Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
File:                     9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft (raw, json)
Hash identifier:          dqIkrci9radOi1ZsYAyGEawoH5t5PEx5XHjWSIzLwkw=
Subject key identifier:   8C:89:BB:86:86:77:95:A5:DB:F7:4E:5B:35:30:1E:67:C5:56:87:29
Authority key identifier: F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
Certificate issuer:       /CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Certificate serial:       019EBE7ED947C78446C405BC9EDADB948CBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
Manifest number:          196A
Signing time:             Sat 13 Jun 2026 01:00:44 +0000
Manifest this update:     Sat 13 Jun 2026 01:00:44 +0000
Manifest next update:     Sun 14 Jun 2026 01:00:44 +0000
Files and hashes:         1: 9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl (hash: 9mVL1SJ6bKLICnEHxoHQ0tE5egcEAQ3E6X1kYeLOqCc=)
                          2: TZb0pwqKAULgiO7MxUXFvu2eCDY.roa (hash: xx3QLAhALsGor/waOfuSlLQuXwnX4zFtt11tExzIAAg=)
                          3: U5Hr7DVltimNN4exYtKNMwjtw8w.roa (hash: a1GYmzluOFIdh7d+x71WU9ozZYGhuTpIQod/AeGpY6Y=)
                          4: fMeNzPlM2n3ZQmyeAfkbn67m0Pg.roa (hash: RtgOjR2mPpgHq9CnqdpYs2+p2F0KpELsY40+hxzmt9M=)
                          5: pnoNDnBxEfC2Y0eOSu3ZLvoJ8bE.roa (hash: fiAhIReHkKJDspHClaY6l1S5vNnjpZ4eQPqh1G/RGnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7e:d9:47:c7:84:46:c4:05:bc:9e:da:db:94:8c:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
        Validity
            Not Before: Jun 13 01:00:44 2026 GMT
            Not After : Jun 14 01:00:44 2026 GMT
        Subject: CN=8c89bb86867795a5dbf74e5b35301e67c5568729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:51:88:5b:66:77:4f:be:b7:c0:fa:59:23:68:
                    2c:57:d3:7f:4b:b5:4f:1f:60:39:2c:8d:a9:1c:13:
                    af:d5:89:9b:34:4e:82:c1:42:3f:8a:91:77:5e:3b:
                    87:36:c7:ce:98:a8:07:5d:7c:33:dd:4c:88:73:be:
                    d8:78:3a:39:c8:c6:e2:da:00:7d:25:25:47:33:ed:
                    98:be:44:53:f9:67:64:f2:0d:bc:d4:2e:be:86:b7:
                    31:9d:e8:ca:3f:61:1d:13:b3:52:f1:70:1f:7c:a2:
                    16:dd:21:87:c5:a0:16:fb:45:5c:3d:91:bd:0c:38:
                    2c:c9:5c:9c:bc:66:21:fa:a4:16:5c:72:ab:b2:76:
                    d6:0d:64:6d:cd:44:1f:35:96:12:e1:3f:2b:7b:bb:
                    8d:88:e1:e5:a7:63:87:e2:86:dd:86:ca:a0:03:62:
                    e7:a8:90:88:a6:9a:31:5d:e1:d2:0b:5d:cc:44:39:
                    3f:82:7a:58:b7:78:b0:68:6d:f0:15:72:06:e5:a5:
                    6d:07:8d:9a:a1:a7:5e:5c:9d:2c:67:b4:a2:19:ab:
                    3f:24:20:49:3a:df:ac:f1:4a:40:76:a1:19:25:1c:
                    1d:f0:7e:8a:3d:22:6f:87:e8:71:d9:93:5c:6b:19:
                    a8:f8:99:5d:3e:ee:96:80:c6:06:1a:18:c3:da:d9:
                    09:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:89:BB:86:86:77:95:A5:DB:F7:4E:5B:35:30:1E:67:C5:56:87:29
            X509v3 Authority Key Identifier:
                keyid:F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:c4:e1:8d:a7:22:44:25:5f:8e:fd:f7:a6:33:ad:76:d1:75:
         ea:f3:c4:87:8b:d2:17:74:ba:40:d8:45:1d:84:42:71:37:bf:
         ab:22:2c:37:04:60:85:2a:45:f3:7c:bc:44:b3:1a:e3:1c:84:
         fa:83:11:9e:40:a8:32:a4:1c:66:de:ff:07:b8:ce:16:cf:63:
         a9:34:31:95:c0:a6:00:71:b8:7d:01:aa:9e:ee:18:b2:9d:39:
         a4:32:42:f5:4e:97:ce:50:e1:a8:b5:dc:d4:b2:2b:2c:df:6c:
         07:0a:d2:6b:77:9b:a9:d6:7f:e1:38:17:76:9e:b6:a1:a6:cd:
         3b:7b:6a:8e:84:dd:b9:1d:e5:0c:45:68:31:23:eb:83:59:77:
         d5:f4:35:45:86:9b:40:d6:51:80:ad:e8:56:7e:9d:c2:6f:18:
         63:c8:dc:39:8c:40:a9:9b:32:43:90:54:67:02:ea:17:da:a8:
         ee:bc:58:af:50:92:8d:61:f3:01:88:8a:34:cb:ea:e1:28:49:
         dd:08:63:c9:ff:d6:a7:5c:ec:fd:5b:67:53:3c:e8:d3:1a:60:
         04:de:76:d3:76:c8:0c:1b:29:e4:a2:a8:e0:fa:43:22:01:07:
         a7:a2:5e:35:b8:7f:63:8f:1a:8d:10:b6:00:65:28:cb:7b:76:
         e2:c7:d6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:50:45 2026 by rpki-client