Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft
File:                     c2iuvB1FhbmzYS7MIgNFTWWocuM.mft (raw, json)
Hash identifier:          riLwwvf+jjXtTqoBT5lBpyzE9PnidmwDQsz0THJO7pI=
Subject key identifier:   5F:AC:2D:80:00:92:94:13:82:F4:8F:0F:B5:A0:63:36:7E:C7:C3:59
Authority key identifier: 73:68:AE:BC:1D:45:85:B9:B3:61:2E:CC:22:03:45:4D:65:A8:72:E3
Certificate issuer:       /CN=7368aebc1d4585b9b3612ecc2203454d65a872e3
Certificate serial:       019EC337E085F6089CF64D41E337AC76773E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c2iuvB1FhbmzYS7MIgNFTWWocuM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 23:01:19 +0000
Manifest this update:     Sat 13 Jun 2026 23:01:19 +0000
Manifest next update:     Sun 14 Jun 2026 23:01:19 +0000
Files and hashes:         1: c2iuvB1FhbmzYS7MIgNFTWWocuM.crl (hash: Zn65ltq7pkGcsHa1zKRa8d/FYJe/j2eD4AOOgqX2WIk=)
                          2: vaG8_QMiq-gvMMwN9ZG02j3YzU4.roa (hash: F7rxfGZiwjYWNbSFolPcJp4VrNwcoqXEugc+lLx087M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c2iuvB1FhbmzYS7MIgNFTWWocuM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:37:e0:85:f6:08:9c:f6:4d:41:e3:37:ac:76:77:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7368aebc1d4585b9b3612ecc2203454d65a872e3
        Validity
            Not Before: Jun 13 23:01:19 2026 GMT
            Not After : Jun 14 23:01:19 2026 GMT
        Subject: CN=5fac2d800092941382f48f0fb5a063367ec7c359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ae:9f:6b:07:0f:b6:96:59:d7:30:de:95:f8:
                    9d:76:3f:10:0e:ce:99:21:42:a1:29:51:f4:2e:69:
                    7f:69:e9:04:14:5a:c6:ce:b5:af:bd:78:20:28:5a:
                    f8:4d:8f:28:83:40:a4:2c:74:fb:e2:e5:3d:17:21:
                    9a:f3:74:f2:e1:3b:4c:5f:b6:f5:1f:07:c4:70:02:
                    17:63:70:40:d1:1a:74:90:d7:96:37:6a:27:a8:ba:
                    ec:c4:df:ec:a9:59:bc:af:c7:1d:51:8d:42:d0:bb:
                    53:f5:fa:71:e3:af:28:6a:ff:f6:ce:31:f1:5f:13:
                    cb:b5:b0:2d:d1:fd:5c:f3:76:55:60:50:d3:a5:b0:
                    c7:9a:28:27:9f:6f:e7:5e:cb:67:86:74:6d:c7:74:
                    68:df:d0:b6:0a:33:cb:55:a7:87:fe:75:10:26:ed:
                    e6:95:e1:a3:ef:4f:1c:22:f6:88:b9:69:b6:d9:83:
                    0a:f3:99:6e:3a:97:10:56:ec:83:b8:e7:2a:5d:16:
                    19:85:3f:52:81:16:ac:27:84:59:4c:68:34:ea:1a:
                    ff:1b:39:ec:97:e5:84:05:b7:60:ca:32:34:a6:a1:
                    f9:b9:a7:40:c6:9b:64:98:68:25:0e:cb:cf:5e:57:
                    0b:52:5f:e7:17:36:44:6b:cd:d0:be:a0:cc:62:52:
                    aa:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:AC:2D:80:00:92:94:13:82:F4:8F:0F:B5:A0:63:36:7E:C7:C3:59
            X509v3 Authority Key Identifier:
                keyid:73:68:AE:BC:1D:45:85:B9:B3:61:2E:CC:22:03:45:4D:65:A8:72:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2iuvB1FhbmzYS7MIgNFTWWocuM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:34:df:7e:d9:16:9c:c8:5e:ff:80:c9:7c:3a:f7:a7:1e:a2:
         fb:4f:1d:3b:55:84:ab:4a:0a:31:51:f5:2d:c9:b0:df:9a:20:
         bb:a7:c6:92:a0:a8:03:3b:12:ee:38:a4:db:89:fe:7a:28:3a:
         72:95:45:81:b2:cc:2c:82:95:21:6e:4d:97:ef:92:c8:a1:9a:
         c8:3f:70:52:53:18:4d:2a:56:f0:25:a0:18:2c:5f:c9:50:ef:
         de:fa:82:1b:19:8c:ad:20:6e:29:f2:97:aa:78:69:6d:14:12:
         26:fd:ce:94:49:65:5f:3e:d4:f1:4c:a5:18:bf:16:b1:b0:ae:
         85:03:06:ca:62:32:41:b5:db:5f:85:a1:9f:14:52:e9:ca:9d:
         76:d1:82:c5:9d:bd:d9:0f:85:4a:13:b0:ef:e9:35:bb:93:5c:
         d3:90:6a:b5:5c:6d:35:31:92:c7:0e:36:07:d5:1b:1a:a1:64:
         b0:14:6e:2e:4c:88:c7:70:ff:9b:da:c4:93:a0:8b:5f:cc:b4:
         11:d1:80:ae:77:d8:4a:1a:85:88:be:01:00:a5:ab:02:c6:14:
         cd:16:58:f7:40:87:2b:1b:d4:c1:e2:e4:e9:6f:b6:02:14:db:
         3a:d0:d4:00:71:9c:2e:5d:58:47:b4:b4:89:46:2c:14:4d:cb:
         fc:7b:13:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:25:14 2026 by rpki-client