Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
File:                     mJHESIaZ5tAk45zE1h7uq9OAEPo.mft (raw, json)
Hash identifier:          EGEDClBERcXk3D9gVZyOKD9sQvdsyzGKgq+4qbiWANQ=
Subject key identifier:   CE:8A:8C:87:D6:9C:2F:27:D0:75:61:0C:9E:69:6B:83:19:67:DE:3C
Authority key identifier: 98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
Certificate issuer:       /CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Certificate serial:       019EC036BBAD6F5E0ACF95FCF8EB25A5003C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
Manifest number:          195E
Signing time:             Sat 13 Jun 2026 09:01:12 +0000
Manifest this update:     Sat 13 Jun 2026 09:01:12 +0000
Manifest next update:     Sun 14 Jun 2026 09:01:12 +0000
Files and hashes:         1: 4zRdAfm8vTXKL2ilJfBKhYqn6NY.roa (hash: C2KBkGNtf0AMtr/iwr1TvmDzjxKM7CTZhxV5u4CUJx8=)
                          2: 7mHHilfx2fsM0_DrjsXwOF85rfw.roa (hash: LrW7R84YlvLcyIjjGUxickFKuQho8pURtHkZxcFyDaM=)
                          3: 8C5Qc1jGesnaDlr55Bdtrkak4Gs.roa (hash: sxxNThCm3nrgcbrGx+WnSdbs1hK8y85/anDbctnhLsk=)
                          4: LdfV37MlwkUrVSWNHNR8yVa3UeQ.roa (hash: KsfGJkK20VqHa4HyShHlWqRj8wawsws1Akuhtl9QLC4=)
                          5: hooTJbDXinwHfgf4gzWvoZ11Z4g.roa (hash: lxJLFoMdq2Ml4HAMFlO9T4URcM8YUhIGKBuS1NtcXtA=)
                          6: mJHESIaZ5tAk45zE1h7uq9OAEPo.crl (hash: bjPLrmaq3OMzhbrjoQymrh3cwaodLfe+p83ivAA9X+k=)
                          7: t5hH6HX6weITLCh8jBVMte4pKbg.roa (hash: i6KVCA8Uu9aS5c5IpxGk1hp7dcMjy2LMR5W/X6X44IY=)
                          8: uOX0wAHHngBgL0ZEci7ZQvhUzbI.roa (hash: L/4pSTHYLlxM7/E0WzF+gjoqb+agL4vYIcAc8+76EyY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:36:bb:ad:6f:5e:0a:cf:95:fc:f8:eb:25:a5:00:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
        Validity
            Not Before: Jun 13 09:01:12 2026 GMT
            Not After : Jun 14 09:01:12 2026 GMT
        Subject: CN=ce8a8c87d69c2f27d075610c9e696b831967de3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9f:41:07:cf:66:f7:a3:1e:2e:d7:a6:06:c9:
                    96:0c:31:57:06:16:a6:a5:13:d3:e9:63:b8:0d:a4:
                    2f:56:44:0e:5b:f1:6f:63:65:f5:00:e6:0d:ba:55:
                    b2:24:e2:7c:53:e7:65:41:fb:2f:84:0a:e4:2d:7a:
                    ac:8e:c5:9c:e4:7d:d7:7a:19:72:27:60:66:2c:de:
                    ca:66:48:c2:2c:d8:c6:0c:ef:b6:c7:5e:96:14:20:
                    41:8c:97:1c:8d:5b:91:15:44:b2:4d:2b:57:25:a2:
                    c5:a0:9a:79:1d:0f:b6:77:97:46:c4:fd:9d:d4:3d:
                    71:81:9c:12:97:0b:3d:22:22:57:f1:f5:27:a9:f7:
                    c2:3a:62:98:fa:47:e9:e1:21:34:f7:4d:d2:4c:41:
                    44:5f:18:ad:85:0b:13:37:5a:cb:66:fb:aa:13:9d:
                    a5:c7:e1:aa:4d:b9:c5:92:83:f2:fb:2a:a9:fb:ea:
                    ab:7a:af:12:f4:e9:70:e8:3a:3d:7a:77:bd:50:51:
                    6c:0d:b0:1f:e4:81:57:00:a4:9e:1b:23:68:94:f7:
                    e9:be:07:5e:b8:a3:d8:e6:f8:15:9f:d1:a2:52:99:
                    dd:83:b6:7e:19:dc:d8:34:66:13:c4:85:e0:75:6d:
                    fa:85:71:1b:08:af:36:c3:95:63:3e:98:7d:1c:7b:
                    dc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:8A:8C:87:D6:9C:2F:27:D0:75:61:0C:9E:69:6B:83:19:67:DE:3C
            X509v3 Authority Key Identifier:
                keyid:98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:bd:e4:b2:6b:08:ee:c9:df:5d:9a:2d:a4:93:b6:51:ef:a2:
         45:74:11:cd:54:d9:ee:92:57:1e:e9:93:5a:00:80:d7:66:d2:
         db:30:c4:bd:73:8e:5e:ea:80:2f:38:09:8b:78:05:20:56:14:
         39:89:58:8a:e0:3a:05:18:1e:22:be:ec:30:8d:73:56:1b:0f:
         83:3b:27:74:4c:9b:f5:80:8f:69:72:93:84:2f:83:d5:6a:f1:
         96:7f:00:d9:81:b4:aa:1c:fa:c9:7b:1c:b2:1c:dc:5e:ba:c1:
         6f:85:5c:f6:d8:28:4b:94:0d:b9:db:d7:36:e4:8c:07:9f:b4:
         7d:54:7c:ca:17:fa:22:a6:5b:c8:9f:d5:73:fa:6a:70:c8:f4:
         b8:5e:db:5a:53:15:eb:c9:1d:24:50:26:b4:17:17:2d:95:d3:
         4c:a2:c9:f9:e1:8c:fa:5b:e9:5c:1b:5f:dd:fe:15:46:da:e0:
         5c:ce:b7:a4:b1:94:01:64:af:2b:e1:dd:5c:7a:47:c4:2e:c5:
         fe:4c:b0:c3:13:1f:78:02:e8:ed:f0:f8:b3:06:59:46:a2:6e:
         52:0a:d8:b5:c0:7a:7c:3a:2a:d8:49:c0:4b:25:88:9d:e3:98:
         2c:51:91:42:dc:86:de:e9:28:74:30:d9:29:8c:cf:90:8c:92:
         27:b7:c1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:22:36 2026 by rpki-client