Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
File:                     hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft (raw, json)
Hash identifier:          fD7V6tZYrl0pX3LcqkqYxcOqHCzf/I3/MbYfG4FWR8Y=
Subject key identifier:   7E:6D:56:FE:0A:EA:44:32:6B:6E:9B:47:26:53:AE:30:DF:59:D2:53
Authority key identifier: 86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7
Certificate issuer:       /CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
Certificate serial:       019EC4811E638E208240609E5A5FD580C7BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
Manifest number:          195B
Signing time:             Sun 14 Jun 2026 05:00:56 +0000
Manifest this update:     Sun 14 Jun 2026 05:00:56 +0000
Manifest next update:     Mon 15 Jun 2026 05:00:56 +0000
Files and hashes:         1: SHJi1Hg3BYSDVLWuUF3dUC_y5Qc.roa (hash: hbtSVIptoXiMe4xO8q5DDqQ1ZQZBnOOJmENfX4ZeP2E=)
                          2: hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl (hash: fOmDK+7ZKq+7awkb2KNf2tyasDiKVtLevFgu5/mZDkM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:81:1e:63:8e:20:82:40:60:9e:5a:5f:d5:80:c7:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
        Validity
            Not Before: Jun 14 05:00:56 2026 GMT
            Not After : Jun 15 05:00:56 2026 GMT
        Subject: CN=7e6d56fe0aea44326b6e9b472653ae30df59d253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b7:e8:80:36:1a:c4:79:97:89:e9:5b:f2:77:
                    3a:7f:e2:cd:d4:1b:19:54:bd:ed:d9:44:a0:60:17:
                    d7:2a:85:64:6a:ff:7e:33:92:53:ba:59:84:cc:30:
                    39:cf:97:77:73:be:cc:40:d0:5b:6f:0e:29:cc:2b:
                    7a:ef:08:4f:b7:4d:60:23:be:a4:c1:8f:3f:89:c3:
                    a6:3b:b9:aa:32:5d:19:95:6c:ff:f5:76:da:af:eb:
                    64:66:a2:56:4d:6e:59:36:a0:5e:59:ce:84:c2:94:
                    e0:a4:b2:31:d0:93:94:f4:05:90:90:e0:7b:f2:37:
                    80:8a:80:10:7e:51:5b:b7:b9:25:50:de:28:80:95:
                    c8:ec:b2:ab:27:8e:ef:ab:8b:33:a9:69:a0:4f:3e:
                    1a:0e:ba:95:a6:ed:7b:79:dc:51:74:b1:5a:26:d5:
                    4e:d8:66:f1:64:94:1d:c3:de:bb:28:94:bc:4f:db:
                    99:a1:c5:59:63:70:73:61:51:a6:de:50:1b:bf:ae:
                    54:95:a0:e7:de:d1:d6:2b:e0:f8:ce:3f:d0:34:8d:
                    c3:8c:f9:63:f8:e3:44:b3:81:e6:cb:8c:12:ad:96:
                    a4:2b:d1:a3:11:95:c3:4a:b5:77:e6:17:aa:2f:29:
                    08:9e:92:4a:38:fb:ca:6d:0a:34:a5:b7:34:92:33:
                    8a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6D:56:FE:0A:EA:44:32:6B:6E:9B:47:26:53:AE:30:DF:59:D2:53
            X509v3 Authority Key Identifier:
                keyid:86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:ad:dc:7e:ac:14:08:43:d8:6d:78:0c:39:79:f6:3b:35:25:
         12:e2:f3:ff:be:59:4c:90:95:bd:70:05:b6:54:ad:6a:a8:24:
         6e:3b:b0:b2:f6:d1:d3:44:23:1d:c5:c2:0c:7b:f3:4f:67:00:
         d2:eb:69:17:21:cf:bc:50:70:de:fb:fa:00:0e:14:b5:a7:87:
         94:ef:8d:db:a1:62:f7:d9:6b:1c:e4:77:cf:3d:ed:45:b4:80:
         3f:38:88:db:5a:ec:fa:3e:25:50:0e:67:a3:b1:96:a9:c4:03:
         38:19:16:ba:34:03:35:b1:4b:34:2e:17:31:a2:3b:ec:95:24:
         5e:c9:dc:37:fe:ea:ae:e9:e1:f1:35:14:c1:c3:e4:67:e6:aa:
         69:d0:e4:07:c3:75:68:d2:87:c3:3d:91:76:d6:19:64:13:9e:
         f6:63:a9:e2:b0:01:17:87:06:0b:67:88:90:07:1f:a8:15:b8:
         8e:9a:5b:81:b4:7b:bc:dc:ad:9a:8f:55:6e:e9:29:e0:27:15:
         09:f6:81:bc:3b:6a:b1:ea:78:ee:0b:c3:3a:81:04:a3:ac:f3:
         7f:be:71:f9:13:86:c4:b0:ba:ec:e4:e7:67:ca:1a:ae:c7:56:
         29:6f:2a:1c:53:3d:67:02:60:6e:fe:73:0f:c9:33:4c:01:ae:
         3d:60:85:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:36:45 2026 by rpki-client