Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
File:                     3o5guxEQh9CAP8P8xK8yeqhcC4E.mft (raw, json)
Hash identifier:          XI5KVfk6DVJ/BVJohOj8Cvg+6GAxDzZTBdxkC8DRmNI=
Subject key identifier:   47:9E:F9:29:B6:19:52:DB:DB:17:FD:80:AE:CF:0F:3E:EA:34:44:65
Authority key identifier: DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81
Certificate issuer:       /CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81
Certificate serial:       019EC25BA13F1A82D957B589F8331E6C14A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 19:00:45 +0000
Manifest this update:     Sat 13 Jun 2026 19:00:45 +0000
Manifest next update:     Sun 14 Jun 2026 19:00:45 +0000
Files and hashes:         1: 3o5guxEQh9CAP8P8xK8yeqhcC4E.crl (hash: c65hChgpxxInbCgK8KME5EeNN8G8F+rLfY53lBTeM6M=)
                          2: F4NwjEYLDI-yBZ05DnMh2xIsZFs.roa (hash: VPrSJkixuSKsLbMS0Mdq/HH4JbtRsGR6fruBx7JJjhA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5b:a1:3f:1a:82:d9:57:b5:89:f8:33:1e:6c:14:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81
        Validity
            Not Before: Jun 13 19:00:45 2026 GMT
            Not After : Jun 14 19:00:45 2026 GMT
        Subject: CN=479ef929b61952dbdb17fd80aecf0f3eea344465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3f:d8:39:54:a1:29:5d:67:b1:9f:7b:bf:91:
                    1f:0a:75:3e:be:b4:96:05:fd:44:0f:ad:76:e1:8d:
                    1d:71:90:ca:e5:98:08:c7:c9:ea:c3:71:a4:67:e9:
                    d6:1a:3d:cf:46:d7:44:78:76:f8:20:8b:83:51:4b:
                    01:f2:20:73:f8:c0:a9:af:60:6f:a3:de:0a:32:2c:
                    10:8b:59:e3:7c:3f:12:81:9d:26:45:5d:84:c1:60:
                    7f:9d:b7:1e:3f:5e:12:72:a8:be:cd:30:dd:91:de:
                    2b:88:c1:c5:b5:e4:c6:a8:c2:7b:28:0e:c3:a5:b2:
                    fe:da:12:a0:ef:49:23:7a:56:ac:1f:ce:8c:e9:16:
                    2f:91:f1:d7:45:0a:41:a1:53:05:0a:26:0d:b0:bb:
                    af:7c:ff:48:06:60:20:2b:a1:d0:34:13:99:a8:54:
                    77:41:a6:91:de:5d:aa:e1:b3:c6:ad:6f:7a:25:1c:
                    ce:cc:0d:bc:46:fa:68:a0:59:31:90:96:f9:4b:bf:
                    80:34:55:d0:d5:4b:1d:04:cc:a1:d3:72:97:c5:87:
                    50:69:87:46:49:e9:01:ea:d5:5b:23:b6:5b:66:95:
                    fc:a1:3e:76:bb:a3:e0:fd:86:4d:00:6e:92:96:9d:
                    69:14:cd:44:80:86:fe:b2:76:df:5e:56:01:46:91:
                    99:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9E:F9:29:B6:19:52:DB:DB:17:FD:80:AE:CF:0F:3E:EA:34:44:65
            X509v3 Authority Key Identifier:
                keyid:DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:35:5b:d1:99:90:ff:cb:9b:1d:74:99:f0:7f:a1:a3:b3:9b:
         a0:d1:58:53:8c:a9:80:d0:67:65:72:35:37:b9:f0:bf:9f:e2:
         86:a5:75:18:85:50:a4:99:55:69:9d:a5:32:19:fd:22:18:a4:
         6b:84:b5:3e:dc:b5:75:38:76:ae:e7:bc:83:aa:5b:24:ab:ee:
         05:de:68:44:34:76:b1:fa:17:1e:f5:46:63:87:2b:9e:92:e9:
         70:58:9a:b6:24:d8:87:39:68:b4:7c:a3:0f:b1:a2:36:c8:8c:
         f5:c2:99:46:79:14:a4:0d:4a:e4:b3:b5:07:03:a2:a6:8e:a6:
         b4:3b:c8:f8:ae:e8:b9:a3:61:0f:6d:f0:95:0a:44:c4:cd:1b:
         78:71:49:8b:bf:8a:d4:95:81:2e:21:d4:70:01:a4:d6:e9:bf:
         1a:a6:34:0a:cc:48:91:3f:ce:9e:b2:92:c3:b6:3f:48:4d:98:
         54:89:b8:7b:f9:ea:ac:37:c0:9b:7d:07:8d:b8:e5:eb:fd:94:
         6d:43:0c:32:f1:e4:22:38:e4:be:3d:63:52:d5:8e:45:ad:93:
         ee:ab:96:62:9a:ae:d1:e4:0f:e3:8d:fa:cc:13:bc:32:0c:a2:
         9a:8a:aa:db:01:8b:57:f2:b1:b1:8f:94:5f:eb:26:54:3a:39:
         27:9d:d3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:29:57 2026 by rpki-client