Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
File:                     AjmuERiAiFR-s-UjSDzKmFVsEVs.mft (raw, json)
Hash identifier:          /y/D5u6gj4F18AEodaiqU8x2S0WP2Bh+oqM78qs8qeg=
Subject key identifier:   7B:60:65:64:26:79:C9:73:A7:17:27:9C:5E:33:42:47:B9:02:23:EB
Authority key identifier: 02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
Certificate issuer:       /CN=0239ae11188088547eb3e523483cca98556c115b
Certificate serial:       019EBEECD525617F7CE52FA5F68764199D97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 03:00:52 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:52 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:52 +0000
Files and hashes:         1: AjmuERiAiFR-s-UjSDzKmFVsEVs.crl (hash: 1An/mEYaFCUz9foP6DJcAizvMs5UE1PsDaL+u2oQzT8=)
                          2: j51-vhqySrtPDmWytRuJdkGEvC8.roa (hash: hWPfWXr9RPCgElnT55rpdjybwa6yeKeJ6tIi6IBtbEE=)
                          3: lBelNikhE64GysX2fGFFE4vhjCQ.roa (hash: OyoE+SKk2HTXSgPYtWOQOXKI4eO+3EXXvE2q2Oo53nA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 03:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:d5:25:61:7f:7c:e5:2f:a5:f6:87:64:19:9d:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0239ae11188088547eb3e523483cca98556c115b
        Validity
            Not Before: Jun 13 03:00:52 2026 GMT
            Not After : Jun 14 03:00:52 2026 GMT
        Subject: CN=7b6065642679c973a717279c5e334247b90223eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1d:b3:ec:23:4f:0f:ae:80:4a:f3:30:9f:b6:
                    77:47:25:08:31:67:dd:3d:f6:63:3d:78:0e:d6:51:
                    70:24:ed:94:d2:02:2d:4f:68:d8:18:c2:7f:f4:ee:
                    4e:b7:66:a5:80:ce:3c:65:42:53:50:b2:da:8b:0e:
                    b7:6e:03:1c:3c:69:6c:35:b4:30:f8:03:25:e8:b3:
                    96:7f:50:15:f4:13:ce:55:86:47:70:83:37:c1:4d:
                    ea:c9:4d:98:c5:0e:57:f3:5b:5b:08:96:fd:11:56:
                    2e:f6:af:e5:a4:d2:b7:28:85:f6:ab:44:ca:a6:ab:
                    08:16:12:27:54:62:f1:a9:e9:27:ba:aa:8c:b9:37:
                    3c:f4:e9:f4:a5:3d:78:c2:2e:f0:54:01:a9:c2:91:
                    30:7b:1e:69:b7:e3:97:5d:cc:7d:63:0d:4b:4f:02:
                    31:cb:87:cd:9d:df:e6:8e:97:35:b1:06:1f:58:b4:
                    a3:88:0e:6a:4c:d4:e2:62:46:b4:fd:4d:95:00:4f:
                    1e:4b:94:f3:a2:7f:ad:b4:65:42:e0:6f:4b:ab:24:
                    f6:bc:9f:64:63:4e:98:76:a0:c9:c0:2a:f1:49:ed:
                    21:1b:6f:ac:ea:94:97:b9:30:79:3f:e5:d5:d2:c9:
                    0a:74:fe:05:fe:05:12:fd:af:c4:89:aa:13:ff:3e:
                    c2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:60:65:64:26:79:C9:73:A7:17:27:9C:5E:33:42:47:B9:02:23:EB
            X509v3 Authority Key Identifier:
                keyid:02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:4b:87:27:ee:e1:2e:c9:89:64:65:d2:41:5e:b9:b1:9e:ea:
         5e:d2:3b:50:27:f5:c3:43:59:98:54:91:36:cd:a8:6d:21:b4:
         50:6c:96:be:59:bc:ca:6e:1a:e8:d0:8f:3c:13:16:2a:ed:cb:
         ae:3a:d5:ff:5a:e6:54:e5:e6:47:92:db:55:a2:0e:7e:2f:40:
         58:ea:10:a3:93:74:f1:d5:a7:06:50:da:1a:7b:f6:55:a0:d0:
         ba:3a:c2:cd:f9:5a:a9:cd:98:fd:d0:c6:75:a4:43:f2:27:f6:
         c4:c4:5d:14:7a:e3:58:63:ff:8f:6f:a6:fa:92:08:7f:e6:99:
         64:b7:f2:9f:3e:54:40:44:c8:81:2a:3f:73:c1:be:c2:72:a8:
         94:1f:cd:60:67:86:3a:44:b4:01:1b:81:9e:52:66:d2:dd:d8:
         79:92:ee:43:a3:99:8b:dc:2b:9f:8a:09:1b:63:c2:f9:ce:da:
         0e:a8:12:f8:a7:8f:a7:dc:b8:f2:8d:f9:67:53:d8:12:1e:64:
         6b:b0:f5:a4:9a:e6:b9:2f:3b:44:97:f1:ab:5a:23:50:7c:8a:
         b9:70:f8:18:8d:82:ac:8e:54:e7:34:6f:ab:27:9c:af:04:0a:
         be:5f:c4:01:b8:74:0e:0f:63:72:b1:7d:14:64:c7:ca:05:aa:
         47:29:85:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:47:43 2026 by rpki-client