Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
File:                     1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft (raw, json)
Hash identifier:          sSdohUnfqGpCAej+KsmYT/yGu9kl0JS65QIVqU5izqc=
Subject key identifier:   18:25:D4:55:DB:D4:25:FB:3C:5C:14:39:41:7C:70:7A:28:69:E4:33
Authority key identifier: F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32
Certificate issuer:       /CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
Certificate serial:       019EBEECC08CDF5C4D5716309FE9D542D5BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 03:00:47 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:47 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:47 +0000
Files and hashes:         1: 1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl (hash: zFEbjyCY/RbFLLPzjMB1OHB6uW5asoRSeMPvYeYC+44=)
                          2: CaPA7Wbe9cDl6wXe5894ncFK1jQ.roa (hash: P8wfVUsJaZ53GQVWp0JenO6tbrEXgFSMeFb1uzEMGrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:c0:8c:df:5c:4d:57:16:30:9f:e9:d5:42:d5:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
        Validity
            Not Before: Jun 13 03:00:47 2026 GMT
            Not After : Jun 14 03:00:47 2026 GMT
        Subject: CN=1825d455dbd425fb3c5c1439417c707a2869e433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:ec:71:8b:8d:b6:b0:c7:f9:da:2a:51:08:ce:
                    63:b3:1f:4c:ed:a8:8c:4f:55:8b:b4:e7:61:cf:53:
                    94:6c:c4:d3:2a:93:4d:5b:6b:cc:68:35:78:7a:55:
                    58:a0:6d:8c:85:aa:a7:4a:be:af:21:ff:30:06:f5:
                    73:67:bb:f3:a9:8f:5c:e4:46:56:f3:38:26:09:df:
                    5d:53:0d:32:fa:ae:7b:f7:da:5f:f2:2d:e4:2e:73:
                    b8:b0:15:f3:18:11:89:cf:4f:34:ad:7e:7e:35:30:
                    17:5d:bd:c2:42:6a:42:93:62:df:ee:8a:40:ce:24:
                    5e:df:b0:a9:1e:cb:36:76:1a:89:e6:e8:e3:b6:50:
                    31:55:7a:1b:d5:3f:17:b4:62:d5:d5:08:90:62:a9:
                    7b:6f:10:b6:8c:f7:07:97:88:be:05:67:f8:ff:6b:
                    32:ef:6e:d0:90:09:7d:c8:3a:50:c0:cf:cc:4a:ce:
                    aa:8a:3c:02:03:da:0f:4a:3e:b8:19:c5:66:fd:94:
                    18:90:44:9b:d2:8b:1e:0c:00:1c:b6:a3:21:eb:ac:
                    f0:5f:46:0a:27:ed:1e:82:08:57:d2:d6:99:17:05:
                    55:26:72:d6:65:96:77:77:7e:7b:fa:35:0c:8e:27:
                    9b:35:87:86:b9:80:2c:7e:9b:c5:23:15:9a:30:82:
                    91:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:25:D4:55:DB:D4:25:FB:3C:5C:14:39:41:7C:70:7A:28:69:E4:33
            X509v3 Authority Key Identifier:
                keyid:F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:ab:b3:7c:d1:02:4a:20:56:21:69:81:7c:34:af:29:3c:4e:
         83:ce:19:0a:3e:eb:ca:2b:55:31:96:b0:91:23:be:5a:c1:56:
         44:61:3e:23:74:17:71:18:f6:79:56:6e:48:80:48:5f:8d:5f:
         b2:2a:47:a2:3e:aa:9e:97:95:8c:ad:f4:6c:ca:43:ea:7e:92:
         9b:75:54:47:fc:c4:d1:69:61:f5:76:cd:46:91:93:87:4c:08:
         71:93:26:d2:6d:a6:d5:87:f1:36:b3:e4:cd:c5:c8:f7:b7:43:
         5e:ba:97:5f:00:53:21:9d:ee:3c:f1:9f:fc:9e:f8:47:ca:b7:
         17:76:e5:fe:c3:5c:f9:98:ce:01:a5:d4:58:93:62:2a:cb:35:
         be:4b:dd:d6:4d:40:c2:f1:dc:37:30:9b:58:00:e9:c9:5d:51:
         bd:72:25:8d:ed:b2:71:93:9e:6c:97:85:76:0a:04:e1:7b:aa:
         a3:ca:52:fb:9a:41:f7:34:82:2c:ef:bd:49:1d:36:62:46:24:
         37:b2:78:64:d6:5b:61:d1:ed:85:04:a4:c5:83:d9:b9:b3:25:
         cf:c3:16:9d:c2:97:7c:c0:8e:da:24:24:e9:b7:b0:61:d9:6f:
         b4:3a:7a:a4:f9:7b:5b:14:91:a4:ce:a7:28:01:7d:c2:77:64:
         89:92:fb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:47:37 2026 by rpki-client