Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
File:                     bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft (raw, json)
Hash identifier:          AkzUtO6YXBVcZ++uxIapteHXu2dYrWrCsvCgxv8fj2E=
Subject key identifier:   D5:11:87:38:29:AD:66:1B:6A:D3:1F:35:43:71:88:F6:0F:79:9F:89
Authority key identifier: 6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
Certificate issuer:       /CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Certificate serial:       019EBE7EF5F291847E5B003915C45AF044EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 01:00:51 +0000
Manifest this update:     Sat 13 Jun 2026 01:00:51 +0000
Manifest next update:     Sun 14 Jun 2026 01:00:51 +0000
Files and hashes:         1: 8GCiWcx8mqq89-eKSSRHyEp78Jk.roa (hash: 1VoDgs3kjOrw6G1rdHG1fmbKleZRoSt+eF4wHzGq/bs=)
                          2: CE438SQN80x5iPZkUW29526BgDA.asa (hash: K9IH+d5x5/jcdlcwMyd5/VZgpKUM+MzffZkVWLGjIE4=)
                          3: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl (hash: mEn2Ri8iuuJcBwt8LhL4Z+1L7+sl0ay3P83k7n93Wtw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7e:f5:f2:91:84:7e:5b:00:39:15:c4:5a:f0:44:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
        Validity
            Not Before: Jun 13 01:00:51 2026 GMT
            Not After : Jun 14 01:00:51 2026 GMT
        Subject: CN=d511873829ad661b6ad31f35437188f60f799f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:14:c5:9a:b0:9d:db:17:7b:bb:f8:61:3d:4f:
                    d3:3a:8e:6f:19:f8:44:b6:46:b4:87:50:2e:ca:52:
                    a8:be:96:8d:b5:94:56:62:17:ea:a1:da:a7:a5:2b:
                    57:fb:ea:13:d0:f5:28:e7:1a:71:95:96:c9:39:58:
                    20:f7:87:5e:ec:12:e7:e0:8b:87:33:c3:a6:5d:eb:
                    81:a0:09:4b:19:7c:9e:54:c2:d9:44:ee:e6:1c:fc:
                    23:1a:a2:9e:be:c3:35:e0:92:f8:a6:e7:50:c0:6e:
                    68:ae:fa:ad:9e:40:a8:61:45:2e:04:05:76:83:d5:
                    87:48:27:1f:a3:87:19:07:d3:6d:5e:02:cf:21:66:
                    12:82:2e:a5:e0:22:b1:4d:92:d6:9a:2b:12:0e:42:
                    7c:a2:aa:b0:81:b3:c7:cb:42:38:f3:13:2c:48:53:
                    c4:a4:d6:df:db:25:16:e3:59:77:a3:e6:88:15:34:
                    19:5e:17:39:a3:01:a1:2b:a0:a7:16:24:b8:cb:d6:
                    e6:59:3c:52:4f:08:20:1d:c7:50:b4:36:19:6e:5a:
                    f5:f4:f4:56:4d:23:49:3c:02:6e:b0:4d:74:1e:4c:
                    76:78:44:61:a3:a6:f1:ae:b1:d9:7e:00:fc:de:42:
                    d1:5c:69:d5:e8:83:f6:95:48:e1:af:cb:f7:0b:ef:
                    53:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:11:87:38:29:AD:66:1B:6A:D3:1F:35:43:71:88:F6:0F:79:9F:89
            X509v3 Authority Key Identifier:
                keyid:6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:d6:ab:54:ab:04:e2:1e:bf:25:fa:a7:98:87:e6:06:49:ba:
         7d:96:f4:d4:7a:4a:ec:4d:b7:64:ca:52:33:03:f9:9f:ba:cf:
         31:35:87:94:8a:5e:26:5a:5d:07:44:ce:63:55:60:78:e9:84:
         85:e3:87:62:f1:9e:f6:d1:7e:b7:1f:ca:b4:ed:38:ff:22:35:
         9c:33:1f:28:4b:16:96:7d:33:1b:10:61:d6:78:71:e8:67:36:
         7d:33:e0:52:cb:fb:ce:6a:5c:50:5a:89:64:17:49:45:c5:b5:
         50:e2:ac:1e:b5:d0:96:b0:33:5e:06:08:72:16:ad:98:8c:b0:
         18:39:98:3f:bf:92:bf:3f:e4:f8:01:d7:2b:1d:df:96:7a:65:
         51:f2:16:87:93:fc:a7:e3:45:fb:18:fb:d6:c3:06:4e:a1:36:
         2c:1c:96:01:58:5e:fd:95:de:7e:75:dc:0c:15:86:00:52:31:
         e3:70:8c:aa:10:ad:34:98:bf:60:78:3d:c9:74:61:fe:00:19:
         db:0f:3f:c0:96:c5:e4:83:da:51:67:59:67:8d:95:47:50:5a:
         cb:71:83:da:44:96:2f:c9:e4:39:f7:c9:50:f6:1f:c7:b9:a6:
         40:ff:2c:28:d6:ba:59:ea:3d:b1:2f:21:db:58:f1:ce:bf:8a:
         61:53:d2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:39:50 2026 by rpki-client