Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
File:                     PDULqC8_61ruKJOPvxsJweL9GbQ.mft (raw, json)
Hash identifier:          mdczCeRZO91G1mWmEqd1Xf6wAQeTpuRpMDh4/D5mnRE=
Subject key identifier:   DD:EE:16:CB:4B:4D:0F:4D:46:A8:63:98:84:44:8F:1F:BC:04:30:0E
Authority key identifier: 3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4
Certificate issuer:       /CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
Certificate serial:       019EC0DAA678DAF833AAF4B467FFAF5E96D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 12:00:15 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:15 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:15 +0000
Files and hashes:         1: 3LaL7uXB-UYgWuSk1gGwpH4emtk.roa (hash: SZi8GiIOhAGOw0aZ9QVtTEgPlEhqv8CHu5L26uxGnTw=)
                          2: OKvF1jZUD1oQ8vjnPvKbRctzA_Y.roa (hash: TURUpo5c7V3B7eiBvFVs4P/z+qyI+1sdNbYu2NhorzE=)
                          3: Op5GYXPNrxg_HfwVEuFZeHOadM4.roa (hash: uIjeZZuq23pgTgw8/rbcHVuGWjLz/Rc1HlKQEVLAUp8=)
                          4: PDULqC8_61ruKJOPvxsJweL9GbQ.crl (hash: Znti3n6nwt2YNEoqTTlCJHJBqdXBWdj5+tfuZyZHbnY=)
                          5: kFJJEyTKADp1baTJnM1zkurd-AY.roa (hash: 6YWt+74Liha4YiPIKXVwr09uzTbyh63tPVdg3eh1Ecw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:da:a6:78:da:f8:33:aa:f4:b4:67:ff:af:5e:96:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
        Validity
            Not Before: Jun 13 12:00:15 2026 GMT
            Not After : Jun 14 12:00:15 2026 GMT
        Subject: CN=ddee16cb4b4d0f4d46a8639884448f1fbc04300e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a9:e0:dc:0d:29:da:66:84:e2:26:fd:e4:9f:
                    71:ff:3b:f0:e7:c4:77:4b:17:0d:a3:5a:e1:e7:d2:
                    05:de:1b:2c:25:ec:31:94:02:73:e1:30:34:cd:b7:
                    04:a0:b8:a0:b1:af:63:3e:24:96:fa:ef:83:60:a6:
                    a8:a1:bd:38:74:31:62:ba:ba:be:62:fb:9f:35:52:
                    52:23:94:88:ad:9a:c2:de:ab:86:ce:47:39:71:51:
                    ea:94:c8:dc:2a:5f:63:d0:4d:e0:f2:7f:f2:29:00:
                    5b:9d:96:d1:7f:94:d5:aa:d7:64:7f:da:04:e5:f7:
                    a9:e1:9b:9c:ea:d0:bd:a4:8d:b5:23:64:e4:11:c0:
                    8c:c0:89:25:92:95:81:80:c0:d2:94:91:a3:f2:90:
                    f2:79:ef:da:17:f8:ed:78:29:11:88:c7:75:40:6f:
                    8e:8d:6d:78:fc:fa:59:24:6d:07:aa:4f:70:82:e0:
                    9c:25:cb:cc:d3:05:58:6e:97:6e:67:b7:4c:b5:6a:
                    6e:e7:38:96:92:8c:f5:a9:1f:c3:47:2b:b6:35:d8:
                    01:ae:09:0e:8c:fb:51:7b:ed:92:d3:42:13:9f:48:
                    15:6b:d9:f2:04:08:c4:43:00:13:d0:36:ec:90:04:
                    5d:ea:ed:b0:30:9b:89:e0:08:c9:4e:9b:9f:00:a6:
                    03:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:EE:16:CB:4B:4D:0F:4D:46:A8:63:98:84:44:8F:1F:BC:04:30:0E
            X509v3 Authority Key Identifier:
                keyid:3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:3e:5b:d0:a7:9e:43:d8:19:16:9c:7c:78:42:f1:8d:e1:92:
         af:b3:39:d3:d3:20:c2:4a:0e:6c:34:11:0e:ab:c5:11:8c:27:
         d3:64:ca:7a:69:f5:74:ec:fb:5f:0c:e6:89:e5:fe:25:62:87:
         36:e6:c7:e0:f4:1e:fd:c0:16:9a:1d:7c:c2:39:aa:25:4e:10:
         44:12:48:94:e3:2a:c4:33:11:61:b8:fd:b8:c9:87:b5:0a:11:
         67:6d:d9:77:4d:78:16:09:38:71:52:eb:cb:af:e4:0c:81:e8:
         92:19:88:39:ee:5f:09:94:8b:18:08:12:f0:57:07:06:62:5d:
         84:80:15:2b:06:3f:f5:df:25:6f:a1:e1:eb:7d:39:04:99:8b:
         05:f6:af:2d:dc:2f:0a:6d:45:39:a0:24:93:af:13:7c:9e:43:
         a9:fa:4f:48:fa:19:59:40:db:c6:c1:c7:db:29:5a:91:32:16:
         3d:7e:d5:bf:06:7c:37:47:da:e9:94:80:45:20:15:30:19:f1:
         fe:32:c6:5b:fd:5d:59:23:de:cb:2f:8f:ab:bc:7a:b4:41:8c:
         cf:7b:a8:d2:c9:7e:c1:c0:d5:d8:47:b8:3d:4b:fb:f3:15:98:
         59:db:73:d9:ca:a2:2e:ed:d4:47:e0:9a:9a:11:b3:e4:62:47:
         22:bd:9e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:03:18 2026 by rpki-client