Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
File:                     rMGajH8XQRRJx9SP-TCNJIMulSs.mft (raw, json)
Hash identifier:          6L9J4SXqLp5OlxTFV9Z8fcQcrdCv953sARQFV8Ys5Bc=
Subject key identifier:   0F:9F:76:5E:FA:0C:1F:4B:A5:14:DD:4E:A4:F2:42:AF:AD:07:80:D6
Authority key identifier: AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
Certificate issuer:       /CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Certificate serial:       019EC0DAD7A3F5734286D79B498DFD187BC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 12:00:27 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:27 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:27 +0000
Files and hashes:         1: pCYaE1miR-GUQiTETVWdX8bOgRE.roa (hash: oUes+claOJXex9WS4ZOvL+WR5ipZZwtqoFIaT61iF3Y=)
                          2: rMGajH8XQRRJx9SP-TCNJIMulSs.crl (hash: xBU0THceF6T/6wjecKsYt2PCok4CfbMRLmqmO5VCnsE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:da:d7:a3:f5:73:42:86:d7:9b:49:8d:fd:18:7b:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acc19a8c7f17411449c7d48ff9308d24832e952b
        Validity
            Not Before: Jun 13 12:00:27 2026 GMT
            Not After : Jun 14 12:00:27 2026 GMT
        Subject: CN=0f9f765efa0c1f4ba514dd4ea4f242afad0780d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a5:ee:7e:2d:7b:38:f9:69:5b:97:b1:70:a9:
                    c5:6a:99:a8:e4:0c:b7:81:a1:2a:ff:66:12:a6:d3:
                    ec:97:7d:a8:0a:0c:17:dc:bd:1d:91:74:6b:be:5a:
                    5e:9e:77:33:a6:d6:c3:b9:98:a3:15:26:48:68:86:
                    1f:ba:28:01:8a:ab:4c:90:f5:f8:c8:c4:3c:1d:ce:
                    ce:f3:cc:19:af:67:66:dd:31:47:43:aa:d7:38:88:
                    e4:88:71:9c:55:89:d3:5a:2a:70:e8:dc:f6:49:5c:
                    be:2c:6d:8f:33:92:cd:0e:01:01:e3:4a:ad:47:03:
                    58:fe:bb:2f:55:8f:53:48:a4:31:27:43:dd:c4:71:
                    99:3c:96:ec:10:68:84:bc:51:18:1d:f6:d6:23:0d:
                    0f:fb:11:3f:af:3a:d3:2f:a3:48:e4:f9:b6:97:b5:
                    37:6f:2e:e5:a4:7e:b5:53:85:f5:dc:05:36:53:cd:
                    c1:7e:e8:cc:1e:7f:83:1f:da:9a:37:7a:25:54:ce:
                    13:33:45:e3:c1:34:90:25:8d:38:70:ba:af:a3:0b:
                    be:43:9b:4d:58:da:ea:c7:51:9e:60:fa:5c:43:57:
                    18:74:69:05:3c:8c:fc:1c:98:04:c4:f9:01:d9:d5:
                    78:20:21:45:0c:3a:d9:7c:5b:c8:7e:79:63:31:62:
                    e6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:9F:76:5E:FA:0C:1F:4B:A5:14:DD:4E:A4:F2:42:AF:AD:07:80:D6
            X509v3 Authority Key Identifier:
                keyid:AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ec:fc:a3:94:d0:23:49:c3:ed:7d:83:de:a6:c8:77:6b:3f:
         e5:bd:7b:4c:db:1f:a3:e7:7f:ec:0d:13:54:d3:77:b3:f1:63:
         47:40:5d:1c:e2:ca:8b:42:e9:d9:3a:57:22:1a:24:14:94:be:
         33:aa:90:92:fd:82:fd:27:9f:ef:93:a5:a2:d4:88:09:a4:69:
         0a:9d:56:5d:27:81:cc:07:0a:e2:33:e9:c0:5a:04:f2:3f:a8:
         76:81:8e:fa:32:a7:aa:d6:38:cc:90:51:d3:4d:66:57:0f:46:
         f3:ed:25:3c:6e:1b:f3:00:2e:38:5f:49:3c:27:3e:60:5b:16:
         a8:c8:01:92:37:d8:7c:e4:86:51:af:af:aa:c8:b0:0d:e8:c2:
         07:b2:11:d9:0b:43:e2:7b:df:d8:f6:1c:95:12:1c:57:97:24:
         ba:23:ba:9e:9b:c8:7f:a7:ea:1b:93:07:7c:1f:f5:5a:7f:ee:
         b4:80:3c:6f:d9:f3:e9:24:59:16:f7:5f:9d:93:ff:1f:5c:fe:
         7f:65:22:9d:90:41:d3:47:5a:dc:f3:83:15:4d:c2:35:c0:8d:
         18:6c:0a:99:ce:db:4e:7c:92:26:3f:d8:04:11:17:4a:f4:d9:
         4d:d7:a1:af:34:bf:1e:0d:b9:6b:b3:43:57:d8:3e:0e:2a:dc:
         9b:db:6e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:21:33 2026 by rpki-client