Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
File:                     IC9MGjfpMTzdLup3UK4CjRjNWq4.mft (raw, json)
Hash identifier:          ySvSMq+deTg5VuOmqYkmOxgCaboQQFseTi4vaT6xw/Y=
Subject key identifier:   F0:2E:4A:D8:3F:85:C7:BB:FB:9D:34:09:90:A8:52:9B:90:6B:01:AF
Authority key identifier: 20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
Certificate issuer:       /CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Certificate serial:       019EC0DB5526B3C81282C61AFD1D787AFB7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
Manifest number:          195D
Signing time:             Sat 13 Jun 2026 12:01:00 +0000
Manifest this update:     Sat 13 Jun 2026 12:01:00 +0000
Manifest next update:     Sun 14 Jun 2026 12:01:00 +0000
Files and hashes:         1: 0N9Uxg8fR7Nyrc_u_br799CvD3w.roa (hash: uOgfIOlH3kKqWEbcGQ4cdmk7+jvbyKuPe/nGe0W6i/Y=)
                          2: 1-Sx_jXGlBlQATOQ5K8nNNuSrK8M.roa (hash: J1Zq7teTeIcSMmJFWstQ0vbrU882ZzSFqMi7WzJyvRs=)
                          3: H5n8y-hjXK24thn7egOUXJVZq0U.roa (hash: 7e4HU9h3i7rv/jpYmlCXJPYTMbRgwEsVE53RAePC3yc=)
                          4: IC9MGjfpMTzdLup3UK4CjRjNWq4.crl (hash: rY94R7fR186OEsAKRiuXFlGMlJKPfxQ0LqJE9nqM6FA=)
                          5: LdznHUG78Bp9I2Dc43gteEDaBDQ.roa (hash: +dMfTpGhmS4SyoMfOpUT8Rsq5hQCLovibVxni1srWPA=)
                          6: RNhe93FE6qEUnmI7KhC9QCPUKRE.roa (hash: +sF8WWUCiojfxzR+V4lEJDjHf4WmTy3H3whX2T288mI=)
                          7: ppWofpQW50E3NHiSmyWgHR4ILv8.roa (hash: jJuUGZv8Uf/IpTklcwXKZKYqGPYZrZ2MeGb3oJWtKa4=)
                          8: rpJcxi0ezsz1auru1a5EKwFCe6U.roa (hash: xVRYtB7vqri8W1Qa+Q3R/0ZiBHYX/xC5bFNeI81rOlw=)
                          9: sPNr1HqSOW9gPQD2njRcNYsq_nU.roa (hash: Rxx1CbY9JZ6FmKclFr3hxanK7IPpIKnWMWk/29TEk0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:55:26:b3:c8:12:82:c6:1a:fd:1d:78:7a:fb:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
        Validity
            Not Before: Jun 13 12:01:00 2026 GMT
            Not After : Jun 14 12:01:00 2026 GMT
        Subject: CN=f02e4ad83f85c7bbfb9d340990a8529b906b01af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:17:dd:f2:77:58:e7:52:97:d8:6b:e3:e6:a3:
                    11:31:12:8a:14:08:04:28:f0:79:59:78:78:fe:9f:
                    e0:8e:bd:c9:9e:ac:44:a0:8d:9c:8f:db:8b:ab:48:
                    66:34:9a:cf:c4:13:6a:ef:2e:2c:03:f0:01:19:59:
                    e5:15:e7:31:89:c2:21:6b:df:d6:2a:c1:ab:22:bd:
                    09:47:cc:bd:24:e3:0a:56:0b:59:e5:37:3a:5a:96:
                    45:95:0d:6f:5a:60:f6:a7:12:33:4b:8c:0f:01:b6:
                    93:b9:9a:ca:68:4b:0f:0e:c1:3f:f9:b6:c8:f1:b8:
                    ca:0d:fa:30:d1:93:8a:3f:61:4d:0f:f4:ea:a1:94:
                    be:99:ae:a8:5a:98:b2:61:f5:c1:5f:ea:64:45:b8:
                    90:26:d2:f6:d7:0c:81:b7:cf:44:0d:ca:ea:c9:28:
                    31:dd:16:a3:85:fd:65:55:27:6c:50:11:61:b5:79:
                    d0:10:15:e2:28:a5:99:e3:e2:b4:cc:d7:6c:aa:ce:
                    8d:c9:96:8f:e6:dd:a1:65:d9:a3:92:b1:da:c8:e1:
                    5d:51:98:5b:07:50:28:1e:bc:ae:ad:10:9a:ff:d6:
                    d4:ee:c3:b6:8c:c4:a7:dc:3b:d9:24:c1:3c:f4:a3:
                    fe:47:f3:82:3d:10:11:85:87:c5:a4:e9:49:21:c6:
                    05:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2E:4A:D8:3F:85:C7:BB:FB:9D:34:09:90:A8:52:9B:90:6B:01:AF
            X509v3 Authority Key Identifier:
                keyid:20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:22:97:f6:01:85:08:5e:75:0e:a0:ad:c6:2d:0e:91:1e:8d:
         e9:18:aa:81:f1:22:17:56:21:d3:0d:33:11:43:b5:a3:ad:a8:
         16:b7:b2:8c:bd:3f:8a:3f:39:58:ce:49:b8:66:9b:77:fc:ae:
         78:42:00:a7:99:81:7b:f8:67:d7:8e:ca:6e:ea:25:17:9b:17:
         2c:c8:5e:0b:5a:95:8d:75:47:96:53:d9:8d:bb:ed:14:38:2d:
         b6:96:94:3c:e5:1f:0d:5f:6b:de:03:24:9e:96:ce:cf:8f:d5:
         8f:c2:36:4e:87:36:a3:3b:f7:0f:bf:26:27:ee:07:c7:29:01:
         8c:e1:1b:1d:99:04:9e:a4:3b:9f:68:f0:e2:b3:f4:d3:a7:e4:
         3b:67:29:b9:9e:cd:b3:0f:1b:c7:d2:dd:da:4d:98:e8:5a:b1:
         7a:a8:8f:1b:88:c4:4f:8a:b9:69:73:22:69:96:d8:a0:b3:b0:
         46:af:a2:58:b5:59:ab:36:40:0d:da:0c:ed:3b:d8:e7:76:08:
         a6:5e:9b:ad:ba:46:97:dd:ee:fe:40:23:43:05:1c:89:7f:e6:
         27:d3:98:fe:bb:0b:3a:cf:46:71:2b:2c:65:55:e3:4c:17:88:
         92:eb:38:45:1f:cc:bf:c5:7f:47:6e:0d:88:1c:dc:18:c1:c9:
         d5:d8:93:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:09:23 2026 by rpki-client