Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
File:                     1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft (raw, json)
Hash identifier:          nHCXlexto6SO4k7JhYnF+lwoQ0X8tyCBrpQ+65DfqqM=
Subject key identifier:   55:92:4E:69:9F:82:A9:6A:05:BB:3E:D3:E3:0B:94:D5:7F:69:CB:90
Authority key identifier: FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
Certificate issuer:       /CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Certificate serial:       019EC0A3EC4E6D0F22CCBE8A4B3559D28C11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 11:00:28 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:28 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:28 +0000
Files and hashes:         1: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl (hash: VkkI9mSo7uLkEDzWVSgvx4JrqxvTFVriOV4f7+NjN4A=)
                          2: PnyApWhBqSkH1XcSr9pQIjfA9bU.roa (hash: u2tVorDg0eTkm07sz5ei+r+s3xcbReWf672n/fbZuG8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a3:ec:4e:6d:0f:22:cc:be:8a:4b:35:59:d2:8c:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa95ecdaa359a6f8355573d39001baa35874bed2
        Validity
            Not Before: Jun 13 11:00:28 2026 GMT
            Not After : Jun 14 11:00:28 2026 GMT
        Subject: CN=55924e699f82a96a05bb3ed3e30b94d57f69cb90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:26:78:ee:f3:ba:57:51:b9:b1:b8:26:c6:f9:
                    14:af:35:73:5b:79:c7:35:5b:bb:4c:7f:29:7a:4e:
                    71:eb:50:70:a6:8c:e9:3f:d4:4f:c2:57:97:12:74:
                    d6:5e:9c:aa:3f:64:74:27:2f:04:2a:d2:53:6e:bd:
                    77:4d:3f:f7:fd:65:cb:df:e5:a9:f6:16:0e:b9:de:
                    db:3c:83:17:d3:a5:c4:ca:df:d2:69:87:f4:84:8f:
                    b8:4a:6a:c4:78:c6:e5:d5:53:29:6d:6c:19:74:13:
                    ac:b1:dd:1f:89:3a:33:8f:33:b3:28:26:e4:92:da:
                    1d:8e:54:92:fc:1f:44:43:28:d5:5a:bf:0e:f5:b6:
                    5a:45:51:20:7e:e1:56:06:d4:a2:34:ef:7d:03:e2:
                    c2:d4:96:7a:75:fa:27:c8:36:72:9c:94:44:22:2b:
                    3d:78:43:2c:b6:6e:20:3a:34:0f:42:49:34:9a:b1:
                    5b:6d:c6:05:71:a3:36:3e:bb:cd:00:89:4f:92:21:
                    26:7e:d0:4b:fd:18:cb:06:2d:ff:7f:19:02:91:bc:
                    db:0f:f7:cc:db:10:f6:45:65:20:64:f0:48:1b:ad:
                    0a:6a:7f:b1:c8:6a:6a:df:19:f0:7e:63:6d:ba:4d:
                    7b:a0:a9:f6:6a:83:21:60:39:f1:e6:11:76:9f:ed:
                    b5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:92:4E:69:9F:82:A9:6A:05:BB:3E:D3:E3:0B:94:D5:7F:69:CB:90
            X509v3 Authority Key Identifier:
                keyid:FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:ee:35:f8:f5:46:7f:ab:f0:a3:7b:ac:2a:21:a8:2b:80:09:
         a6:59:0d:9d:0b:9b:d0:3b:42:e6:79:fb:fd:e3:8f:a0:85:77:
         99:a5:39:3d:d8:a8:cd:1c:11:7d:00:d9:8a:c8:3d:cf:6a:73:
         9a:71:c0:8f:50:a3:d2:bb:ff:e2:88:e6:93:1f:93:c7:7a:a5:
         37:e7:55:4f:fd:33:23:91:56:90:7a:88:65:d6:96:05:b0:35:
         81:09:1e:63:c1:ec:56:ee:c5:54:fc:29:23:38:83:de:de:3e:
         b0:3d:26:6c:09:15:74:02:8e:b8:2b:2a:11:0f:dd:74:b8:ed:
         7c:f9:49:8b:c8:f0:a7:df:91:86:2e:ec:5c:3f:68:20:ea:4f:
         5f:40:1d:d4:25:7a:c5:a5:e8:ae:c3:ac:d4:d0:47:78:43:b1:
         e3:51:53:d2:ef:91:c9:de:b0:de:50:c8:02:99:34:aa:4f:9d:
         06:27:2f:1e:40:d2:40:99:7d:30:bf:7a:3e:b9:5c:99:10:1a:
         a6:29:f0:fb:50:0d:e0:e5:7b:97:99:8f:c5:2c:da:4a:18:d3:
         3b:ac:02:7d:70:08:4c:a0:9f:d4:48:12:b4:a8:36:5f:f2:f7:
         04:f3:36:a0:6e:72:b1:06:94:af:d5:b7:d6:7a:7b:9a:d9:c5:
         b9:cf:5c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:24:26 2026 by rpki-client