84XtzNmps4vON6QAe7Dmk2TYE=
Subject key identifier:   9A:FA:5A:AE:6A:FC:F1:F8:C9:2B:E2:4E:48:4E:A6:C2:61:66:A7:28
Authority key identifier: 2F:6F:0E:A0:12:7A:6E:39:21:95:69:63:80:BE:5B:B0:47:4B:01:DF
Certificate issuer:       /CN=2f6f0ea0127a6e392195696380be5bb0474b01df
Certificate serial:       019EC14938D8509687DDBD441B63A3856D07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 14:01:01 +0000
Manifest this update:     Sat 13 Jun 2026 14:01:01 +0000
Manifest next update:     Sun 14 Jun 2026 14:01:01 +0000
Files and hashes:         1: L28OoBJ6bjkhlWljgL5bsEdLAd8.crl (hash: 0LXZqoK9s018p3vAjMM96vUeRF0E8XeSpbd8HApztRI=)
                          2: ojMiU5ZW89cnHI1G20p4HQw3p0E.roa (hash: vNBIj7f+Qx1+2T2uT1qli3Cooig9ZkkBG0sEKNGjtRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:49:38:d8:50:96:87:dd:bd:44:1b:63:a3:85:6d:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f6f0ea0127a6e392195696380be5bb0474b01df
        Validity
            Not Before: Jun 13 14:01:01 2026 GMT
            Not After : Jun 14 14:01:01 2026 GMT
        Subject: CN=9afa5aae6afcf1f8c92be24e484ea6c26166a728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a5:5d:1a:99:96:ce:d9:da:35:8d:b0:e3:28:
                    e0:a3:b3:0c:6f:1c:dd:62:63:ab:c0:2a:7c:32:ba:
                    0f:ff:76:e1:d1:1c:ca:7f:4e:10:f7:99:ae:ed:60:
                    e6:8f:a1:06:0a:58:92:10:2b:3c:31:61:51:3a:32:
                    07:69:7d:f1:fd:be:b9:23:4d:c6:80:de:c7:98:58:
                    b0:b2:33:17:11:da:e3:3c:db:52:9d:5c:cb:6c:59:
                    06:81:f4:11:2d:9e:61:6f:70:47:c7:29:cc:af:f1:
                    61:8b:47:13:f5:ee:cc:44:59:00:34:1e:7e:93:d0:
                    5d:c9:e0:a5:b6:46:da:d7:6e:81:de:1f:33:49:57:
                    90:cb:a0:c7:50:2e:a9:b8:a8:f5:26:35:cf:51:d5:
                    4c:4b:89:15:c8:37:b7:21:e2:61:33:f6:a1:f8:d1:
                    37:a3:b1:4d:cb:b8:11:e9:24:ff:a9:e0:a0:74:47:
                    2a:c1:55:0b:7f:e4:c8:06:0b:cc:51:d6:9a:f1:7f:
                    3b:b6:68:2f:93:2c:3b:0f:05:64:2c:80:89:42:f0:
                    f3:35:78:41:6f:a7:6b:b3:cd:61:fb:99:e2:71:2e:
                    94:52:f4:84:cb:01:4c:a2:cb:82:fb:62:43:ca:54:
                    86:e7:d2:9b:a4:38:2e:fb:00:c8:41:71:0a:79:98:
                    9b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:FA:5A:AE:6A:FC:F1:F8:C9:2B:E2:4E:48:4E:A6:C2:61:66:A7:28
            X509v3 Authority Key Identifier:
                keyid:2F:6F:0E:A0:12:7A:6E:39:21:95:69:63:80:BE:5B:B0:47:4B:01:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:37:c6:67:af:71:e9:81:8b:e3:e3:77:67:d9:5f:2f:41:98:
         43:82:bb:58:62:52:c9:45:96:ad:f4:68:13:8c:45:45:b0:fe:
         c9:21:a9:f0:36:af:12:d3:c5:0d:02:c9:e5:8a:48:8a:a3:32:
         22:5f:8a:10:32:79:96:af:52:fd:33:71:15:3b:70:38:ce:8a:
         82:7f:e7:b2:82:4d:0a:fe:3b:2b:29:8a:61:e3:e6:13:20:3b:
         7a:f7:a6:67:b2:91:c6:09:87:a6:1b:dd:49:ce:43:30:49:58:
         e2:de:5f:78:a1:86:e4:28:a1:fe:18:1a:a7:0d:cb:5c:6d:f9:
         9d:0a:d5:ea:f0:e1:1d:07:12:1c:c2:dc:77:40:25:ef:f0:f7:
         b6:63:86:65:c8:61:a3:0f:c8:77:a1:22:ca:9a:0a:29:80:12:
         25:e6:ee:5a:b8:27:28:ed:a3:e5:b2:c2:f9:1a:f6:a2:f2:f5:
         6d:34:65:a1:8d:c1:b3:ec:16:1a:bc:44:d0:63:9e:f2:d3:ab:
         73:ce:46:68:1b:e9:fb:56:50:21:56:44:d6:5c:da:6b:7c:6a:
         7e:e7:6d:4a:95:93:cb:e0:12:ea:bd:2b:d2:b6:de:6f:42:95:
         f6:94:4d:86:19:db:2f:ad:be:78:14:af:0f:95:a8:e0:23:64:
         eb:c2:6a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:04:54 2026 by rpki-client