Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
File:                     yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft (raw, json)
Hash identifier:          deq6O0wK3wIhBXsJOqgYvAr3xmjGmZxHeiMaJY9+V1Y=
Subject key identifier:   F6:55:6D:1B:75:53:51:26:84:3F:91:59:3F:96:7A:0D:D7:67:14:CE
Authority key identifier: C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
Certificate issuer:       /CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Certificate serial:       019EBF5A3804AFE1144C980833C1E26B3AA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 05:00:21 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:21 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:21 +0000
Files and hashes:         1: Nh5n5OS_FgNSU_CRCZBVspz1rhI.roa (hash: IWrNPYpBRnCN3KoAH2/hYR5dMaCc3BE8UMq5q83cyhw=)
                          2: wG3GrFqVGUvTRTbPHblNlTz8CLk.roa (hash: LemTu9TRxZtqMeqZqR+9skKyltQynjo4K29j1dzL0vI=)
                          3: yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl (hash: FPHC8y6kPtlYGA9gYa2XU7bltYjAsGefg1xNRJH/bJU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:38:04:af:e1:14:4c:98:08:33:c1:e2:6b:3a:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c97dc6d8df5d084e923063488d37d3ae0114777b
        Validity
            Not Before: Jun 13 05:00:21 2026 GMT
            Not After : Jun 14 05:00:21 2026 GMT
        Subject: CN=f6556d1b75535126843f91593f967a0dd76714ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:64:65:62:2c:fd:73:a7:7e:2f:e2:9e:07:27:
                    3c:a0:85:22:83:a8:d3:e4:0e:07:d3:ac:1c:0a:de:
                    7e:32:8a:18:67:65:14:5c:16:3f:04:23:23:76:0e:
                    40:0a:27:46:a6:4d:2b:a0:e5:0e:3d:37:09:63:96:
                    b8:85:a7:0e:f1:73:cb:95:3d:bc:81:ff:3b:54:be:
                    d2:63:c6:e9:fd:50:89:97:97:20:e7:c1:b7:9f:79:
                    8b:7f:82:15:73:86:e6:3f:9a:f1:d6:9a:ae:4c:e1:
                    b3:97:ff:9b:7d:b4:19:13:b0:38:2e:48:62:1d:4b:
                    56:d2:0a:72:63:d4:84:d7:dc:e5:fd:98:39:23:4b:
                    c4:a0:55:48:a8:9e:ab:52:06:be:1e:da:0f:2a:1d:
                    30:0a:eb:a8:6c:59:77:59:9c:ab:7a:fa:8c:fa:5f:
                    3c:2e:1c:d6:bb:9a:f5:3a:77:88:d1:8d:f2:70:77:
                    53:cb:7c:2a:00:55:66:1a:a2:6d:53:8a:9b:9e:33:
                    3f:53:86:b1:c8:81:fa:aa:82:34:c8:8a:a1:47:ec:
                    19:28:7e:59:55:5b:7d:4d:8e:49:47:4a:d1:72:37:
                    bd:e8:aa:cb:56:da:1a:35:17:6e:18:25:88:c1:3b:
                    f5:79:1a:8e:ba:ad:99:d9:a0:70:5f:4d:6e:dc:57:
                    c4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:55:6D:1B:75:53:51:26:84:3F:91:59:3F:96:7A:0D:D7:67:14:CE
            X509v3 Authority Key Identifier:
                keyid:C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:80:b7:55:d2:e3:e3:d5:32:6f:c2:7e:8e:3a:fe:ef:52:f6:
         6a:03:93:0d:9b:f2:bb:ac:96:ba:98:46:21:91:8a:1b:a4:38:
         3a:98:3b:7c:c7:06:81:f4:79:d1:0f:52:41:c1:65:3c:24:fb:
         2f:1c:16:ef:02:2b:f8:cc:05:24:64:dd:c4:9c:31:c3:5e:1d:
         aa:1c:bd:6a:4c:6e:4a:2a:d4:c2:7b:00:79:9c:56:5b:5f:ff:
         8d:e3:18:41:ca:fd:b4:24:8a:f2:0f:5f:ba:93:98:3c:76:aa:
         15:24:2a:0a:df:d9:7c:91:c0:1e:7a:b7:17:61:85:c1:50:12:
         3f:65:5a:94:df:47:da:53:41:5d:5e:8c:0e:b0:90:64:45:26:
         32:25:1c:a1:fe:34:ee:78:77:7e:b8:8f:d8:7f:6b:0f:d8:f4:
         f5:24:dc:a7:a9:64:41:69:be:22:64:a4:ce:db:01:bc:b7:90:
         3f:52:0e:b8:08:0c:e0:14:28:f0:89:84:a8:c3:56:24:1d:33:
         fa:96:ed:e2:0d:e2:b0:b4:0f:ca:a3:36:21:b7:2a:2e:e1:d6:
         35:34:92:21:16:4d:23:ce:35:d4:c8:ae:46:b3:84:47:37:07:
         50:52:38:16:e8:85:c2:6d:4f:8c:6d:f9:96:8a:62:f1:2f:73:
         fb:b9:7f:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WjgEr+EUTJgIM8HiazqnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5N2RjNmQ4ZGY1ZDA4NGU5MjMwNjM0ODhkMzdkM2FlMDEx
NDc3N2IwHhcNMjYwNjEzMDUwMDIxWhcNMjYwNjE0MDUwMDIxWjAzMTEwLwYDVQQD
EyhmNjU1NmQxYjc1NTM1MTI2ODQzZjkxNTkzZjk2N2EwZGQ3NjcxNGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GRlYiz9c6d+L+KeByc8oIUig6jT
5A4H06wcCt5+MooYZ2UUXBY/BCMjdg5ACidGpk0roOUOPTcJY5a4hacO8XPLlT28
gf87VL7SY8bp/VCJl5cg58G3n3mLf4IVc4bmP5rx1pquTOGzl/+bfbQZE7A4Lkhi
HUtW0gpyY9SE19zl/Zg5I0vEoFVIqJ6rUga+HtoPKh0wCuuobFl3WZyrevqM+l88
LhzWu5r1OneI0Y3ycHdTy3wqAFVmGqJtU4qbnjM/U4axyIH6qoI0yIqhR+wZKH5Z
VVt9TY5JR0rRcje96KrLVtoaNRduGCWIwTv1eRqOuq2Z2aBwX01u3FfEyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZVbRt1U1EmhD+RWT+Weg3XZxTOMB8GA1UdIwQY
MBaAFMl9xtjfXQhOkjBjSI03064BFHd7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVgzRzJOOWRDRTZTTUdOSWpUZlRyZ0VVZDNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8wZjY5MjAtMjc3MC00Y2JlLWE2NGYt
MmE2YmMzODMyYTBhLzEveVgzRzJOOWRDRTZTTUdOSWpUZlRyZ0VVZDNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8wZjY5MjAtMjc3MC00Y2JlLWE2NGYtMmE2YmMzODMyYTBh
LzEveVgzRzJOOWRDRTZTTUdOSWpUZlRyZ0VVZDNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg4C3VdLj
49Uyb8J+jjr+71L2agOTDZvyu6yWuphGIZGKG6Q4Opg7fMcGgfR50Q9SQcFlPCT7
LxwW7wIr+MwFJGTdxJwxw14dqhy9akxuSirUwnsAeZxWW1//jeMYQcr9tCSK8g9f
upOYPHaqFSQqCt/ZfJHAHnq3F2GFwVASP2ValN9H2lNBXV6MDrCQZEUmMiUcof40
7nh3friP2H9rD9j09STcp6lkQWm+ImSkztsBvLeQP1IOuAgM4BQo8ImEqMNWJB0z
+pbt4g3isLQPyqM2IbcqLuHWNTSSIRZNI8411MiuRrOERzcHUFI4FuiFwm1PjG35
lopi8S9z+7l/AA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:23:23 2026 by rpki-client