Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
File:                     cpsz3mBR0E119rsfflOx79ZkYhE.mft (raw, json)
Hash identifier:          cvzKffqHJvegh93zUQTSRnYvVrhewHHsR49X8NUrChA=
Subject key identifier:   3F:42:57:60:CA:24:6D:AB:84:91:D8:C8:E7:A3:3A:D8:25:EB:1B:B9
Authority key identifier: 72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
Certificate issuer:       /CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Certificate serial:       019EBFC8C49FE386C3E343E0FBC906989356
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 07:01:06 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:06 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:06 +0000
Files and hashes:         1: 0JqDGO3zEAPtzyEllTXxlHU8D6s.roa (hash: 30zt4SdMrQD3mYFxcaO98Ys+4idxO93NzA+6h84mZFg=)
                          2: bg4FVHJBOH5TAp4wE2_gLeGQHSU.roa (hash: 4j3m35kWKfJWjqNvHUE062fw8ckL2T8nUD0TckCxZnI=)
                          3: cpsz3mBR0E119rsfflOx79ZkYhE.crl (hash: ou7NIMZ5o/tAuvkshvCWZrK0H9WhJR6GajRzV41DRvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:c4:9f:e3:86:c3:e3:43:e0:fb:c9:06:98:93:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
        Validity
            Not Before: Jun 13 07:01:06 2026 GMT
            Not After : Jun 14 07:01:06 2026 GMT
        Subject: CN=3f425760ca246dab8491d8c8e7a33ad825eb1bb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a9:b5:fe:32:fc:de:30:b1:2d:2b:e5:8b:27:
                    e0:bb:34:9b:f9:a9:bf:7a:9c:9e:d7:1d:41:bc:61:
                    a2:3f:8b:27:fd:5f:6b:0c:67:f3:00:00:33:0a:c3:
                    5b:3e:e0:c8:f3:2c:34:d6:18:fa:e6:65:82:61:bf:
                    a1:06:7f:41:23:41:64:33:3b:6c:d5:51:b2:2d:c8:
                    fe:e1:4b:05:ce:23:c5:9d:4e:d0:16:f4:5d:4a:ff:
                    1e:5b:5a:5e:cf:c8:15:31:2d:35:02:49:48:d1:17:
                    63:f4:a8:c4:52:e6:0b:37:d1:6a:4d:fd:b2:d2:3a:
                    5f:e3:78:00:5f:60:40:10:af:e0:26:01:44:02:98:
                    e8:3e:76:da:1a:bb:31:53:1c:b2:f5:97:a1:5d:80:
                    9a:1e:35:e0:81:96:11:a4:64:ce:bc:8d:28:d3:a1:
                    4b:39:e3:90:d3:62:ec:9f:6e:16:86:2c:10:2e:83:
                    2a:3c:73:a9:d0:da:e3:8b:bf:05:93:2b:cb:a9:2b:
                    47:0c:c5:19:38:fa:55:0a:ae:1d:e0:34:1a:e2:92:
                    00:7e:37:ea:4f:65:82:82:da:7f:ff:26:e8:df:47:
                    6f:85:20:14:90:25:52:fc:13:dc:43:52:05:29:ba:
                    69:e1:0f:33:4a:85:31:9f:d0:d9:e2:18:04:24:65:
                    1f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:42:57:60:CA:24:6D:AB:84:91:D8:C8:E7:A3:3A:D8:25:EB:1B:B9
            X509v3 Authority Key Identifier:
                keyid:72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:50:78:ab:d4:db:76:e5:3f:cd:f4:a9:4a:4d:0f:a4:62:32:
         99:77:5f:1c:b8:17:a0:24:fb:11:41:10:e5:73:3a:74:9b:ab:
         0a:61:b2:72:b2:c7:bd:9f:73:fa:fe:17:fb:ac:06:90:69:d8:
         69:35:e6:f9:8c:46:92:ac:71:42:f4:c2:14:23:1a:a1:df:84:
         82:f1:49:93:8e:9e:2c:0b:45:32:dc:e5:39:38:a2:63:5d:10:
         90:b4:9b:c3:99:2e:ee:5c:6e:05:79:07:c7:54:f7:5f:ba:45:
         4c:da:17:5e:d3:4b:c6:fa:71:08:41:3c:fe:f0:b7:06:67:56:
         e9:3b:18:05:02:38:fa:00:ac:85:a0:3e:cf:e0:85:a0:97:b5:
         32:c8:79:72:86:29:be:58:f2:ef:9c:2f:de:52:f7:43:8a:9a:
         9e:88:2a:74:6a:e8:d1:ee:bc:1f:73:f7:23:c9:b1:e4:90:36:
         5f:c5:90:ea:a9:06:aa:c1:2b:c6:d5:94:47:5c:de:b0:51:11:
         ce:df:9a:44:fc:57:21:46:af:24:41:1c:32:bf:4c:0d:5e:7c:
         81:d4:4c:f5:8b:c0:97:0e:f2:e5:7b:96:f9:76:0c:e3:93:29:
         cb:0f:08:96:cc:bf:63:44:3a:f8:36:b1:5a:7c:66:ed:75:67:
         06:c2:9d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:45:15 2026 by rpki-client