Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft
File:                     9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft (raw, json)
Hash identifier:          +mVcmHVJZ+J/sJczpIhweYlud1G3scjVk8BID5CIikM=
Subject key identifier:   35:79:89:B6:69:44:66:AE:8F:D1:13:14:FF:BD:B5:6C:FD:87:71:2C
Authority key identifier: F6:F1:8C:02:40:57:42:C2:53:77:D6:96:CD:2A:69:DC:C9:74:BF:F8
Certificate issuer:       /CN=f6f18c02405742c25377d696cd2a69dcc974bff8
Certificate serial:       019EBF240ACA3A0D238C182A79E2C44B5F31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft
Manifest number:          195D
Signing time:             Sat 13 Jun 2026 04:01:10 +0000
Manifest this update:     Sat 13 Jun 2026 04:01:10 +0000
Manifest next update:     Sun 14 Jun 2026 04:01:10 +0000
Files and hashes:         1: 9vGMAkBXQsJTd9aWzSpp3Ml0v_g.crl (hash: v4ZKV6logOw+BaKqjfQp/tUK7NfjdcAPEV6SgpCgVzQ=)
                          2: WR2mMv7qmUceN0Mkq4FVsAqss34.roa (hash: BI2UfIzSLpmq5ZqkIGDg6SgwwPzP/38b7CPwIY4B+T4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:24:0a:ca:3a:0d:23:8c:18:2a:79:e2:c4:4b:5f:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6f18c02405742c25377d696cd2a69dcc974bff8
        Validity
            Not Before: Jun 13 04:01:10 2026 GMT
            Not After : Jun 14 04:01:10 2026 GMT
        Subject: CN=357989b6694466ae8fd11314ffbdb56cfd87712c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e2:b1:ab:eb:98:8f:21:59:a5:e9:c3:a8:cd:
                    f4:87:4a:72:87:0f:12:98:03:17:56:a2:34:6f:e7:
                    b1:f9:46:2c:ce:91:21:fe:28:76:13:54:e4:a1:e4:
                    d5:b8:50:6c:58:d6:bd:f8:74:6d:fb:07:82:fa:56:
                    6d:2c:f9:b5:fd:83:cc:3c:6f:52:ab:57:c6:68:97:
                    6b:1b:20:76:9a:2e:12:60:cf:14:5b:5b:9b:59:7c:
                    b0:b5:87:aa:11:86:87:4e:5c:96:87:04:41:4c:91:
                    e6:f4:7a:33:5e:22:3f:33:8f:11:2d:06:22:b5:75:
                    db:b8:96:47:b6:9b:15:a5:4c:a8:1d:01:d2:aa:eb:
                    db:49:f4:1f:d7:9a:60:1a:83:9a:ae:68:01:79:ff:
                    3c:e2:cf:56:dd:d2:6e:bc:a0:c3:8e:85:c7:46:a4:
                    89:41:a6:30:f4:16:d1:e1:cb:9c:9c:a7:22:2e:74:
                    6f:43:a0:64:1d:1b:6c:7d:d3:3f:5a:ea:a3:01:1c:
                    16:1e:98:ef:e3:94:59:7e:50:9f:6e:f2:31:5c:3d:
                    74:db:d8:77:02:0c:ab:8c:b7:0a:8f:f9:e3:6a:6d:
                    2c:13:9d:e1:1d:ec:64:20:85:a3:49:a1:76:3e:33:
                    60:75:84:59:93:44:67:34:a9:68:ce:d4:32:af:65:
                    1d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:79:89:B6:69:44:66:AE:8F:D1:13:14:FF:BD:B5:6C:FD:87:71:2C
            X509v3 Authority Key Identifier:
                keyid:F6:F1:8C:02:40:57:42:C2:53:77:D6:96:CD:2A:69:DC:C9:74:BF:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:f8:22:59:cd:58:89:7a:23:1b:f4:fb:13:3a:55:0b:5f:a3:
         c1:f9:0e:d0:47:51:0e:87:31:49:25:6c:a3:9e:b1:57:2d:a7:
         86:c1:7d:b1:10:74:07:05:2d:d8:86:50:ff:65:f5:99:fa:cf:
         3a:b3:83:41:f7:62:76:ee:4d:fe:b5:ff:c5:21:2b:36:96:7b:
         9f:d4:7f:92:ba:c4:2a:eb:31:5e:29:05:86:d1:87:71:2c:05:
         4f:d5:79:12:c6:27:1f:2f:4d:73:81:14:cc:c3:32:88:bd:65:
         05:e1:84:3b:c0:4b:27:02:cd:20:d9:5a:50:bc:7b:f4:7c:62:
         01:02:c9:c3:a4:72:b6:cc:0c:ba:c7:27:05:35:22:78:ae:74:
         b1:d0:b3:bc:a6:dc:40:ea:59:96:bd:a9:a5:7e:7d:8d:fb:7b:
         5f:9d:73:10:98:67:46:b4:69:54:84:c6:ff:60:65:6c:5c:d9:
         50:69:b1:7b:e2:55:b9:00:d1:1c:b6:5f:24:77:5e:3c:35:04:
         0b:38:75:fd:fb:bc:ff:d9:f5:de:84:93:50:83:5d:0a:3c:35:
         91:8c:5e:f3:ba:6c:a2:c7:85:44:29:52:45:75:82:40:20:e7:
         5c:f0:ac:2a:ef:df:93:01:34:b3:54:77:ef:4b:58:92:2a:6b:
         39:e3:df:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:35:22 2026 by rpki-client