Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
File:                     DU7hk7MBZltW9ngPIl_UTRRAk68.mft (raw, json)
Hash identifier:          TZYCsNL/rNN/kiM3lpdjyRoz7gXLAoPp6HmHwXqnVow=
Subject key identifier:   EF:D9:7F:D2:DA:82:30:76:3D:BB:F7:D7:31:B4:E0:80:85:41:C7:39
Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
Certificate issuer:       /CN=0d4ee193b301665b56f6780f225fd44d144093af
Certificate serial:       019EBDD9D42010AC6DB8DB626E40BBA4AEF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
Manifest number:          195F
Signing time:             Fri 12 Jun 2026 22:00:29 +0000
Manifest this update:     Fri 12 Jun 2026 22:00:29 +0000
Manifest next update:     Sat 13 Jun 2026 22:00:29 +0000
Files and hashes:         1: CD3PRWosTdH8Ulv5wScytKKOYQc.roa (hash: DEvo9dF1HZV7MXeXGbHtNkQP9R2Rjhzg0DnvAg1eibQ=)
                          2: CLIoybonm404BMxqfMu0fHHdCn4.roa (hash: Xh/MYJQcCtIDiyyDKrkddv4okZMGRqLr7KLy9iwERKQ=)
                          3: DU7hk7MBZltW9ngPIl_UTRRAk68.crl (hash: dJTrI2+hyeI+Aw0rDXje/xUrnrmgmT+MpXl0Ndm928Y=)
                          4: EQaCUZIVsXpGeGJub7JeUMDjQ5M.roa (hash: 0qDR8fqSNz6JKdvLNgWWpIOcGmvV7VtLTyHMuKF/8x0=)
                          5: pG4aRNi_tEglnHI4DZvr_Hj0KjI.roa (hash: 2A2zhBJlJ7gWPMPRjDvIHU22Z6SYQxUGXQxhlbRhuWg=)
                          6: vu_u7kwt45Cp4hiMkb1Rr3bcJAw.roa (hash: yGtKCejsbEuh4pXZZMT/qR4iqqRGZisKbAnR4Obgl/4=)
                          7: wAmyACSqLjnSmQEp7cXSGyFoWDM.roa (hash: 97xw7yMr/LKOcqtIasEtRCu3d3Z0Fm14QWb7ZfjVI+s=)
                          8: xZrWPBW5BgagoG32ZyaRPBaTphw.roa (hash: onQW5dWz2jt0k79UU0nLBPXrjY42Umj7KP17o4I6s9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:d9:d4:20:10:ac:6d:b8:db:62:6e:40:bb:a4:ae:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af
        Validity
            Not Before: Jun 12 22:00:29 2026 GMT
            Not After : Jun 13 22:00:29 2026 GMT
        Subject: CN=efd97fd2da8230763dbbf7d731b4e0808541c739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ae:ff:6c:24:28:c8:38:99:ff:68:ab:f3:61:
                    2a:ec:8c:3b:3f:b4:ca:90:23:0f:09:f9:47:29:b8:
                    3f:c6:fa:86:4a:22:ca:c6:39:5a:dd:e2:4d:cc:9c:
                    7e:6c:de:6a:88:c4:cf:1a:6e:55:8b:e7:c2:15:f2:
                    f9:e9:84:50:ff:bc:17:ff:77:7f:0a:70:57:d5:08:
                    8f:b3:32:c3:79:fc:c6:3f:c7:17:66:10:b0:ee:9f:
                    df:a0:c2:2c:2e:fa:ba:f7:ac:d8:fe:0f:27:14:8d:
                    94:26:f2:5e:58:05:f5:87:e0:20:7c:48:45:24:5a:
                    d8:18:f5:b0:00:2f:64:7b:ff:9d:51:c6:7e:eb:d0:
                    4e:e1:33:05:12:ef:de:0b:f4:bd:3e:c0:18:fd:fd:
                    b4:7f:ad:01:0e:2f:6e:05:6e:54:45:43:66:c8:87:
                    96:66:b0:77:ef:03:ff:08:bf:c6:3e:0c:57:11:58:
                    ce:f2:86:f6:30:73:6d:af:69:c5:13:ac:40:2a:80:
                    95:08:cd:e5:03:0e:23:0f:2b:81:0b:9e:5e:a2:88:
                    07:58:5a:a3:fc:c4:2b:40:54:f9:5f:66:74:53:a3:
                    ed:aa:a4:fd:4c:3a:08:8e:ac:ad:de:75:ab:75:ca:
                    c5:7b:e7:2a:e0:6e:80:01:e3:19:f6:b1:69:3a:97:
                    3c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D9:7F:D2:DA:82:30:76:3D:BB:F7:D7:31:B4:E0:80:85:41:C7:39
            X509v3 Authority Key Identifier:
                keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:2a:79:cf:fb:77:d8:e2:94:71:3a:dc:4f:8d:7d:e0:b0:af:
         d6:ab:6b:eb:a5:0c:77:f0:47:d4:ca:74:03:39:0b:2a:ef:e5:
         e2:0c:71:e7:a3:28:96:9e:16:d2:cf:72:a3:31:95:1f:9d:9c:
         fd:5f:5d:4b:c6:70:db:db:14:8b:83:c9:85:c5:09:84:69:99:
         da:44:f7:3b:00:28:2d:ea:b7:2c:53:62:65:fd:35:a6:d3:ad:
         a3:d0:04:d5:97:12:ac:4b:80:34:59:a8:e5:dd:1c:8c:c3:16:
         af:02:9f:cc:b0:69:e2:c0:82:39:b6:49:a2:b5:c6:1e:23:9a:
         a1:7c:08:b6:b6:75:94:91:e0:a9:92:33:23:45:d8:e1:19:3f:
         95:92:6d:a7:93:d8:b6:5c:33:50:bd:c5:08:e4:b6:b0:f6:89:
         b6:10:83:f4:c8:35:fa:f6:37:d4:bf:e9:e0:47:71:b3:08:df:
         4f:15:d6:b6:c0:3a:f7:8b:15:81:b1:29:ed:e3:12:fe:97:8a:
         2c:a9:d6:1e:1c:6c:07:2e:e1:85:5e:97:f9:cc:56:74:eb:3f:
         92:9f:38:0f:04:48:df:6e:97:cf:d2:d9:df:f3:f7:cb:5c:d2:
         ff:2d:be:13:6b:9a:79:82:ed:00:c1:ea:dc:c7:cb:7f:24:f6:
         48:4f:8c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:11:17 2026 by rpki-client