Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
File:                     3ImcKGZO6BlKZASORsYMbl8ZDFM.mft (raw, json)
Hash identifier:          Hb/jsgxk+V1pv4rXHuycEf9cspREYRXkkerUwqMv60U=
Subject key identifier:   AE:74:B7:59:5E:97:1B:3B:63:15:2E:38:75:2F:30:63:F9:39:18:F8
Authority key identifier: DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
Certificate issuer:       /CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Certificate serial:       019EBE479EED127DE04CBBE7AEB0CFA2417D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 00:00:25 +0000
Manifest this update:     Sat 13 Jun 2026 00:00:25 +0000
Manifest next update:     Sun 14 Jun 2026 00:00:25 +0000
Files and hashes:         1: 0608zt-8orJ6kNX3XPv0kMyOK5Q.roa (hash: W0XCT9jMbiNFbMnkrDbCdpjPNd3+brMKEABetkqN5ic=)
                          2: 3ImcKGZO6BlKZASORsYMbl8ZDFM.crl (hash: l5uD9Nog3SUh+DrPVn1y6yQ4fQteubCR+tNFVHcBqh4=)
                          3: AigJOVmk91sugmvhBV28DfHr9uY.roa (hash: FSxnVUPo9yR+90FH9HDs0WUkaZbCnvLTff3dvJ/Kgmc=)
                          4: FiKj8ScLx1ATx_rGZ7SGgclIc6s.roa (hash: xRch7fJVmZ0aIJvLTTrTe6WF/gV2dip1dza26YmqWck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:47:9e:ed:12:7d:e0:4c:bb:e7:ae:b0:cf:a2:41:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc899c28664ee8194a64048e46c60c6e5f190c53
        Validity
            Not Before: Jun 13 00:00:25 2026 GMT
            Not After : Jun 14 00:00:25 2026 GMT
        Subject: CN=ae74b7595e971b3b63152e38752f3063f93918f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c2:f4:27:09:0c:04:d7:38:e4:d7:8c:59:ba:
                    79:04:5e:e6:da:a5:d0:d9:0e:be:e8:f9:06:12:bc:
                    b0:a7:16:bb:a1:c1:98:80:55:fa:02:af:08:ae:0a:
                    f7:23:4f:c6:f7:bb:1b:59:92:c3:53:1b:d1:2e:c0:
                    ec:a0:35:f9:d0:0c:94:44:7e:05:14:78:5c:99:be:
                    71:22:ed:d5:33:21:3f:ed:b9:13:ae:63:85:74:89:
                    2e:91:d3:8a:e5:78:4b:cb:11:73:b3:43:8e:57:ad:
                    06:59:4b:f7:69:9e:7b:18:6a:fe:c0:13:96:6f:aa:
                    e5:35:35:73:a4:0e:16:95:a0:6d:b4:d5:3d:d6:ce:
                    07:d2:50:7b:0d:d8:68:cb:4d:90:7a:45:82:a3:ee:
                    eb:01:94:62:04:38:76:68:4f:19:a5:be:ec:e1:5f:
                    dc:4d:90:0e:7f:a2:dc:33:9e:39:a4:dc:c7:8e:df:
                    aa:33:20:5e:a1:d9:a1:ae:6f:40:ab:3d:18:76:ad:
                    9a:75:12:44:1a:1b:d7:69:1e:4b:a0:98:85:5a:4b:
                    fe:94:43:dc:30:31:39:eb:33:3e:5d:fb:27:09:d8:
                    0d:73:bb:48:7e:73:22:b4:57:1b:78:48:f6:b7:b8:
                    2a:c2:35:d1:2b:d6:0a:ec:b7:1c:af:68:70:6e:08:
                    33:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:74:B7:59:5E:97:1B:3B:63:15:2E:38:75:2F:30:63:F9:39:18:F8
            X509v3 Authority Key Identifier:
                keyid:DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:4b:ff:67:d2:87:08:48:28:c7:00:02:9c:a2:f7:ba:13:6e:
         48:8a:11:fc:d9:a9:05:08:b5:72:66:db:30:07:be:71:d0:2c:
         63:bf:1a:1c:b3:a7:4a:ef:8d:78:fc:1c:5f:07:5b:b3:f3:22:
         d0:51:aa:31:f4:d1:b6:a9:8e:c0:b7:1f:3c:0e:20:2d:d7:31:
         a4:a6:ad:fb:50:0e:03:c5:06:fe:cd:db:12:e2:8d:83:d6:93:
         cb:99:61:a2:01:fc:02:4c:f2:16:e2:7f:a5:72:32:cc:84:7e:
         f5:64:af:42:78:d7:e8:1d:6b:fb:3a:09:88:84:8e:82:80:c3:
         63:83:cc:58:00:96:5d:ca:2d:19:9e:94:39:0c:65:8f:aa:8a:
         ba:73:1c:82:d8:e7:0a:7b:75:90:f7:e1:fa:ea:fa:c1:35:59:
         ab:d1:2e:85:65:74:64:fa:e7:d2:cf:c1:03:50:e2:f9:dd:ac:
         3d:7c:7d:61:2f:c6:9d:34:7d:61:37:8a:8f:ec:29:61:a1:06:
         e8:f4:35:a4:75:37:9e:08:26:88:bb:58:1b:38:01:11:ab:f4:
         ce:a8:cf:a3:cd:ad:df:8c:57:7f:8d:b6:94:fe:bf:53:23:f0:
         3a:0a:6e:f4:53:44:c6:9a:00:63:a7:98:0f:9c:51:d2:e3:cc:
         9f:2d:49:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:55:28 2026 by rpki-client