Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
File:                     jWYDLgiJQRjXmYxcBgykbrOHEzg.mft (raw, json)
Hash identifier:          vX5GAJhOoOPO2zfhLygNTAXVOUdtEcagzbK0HQv8s0g=
Subject key identifier:   A6:CC:CB:75:B1:82:45:30:D2:3C:CC:3E:B2:BD:41:11:9C:78:01:FF
Authority key identifier: 8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
Certificate issuer:       /CN=8d66032e08894118d7998c5c060ca46eb3871338
Certificate serial:       019EC18016FB2D3566F061AB91549871168D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
Manifest number:          195E
Signing time:             Sat 13 Jun 2026 15:00:57 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:57 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:57 +0000
Files and hashes:         1: RtAzEtFofwFDRI1uklV1iXMa1wg.roa (hash: cRkKQUmXVsmTzq50TJwx3uR/gXhJ/74yYnMnrtZIm+M=)
                          2: jWYDLgiJQRjXmYxcBgykbrOHEzg.crl (hash: eOiXUbQa5vUoQ2lKkIxJbPvfqoM9yot7hVDj9I2sN2g=)
                          3: zVGoD_0Y0DHDLcKfmGJhAnYlgkE.roa (hash: 5YNYXEQ+H71UmBiAtmwj2k1bmJWUMWVXm7siQv17RzI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 15:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:80:16:fb:2d:35:66:f0:61:ab:91:54:98:71:16:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d66032e08894118d7998c5c060ca46eb3871338
        Validity
            Not Before: Jun 13 15:00:57 2026 GMT
            Not After : Jun 14 15:00:57 2026 GMT
        Subject: CN=a6cccb75b1824530d23ccc3eb2bd41119c7801ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:39:30:3c:3e:09:7f:de:30:b3:6d:bb:fa:e9:
                    b7:67:2b:b1:a5:68:b3:11:ad:20:41:40:df:af:11:
                    72:a3:3f:eb:95:7a:9a:6f:77:f8:3f:79:c4:fb:eb:
                    6e:06:37:b6:ad:fa:9a:d2:5b:1e:a4:55:0d:22:bd:
                    16:0f:69:7a:7a:96:9d:7c:b9:ee:ef:ec:90:7b:03:
                    13:52:ba:c2:22:ca:c7:4b:da:a3:d8:51:5f:65:5b:
                    d0:be:45:31:08:0f:ed:ee:1c:81:b2:f5:49:ea:96:
                    01:4b:fc:b4:b5:c7:88:09:e9:92:fd:19:2b:33:a6:
                    8d:55:15:8f:df:ae:20:2c:33:a6:11:6e:4e:23:92:
                    d4:ef:ed:40:97:81:3c:2a:0c:89:7c:73:de:73:b6:
                    cb:b2:eb:d5:8d:14:d6:73:8a:52:a4:36:8e:6f:60:
                    83:17:f2:73:8e:3a:2f:bd:3f:ab:f7:6b:ae:fe:3d:
                    e3:39:20:cc:0d:07:91:e8:55:0a:3a:c0:f7:4c:61:
                    26:39:90:b8:cb:55:7e:e8:b7:20:c0:ee:cf:7b:b4:
                    10:31:fa:48:cb:77:6f:ee:1d:0a:59:29:2c:72:22:
                    fc:a0:e8:f3:c3:8e:5c:87:37:e9:b5:a6:4b:f4:94:
                    16:1f:9f:64:7a:2d:2c:f4:c1:5a:21:43:7f:78:5b:
                    d2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:CC:CB:75:B1:82:45:30:D2:3C:CC:3E:B2:BD:41:11:9C:78:01:FF
            X509v3 Authority Key Identifier:
                keyid:8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:a4:03:6a:6f:65:b9:6b:c3:3e:8f:40:02:dd:88:6b:61:81:
         5a:98:03:d1:dc:3a:39:3f:d7:ec:d4:b2:c1:27:c9:73:db:ff:
         62:4c:d5:1d:59:a4:53:e2:d0:82:cf:79:42:92:fb:ae:83:c9:
         f1:53:54:97:1d:ab:5c:3c:e8:08:fd:bc:df:d1:64:46:a3:e3:
         79:18:d0:35:48:8a:03:cf:1b:53:ea:89:e1:a0:59:e1:6a:9d:
         74:22:68:0f:17:dd:e8:8f:78:40:8a:30:27:59:9a:9f:66:4a:
         24:b2:84:0b:06:7b:0b:88:94:48:0d:46:11:22:8c:8a:96:30:
         a1:8e:f8:8b:33:62:aa:d7:57:ad:1d:c8:ba:a5:7b:06:f1:5a:
         1b:24:ba:9a:a1:7c:7b:64:84:63:04:62:b3:b8:18:ee:09:c4:
         45:96:7f:d4:4a:c6:bc:6e:e2:c4:5d:09:40:d8:26:41:e7:fd:
         8e:6c:b7:51:c5:78:4c:63:93:e5:a9:b4:69:f5:8f:90:13:3a:
         63:8f:81:2a:d8:78:ad:e4:e3:b7:dd:80:da:02:53:d7:54:c1:
         d4:fe:6d:09:7a:4f:d5:a4:24:74:cb:ee:39:24:78:7e:3f:de:
         f0:6f:83:7c:db:99:d8:d0:e1:ca:20:9b:f0:fe:30:66:dd:21:
         23:94:be:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:01:23 2026 by rpki-client