Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
File:                     201SqwmxbXL0w-SMxLSQJdCDZ20.mft (raw, json)
Hash identifier:          yNtoaV5p5OpbvTy2yIIk3RYXAORENQpu6du4XqsTC1g=
Subject key identifier:   17:8C:AD:6F:03:B5:6C:E3:45:CB:32:57:AA:72:2E:5B:81:ED:18:68
Authority key identifier: DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D
Certificate issuer:       /CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
Certificate serial:       019EBD6C442A5B7B52BD7927E8FDD29652D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
Manifest number:          195C
Signing time:             Fri 12 Jun 2026 20:00:49 +0000
Manifest this update:     Fri 12 Jun 2026 20:00:49 +0000
Manifest next update:     Sat 13 Jun 2026 20:00:49 +0000
Files and hashes:         1: 201SqwmxbXL0w-SMxLSQJdCDZ20.crl (hash: kgu0aoIiIv1GfqsyUejgPI/RKsnndzwSAk5RhjFcRTM=)
                          2: DcpoOaI5WCtrBzEek9x3MtAQl4Q.roa (hash: LNpYxCyPAZU/q4OugE8iiZ5AnBZFDBNN2UC960my6+g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:6c:44:2a:5b:7b:52:bd:79:27:e8:fd:d2:96:52:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
        Validity
            Not Before: Jun 12 20:00:49 2026 GMT
            Not After : Jun 13 20:00:49 2026 GMT
        Subject: CN=178cad6f03b56ce345cb3257aa722e5b81ed1868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:43:b4:62:28:55:f4:f9:d0:c6:bc:b0:39:c4:
                    e2:5f:3f:7e:2e:49:14:88:dd:aa:99:b4:28:aa:19:
                    70:91:02:82:76:72:7b:76:78:a3:b6:47:fa:a4:0d:
                    dc:cb:e2:dd:a5:c8:59:63:e9:54:a4:75:e4:36:2c:
                    f4:13:16:73:8b:c0:5d:4a:b8:6e:d0:2a:63:0b:83:
                    e5:94:ef:38:47:68:64:52:2f:39:ea:15:49:79:c2:
                    74:fc:fa:16:2c:f0:41:a2:11:f8:d8:c0:01:26:86:
                    58:2e:a0:ec:a5:31:fb:cf:db:88:a7:07:a4:4d:a6:
                    01:9d:ed:50:14:25:be:17:18:e6:e1:35:eb:fe:31:
                    da:5f:8f:d8:1c:b0:c5:be:73:e9:ea:ed:53:18:97:
                    ce:4e:a4:13:93:31:86:48:8d:e5:f6:ce:41:1e:4c:
                    66:e3:af:9b:79:64:97:1f:8f:cd:c4:4c:d4:43:86:
                    ce:50:1c:f2:be:af:da:f0:74:f4:ba:dc:d4:dd:6c:
                    b3:4d:94:a6:62:ac:a9:94:cc:2d:0c:06:af:1f:8c:
                    9c:8d:45:ca:84:57:d4:a0:b9:7b:a7:7b:fc:99:0f:
                    05:7a:31:6e:2d:e6:32:a7:d7:31:75:bb:ce:07:88:
                    07:31:e1:8f:f8:85:8d:17:6d:65:91:1f:54:0b:ad:
                    3c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:8C:AD:6F:03:B5:6C:E3:45:CB:32:57:AA:72:2E:5B:81:ED:18:68
            X509v3 Authority Key Identifier:
                keyid:DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:40:b7:0c:ce:8c:0e:71:dd:23:cb:07:6a:04:a4:c8:67:cc:
         32:a8:89:db:3b:14:5e:96:65:6e:91:27:a4:74:e3:c2:ac:54:
         76:3d:69:da:97:56:d1:19:d7:c3:fd:20:23:12:c1:0f:65:d2:
         9e:24:56:b2:e9:bc:e7:1f:32:38:33:7f:a0:40:12:50:b4:3d:
         01:aa:1f:fa:41:b0:c2:fd:cf:99:ef:81:c2:8d:42:80:62:96:
         aa:5b:d4:b2:a1:84:55:c4:b4:f6:44:f7:dd:08:f2:ba:2c:9e:
         02:07:e0:d6:e2:3e:1c:af:b3:5c:02:15:70:94:af:a1:b4:b2:
         6e:2f:e4:5d:4b:51:d8:a5:e4:43:52:f9:af:1b:58:91:a5:f4:
         7c:c9:4e:a8:3a:ed:64:79:4c:7d:13:f9:9d:b8:ff:da:81:2e:
         93:9e:5b:b2:50:fb:13:52:69:3f:92:c8:c7:78:65:d5:f9:a6:
         7e:14:fa:92:92:a5:b5:22:e3:3b:3d:48:2a:c7:f5:fb:55:c7:
         28:ec:87:46:62:f2:fc:a0:b7:0c:6e:59:70:b3:72:a1:d1:6b:
         b8:50:7b:3f:92:f4:2a:53:d7:d9:5f:e1:fb:88:65:95:3e:87:
         96:70:d6:e7:b7:04:1d:6b:1a:99:6f:96:69:4f:32:7e:08:b2:
         45:3d:28:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:56:05 2026 by rpki-client