Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
File:                     c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft (raw, json)
Hash identifier:          ARBlaUPHL3LVv1UsQUk0pGYulE9UQ9S/QJ9U+ODfniQ=
Subject key identifier:   98:F9:51:CF:B8:47:16:39:0F:4F:7E:72:D1:F9:4B:F9:AD:DF:E4:71
Authority key identifier: 73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A
Certificate issuer:       /CN=73c2f49445980199475512f5297608f45d08bb5a
Certificate serial:       019EC111D2B0984819BD3CE3770113D8072D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 13:00:31 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:31 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:31 +0000
Files and hashes:         1: LcqefA0kElh8JewV5kCSLGG-J5k.roa (hash: JMhJK/hqVpg8wqMcEmK9X4OKux3FowYsD4YqDBdN+EQ=)
                          2: c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl (hash: xD5N/IwlcelfUAocozoigX23kUUsJ83hM1844ig5cBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:11:d2:b0:98:48:19:bd:3c:e3:77:01:13:d8:07:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c2f49445980199475512f5297608f45d08bb5a
        Validity
            Not Before: Jun 13 13:00:31 2026 GMT
            Not After : Jun 14 13:00:31 2026 GMT
        Subject: CN=98f951cfb84716390f4f7e72d1f94bf9addfe471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c7:2a:0c:c1:12:99:26:c6:5a:6c:fb:25:ab:
                    2b:96:15:0f:52:ed:b2:f4:19:01:be:5f:d3:40:46:
                    13:ff:66:f1:e0:0e:60:df:a0:be:a5:a7:d5:4d:45:
                    ad:d6:fc:2c:8b:ad:4e:c4:61:84:07:be:91:94:1a:
                    da:ba:55:95:52:76:f5:84:d4:1d:ed:9c:8f:93:01:
                    fc:f3:44:21:54:04:76:66:21:2f:f7:e7:33:4a:8b:
                    32:18:0e:d9:9d:40:74:bf:f4:fd:14:8b:d2:4d:7e:
                    27:0e:f9:d2:c9:81:42:79:a0:61:59:4b:aa:d7:2b:
                    31:c5:4b:07:d0:90:bd:05:ea:ac:65:f2:c8:d0:43:
                    3b:05:c6:d3:db:11:a2:c9:b5:44:77:ad:d7:13:41:
                    b1:2b:ed:84:e3:98:7f:15:75:2a:d3:a3:6e:45:32:
                    d4:50:0f:b8:4e:ed:dd:16:77:19:68:4e:6d:ca:f9:
                    36:ea:a7:c5:5d:4c:e7:29:89:1c:b7:31:c0:d2:0c:
                    a1:91:22:5c:91:71:84:e2:5d:70:8f:61:1b:7f:93:
                    07:14:f7:de:f3:9d:70:87:2d:eb:fe:54:89:2d:58:
                    ca:60:8d:a4:fd:d7:2a:c2:a1:91:64:00:88:2c:03:
                    39:6b:d8:b3:16:06:81:c4:ab:0d:84:f3:45:66:4a:
                    80:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F9:51:CF:B8:47:16:39:0F:4F:7E:72:D1:F9:4B:F9:AD:DF:E4:71
            X509v3 Authority Key Identifier:
                keyid:73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:ee:94:57:36:a0:64:63:42:ce:76:9b:32:6e:29:ba:ca:91:
         62:2e:4d:af:30:ef:1b:66:69:f9:33:98:b2:a2:21:98:9f:06:
         1d:3e:12:50:95:f2:8f:4b:86:dd:43:26:17:bb:f2:f4:a6:29:
         6e:86:e3:23:c1:d5:1b:ec:94:a6:e8:8c:4a:6d:bb:df:82:35:
         43:2c:64:cc:cd:e5:60:17:66:4f:02:06:09:d3:ee:2e:b5:11:
         e0:6e:77:f2:b5:87:06:8c:23:59:65:79:1b:9c:89:59:56:4a:
         49:08:30:b0:e4:b0:30:ce:13:b8:1d:d0:61:a5:03:59:79:ea:
         ae:ae:7b:1a:64:e5:60:2d:95:fb:b3:62:2b:c2:bb:e6:63:ed:
         3e:06:d2:be:64:37:43:9b:b7:3d:e3:b7:bb:02:9f:42:6f:10:
         45:68:40:14:96:c1:6a:0b:3b:05:08:e4:ad:c3:79:ef:3a:af:
         92:17:da:00:5c:b1:0a:b1:6c:27:b8:2e:95:82:b3:71:04:93:
         ea:d3:29:4a:b8:2a:cd:07:4a:81:57:f4:ce:d9:8c:6c:5d:02:
         0d:b8:2f:71:b0:25:61:34:11:37:96:75:0f:7e:e4:e7:3b:4d:
         18:4c:01:af:0a:8c:80:02:2b:bf:89:03:91:dd:b2:14:22:37:
         19:d7:75:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:36:02 2026 by rpki-client