Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
File:                     m7S5jjWbTJLDEYP790kjjmtvCMI.mft (raw, json)
Hash identifier:          uwLTFnUo+QKlCxBizJMhpSrh+FmfcBXQ6wk9gKrtYqI=
Subject key identifier:   7D:50:CF:AC:7A:3D:93:77:A4:62:28:3B:B2:40:30:17:CB:9D:F2:5A
Authority key identifier: 9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2
Certificate issuer:       /CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
Certificate serial:       019EC2C9DAB535BD12E4F547DDBE6D9DB3C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 21:01:09 +0000
Manifest this update:     Sat 13 Jun 2026 21:01:09 +0000
Manifest next update:     Sun 14 Jun 2026 21:01:09 +0000
Files and hashes:         1: SKpYBqwn6udQHU20Uf2pG2NVjSc.roa (hash: 0Drji27vy2Cr4dvgFBfhAgVdOvdDdCwXZsDdSfaarcA=)
                          2: m7S5jjWbTJLDEYP790kjjmtvCMI.crl (hash: 5cwTvg6MbxVMIHAXnGqgaESevxFLi73hm6am149Q2TY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:da:b5:35:bd:12:e4:f5:47:dd:be:6d:9d:b3:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
        Validity
            Not Before: Jun 13 21:01:09 2026 GMT
            Not After : Jun 14 21:01:09 2026 GMT
        Subject: CN=7d50cfac7a3d9377a462283bb2403017cb9df25a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:02:ed:16:fe:df:d2:86:f3:cf:d1:a3:16:0a:
                    81:89:cd:d2:e0:32:79:34:0f:8e:1e:c5:09:6d:f1:
                    ed:5a:c2:ad:d8:51:b9:98:0f:9f:a0:14:77:fa:cf:
                    a2:47:41:83:79:a9:99:b4:05:75:77:8a:86:44:a9:
                    97:c9:ac:71:57:e3:66:d8:c1:04:7b:56:01:d0:d6:
                    3f:9a:bd:b2:0e:57:b3:8e:ce:69:4a:83:dd:af:b1:
                    4c:b6:c4:67:9d:ba:e3:1b:68:9a:23:c8:cb:1a:87:
                    32:27:75:09:60:6b:12:da:61:03:e5:7c:3d:d2:bd:
                    47:a0:c4:d9:5c:64:f7:a4:ee:ae:e6:e0:01:80:d6:
                    65:2a:77:82:91:bd:e3:6f:d4:49:c3:b3:34:53:0f:
                    11:91:29:45:7f:a0:8b:8d:72:64:3a:b9:3e:01:96:
                    65:fc:c5:0a:04:8b:e2:5b:cb:50:dc:6c:86:79:3e:
                    3d:ea:70:dd:f4:40:10:fc:e1:1c:da:1c:c1:ad:bc:
                    67:65:cf:4b:c7:8f:05:56:dd:76:82:a3:c5:ea:46:
                    ae:a4:b8:a0:a0:84:ac:23:75:cd:ed:fd:15:89:d3:
                    08:7a:da:12:79:48:49:5f:45:cc:ec:ff:7e:c8:29:
                    38:8c:27:1e:6b:0a:9c:16:36:fd:64:a4:16:9a:fe:
                    f4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:50:CF:AC:7A:3D:93:77:A4:62:28:3B:B2:40:30:17:CB:9D:F2:5A
            X509v3 Authority Key Identifier:
                keyid:9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:d2:92:5d:bc:c8:61:c1:95:58:f4:d5:da:ec:26:82:1c:6f:
         12:6f:ec:e0:95:1a:87:c9:d9:2d:0f:17:7f:4c:ee:f8:53:b5:
         43:6a:6f:02:97:05:b8:4a:1a:68:4f:bb:6a:ea:af:42:ba:4b:
         ff:b7:10:43:55:cd:ee:df:9c:56:07:ee:74:9d:af:f5:09:c4:
         ae:4f:7a:dc:21:61:a2:16:0c:5d:91:be:04:e0:e1:28:50:4b:
         00:f2:83:7b:c5:ef:c1:61:de:e3:73:51:7d:91:c3:6d:6b:e7:
         7d:29:9b:c3:f5:c7:8e:22:3e:41:88:d1:33:62:26:5c:8a:01:
         f7:f6:5b:16:a2:67:81:80:31:2a:3b:02:0c:7f:0a:b9:9c:7b:
         d6:45:5c:1d:ac:b4:0f:3e:35:2f:cc:d4:b1:d5:f4:e9:48:8f:
         ab:a8:b7:3f:8b:1f:1f:8d:81:92:3f:4d:b4:b6:90:8c:e3:a6:
         36:18:96:13:89:37:83:57:8d:3f:98:e6:25:44:11:e8:47:a9:
         a0:64:7a:9b:b1:58:04:f6:56:ef:b1:1e:67:91:3f:82:e5:36:
         6f:cc:75:0c:7e:1e:41:ae:54:ce:52:1d:6e:06:a7:1d:3f:3f:
         3d:34:00:51:49:4c:bb:16:ba:b0:6a:58:1e:52:a4:62:95:e9:
         93:20:23:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:24:49 2026 by rpki-client