Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
File:                     i2E3lJJwULIlJatwCRg1QI7uTHk.mft (raw, json)
Hash identifier:          hCWOMgej5au4afb2am6WFpeIgB4Ul4w6oV7ImKtcSUw=
Subject key identifier:   C8:6E:D0:4A:A1:AE:85:9E:EB:D8:08:C9:C5:D0:0F:7D:02:F9:5D:8B
Authority key identifier: 8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79
Certificate issuer:       /CN=8b613794927050b22525ab70091835408eee4c79
Certificate serial:       019EC224526A08E07A5472B3908A2BFA3927
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 18:00:20 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:20 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:20 +0000
Files and hashes:         1: JOkPA8hTaCex6PevZHvmCNxtsfs.roa (hash: 0uXj8pryRRozEl6lHQb46ndxpU/qwFl9p2os5lcSSok=)
                          2: i2E3lJJwULIlJatwCRg1QI7uTHk.crl (hash: Urd/daUCzsaDCfyZekbVVuzmaIl6tWgyvQbsX8ppGk8=)
                          3: w883UTvE9aAPM26F3jGQ91P2JH0.roa (hash: Zo+XYBLtWLmmmelaOVtJ2aF9Vo4DulRMeStZXPCZZiY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:52:6a:08:e0:7a:54:72:b3:90:8a:2b:fa:39:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b613794927050b22525ab70091835408eee4c79
        Validity
            Not Before: Jun 13 18:00:20 2026 GMT
            Not After : Jun 14 18:00:20 2026 GMT
        Subject: CN=c86ed04aa1ae859eebd808c9c5d00f7d02f95d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9a:ea:73:67:aa:bc:40:c8:7c:7a:70:a0:c5:
                    c3:5b:95:87:c4:3e:2d:af:20:ba:cf:08:d3:1b:1d:
                    4d:35:70:26:c9:a1:10:fc:18:d6:51:c4:c5:3d:52:
                    62:d9:63:37:cd:af:1e:65:1d:69:d3:0e:7d:d8:39:
                    55:6d:6f:49:fd:45:2a:6a:f9:9b:b5:0e:84:b1:27:
                    80:79:22:2b:5f:35:c8:3f:09:90:2e:57:56:ff:26:
                    be:46:17:dd:44:ef:68:85:eb:ca:36:33:44:e3:73:
                    3c:eb:3b:57:ba:be:df:a0:87:3a:f2:0d:2f:0c:b1:
                    69:9b:bf:5a:c0:3e:e0:80:9b:f1:5d:9a:d4:b9:80:
                    56:ae:f8:63:7a:0f:4d:e5:41:f5:4c:e3:a5:78:bd:
                    53:64:74:47:c2:45:c4:60:0e:00:b4:05:60:4b:3d:
                    ac:93:43:ef:c2:92:73:9a:d8:10:58:20:d0:63:da:
                    38:17:f6:a4:98:f9:e8:e4:9d:0a:c8:c5:33:e7:18:
                    3e:d6:fd:23:b2:fb:9f:c9:e2:66:38:d5:21:88:60:
                    a5:4b:bd:e1:22:1c:6b:97:c0:b9:7b:d5:c4:35:6a:
                    c7:cb:35:9a:b5:62:2e:15:1e:6e:6f:a8:8d:37:68:
                    79:b6:b2:aa:6e:88:54:1e:c8:55:31:37:c2:3f:36:
                    c1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:6E:D0:4A:A1:AE:85:9E:EB:D8:08:C9:C5:D0:0F:7D:02:F9:5D:8B
            X509v3 Authority Key Identifier:
                keyid:8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:6b:ca:1e:57:2b:65:4e:0a:fc:d8:b2:f5:d3:d7:83:45:a4:
         21:20:57:fc:7c:7f:24:63:06:f4:67:9f:d8:c4:1f:cb:28:da:
         1b:85:45:26:41:46:7e:67:6d:49:cf:4a:50:96:4e:e0:35:31:
         b5:e2:ab:bd:70:39:5e:22:27:a4:fa:8e:7a:3d:11:e6:ab:60:
         ec:44:73:07:c0:1a:34:d1:38:92:6f:35:7f:a4:ab:a4:02:25:
         26:bc:df:c1:07:43:54:71:61:04:63:9e:7d:79:7f:61:40:a2:
         e4:54:6a:6d:b2:b7:09:b6:d6:c7:e0:6c:b4:c2:43:19:45:e1:
         4b:35:4c:dc:d2:75:c0:3c:80:7d:35:15:d8:a3:49:13:69:e5:
         6e:92:9a:91:d5:42:81:cf:c3:5e:4c:47:dc:33:6d:53:15:eb:
         f1:fa:63:e3:e6:10:ce:55:d0:1a:0b:2d:2d:26:b8:32:f6:48:
         45:d4:15:c5:e6:44:e7:e6:04:a2:53:d5:25:22:3a:af:73:15:
         1e:02:4e:67:a1:0d:25:f2:7f:34:4b:c0:90:e1:81:c2:47:9b:
         2a:bb:0e:45:56:ab:6e:be:46:c2:94:8f:83:24:14:ee:21:93:
         73:d2:09:f5:7e:d2:be:bf:62:de:f8:08:d9:52:26:b6:bb:bd:
         7f:22:25:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:53:02 2026 by rpki-client