Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
File:                     E38zct9XyBSrqLUakHhh2SueT1U.mft (raw, json)
Hash identifier:          Xi0ZD9yhUQ06uJ12OZYI6oX88VRcxDX8JKtVvyCLrug=
Subject key identifier:   38:75:75:3F:37:51:25:D1:94:14:BE:9F:C7:3D:CD:3D:D9:48:81:CD
Authority key identifier: 13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55
Certificate issuer:       /CN=137f3372df57c814aba8b51a907861d92b9e4f55
Certificate serial:       019EC224598DC217DF6EBFF25FCB48AF02A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
Manifest number:          195E
Signing time:             Sat 13 Jun 2026 18:00:22 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:22 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:22 +0000
Files and hashes:         1: CwDjP9tnkLMqRQJExwbW5a8tb2c.roa (hash: Cvhm4+Ug1T3hSPp5fKBEvpgdxdZDIyd8JjxFJnRL+xc=)
                          2: E38zct9XyBSrqLUakHhh2SueT1U.crl (hash: 1RFgbxXa5rkIhf0uJ1Qe8SZ8j0lpxMvaUZMJA3lWKQ4=)
                          3: dYc4QHw_MlBGkai83ebw6UpAabw.roa (hash: PhHK3yJG/efNPRvamiA5Euk3gsAbVkNsvmnaGEDrJ+4=)
                          4: lV7YMWxQNgA7TeXSrVvxVEzp5zI.roa (hash: gNnh1Gc1ZxAnhLjUx2sE8mDgR6U7dHMmlaCZ5/JRTJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:59:8d:c2:17:df:6e:bf:f2:5f:cb:48:af:02:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137f3372df57c814aba8b51a907861d92b9e4f55
        Validity
            Not Before: Jun 13 18:00:22 2026 GMT
            Not After : Jun 14 18:00:22 2026 GMT
        Subject: CN=3875753f375125d19414be9fc73dcd3dd94881cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:36:5f:1d:82:74:ba:39:08:ef:b0:57:85:7e:
                    20:42:9b:81:f9:60:28:ed:78:c2:49:44:f2:a9:7a:
                    1a:27:3a:92:a7:ed:4f:3e:ce:03:41:06:4a:85:2d:
                    4f:8c:83:54:04:d7:62:2f:35:20:cf:4f:5a:1c:64:
                    e3:e2:a2:4c:78:10:87:5c:18:c6:62:16:94:b5:1f:
                    28:fa:74:3e:be:e1:3f:13:89:e4:f8:52:ae:7d:6a:
                    fb:31:fd:4b:56:42:c7:2b:44:82:03:d4:94:b7:03:
                    e8:04:aa:b9:a9:c2:4b:0f:50:90:07:0a:ad:e6:ca:
                    7b:43:d5:b7:16:fe:c5:c3:bc:80:4d:94:70:c8:cb:
                    a9:f5:c3:4c:fe:4f:ab:99:07:ea:bd:7b:d5:c5:42:
                    d5:fb:50:bb:e6:96:5f:7e:80:62:22:84:b7:fa:25:
                    88:47:10:55:7f:86:bf:85:67:60:64:ad:ae:76:f4:
                    57:5a:a4:a2:9c:c0:30:e7:7b:f4:38:7b:f7:a5:9e:
                    f1:e2:9d:25:a9:b0:95:46:e8:60:27:06:03:1a:ec:
                    73:6a:c2:c6:f6:25:15:94:5f:c0:22:e9:c2:20:7c:
                    80:d7:b1:22:f8:6a:d1:0d:90:aa:1f:e4:c1:10:26:
                    f2:49:1a:25:1a:39:b3:09:7b:4f:0e:c3:87:01:41:
                    2e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:75:75:3F:37:51:25:D1:94:14:BE:9F:C7:3D:CD:3D:D9:48:81:CD
            X509v3 Authority Key Identifier:
                keyid:13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:ce:eb:a3:09:7b:e7:e3:cf:ea:2b:dc:0a:8e:7a:f8:b2:2c:
         bc:62:08:94:65:93:ae:d8:05:2f:be:0f:fc:9b:8b:5e:9f:90:
         39:d0:d3:e0:63:76:f5:b1:2c:06:88:05:04:37:3f:c0:c9:af:
         71:d9:ac:8a:39:28:5c:87:6e:24:26:e0:68:0a:af:96:d2:ef:
         18:f9:d0:46:d8:59:09:cf:4c:3a:dc:9e:e6:75:3c:df:0b:dc:
         c8:2c:66:6d:38:e4:b0:32:24:93:07:26:8c:a9:7e:d4:11:80:
         b9:9d:89:60:1e:f0:9a:ce:7a:bf:af:84:49:ae:19:b8:2a:e2:
         8c:25:29:bc:bb:ba:b9:d3:ee:de:8c:e9:95:11:55:b0:d7:75:
         d0:60:95:d5:5f:35:9d:ad:39:d8:22:b1:1a:73:30:df:a4:06:
         b4:be:7c:b2:84:55:52:ed:6f:07:b1:cf:61:06:c0:cd:b4:26:
         d5:22:36:d1:41:f2:a4:8b:04:bc:99:e2:09:77:ef:ea:f6:78:
         d7:42:82:0b:03:87:9a:c8:23:b3:8a:4a:8b:88:a6:93:34:03:
         3f:a0:e4:52:97:eb:20:90:ed:21:ab:5a:ce:52:4b:13:ff:a9:
         33:5e:88:19:99:b9:2e:2a:31:8a:99:2b:a9:00:fe:4d:f7:1e:
         1c:7f:28:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:10:27 2026 by rpki-client