Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
File:                     7-aRQnxuQYBvbOseIYp9xjIP3u0.mft (raw, json)
Hash identifier:          9/kS6dji+ClNd52Ux+6dW0lKIubLtK4+CAMRU2ETgX0=
Subject key identifier:   24:3F:2A:5C:91:02:5F:D2:6A:E0:F3:4D:D2:2C:8C:2E:5E:B3:C8:B3
Authority key identifier: EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
Certificate issuer:       /CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Certificate serial:       019EBE47D7436D3C00322D77E4A107A8A0C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
Manifest number:          195E
Signing time:             Sat 13 Jun 2026 00:00:39 +0000
Manifest this update:     Sat 13 Jun 2026 00:00:39 +0000
Manifest next update:     Sun 14 Jun 2026 00:00:39 +0000
Files and hashes:         1: 7-aRQnxuQYBvbOseIYp9xjIP3u0.crl (hash: n9I/obBCiiGhhm4l4/JrtCNIZ1glvS4OnWX7WmdRbmI=)
                          2: oUHh0fasEsq5w1CCMpfcHZtBRD4.roa (hash: UjTvz3EvpJQa3UXT8srfAji/9iKr5LpXON0y3SlaisY=)
                          3: y5NcApjS5_rDCgexUqkW-sOr7LA.roa (hash: iNlwoFrzX2UsLRpZnY8/tJMxzCRcasSdqgo0ouKBIzM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:47:d7:43:6d:3c:00:32:2d:77:e4:a1:07:a8:a0:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
        Validity
            Not Before: Jun 13 00:00:39 2026 GMT
            Not After : Jun 14 00:00:39 2026 GMT
        Subject: CN=243f2a5c91025fd26ae0f34dd22c8c2e5eb3c8b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:cb:17:45:e8:c5:4b:0f:24:c5:d8:13:ec:24:
                    bf:6a:57:a1:1b:cc:6d:66:cd:d0:b7:80:47:ab:8a:
                    d5:8c:6c:a0:bb:35:27:43:c9:1a:e6:8d:a8:a0:cf:
                    59:49:5a:2e:68:a5:d0:cc:10:01:07:87:b5:d2:eb:
                    f9:65:e6:c6:87:2b:ab:8a:bc:88:92:a7:3b:d3:df:
                    d1:df:8e:36:0f:1a:b0:d3:eb:45:da:d5:e7:33:9e:
                    37:fe:f9:59:be:f2:54:aa:1c:9b:ad:c4:79:3d:d6:
                    41:71:f4:63:e6:41:cc:1c:18:74:49:f7:74:11:09:
                    62:6e:80:68:c6:fc:86:9f:b0:6c:6a:fb:76:c4:70:
                    63:73:1f:35:67:61:1b:70:38:20:a7:3f:c0:e4:d1:
                    98:a5:cb:cf:c5:01:b6:cb:0b:db:63:86:43:c6:ea:
                    c2:2c:94:f4:13:58:e0:15:31:b1:2a:c7:ee:e7:48:
                    02:73:ae:21:8f:90:33:f5:e3:ff:25:c8:d4:80:9d:
                    2a:04:15:7e:a3:26:51:06:af:41:16:1a:dd:c5:2f:
                    30:be:6f:a4:f1:1c:fb:51:69:22:f8:5b:6f:a6:1c:
                    57:21:39:1d:f8:cc:30:b5:0a:69:26:bb:6a:14:e7:
                    36:e3:05:f3:58:ba:7f:9e:49:b7:ea:4d:6f:25:de:
                    1e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:3F:2A:5C:91:02:5F:D2:6A:E0:F3:4D:D2:2C:8C:2E:5E:B3:C8:B3
            X509v3 Authority Key Identifier:
                keyid:EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:b7:a9:6b:f5:09:f3:76:27:fc:33:79:56:15:c2:7e:e8:0e:
         55:7a:02:df:0f:5c:39:0b:33:22:67:fe:c3:c2:67:4d:47:3e:
         dc:62:cf:9f:83:05:5e:24:35:a2:7d:4a:97:6c:8c:96:eb:9b:
         95:1f:87:a0:be:f9:bc:36:22:bd:2f:e5:70:ca:d6:c0:61:6e:
         6f:12:d8:d0:a9:55:d2:08:a8:53:9f:69:da:31:13:fc:90:dc:
         c4:a7:b7:50:66:85:81:89:e4:7c:3c:d7:df:cf:40:1f:79:ff:
         50:aa:8b:b2:af:b2:e6:21:30:ac:89:38:c4:00:0d:9f:24:41:
         0e:c1:7d:63:06:92:94:38:4a:ae:72:bb:e9:a7:4e:d9:c1:b4:
         43:24:9f:dd:dc:59:c7:06:de:67:a0:7e:ef:c4:2d:f4:73:f0:
         40:1e:62:7c:4c:89:43:24:fe:65:ac:0b:7e:b2:44:d3:07:5b:
         4e:81:48:e5:8e:21:c9:c5:51:7a:a3:88:5f:f7:c5:c5:60:32:
         ab:3e:f9:e3:91:c0:26:16:92:61:bd:45:da:52:cd:03:a9:82:
         0d:1f:53:05:4f:5c:39:64:bd:f6:07:ff:fe:2a:38:a6:9a:4f:
         dd:ea:26:a9:3c:6b:3a:ad:51:89:aa:85:19:ed:27:6a:27:19:
         fc:29:75:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+R9dDbTwAMi135KEHqKDBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmZTY5MTQyN2M2ZTQxODA2ZjZjZWIxZTIxOGE3ZGM2MzIw
ZmRlZWQwHhcNMjYwNjEzMDAwMDM5WhcNMjYwNjE0MDAwMDM5WjAzMTEwLwYDVQQD
EygyNDNmMmE1YzkxMDI1ZmQyNmFlMGYzNGRkMjJjOGMyZTVlYjNjOGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4csXRejFSw8kxdgT7CS/alehG8xt
Zs3Qt4BHq4rVjGyguzUnQ8ka5o2ooM9ZSVouaKXQzBABB4e10uv5ZebGhyuriryI
kqc709/R3442Dxqw0+tF2tXnM543/vlZvvJUqhybrcR5PdZBcfRj5kHMHBh0Sfd0
EQliboBoxvyGn7Bsavt2xHBjcx81Z2EbcDggpz/A5NGYpcvPxQG2ywvbY4ZDxurC
LJT0E1jgFTGxKsfu50gCc64hj5Az9eP/JcjUgJ0qBBV+oyZRBq9BFhrdxS8wvm+k
8Rz7UWki+FtvphxXITkd+MwwtQppJrtqFOc24wXzWLp/nkm36k1vJd4eJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQ/KlyRAl/SauDzTdIsjC5es8izMB8GA1UdIwQY
MBaAFO/mkUJ8bkGAb2zrHiGKfcYyD97tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNy1hUlFueHVRWUJ2Yk9zZUlZcDl4aklQM3UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wNTk5NzUtZWY5MC00MjFiLThhZjMt
MzgxNGM1N2ZlOWJiLzEvNy1hUlFueHVRWUJ2Yk9zZUlZcDl4aklQM3UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8wNTk5NzUtZWY5MC00MjFiLThhZjMtMzgxNGM1N2ZlOWJi
LzEvNy1hUlFueHVRWUJ2Yk9zZUlZcDl4aklQM3UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASbepa/UJ
83Yn/DN5VhXCfugOVXoC3w9cOQszImf+w8JnTUc+3GLPn4MFXiQ1on1Kl2yMluub
lR+HoL75vDYivS/lcMrWwGFubxLY0KlV0gioU59p2jET/JDcxKe3UGaFgYnkfDzX
389AH3n/UKqLsq+y5iEwrIk4xAANnyRBDsF9YwaSlDhKrnK76adO2cG0QySf3dxZ
xwbeZ6B+78Qt9HPwQB5ifEyJQyT+ZawLfrJE0wdbToFI5Y4hycVReqOIX/fFxWAy
qz7545HAJhaSYb1F2lLNA6mCDR9TBU9cOWS99gf//io4pppP3eomqTxrOq1RiaqF
Ge0naicZ/Cl1Ow==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:36:22 2026 by rpki-client