Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
File:                     OwzUTrvj0NagcudRA_IxYGmV9qs.mft (raw, json)
Hash identifier:          Y4nQsHTX5N6FQrPGGxgVhPMnr9IfU3r6lGPXbWZw1jw=
Subject key identifier:   D3:95:A6:B6:12:BF:26:48:9D:4C:AD:B5:37:02:DB:DA:A9:3D:26:20
Authority key identifier: 3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB
Certificate issuer:       /CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
Certificate serial:       019EC4B84509C7EC54B02C544DC35658F0B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
Manifest number:          195C
Signing time:             Sun 14 Jun 2026 06:01:11 +0000
Manifest this update:     Sun 14 Jun 2026 06:01:11 +0000
Manifest next update:     Mon 15 Jun 2026 06:01:11 +0000
Files and hashes:         1: OwzUTrvj0NagcudRA_IxYGmV9qs.crl (hash: 19ny1kqiqhAP4DoeHJTEalLo07vUiiQuglKgDvd+JKM=)
                          2: aZ2TcbNwaylOZgDoSe12Obbdwts.roa (hash: RGUNbjUgv7q6fxRKJH6x2SAZxrih2NcUX8E0Ivt0oLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 04:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:b8:45:09:c7:ec:54:b0:2c:54:4d:c3:56:58:f0:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
        Validity
            Not Before: Jun 14 06:01:11 2026 GMT
            Not After : Jun 15 06:01:11 2026 GMT
        Subject: CN=d395a6b612bf26489d4cadb53702dbdaa93d2620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8e:e9:81:a1:ac:51:ea:3c:d9:76:4b:a4:ee:
                    e0:aa:db:c4:b2:6a:c7:d5:04:5d:b5:f1:2c:18:ae:
                    d1:30:95:c4:60:59:c5:38:d1:cf:73:47:1e:99:dc:
                    b4:de:fb:3f:40:2e:47:0f:63:91:dd:36:be:07:5f:
                    85:17:6e:f6:51:65:92:ca:b1:96:1f:b6:a1:aa:1f:
                    5b:02:10:27:59:19:29:db:a9:47:16:a7:70:ab:a6:
                    aa:bd:eb:3a:70:8c:e1:88:23:1c:03:76:46:f3:5c:
                    60:75:d8:b7:3c:bb:f3:2c:99:70:29:4f:8e:09:f5:
                    41:e2:c9:85:7c:12:e9:bd:c3:ee:14:1e:d5:50:22:
                    d5:8c:85:ce:d8:79:d0:4d:13:97:28:cb:22:e3:09:
                    5f:4d:3e:3f:81:94:3e:9a:36:b8:9e:c4:a7:33:94:
                    75:d4:54:6c:90:c1:c1:7f:1a:87:d5:32:3f:b2:8c:
                    1f:fa:ad:b4:45:57:a4:ef:99:11:8b:86:da:d6:b1:
                    e2:be:5b:01:1b:10:32:06:b8:f8:9b:42:8d:72:01:
                    22:26:d3:3e:f6:ef:9f:6d:33:83:de:95:00:50:25:
                    7a:79:42:cd:62:73:0a:44:77:52:67:93:f2:ce:2b:
                    28:7c:e2:1f:4d:8f:44:a8:aa:60:4f:8a:47:41:a0:
                    02:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:95:A6:B6:12:BF:26:48:9D:4C:AD:B5:37:02:DB:DA:A9:3D:26:20
            X509v3 Authority Key Identifier:
                keyid:3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:a9:fe:4c:fb:a9:64:0f:15:31:3e:7d:52:92:59:c1:9f:01:
         f0:48:89:4b:18:47:b1:b2:82:65:e7:3c:e0:37:b4:cc:f7:36:
         6b:26:09:99:a4:6d:14:2b:41:66:bd:a9:90:ef:66:f6:da:10:
         84:e2:6a:d9:fe:34:38:c2:41:57:c4:bb:14:ff:84:8f:e7:e4:
         13:f4:db:da:62:94:69:5f:53:35:d9:39:49:0d:5c:46:0a:9d:
         4c:b1:81:eb:fe:af:88:5b:2e:13:dd:02:cc:a1:67:de:a9:33:
         db:c1:74:1b:18:5e:08:0d:54:a5:66:eb:ef:4c:48:44:31:64:
         41:c1:82:06:10:e9:36:8e:e2:5b:47:e6:42:d3:e1:c1:41:24:
         e4:a4:32:98:7b:06:ca:11:df:4e:db:76:2e:0b:38:0b:1d:59:
         c6:8b:14:2a:3d:02:9a:69:af:31:ff:55:e6:92:9e:e1:e7:5e:
         e8:15:a7:08:2f:28:0c:ad:dd:44:b0:8a:ca:3a:73:40:53:6a:
         d3:f8:8f:d3:39:b3:a0:96:95:27:d8:73:a4:a0:05:d9:59:67:
         07:5a:cf:20:42:c0:39:bf:bf:b4:6a:4d:ee:11:d4:78:c0:b3:
         bf:ee:91:24:4f:91:23:d8:4c:f3:c7:e1:17:81:cf:bc:f7:2c:
         ad:cb:b3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:13:41 2026 by rpki-client