Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft
File:                     JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft (raw, json)
Hash identifier:          oO6sX00iWRQJu5utIlTYz0WVnyEFfeQFqBlnjAsye2o=
Subject key identifier:   06:45:EE:78:87:5E:4B:F0:2F:65:F2:55:60:74:23:F3:F8:7F:28:A0
Authority key identifier: 26:B9:CE:B1:0C:2C:8C:00:D1:60:99:60:3C:C1:1B:ED:00:54:7B:E6
Certificate issuer:       /CN=26b9ceb10c2c8c00d16099603cc11bed00547be6
Certificate serial:       019EC148FF079154604FD5E7A6F8C740E7C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 14:00:46 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:46 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:46 +0000
Files and hashes:         1: 1-etkEpJT5huTCkvp4nk0dydE9KA.roa (hash: eid4ChJhHIbdTu3ltYjDcXJHFhgZsYu7s5rAP/A4Ugo=)
                          2: JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl (hash: cIz9Q1n8Mbu4P6nHITvldLqwT57LkQJbiuZYR/2TFvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:48:ff:07:91:54:60:4f:d5:e7:a6:f8:c7:40:e7:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26b9ceb10c2c8c00d16099603cc11bed00547be6
        Validity
            Not Before: Jun 13 14:00:46 2026 GMT
            Not After : Jun 14 14:00:46 2026 GMT
        Subject: CN=0645ee78875e4bf02f65f255607423f3f87f28a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d8:37:48:75:2b:4b:67:b2:2d:64:ce:93:85:
                    14:fc:90:0e:f7:d4:df:18:66:e8:87:98:8c:13:f8:
                    02:37:e9:cb:e2:3b:ec:e4:58:7a:8e:db:df:da:f0:
                    e8:0a:66:e4:69:02:5c:da:d3:39:ca:bd:46:50:c0:
                    38:9b:31:69:8a:47:d8:5b:85:da:99:5f:19:4f:d1:
                    40:b7:92:64:67:34:c2:5b:74:46:2f:82:4e:37:2c:
                    68:0e:be:69:f6:c6:5d:dc:88:db:de:85:6b:67:05:
                    30:2b:58:3b:39:8c:40:9e:4b:e8:8b:3a:2c:46:59:
                    e8:22:8c:6e:ba:29:8f:f3:55:b7:15:1b:a0:ee:7c:
                    bd:1b:a5:86:6d:a7:53:e5:d9:ad:41:26:36:ed:db:
                    27:51:9b:1c:a1:c1:ea:33:77:ec:ff:2b:3f:da:dc:
                    a1:1a:a4:ce:a2:00:51:53:29:4f:ed:d5:00:94:e3:
                    fb:4c:73:e4:02:00:55:da:28:02:89:13:c3:2c:27:
                    66:37:4d:e3:56:a7:39:00:9b:79:59:d1:53:e6:4a:
                    2c:d4:d9:59:48:bd:ec:4c:ab:f3:5b:16:31:4b:1d:
                    92:01:2f:da:14:8a:91:cd:e3:59:c1:f0:51:c6:d5:
                    86:10:f2:27:38:a4:06:07:5c:53:aa:5e:55:4d:f2:
                    9d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:45:EE:78:87:5E:4B:F0:2F:65:F2:55:60:74:23:F3:F8:7F:28:A0
            X509v3 Authority Key Identifier:
                keyid:26:B9:CE:B1:0C:2C:8C:00:D1:60:99:60:3C:C1:1B:ED:00:54:7B:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:b3:a5:bf:55:72:2d:78:5b:1a:29:86:fd:26:1b:21:7d:f6:
         ab:c7:38:48:da:9b:22:d7:2b:2e:9f:ac:19:c9:73:52:e5:3f:
         ee:58:69:99:21:32:22:fb:c0:ea:0b:31:24:f2:4c:0b:1f:9e:
         1f:99:a3:cf:27:9c:47:4e:78:58:36:12:1b:1e:41:f2:29:f1:
         9d:c3:41:07:45:11:f8:d3:a7:f7:09:6d:f9:53:25:cc:2a:b9:
         27:52:ba:6d:be:a7:83:65:4f:c6:26:15:dc:92:ed:a0:cc:55:
         1f:16:51:0c:83:4e:89:82:c7:e0:32:ef:8c:88:c6:0d:a3:e6:
         01:cc:40:e0:23:64:3b:f7:ff:fd:0f:f7:76:58:77:69:f9:47:
         9b:66:f9:35:e1:10:2b:a4:a6:c1:a7:e1:c2:06:09:85:67:7f:
         40:78:8a:9f:47:87:5c:25:1c:00:bd:50:99:32:fe:33:07:1b:
         cd:43:02:65:01:81:1c:e0:28:18:ad:4e:59:82:de:c6:d7:0c:
         43:a1:83:d2:bd:ec:87:3f:cc:4e:fc:0d:32:06:71:ad:5e:af:
         9e:95:46:24:34:60:9e:0d:cf:84:21:22:f2:30:2f:e1:50:87:
         1a:88:7e:a9:d3:9a:44:bb:c8:ff:99:f9:05:4a:b6:c9:1a:dd:
         7b:55:1c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:22:36 2026 by rpki-client