Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
File:                     M1wzNuLOO9daspzoHlT_gexW8do.mft (raw, json)
Hash identifier:          BYTfF3gsuQx6kGM/CZbcaq1BdSzoZ5qssKYz3LDBAVc=
Subject key identifier:   DC:91:65:B2:29:F1:25:95:4A:77:D2:C7:CF:0F:4B:F6:51:FA:B7:86
Authority key identifier: 33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
Certificate issuer:       /CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Certificate serial:       019EC03635A1F0529A4BC26225928536AB44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 09:00:38 +0000
Manifest this update:     Sat 13 Jun 2026 09:00:38 +0000
Manifest next update:     Sun 14 Jun 2026 09:00:38 +0000
Files and hashes:         1: 7IUGFEJ0NMO3LBeeCKH1Tv3swxk.roa (hash: JKdsp8foAu6n1QdpyLE7/kBA3hQmLd7CFwAOCgEIHwU=)
                          2: M1wzNuLOO9daspzoHlT_gexW8do.crl (hash: l9BySBsYtwT4Oyr+qg1Os2+vxoWwqeiajgIt3912eGM=)
                          3: uFxCF3WHM0DewCxM6YI5fSoNUmE.roa (hash: g0+UTVvOR0MkNhHeyF9wQULTn2q8tpzwOyvShiAfzfA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:36:35:a1:f0:52:9a:4b:c2:62:25:92:85:36:ab:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
        Validity
            Not Before: Jun 13 09:00:38 2026 GMT
            Not After : Jun 14 09:00:38 2026 GMT
        Subject: CN=dc9165b229f125954a77d2c7cf0f4bf651fab786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f6:2b:40:c5:1e:cd:bd:e2:08:a7:ec:2f:1e:
                    3f:d4:92:5d:aa:6f:a2:61:56:5e:d4:ef:32:92:18:
                    a6:a8:3a:5f:1c:16:73:f1:b0:b2:67:00:d5:6f:0c:
                    0e:d2:7c:dc:9f:1e:73:7d:f4:8c:4e:5e:33:09:27:
                    2f:dc:74:13:f8:8e:15:b1:54:ea:ac:ab:22:03:4b:
                    f4:2e:01:c2:d8:dd:03:17:e7:e0:c3:a8:bf:83:0b:
                    61:c2:98:3f:81:28:30:ae:ce:df:8e:8d:d1:17:19:
                    0d:22:78:fe:a3:4f:39:57:ac:03:56:e9:48:45:f9:
                    c9:d9:e1:01:65:42:96:47:a5:3b:0e:38:30:6c:72:
                    a8:9c:c4:e1:40:b4:45:d1:a1:46:c3:c5:16:6a:26:
                    e9:00:c9:1d:95:7b:46:23:35:c1:43:6e:95:b3:da:
                    50:76:36:43:98:a2:b5:40:cb:8a:99:dc:92:5f:f7:
                    a6:e7:70:59:ee:96:06:55:1b:d1:f9:d4:f4:6c:14:
                    98:d0:2a:89:49:10:52:a3:a5:39:a8:96:e5:85:ed:
                    90:d8:f7:16:64:61:c4:f4:95:23:75:c9:e0:d4:25:
                    3e:a5:cb:fd:aa:7a:09:8a:c9:3b:5d:f6:da:3d:9d:
                    67:04:99:5f:64:41:4d:00:34:29:c6:f1:97:3c:db:
                    3f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:91:65:B2:29:F1:25:95:4A:77:D2:C7:CF:0F:4B:F6:51:FA:B7:86
            X509v3 Authority Key Identifier:
                keyid:33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:8d:71:a8:58:6c:2e:f2:94:ba:64:62:f2:55:a7:3a:39:17:
         57:32:0f:cc:af:54:40:c2:7a:34:5e:1f:0a:7b:8e:15:e5:17:
         09:cb:b5:7e:f4:af:31:1c:88:ea:5b:a8:ca:e0:1b:b3:6e:15:
         90:0f:f1:b2:bb:f3:10:b4:3b:c4:c3:1e:f8:ad:74:a6:00:7e:
         07:0b:9a:de:94:bb:42:61:03:89:fd:32:4a:86:70:8f:af:02:
         48:0c:93:2b:bd:f9:4c:53:5d:c6:ee:be:b9:fd:5e:1e:a9:cc:
         13:dd:86:c6:7a:f8:6f:ea:6e:96:ff:f5:22:49:4d:62:d7:f7:
         1b:33:73:0b:4b:8d:c4:b4:45:97:54:0c:bb:7b:60:53:43:0a:
         fd:ad:d9:e0:05:a2:8f:b1:e8:1e:f7:02:3f:e0:1f:36:a8:be:
         a7:64:6c:4b:e9:93:9a:19:bb:09:cb:6f:a2:e3:f5:14:da:da:
         2b:f4:06:eb:cf:59:2c:5b:78:bf:a6:51:bc:4d:03:0b:44:fc:
         ad:3a:3e:6b:8d:f4:23:4a:52:41:86:ed:5d:98:37:ea:c4:7a:
         88:98:b8:51:88:e6:07:cc:d0:52:d5:bb:d9:d3:34:ad:a8:d6:
         fc:0d:5e:ef:b0:84:a3:fb:14:f2:7a:af:57:5b:18:ad:2d:30:
         a1:b3:03:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:31:36 2026 by rpki-client