Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
File:                     7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft (raw, json)
Hash identifier:          1ql6ATY4y43Sr5WDW65YuEd2T6Epc00ALjvRFWlU0sA=
Subject key identifier:   E7:8F:8A:34:CF:CC:53:6A:4A:FE:45:2D:22:9B:4C:90:65:89:3F:99
Authority key identifier: EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
Certificate issuer:       /CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Certificate serial:       019EBF5AB5A8B5144FD3C7CCFF94A45DF5D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 05:00:53 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:53 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:53 +0000
Files and hashes:         1: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl (hash: 2AgG75wDTNFuCuwwsD7OPxyBl/RMU+N8s5mpenjdOoI=)
                          2: jI0W3FXepCGwUQYooUrSqFApgnI.roa (hash: ywNZ9Hr6Ek5jRSdgINiD2gJAFEBiWAjLS61c7FwJ6mA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:b5:a8:b5:14:4f:d3:c7:cc:ff:94:a4:5d:f5:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecd6bdacc521edca4c076048da86fed5dcd61220
        Validity
            Not Before: Jun 13 05:00:53 2026 GMT
            Not After : Jun 14 05:00:53 2026 GMT
        Subject: CN=e78f8a34cfcc536a4afe452d229b4c9065893f99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7d:af:3b:c1:f8:12:f3:4c:f4:ba:16:ae:b9:
                    97:5e:08:5e:c3:cf:2c:90:3b:00:85:88:fc:9e:c0:
                    c6:c3:8d:a1:77:3a:7e:f3:89:78:c0:33:f0:f2:5b:
                    c7:ce:de:1a:13:5e:cf:b1:c3:74:62:e0:04:04:15:
                    b0:07:44:8c:cc:9f:31:f1:c7:2b:4d:03:ab:5e:97:
                    3b:60:41:ce:b8:e9:44:40:52:5a:f5:c1:a0:d0:79:
                    95:27:78:57:9a:f7:a7:9f:6e:7e:03:a9:5c:5c:bb:
                    92:b7:af:3d:80:7d:b3:4c:b6:ff:7f:f5:2b:6b:ae:
                    c7:a8:d0:bf:92:4a:44:bf:4e:e6:35:58:78:d3:9f:
                    9b:a8:9b:66:d9:61:e3:6e:44:a4:c7:93:35:5b:9b:
                    c9:19:e0:e0:86:32:c1:98:d1:d0:6e:ac:db:05:51:
                    47:1a:3e:59:78:1c:c2:68:c8:3e:c6:f8:a0:8b:f3:
                    85:ef:55:a1:aa:2e:eb:48:2a:ce:88:d9:6d:e3:4d:
                    28:bf:9d:62:d8:a1:01:9c:a8:6f:e3:1f:30:75:fb:
                    ab:a6:10:cb:1c:dc:df:69:24:75:93:a1:a9:a6:8d:
                    8e:f8:16:a6:9c:46:b8:4b:35:24:78:d0:9e:a8:b9:
                    05:2e:30:71:ff:22:91:ec:02:6d:09:57:2a:46:27:
                    ee:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:8F:8A:34:CF:CC:53:6A:4A:FE:45:2D:22:9B:4C:90:65:89:3F:99
            X509v3 Authority Key Identifier:
                keyid:EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:da:6f:ed:b7:a5:3f:11:f6:18:5e:40:0c:9b:e8:be:c4:fc:
         fa:42:23:ef:97:e1:fe:46:77:70:9d:d3:6b:77:0b:a0:34:83:
         6a:6f:01:58:1e:2c:ac:90:09:74:11:90:b0:e1:dd:2c:11:c5:
         fd:af:b6:02:63:19:36:d7:9c:53:e6:1e:ee:53:5c:3e:1e:c4:
         90:cb:92:34:f5:1a:84:2d:8a:46:71:39:72:2b:5d:f7:e2:23:
         f6:8e:c6:7d:77:66:34:34:6e:c4:d9:8f:1c:08:95:e3:c4:89:
         1e:53:4d:02:2d:7d:19:27:a8:3f:eb:1d:c6:72:d7:38:d4:0d:
         9c:3d:c6:21:1c:cf:98:46:95:b1:3e:e8:3a:55:4c:79:36:28:
         14:e1:be:42:ff:de:61:40:04:36:33:94:66:a8:4a:19:ee:1b:
         a2:5d:75:a3:2b:cc:92:32:9b:02:b0:16:14:76:d5:d7:5b:d6:
         d2:88:6f:4b:ac:f7:6c:d3:0d:43:2b:6a:10:14:b4:9f:6b:16:
         bd:a7:24:10:59:18:f7:1e:86:a0:84:28:aa:cc:6e:9e:04:bc:
         47:4a:3c:3d:15:49:99:f0:48:17:72:e5:75:21:10:24:c4:4a:
         8c:18:4f:84:77:69:7a:01:34:9e:2a:90:14:f9:e6:2c:21:ad:
         d0:29:31:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:04:11 2026 by rpki-client