Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
File:                     sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft (raw, json)
Hash identifier:          hZjlyHGEbrzYk/pQ6Nvt2UGzTvLBepeYflx8MuNXK3I=
Subject key identifier:   C8:5C:C2:20:96:24:CB:5A:BD:10:2D:67:25:B8:84:F1:DD:1B:A7:2C
Authority key identifier: B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26
Certificate issuer:       /CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
Certificate serial:       019EC1124D6ACC2FA61DE95111827E3A29A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 13:01:02 +0000
Manifest this update:     Sat 13 Jun 2026 13:01:02 +0000
Manifest next update:     Sun 14 Jun 2026 13:01:02 +0000
Files and hashes:         1: PUXWH5ErhkpTlX3DGsk45zeBJZg.roa (hash: xZcIxtVt0rhHswrnqiIOZ/p/5tyYj0LaAjYUyfrercI=)
                          2: k3bU7GJQGWmqllt3J0zrBV5kOFQ.roa (hash: FFe49A2byJNnvRF0qFtVbcLDcNCSlda3Ud81mS5eRtw=)
                          3: sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl (hash: Urtoj0GDzUlkhUFeDCSOOdkcvdXE38oqHeF4HCoUHbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:12:4d:6a:cc:2f:a6:1d:e9:51:11:82:7e:3a:29:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
        Validity
            Not Before: Jun 13 13:01:02 2026 GMT
            Not After : Jun 14 13:01:02 2026 GMT
        Subject: CN=c85cc2209624cb5abd102d6725b884f1dd1ba72c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7b:2d:7d:62:ca:1a:5e:ba:86:87:10:1a:4a:
                    21:7d:14:57:a8:71:93:3b:95:2b:36:46:0f:3d:e7:
                    a3:cb:85:e1:c8:71:21:7a:19:29:a2:26:1b:b9:02:
                    54:c9:6a:4a:39:d6:72:61:ca:80:24:0b:04:5b:65:
                    6b:69:b0:ca:24:38:47:8a:2b:4d:12:48:cf:60:66:
                    4b:67:7b:22:54:cd:92:2f:be:8b:40:6e:4e:29:c7:
                    92:a8:08:e0:dd:18:08:a9:09:c4:a2:c5:65:22:25:
                    e5:d0:83:d6:8c:c2:85:f4:c0:e8:9e:c1:89:c6:ea:
                    f4:b9:b6:b3:cb:4f:22:24:60:92:be:8e:f2:10:00:
                    f4:0c:00:47:9c:fb:ed:3a:a3:16:14:fc:ca:5c:25:
                    8b:e2:af:a6:d3:3d:f7:94:fb:30:8d:d7:65:d0:45:
                    8a:c9:ef:9f:57:ce:fc:22:1b:6c:0a:64:98:0e:7e:
                    23:c0:e5:e4:4f:d2:d6:e4:04:6b:d2:e2:2a:d0:9c:
                    06:6b:71:b0:41:c2:dd:eb:28:fb:b0:08:c0:41:cb:
                    36:f1:69:31:fd:9b:9b:bb:6b:89:82:79:a0:86:b7:
                    e6:dd:e1:37:f1:b3:56:d1:38:0f:64:4a:c0:46:a0:
                    2c:fb:36:0c:03:f6:af:0b:bd:bc:86:8b:84:3c:52:
                    a9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:5C:C2:20:96:24:CB:5A:BD:10:2D:67:25:B8:84:F1:DD:1B:A7:2C
            X509v3 Authority Key Identifier:
                keyid:B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:74:e5:af:ee:60:db:23:90:f9:85:4a:78:d1:a7:34:c0:59:
         36:73:ad:8a:4e:96:78:14:88:67:9f:8d:65:8a:39:fd:4b:50:
         be:96:49:4c:0d:91:97:99:0c:34:d5:37:aa:e5:e9:21:b8:42:
         3d:4a:ff:88:35:2b:13:74:57:ed:6e:16:4f:12:03:a2:e3:70:
         a5:45:34:2f:29:04:26:0c:91:b4:23:e0:f2:a2:3e:f1:6e:36:
         8a:33:dc:a3:01:e8:42:19:d6:34:8f:42:35:5e:42:bc:9a:db:
         a0:4c:0a:63:1b:ac:f7:73:1a:fd:98:5d:4f:55:1e:be:4c:51:
         72:46:4e:cc:09:19:0f:39:f4:b3:77:34:da:bd:13:60:68:0b:
         65:0f:48:52:25:1c:58:fa:6d:6b:6d:19:62:3d:f0:e4:3d:d9:
         c0:3f:2f:e2:00:a7:03:5f:6d:53:ce:a2:58:6c:a1:dc:52:6b:
         d7:16:7b:13:00:e9:e7:0f:01:f9:72:53:87:60:c2:53:2e:4f:
         de:c9:24:b8:47:15:23:cd:f0:9a:b4:0a:96:61:7d:10:94:c0:
         e7:fa:6a:bf:76:11:13:ce:d7:34:89:33:13:67:3c:68:47:d0:
         c2:44:bf:97:a9:fa:b4:17:36:c6:69:ef:0d:ff:47:bc:91:ab:
         19:b5:44:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:11:19 2026 by rpki-client