Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
File:                     M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft (raw, json)
Hash identifier:          V2I/tVH606SI6rl1bWPQoQdrKKo5ZMy3gMDlv79PqX8=
Subject key identifier:   E3:75:2A:89:FD:BB:AA:A8:02:0C:5E:68:56:14:E3:A3:A2:95:BE:B0
Authority key identifier: 33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
Certificate issuer:       /CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Certificate serial:       019EC0DABFCC8D43E863090214EB0514421F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 12:00:21 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:21 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:21 +0000
Files and hashes:         1: LRtgsdrMZCWO8Ukau3X5r3di8uY.roa (hash: LgkPjSSmG2fUG8Xv2OSlJ58EB0MKOSo26cfoyY+2UuA=)
                          2: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl (hash: 5TTdv1wYf4ZqJS3roF9AQQ5IORlNaWSI1FiS3HQ3I5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 12:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:da:bf:cc:8d:43:e8:63:09:02:14:eb:05:14:42:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33622344f29e6b6420bfebc38bb67a30f4453f71
        Validity
            Not Before: Jun 13 12:00:21 2026 GMT
            Not After : Jun 14 12:00:21 2026 GMT
        Subject: CN=e3752a89fdbbaaa8020c5e685614e3a3a295beb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7c:8d:d7:b4:89:61:70:35:c4:63:21:05:9b:
                    5e:e4:c8:52:e0:d0:c9:f4:18:dc:1f:5c:b2:2f:f0:
                    e6:14:b3:56:74:da:eb:f8:6d:98:5b:b7:80:58:63:
                    cc:f0:d3:cc:3d:36:78:fd:02:be:fb:83:dc:46:98:
                    1b:1b:a1:47:c6:0a:4c:a3:7a:cc:2b:f5:8a:18:f5:
                    63:78:84:15:73:aa:c2:67:62:8c:35:69:c1:9a:07:
                    db:19:34:19:6b:6d:33:5a:3f:26:a6:58:18:4a:6c:
                    93:03:40:3c:f9:ba:38:ef:41:21:7a:6a:4b:a4:0e:
                    23:07:f7:20:cf:9f:4a:d3:52:cf:03:20:e2:56:a4:
                    95:8e:d9:14:be:22:7a:f1:a2:fd:5c:a9:43:3e:8a:
                    ec:86:92:2e:ee:6f:32:4b:ed:81:6c:d6:3e:52:d2:
                    04:7a:68:09:33:c9:a0:91:4a:ec:4f:d1:b3:e5:58:
                    dd:0e:58:4f:88:f6:d6:2e:c6:49:54:d6:90:f2:f7:
                    3e:a5:61:e7:3d:58:8f:1e:df:00:c8:54:d7:37:68:
                    b7:7e:6a:66:fb:79:71:9a:6b:89:42:04:b0:86:10:
                    21:38:3b:c6:5f:a8:b9:42:12:68:c3:a3:93:75:63:
                    18:d1:21:34:ca:bd:36:a6:b1:79:f4:41:27:67:7e:
                    66:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:75:2A:89:FD:BB:AA:A8:02:0C:5E:68:56:14:E3:A3:A2:95:BE:B0
            X509v3 Authority Key Identifier:
                keyid:33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:db:b8:67:86:d1:39:ac:8b:bd:34:78:c5:56:fd:34:b8:81:
         fc:7a:fc:c9:76:32:f4:ac:7e:ff:60:6e:67:8a:f6:ae:8e:3a:
         79:e3:67:84:d4:f0:e7:ee:4a:78:f7:8a:57:cb:ca:09:29:88:
         e3:39:3b:01:5a:c8:14:b0:d1:d2:05:18:c6:a3:3d:27:f5:01:
         a7:56:d8:68:36:49:ef:f3:e1:11:30:53:a9:cd:19:31:85:15:
         c0:69:a8:5d:47:08:c3:5e:f3:e5:9c:52:4a:58:22:7c:c8:67:
         a5:b2:8b:86:1a:ea:e3:40:30:89:25:99:64:80:f6:11:0b:2a:
         b5:d4:38:0a:b5:e9:7c:8d:38:79:d6:31:70:f2:87:cb:93:d5:
         87:98:ee:dd:8a:d4:80:00:63:87:9a:b6:f8:f6:90:a1:8c:73:
         91:04:47:70:f8:ff:d9:69:a5:4b:a8:e1:ce:3c:bc:b6:f7:c7:
         3f:19:22:21:d2:87:4c:f6:ac:3a:f5:dd:d4:45:d9:d6:e6:4c:
         dc:97:4d:db:6d:d0:26:4c:ce:93:85:2a:95:1f:31:94:af:1d:
         9f:67:1e:cb:88:e8:fd:59:ad:fc:57:e4:e6:61:79:7c:49:c8:
         ca:d6:d1:7e:94:a1:af:b2:d5:b7:1a:eb:93:a6:59:6f:3c:33:
         e5:6b:67:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:24:01 2026 by rpki-client