Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
File:                     MzIOLzxa2t8VOgdYvGALbqFPTu0.mft (raw, json)
Hash identifier:          V3pdlLSDQ28FCKy6YnuCxy5LB/fZJZqhz46UmSHcAHw=
Subject key identifier:   1C:E1:4F:92:6B:26:27:39:A6:06:6C:DC:57:69:7B:DC:10:BF:C8:18
Authority key identifier: 33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
Certificate issuer:       /CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Certificate serial:       019EBFC87320A202BFF41403709BC0016EC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 07:00:45 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:45 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:45 +0000
Files and hashes:         1: MzIOLzxa2t8VOgdYvGALbqFPTu0.crl (hash: QQCTpndUba+NRUq7t+ges2mUDBUIPjbjcELaff8xEkI=)
                          2: VAAvBVikKM6MuRJ-eG-iUB9XdRw.roa (hash: nQeQgdEmek61pzKMZx59WEmM1Ma+1ZD1llfXrlwOtbo=)
                          3: oyMYaWn1495tEV0rJtuup8PEegg.roa (hash: xG4lUtMIXDMmK0ptQSxWDryB1RVS07DU1EG3EYDXLQU=)
                          4: w7xEBHIfXi0BUtgUPP66rgihpG8.roa (hash: gDrcyd6ElWA3Fy0I7vbIWUDFdvKSba9LbEFcEbtavQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:73:20:a2:02:bf:f4:14:03:70:9b:c0:01:6e:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
        Validity
            Not Before: Jun 13 07:00:45 2026 GMT
            Not After : Jun 14 07:00:45 2026 GMT
        Subject: CN=1ce14f926b262739a6066cdc57697bdc10bfc818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0d:ff:40:58:63:ef:f3:c8:c8:3b:6e:c1:4e:
                    48:10:c6:10:d0:d0:9f:f6:7f:71:55:f5:d7:ce:c1:
                    f6:f6:84:33:93:a6:4b:c0:55:15:09:02:0e:05:e8:
                    50:6b:73:2e:95:09:96:04:09:d7:bc:84:08:78:6b:
                    c5:d9:ba:5c:e9:6b:fe:62:89:fc:51:3f:b2:2b:cf:
                    47:66:9f:a5:8f:5e:39:98:7e:07:f4:20:99:2f:68:
                    aa:a4:04:f7:6e:23:bd:3e:f5:94:1f:b8:68:49:dc:
                    ba:6f:90:7b:07:a8:04:8e:d2:f7:01:e7:a8:60:d3:
                    0d:4c:af:b6:56:ec:dc:99:70:41:48:93:4f:d8:d3:
                    bc:39:96:41:ff:00:1b:43:d5:fb:59:64:bc:e7:49:
                    03:ff:5e:a9:bf:45:f8:f6:f4:b5:d8:d9:96:50:7c:
                    4e:ad:a4:d4:7a:d7:2f:b6:ee:d9:55:c7:e0:df:13:
                    4d:e3:63:a1:db:88:46:26:51:db:fd:6e:79:65:d5:
                    ad:37:66:11:04:45:e1:dc:f4:f4:bb:b1:0e:84:ce:
                    e5:f4:a0:49:48:9e:83:75:0c:03:28:b1:ea:d9:56:
                    26:46:62:ac:a8:b9:1b:ce:34:f4:e7:9f:cb:95:56:
                    6b:e2:5d:7f:39:dc:4d:79:23:3f:4a:01:bb:97:bd:
                    9e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E1:4F:92:6B:26:27:39:A6:06:6C:DC:57:69:7B:DC:10:BF:C8:18
            X509v3 Authority Key Identifier:
                keyid:33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:48:89:af:1e:10:ac:e1:ba:d2:04:9f:fd:fd:cf:57:be:22:
         7c:fb:2c:e5:4d:d0:87:85:87:0a:0f:8c:5b:c7:5b:40:74:01:
         4c:30:bd:20:87:69:16:91:21:5c:63:cc:73:0b:e3:b2:23:ec:
         e9:a0:3d:c3:7d:3b:99:c8:da:85:73:f8:cb:c6:37:58:9d:7b:
         02:61:8c:52:fb:25:cc:3c:4d:bb:04:e3:2b:1d:e7:b2:fe:17:
         e8:0c:88:94:0c:9f:18:de:65:74:7a:8d:e1:76:d9:21:7c:0a:
         4a:1c:99:ee:32:09:ba:db:98:d3:e7:56:68:44:0b:9e:11:3f:
         ad:b6:14:32:6b:6a:0f:75:ac:e7:41:b7:3e:22:7e:c1:04:49:
         25:f4:a9:73:f2:bc:45:33:86:fe:2a:24:57:c1:77:8b:c4:9a:
         a1:b2:b9:09:d5:2a:41:30:5e:54:84:74:60:85:03:de:da:fe:
         44:2e:4a:93:d2:7e:7d:b2:47:04:b3:45:4c:e3:2e:d1:55:bf:
         b1:08:d1:3e:b8:4b:59:af:d3:37:cf:5a:40:df:5b:43:34:71:
         c4:52:88:28:96:62:ae:52:06:46:e9:8c:12:21:b5:63:2e:61:
         89:e7:da:61:0e:71:d5:3b:95:c5:a2:c2:b3:2b:81:f3:c8:9c:
         0e:24:2e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:02:24 2026 by rpki-client