Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
File:                     01QLUY11--_WFr_ZTPBf0lukiLY.mft (raw, json)
Hash identifier:          wp5bRNRBtaHcYA8Zd7/NKWFu00RxdwfwyNmOcYLZj4s=
Subject key identifier:   21:B2:09:B9:E7:35:D5:12:1B:38:BC:8E:FF:F8:B5:4D:28:8C:C6:27
Authority key identifier: D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
Certificate issuer:       /CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Certificate serial:       019EBE4838CDF6CBCEF971D02A885FC3C9A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 00:01:04 +0000
Manifest this update:     Sat 13 Jun 2026 00:01:04 +0000
Manifest next update:     Sun 14 Jun 2026 00:01:04 +0000
Files and hashes:         1: 01QLUY11--_WFr_ZTPBf0lukiLY.crl (hash: 3FzM1uyXOxW2nEnNQAtx2Y8n9fmlM699yi98QOnbQWQ=)
                          2: uXxyOPGVnASS7u5ky0_kq_0zUmQ.roa (hash: 83RawsrluXe18GC2cGOGUx568BZVRaon+KIyn+++hqw=)
                          3: z4dC7BchYgJeEJVK0u1hQk0LX9w.roa (hash: eWL2mFtDMtr2WhkRkhhO2F6MQbo7HgvI3DvROQrIYRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:48:38:cd:f6:cb:ce:f9:71:d0:2a:88:5f:c3:c9:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
        Validity
            Not Before: Jun 13 00:01:04 2026 GMT
            Not After : Jun 14 00:01:04 2026 GMT
        Subject: CN=21b209b9e735d5121b38bc8efff8b54d288cc627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:06:c7:84:a1:ff:c8:1c:28:65:d9:a5:31:25:
                    58:e2:c2:b3:47:db:50:c8:d7:e9:0b:0e:49:5f:51:
                    a1:c2:57:72:ab:01:b1:e3:36:98:d4:b2:6c:e4:fa:
                    e3:2d:97:66:98:05:c0:3b:14:a6:3d:e7:b8:d1:dd:
                    31:7a:a7:2f:d1:e1:2a:b2:ba:77:1c:16:15:15:06:
                    a2:72:bb:40:ab:ab:32:b1:21:89:55:64:ad:8a:9a:
                    39:45:ae:39:f6:ac:c8:2a:b2:4d:b9:7e:d4:bb:38:
                    df:70:bd:b4:c3:5a:4e:26:c5:fb:e0:a7:d5:35:4a:
                    11:2f:d2:33:49:76:10:1e:31:c9:7f:b8:c1:61:56:
                    47:16:ec:41:04:fe:6f:96:ed:46:b2:a1:c6:07:87:
                    47:3c:c7:f2:6d:e9:6b:f5:5c:27:75:ec:40:3f:fc:
                    bb:60:15:02:f4:de:21:07:e0:d1:77:dc:63:f0:14:
                    4a:23:d1:c9:9e:4d:64:fc:60:cb:08:38:8a:4d:00:
                    9c:68:6b:ea:cf:da:e9:8b:3e:93:59:47:bc:eb:a1:
                    df:e9:a5:9a:8e:20:44:e6:b2:17:f7:57:aa:fa:79:
                    f9:b5:3b:08:22:3f:d8:3b:2b:26:0c:d1:e7:32:0f:
                    cd:0b:eb:25:4e:6f:47:8d:ee:f7:10:55:80:03:1b:
                    a9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B2:09:B9:E7:35:D5:12:1B:38:BC:8E:FF:F8:B5:4D:28:8C:C6:27
            X509v3 Authority Key Identifier:
                keyid:D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:b0:05:6f:28:5b:81:99:1e:72:fd:2c:98:1b:cf:8b:f4:d5:
         64:b2:11:73:1c:cb:34:07:f8:67:45:34:cf:37:9b:df:9c:2b:
         67:f8:d6:71:7f:83:55:17:e7:87:af:dd:37:99:32:1b:17:3d:
         0e:3d:12:34:4d:1e:e9:b5:55:84:cc:2e:c7:a3:42:c7:ad:f1:
         ce:fe:c5:09:bc:95:f3:54:0a:0e:93:15:27:42:d5:9e:22:80:
         e6:5e:ac:77:35:8a:94:83:58:86:64:a5:5f:c3:05:c4:a7:e6:
         a1:6e:8d:30:0b:58:48:83:3f:ad:13:e8:7e:0b:17:d5:9e:75:
         3b:02:13:98:bb:f3:3e:a3:ce:86:89:2d:cc:fe:3d:d1:f4:55:
         52:5c:bb:98:a0:35:5c:f3:7d:5c:1a:8c:80:65:b4:bd:de:bf:
         9a:13:3c:45:34:79:07:5e:83:24:ef:09:75:0c:34:4a:a0:69:
         10:57:0d:c9:0f:c7:27:2e:da:a4:39:e4:e6:f7:de:29:f4:ee:
         f3:d7:bf:a4:63:17:44:94:26:02:3d:31:bf:36:1b:f3:fb:b1:
         88:c3:53:20:a7:15:a4:a1:ba:7e:91:b0:7d:a2:49:f7:cf:96:
         59:99:d2:58:7c:6a:2c:6c:df:c6:4b:af:16:26:9e:79:fb:85:
         bc:0e:f7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:50:57 2026 by rpki-client