Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
File:                     B1YOPnLGB5oE59H2EDud94l5pSI.mft (raw, json)
Hash identifier:          Nz+HydEfrkAcJ9PkZDbcwOyYJ1gTYy32j8KeN6U/bx0=
Subject key identifier:   A7:AB:81:44:FB:F6:FD:83:D3:33:8A:8B:DF:0A:94:10:22:F5:22:CB
Authority key identifier: 07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
Certificate issuer:       /CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Certificate serial:       019EC224944DBA5D933ADD52BEF25B0CC5CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
Manifest number:          195E
Signing time:             Sat 13 Jun 2026 18:00:37 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:37 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:37 +0000
Files and hashes:         1: 0xSPcCHliFnpwMFUmv26_TkbvbE.roa (hash: abIn3m5KuYMzd33dZvCYHDE1IStZlNhAz5LIcGESnpE=)
                          2: B1YOPnLGB5oE59H2EDud94l5pSI.crl (hash: xjrMyg1KZSz4WOxRomqLxpwv7suCDjCOLRcIjpxInuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:94:4d:ba:5d:93:3a:dd:52:be:f2:5b:0c:c5:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07560e3e72c6079a04e7d1f6103b9df78979a522
        Validity
            Not Before: Jun 13 18:00:37 2026 GMT
            Not After : Jun 14 18:00:37 2026 GMT
        Subject: CN=a7ab8144fbf6fd83d3338a8bdf0a941022f522cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b1:d8:e0:ec:ad:5c:28:0d:82:71:92:e6:0b:
                    77:e0:ef:7d:12:41:f3:9c:af:60:b3:74:62:8a:35:
                    14:45:64:fd:b3:3e:84:ba:85:ed:f7:c7:a4:d2:5b:
                    02:86:7c:17:6f:32:13:ff:50:52:d4:80:6c:d9:7d:
                    0d:c2:91:2b:d1:dd:33:de:3a:b2:55:92:d5:27:0c:
                    7c:4e:56:c5:54:92:bd:c2:e7:18:6f:02:21:de:4f:
                    52:ee:04:e6:42:fd:5e:c5:94:4f:55:64:e9:99:93:
                    32:f4:1f:1e:93:bc:7d:42:5a:98:fd:a2:b5:7f:21:
                    18:eb:5a:1a:64:e4:33:58:72:80:f1:7d:1d:70:6c:
                    6e:b5:72:65:b0:95:4b:eb:a6:d2:bf:c5:6e:0c:08:
                    fd:88:37:49:fc:62:24:b3:13:0f:74:16:0a:c5:a1:
                    5a:7c:75:2e:ea:06:eb:27:d0:c2:a8:e4:08:fc:fc:
                    f2:c8:ba:8f:9c:27:81:b1:82:0c:db:7e:bc:45:61:
                    42:3e:aa:c6:3c:a6:7f:14:0c:f0:e4:2d:42:3e:42:
                    86:29:0d:ba:f8:61:2a:9e:4c:be:fb:4e:92:1a:cf:
                    a0:df:36:60:c5:27:64:92:cc:20:bd:f3:24:41:26:
                    f8:40:bf:ea:98:05:f5:7f:95:22:ff:75:15:27:9d:
                    59:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:AB:81:44:FB:F6:FD:83:D3:33:8A:8B:DF:0A:94:10:22:F5:22:CB
            X509v3 Authority Key Identifier:
                keyid:07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:2b:e3:33:d5:62:28:88:ae:e1:8d:11:32:ad:97:d0:95:42:
         4d:1a:d1:d8:da:69:81:56:d2:52:9e:e8:7f:93:b8:93:49:57:
         23:11:d7:a4:a1:1f:4a:c2:61:b2:3e:dc:22:af:fe:2d:15:46:
         3b:ed:5c:e9:65:69:11:27:69:df:42:26:51:1d:e2:dc:3f:81:
         6e:ab:4e:e6:40:6e:15:4f:34:dc:eb:a8:15:b3:7b:5f:45:f9:
         4a:62:7d:ec:fb:5a:6b:ef:df:ab:6c:b7:b3:22:32:d2:88:f8:
         53:88:f7:c8:70:99:2a:bb:b8:b2:38:6c:51:db:58:6e:d2:66:
         50:b5:31:57:04:cf:b2:b0:54:4d:a6:be:c9:1a:36:da:f3:58:
         ed:62:d7:64:01:d6:90:bc:22:45:b6:b1:ff:05:7d:22:44:5c:
         67:ca:c8:f8:a6:50:10:ee:fa:4c:32:53:66:6a:b8:0f:e8:2e:
         58:59:08:ea:f4:07:03:d6:9e:02:a3:16:d1:b6:8e:eb:4d:fc:
         89:85:69:20:d8:ee:18:0c:b3:7f:d3:36:9b:cf:59:3c:96:d7:
         1a:1d:ab:27:e4:b7:c7:01:68:52:67:30:30:bf:da:ac:06:84:
         76:46:cb:eb:00:26:40:49:6c:8f:be:27:48:21:07:6b:32:ce:
         4f:f9:85:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:11:15 2026 by rpki-client