Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
File:                     h9mQExRnt30RFit5--OwbKirLTk.mft (raw, json)
Hash identifier:          3MhY25zySys9rfAvKHafFC3YYLVWus3o7QFpKiV4bK0=
Subject key identifier:   34:AC:01:2E:06:64:29:01:6B:83:5D:7A:9E:5F:7A:B3:EE:A6:86:F1
Authority key identifier: 87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
Certificate issuer:       /CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Certificate serial:       019EBEED6171F5DE6158F3E4595517A32C04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
Manifest number:          196D
Signing time:             Sat 13 Jun 2026 03:01:28 +0000
Manifest this update:     Sat 13 Jun 2026 03:01:28 +0000
Manifest next update:     Sun 14 Jun 2026 03:01:28 +0000
Files and hashes:         1: 4L2HrkOMp5Px3ZdgqOBGMnz6oXw.roa (hash: qjbkKzm11wnXRFJIt4quryujdmBS5m5m8Id3/w9vHFw=)
                          2: 78tSQmB_UZC_rIGDHLnxnqOm3fI.roa (hash: 3kNkwMTWy/XYCkJODFF1IVosQpGtDfhW2/dwVf0UwBQ=)
                          3: C3Lj3Wt6YNWIPGHmadEQ-dchhaw.roa (hash: fn0aOrz4mN4OtO/EtlMrSuF4wh5zaQaJSbD2ep7jxzI=)
                          4: JIk4GJqmgSwzYSk0JGPNI21QRnM.roa (hash: 45ZLZSPO108JAO0yb1j8MEBiHT4QdE4zU9XBhQbVqtg=)
                          5: PY323kbvCRFsNrwGFI26gXv0gpE.roa (hash: U0ksXLpw7uH4vwqe/cNwV58+FVim6JoHjXiFGt1giNE=)
                          6: h9mQExRnt30RFit5--OwbKirLTk.crl (hash: Pmc2EoYVEFivxUQYt0exa+D6hRDhV6JeSmEgnvr6ZJw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ed:61:71:f5:de:61:58:f3:e4:59:55:17:a3:2c:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
        Validity
            Not Before: Jun 13 03:01:28 2026 GMT
            Not After : Jun 14 03:01:28 2026 GMT
        Subject: CN=34ac012e066429016b835d7a9e5f7ab3eea686f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:42:8f:78:ea:e5:63:b6:5a:61:17:cb:55:b8:
                    b4:62:05:68:56:45:8a:29:49:30:ed:75:e8:4c:0a:
                    ba:ad:1d:33:f9:d1:0c:12:5b:2b:e9:f6:e5:d8:82:
                    7e:4d:de:f6:9b:b0:63:14:f5:49:19:a2:00:87:6d:
                    a4:6e:d2:d0:d2:67:81:d0:bb:07:df:d4:d7:64:80:
                    a7:fe:eb:53:af:56:03:2a:4d:82:d7:71:b6:21:57:
                    ae:5c:a6:0e:29:83:73:75:3a:86:6d:24:57:f3:12:
                    6e:82:74:c7:7c:d0:a0:2e:9b:8c:c8:c2:06:3c:c3:
                    37:6d:a2:00:55:6d:56:16:88:43:91:94:56:2c:4f:
                    9a:a4:48:21:25:80:f6:38:d5:a0:0b:c1:ab:f1:cc:
                    0f:35:fc:de:51:48:19:83:cf:b2:e4:48:ad:8f:e7:
                    2d:24:d7:2f:74:43:49:94:01:1b:14:8b:e3:ac:06:
                    52:28:d4:89:b9:5f:1b:56:89:fa:5b:10:90:bd:f5:
                    89:e4:f4:0a:19:55:5d:ae:62:d9:a5:be:dd:9c:05:
                    30:f4:95:0d:d7:9b:4a:52:46:59:c8:70:d4:3d:0d:
                    d5:22:a4:79:7b:c6:77:6c:5a:1d:9f:2a:82:be:e3:
                    94:63:7d:ff:5c:d3:96:52:bd:5b:a3:ff:e6:3e:a8:
                    45:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:AC:01:2E:06:64:29:01:6B:83:5D:7A:9E:5F:7A:B3:EE:A6:86:F1
            X509v3 Authority Key Identifier:
                keyid:87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:4b:b5:b4:6c:ee:1b:22:45:e6:38:f9:9f:54:f1:f3:06:19:
         c1:32:81:dc:77:5a:5d:aa:f2:84:c2:68:65:45:75:0c:93:b3:
         13:25:71:5a:5d:62:8e:0c:e3:f8:56:80:d1:fc:40:a2:bb:fd:
         5d:6a:22:f0:e9:a7:d7:f9:60:3c:cd:84:79:2e:75:c0:62:87:
         30:49:4d:84:b2:59:34:02:c6:82:68:47:5d:35:dc:b2:74:f1:
         aa:a6:ab:0b:54:65:d4:c3:13:80:52:8d:17:5a:71:af:54:69:
         cf:5c:1c:fb:33:48:34:b6:f8:25:24:91:bf:50:d1:4c:3a:27:
         40:f8:ce:36:96:68:02:db:2e:04:74:74:8c:7f:37:1e:ee:54:
         8e:7a:31:b9:8b:2c:c4:08:20:df:a7:3d:44:3c:be:85:34:91:
         32:3a:c9:36:bb:8d:d7:61:71:b3:a0:2d:b3:c7:3e:58:79:01:
         cf:64:32:33:27:0b:b2:cb:34:24:9c:4b:25:78:7d:a5:00:dd:
         48:64:56:db:5e:2d:00:b9:44:aa:99:6f:3e:da:d3:12:1c:b4:
         98:2d:a4:c5:ea:34:e6:b2:1b:c8:8c:51:1b:0d:5c:92:2f:f6:
         02:b2:25:1b:2e:78:87:09:2e:aa:91:8e:87:2d:09:c7:a2:c7:
         0e:9c:f3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:32:26 2026 by rpki-client