Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
File:                     odAxU3OwmwYapZ8SnVkuq_ezqu8.mft (raw, json)
Hash identifier:          BQxHllvkYEfTFryFymMaFfyZKqyneo9vOaN3kddrHJE=
Subject key identifier:   B0:35:35:C8:75:32:E3:96:09:D0:C5:C4:42:FC:F7:8C:47:17:39:EB
Authority key identifier: A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
Certificate issuer:       /CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Certificate serial:       019EC0DAEFD268926C427AADE4DEF22EEE45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
Manifest number:          196B
Signing time:             Sat 13 Jun 2026 12:00:34 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:34 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:34 +0000
Files and hashes:         1: 2RbqMRULp-QNoJeRuz3DuXb82SY.roa (hash: vkQ1ietSun4egH0TCTbvv8l/0HXrnZiF/HLYLQxFwJA=)
                          2: IQ2oYAGI7FrbtQw-njklceThbc4.roa (hash: 1eifSLs21UBJXwatNLGZliT9NqFPGyep7LbzCHQLsqw=)
                          3: SVczDT9Xfgd978coimjrauYBi54.roa (hash: 2NMvhKAO0Kl3ePDaF0jcCfpcJYKyAuppoiBwwyO6Eiw=)
                          4: odAxU3OwmwYapZ8SnVkuq_ezqu8.crl (hash: qd2NSF76OdmK8vXkz9SWJea6Mg2mKMXylYxwT/FXGnw=)
                          5: shiZOYC90xd1VuoCTl7MNpPZEuA.roa (hash: imVXTSeIhO/2/5DnYBR7yK1z3YTxchN3faFGSGjnVFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:da:ef:d2:68:92:6c:42:7a:ad:e4:de:f2:2e:ee:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
        Validity
            Not Before: Jun 13 12:00:34 2026 GMT
            Not After : Jun 14 12:00:34 2026 GMT
        Subject: CN=b03535c87532e39609d0c5c442fcf78c471739eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:95:2f:09:d1:1b:29:4c:48:d3:74:9c:da:bb:
                    34:83:dc:09:80:18:00:e0:6b:be:fb:fb:27:b3:b6:
                    29:6a:05:95:eb:2b:94:89:dd:4a:d0:24:c9:30:8f:
                    6f:90:a6:7e:f1:74:61:71:ca:2f:63:73:ef:b5:b4:
                    62:b0:ea:da:46:32:94:69:0f:11:b9:61:ae:25:7d:
                    06:f0:62:42:b3:f9:46:c1:82:0d:6b:fa:67:a1:c5:
                    d9:81:46:22:6b:68:2e:2d:fe:a8:ca:4a:dc:76:bf:
                    70:72:e9:d1:7e:39:f7:ca:21:53:d6:39:48:eb:2e:
                    f6:2e:b4:6c:16:1a:97:ae:50:bf:08:63:52:5b:12:
                    42:6a:b2:9d:46:2d:80:99:cb:cc:e2:33:ed:07:cb:
                    6a:3c:6f:13:7d:0e:88:69:79:ff:71:07:80:03:92:
                    49:a3:17:7f:f7:85:e6:ed:55:f5:9f:e8:bb:14:7a:
                    c6:53:64:1c:4c:a1:7f:5e:e2:b2:5d:16:b7:b6:0b:
                    03:49:26:c1:1a:2a:ef:ff:3f:8e:1d:39:3e:68:5a:
                    7f:79:4d:e3:ed:58:58:f7:7c:aa:26:01:a9:be:61:
                    35:bf:e9:e9:eb:1f:9f:43:41:d4:00:84:cd:9b:bd:
                    2a:35:9b:e7:e0:74:f0:fb:de:84:5a:66:6e:d5:a9:
                    9f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:35:35:C8:75:32:E3:96:09:D0:C5:C4:42:FC:F7:8C:47:17:39:EB
            X509v3 Authority Key Identifier:
                keyid:A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:35:bc:e0:39:78:e4:83:fb:d7:87:25:f0:91:3c:dc:dd:36:
         ed:d2:01:06:7a:16:be:04:11:66:f8:2e:50:d9:ae:a4:00:b6:
         97:0a:5a:d0:5c:28:2f:f5:82:b8:f1:82:3c:c1:84:06:2c:52:
         a8:c5:de:07:12:71:ce:e3:5a:60:c6:25:7e:ee:91:7e:f2:6b:
         8d:e1:db:ee:fe:1b:9e:87:8a:b9:72:cf:38:fa:60:20:44:09:
         f7:9c:25:60:29:26:8a:60:5a:7e:4c:a5:75:6a:3a:38:97:b6:
         d4:8d:77:2a:cb:5f:e9:0f:c0:5d:1b:df:e9:7c:7e:87:d6:22:
         41:16:5e:d2:04:08:20:d8:82:a8:f5:50:c1:23:4f:b6:70:86:
         cb:07:15:04:42:0b:b8:e4:b7:38:2e:22:41:d1:c8:39:33:f1:
         ff:51:41:91:0d:5e:ac:5b:c0:0b:d5:bb:ea:1c:9a:12:37:12:
         87:57:35:c2:e0:eb:6f:08:af:85:64:17:02:af:0f:b2:a2:f9:
         a4:dd:68:15:f7:6e:cd:62:0e:10:4b:7a:ee:96:bc:f0:20:7a:
         71:77:98:2f:35:9b:d3:82:7e:3d:03:a6:dc:a4:08:80:95:c7:
         bb:77:16:8f:7d:12:ce:95:e9:d1:a0:01:26:85:0c:d7:9c:be:
         23:dc:8e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:15:37 2026 by rpki-client