Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
File:                     SDletMDuLapTks2Z_EXvvEp1TpA.mft (raw, json)
Hash identifier:          tQgoSpfPQ8tjn5/QEziWpqkohPtO18CNoJw4YigGxfU=
Subject key identifier:   C2:12:BF:39:1D:45:E1:6C:C2:41:42:10:91:3C:DE:AD:DF:F4:64:92
Authority key identifier: 48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90
Certificate issuer:       /CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
Certificate serial:       019EC148DA64F4AE3D4C1CF62523F42091BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
Manifest number:          195E
Signing time:             Sat 13 Jun 2026 14:00:37 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:37 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:37 +0000
Files and hashes:         1: SDletMDuLapTks2Z_EXvvEp1TpA.crl (hash: lU8op+YLdd0FUF8NleE1LksxZDCxGhBjzb7lHerm4jo=)
                          2: oYj8IRsjMXERXaM9fv_aTVNDMiM.roa (hash: 1h5HkPjPP0vcntiwcGgkqpVFeA7WFjBNEknGQLJcQbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:48:da:64:f4:ae:3d:4c:1c:f6:25:23:f4:20:91:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
        Validity
            Not Before: Jun 13 14:00:37 2026 GMT
            Not After : Jun 14 14:00:37 2026 GMT
        Subject: CN=c212bf391d45e16cc2414210913cdeaddff46492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ec:2a:57:36:d7:26:10:29:cc:6e:e1:cc:49:
                    d7:5a:59:f0:0f:e9:7f:79:f2:cc:3b:8b:b7:7d:1f:
                    f4:96:27:68:7c:a1:2e:d4:c3:34:81:fb:17:1d:ba:
                    ef:25:b9:ff:13:d9:0d:d7:57:a4:40:b0:1d:f1:1d:
                    9f:12:3e:37:47:ca:ca:ff:ba:46:a2:30:81:88:f4:
                    44:eb:11:88:c5:06:a4:ec:2d:d3:a6:f5:d7:ed:6e:
                    eb:0b:cd:7e:4d:e0:e7:fa:e7:36:1b:d4:ca:16:b9:
                    28:49:47:be:21:b6:c4:77:7e:ea:53:57:76:ef:92:
                    03:d7:5c:9b:12:da:92:e1:ef:b9:93:94:4f:d1:c6:
                    85:da:22:97:eb:83:de:db:48:96:67:c8:48:4b:02:
                    d8:ce:75:db:d0:7e:0d:4c:9a:69:ae:0d:0b:cc:3c:
                    18:a8:ed:15:b5:48:17:83:48:70:7a:55:62:08:bc:
                    81:f1:55:cc:f6:ba:06:7b:dd:1e:3f:c8:04:fa:27:
                    62:ca:37:e1:2a:cc:5c:c1:af:cd:dc:61:2b:ea:84:
                    62:5f:b6:5a:b8:ee:ff:6a:0f:95:6f:0f:15:eb:13:
                    c6:ca:7c:44:1a:3d:90:48:31:40:05:98:97:52:4f:
                    cf:64:4d:b3:bc:ad:b4:f6:dd:79:58:b2:28:2d:b2:
                    00:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:12:BF:39:1D:45:E1:6C:C2:41:42:10:91:3C:DE:AD:DF:F4:64:92
            X509v3 Authority Key Identifier:
                keyid:48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:01:f1:8b:0f:a7:f7:d7:56:61:d3:cb:8b:11:dc:f7:62:b3:
         b8:6f:a0:f2:b5:01:b5:11:74:f7:c5:4d:31:fa:fd:94:39:f0:
         cd:0d:23:95:34:4b:56:0b:ac:f3:88:7b:5e:97:1d:6e:06:cd:
         6b:77:83:85:b7:61:99:30:f5:d9:2d:dc:e0:27:6f:ee:ba:3b:
         0a:30:50:dd:9f:44:f4:a1:ee:a5:6a:88:54:e5:e0:d5:1e:a6:
         2f:c5:a1:7a:b7:b1:d3:2e:d1:af:46:41:57:6b:4a:69:1e:f1:
         43:c0:31:28:ef:dc:13:3f:cf:13:90:dd:2c:2a:f7:b2:5d:b0:
         57:f7:41:ef:f8:e7:34:df:1b:d0:11:9c:e4:cf:24:a3:c3:6d:
         22:71:65:e1:9e:ff:a9:13:db:8f:91:5f:20:d6:63:29:9a:f7:
         9b:a4:3d:87:9f:9f:48:79:73:24:79:fc:ac:f4:c1:20:80:a9:
         c4:7a:c7:7e:c8:1e:2d:b9:0d:fd:9e:2c:e5:55:53:f2:bf:54:
         48:d1:8e:ba:55:95:c6:8f:22:c8:8b:0f:22:a7:f9:80:b7:24:
         fb:9f:43:33:6d:d1:68:bd:66:66:cd:a5:e3:04:ce:b3:38:cf:
         d0:b4:37:39:99:c2:3c:07:bf:ff:2d:c0:df:f0:d8:0e:bc:01:
         4f:c9:89:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:29:12 2026 by rpki-client