Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
File:                     5QxErpgedJLTuiHihHIIAYA5jWQ.mft (raw, json)
Hash identifier:          xzIDJCQQAFjEkwoeu89maQelqZ/TJawzWxNCH1r9mVA=
Subject key identifier:   BD:C6:5C:75:D5:92:75:CE:91:14:5B:69:CD:2F:D4:60:D4:FA:27:9A
Authority key identifier: E5:0C:44:AE:98:1E:74:92:D3:BA:21:E2:84:72:08:01:80:39:8D:64
Certificate issuer:       /CN=e50c44ae981e7492d3ba21e28472080180398d64
Certificate serial:       019EC44AA88CC9F8F5403054637C5A5ED0FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
Manifest number:          195B
Signing time:             Sun 14 Jun 2026 04:01:27 +0000
Manifest this update:     Sun 14 Jun 2026 04:01:27 +0000
Manifest next update:     Mon 15 Jun 2026 04:01:27 +0000
Files and hashes:         1: 5QxErpgedJLTuiHihHIIAYA5jWQ.crl (hash: 1BIheJcOttOdr6OwU188opUjp4X8LeFHH7fvqMo90JM=)
                          2: e69PQnEzusQYZ-DbIlnf2eJlsBE.roa (hash: 4zZYbNl+2JdQefSGJOQxcNxDZWIZe2qXFHWTtyVsmQU=)
                          3: glYko7Sp1JLcpRtPgtRJtpgechE.roa (hash: I3eBEUtzH+51u13OfXKNVDxOVZpjsrqrlvg0BT9d+Dc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:4a:a8:8c:c9:f8:f5:40:30:54:63:7c:5a:5e:d0:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e50c44ae981e7492d3ba21e28472080180398d64
        Validity
            Not Before: Jun 14 04:01:27 2026 GMT
            Not After : Jun 15 04:01:27 2026 GMT
        Subject: CN=bdc65c75d59275ce91145b69cd2fd460d4fa279a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3a:f7:6e:b2:5a:56:4d:88:74:5d:3f:cd:e5:
                    16:13:4d:81:e3:5b:c9:24:91:cc:fb:0c:75:29:07:
                    54:2a:79:40:2b:b0:1f:6a:f5:ab:cd:11:a8:5e:45:
                    9e:3b:6e:72:95:e6:68:2f:f0:4d:4c:ee:45:25:45:
                    38:83:b1:33:11:84:e8:96:33:38:36:36:72:a4:94:
                    10:79:6a:67:38:69:48:b5:4c:52:86:ea:9f:c9:e9:
                    ae:62:b8:d1:09:d4:b1:4b:90:6d:35:f6:e1:17:f6:
                    62:ff:9e:61:f0:0a:81:fc:d9:1b:aa:af:1c:e5:f3:
                    23:62:9c:c1:90:1b:a3:52:97:93:b9:e5:2a:d7:07:
                    0a:98:a0:3a:44:5d:46:3f:07:a6:ed:7a:da:94:3b:
                    b7:04:21:f8:11:3e:42:48:1d:64:a9:3e:05:51:8c:
                    e3:26:c7:12:e5:47:91:f3:99:84:49:4d:68:59:d0:
                    a8:e5:d8:c8:2e:ee:3d:cb:6b:16:a5:d4:22:7c:ce:
                    ec:8a:37:52:58:1b:1c:41:aa:4a:7d:77:25:5d:6c:
                    53:15:f2:b8:27:8f:12:0a:dc:b1:4e:a8:cc:c7:d9:
                    3b:ea:2a:74:15:43:3d:e6:86:c6:ad:47:69:cd:94:
                    48:df:7f:b7:db:d5:da:68:99:48:c0:af:0a:ce:ab:
                    09:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C6:5C:75:D5:92:75:CE:91:14:5B:69:CD:2F:D4:60:D4:FA:27:9A
            X509v3 Authority Key Identifier:
                keyid:E5:0C:44:AE:98:1E:74:92:D3:BA:21:E2:84:72:08:01:80:39:8D:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:64:8b:ac:2e:1e:9e:00:c6:cb:ef:1c:91:6a:cd:52:7d:5f:
         bd:16:28:88:b7:52:53:85:f9:76:c2:b8:10:e3:56:16:e0:e5:
         9d:fb:aa:5f:a6:f5:3c:78:de:f1:04:b9:13:85:09:21:01:84:
         ca:92:7a:cc:9b:48:f5:66:d7:a7:cc:83:b4:11:4e:39:a9:91:
         be:07:66:b1:ad:a7:6b:07:61:88:d2:1e:30:68:72:37:a4:72:
         1a:a7:c7:ed:80:6f:81:49:1e:f6:23:59:28:60:9a:c7:c4:60:
         3b:f5:69:d5:be:0d:03:11:54:ed:99:62:fa:f2:ec:90:d3:e8:
         84:88:f1:0c:66:e6:ce:0f:50:32:d0:79:d8:7e:1d:c8:af:5b:
         ba:de:a3:95:dd:2a:3e:1a:01:ac:8e:2d:fe:90:ea:7e:1a:c0:
         37:1a:79:ed:f1:12:f9:58:ad:4f:6d:ca:24:43:49:3e:17:58:
         25:8e:52:91:8b:e9:dc:e4:21:1e:aa:52:7f:d5:eb:53:80:f3:
         28:73:fc:1a:35:13:8d:10:0a:60:07:d3:82:2e:56:f3:3e:10:
         43:b0:8a:60:ba:ee:e6:5f:a7:39:5b:d6:ab:dc:73:62:7e:b4:
         e8:13:2a:7a:1e:29:30:dd:b5:2c:d6:be:c6:6a:2e:3e:91:f6:
         ad:ff:f2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:37:33 2026 by rpki-client