Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
File:                     V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft (raw, json)
Hash identifier:          4S7GuY9afDqJFNZtr/IB54tg3i1tXv8h7UG/qcH89v0=
Subject key identifier:   E4:72:89:1A:DD:BC:EE:7B:F0:6F:19:D7:87:83:E8:E2:6C:98:2C:F8
Authority key identifier: 57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
Certificate issuer:       /CN=578d854bd2bee242a82fb83922d149bccf19ed02
Certificate serial:       019EC1121D1FB6129860BE53AA712543B217
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
Manifest number:          195F
Signing time:             Sat 13 Jun 2026 13:00:50 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:50 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:50 +0000
Files and hashes:         1: 0Mpcb7snZtXtIn28I_NZr23Up5A.roa (hash: nzFvjkgOgeMxur17HH/0UCfyA0vTxy/NsTPU+WDpukw=)
                          2: 6YPsytnw9toMC7CA-SrrXQGYVzs.roa (hash: SvHSPTZNR9dNe0BtBvpc8I7dSlcoeBrXBlxDsGlVtJo=)
                          3: V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl (hash: zGfJ1ba9iBvT4TcdKRPO9M10aSL8rIMCp2nrZzSeGuY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:12:1d:1f:b6:12:98:60:be:53:aa:71:25:43:b2:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578d854bd2bee242a82fb83922d149bccf19ed02
        Validity
            Not Before: Jun 13 13:00:50 2026 GMT
            Not After : Jun 14 13:00:50 2026 GMT
        Subject: CN=e472891addbcee7bf06f19d78783e8e26c982cf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:cc:b1:85:1b:e1:62:ed:1f:f1:74:0c:02:05:
                    39:c7:e9:60:ef:ca:df:e9:ed:fe:8e:d3:ac:0f:de:
                    60:58:67:4f:d5:27:2d:29:94:02:b6:39:9a:a3:d2:
                    9a:e8:20:d4:23:f6:2d:a8:a1:53:67:18:34:96:4a:
                    9c:96:b3:c9:94:fe:5b:e9:d6:72:0d:95:64:85:2a:
                    1e:e1:68:15:85:d5:ee:7f:ca:92:2b:df:42:3a:62:
                    90:4d:11:d2:a4:ad:de:8d:1f:19:5b:7b:7b:e3:3d:
                    75:18:0f:8a:da:61:62:9b:e8:0c:ae:ed:63:fc:73:
                    fa:76:86:17:b6:bf:c2:82:69:1b:55:e4:40:13:27:
                    5b:08:ed:ac:a2:35:5f:63:8e:bc:3d:2c:7b:c9:ec:
                    05:12:1c:00:a4:8f:9e:99:70:05:96:c5:ce:ef:ae:
                    37:1f:bc:d5:50:cd:30:ee:cf:bf:e2:58:9f:16:34:
                    6d:3f:98:dd:eb:b6:69:b0:a7:ac:cc:7e:47:76:96:
                    75:b9:75:97:a8:b4:21:49:ea:f2:c0:02:f9:92:34:
                    f8:9c:70:42:55:10:a7:e3:20:b7:81:45:0b:f8:16:
                    ce:d3:67:b4:2d:1f:b7:45:c1:cb:bc:6e:21:e2:70:
                    24:52:7c:18:f1:15:32:72:61:b6:3e:21:4a:2c:61:
                    19:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:72:89:1A:DD:BC:EE:7B:F0:6F:19:D7:87:83:E8:E2:6C:98:2C:F8
            X509v3 Authority Key Identifier:
                keyid:57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:7d:8a:02:27:27:33:a4:91:3a:c2:22:87:f7:97:62:a8:63:
         ec:69:47:3e:75:78:a0:95:8e:39:c0:a6:70:22:c6:28:76:b0:
         29:6a:d4:a6:72:c9:d2:e5:6f:ab:c7:97:18:11:9b:5f:74:2c:
         e6:d4:ad:02:01:fe:b0:3b:d2:07:33:e2:3a:6f:ed:fc:96:7f:
         bf:f7:ed:b2:b6:05:57:af:34:62:23:d3:fa:ff:f3:37:77:b3:
         84:2e:2b:5e:18:1f:77:6d:b5:0a:ef:e6:d7:88:5b:a2:b9:e8:
         fc:bd:b5:3f:a6:46:3e:dc:1f:21:c7:e1:3b:11:6b:bd:8b:1a:
         68:7c:fb:f5:e2:f1:0c:73:8c:c2:07:8c:d2:97:70:d3:06:57:
         f0:10:d2:af:1a:3e:79:0b:f6:3e:f3:f2:e5:95:c8:fe:de:e1:
         75:7d:ee:98:29:96:b0:71:ba:13:ea:32:e1:d4:09:d5:08:88:
         92:94:4c:05:67:1f:18:ae:7a:df:dd:f5:af:cd:f4:13:31:fc:
         d8:fd:72:7b:ce:1b:11:2f:06:4a:94:c1:6c:02:f6:3e:ae:cf:
         60:b8:2c:c8:f8:66:43:49:2b:18:dc:db:72:1e:57:5c:d0:5e:
         0b:87:5a:20:18:72:9a:f6:ad:10:b4:b5:b5:e0:63:b4:e9:16:
         79:0c:ac:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:09:15 2026 by rpki-client