Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
File:                     AYzG9GaiQWV79exSpjDa6wEiL4U.mft (raw, json)
Hash identifier:          tI+sEFXNXQrdGc8jqd05cxUbLeMKLyFQilJLyygAeCU=
Subject key identifier:   C3:09:6A:42:05:C0:6C:03:9F:A1:55:B9:9E:CE:C6:78:DC:08:E4:22
Authority key identifier: 01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85
Certificate issuer:       /CN=018cc6f466a241657bf5ec52a630daeb01222f85
Certificate serial:       019EBE10D905EA3F22AC82D8AE36FDFF35D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
Manifest number:          195D
Signing time:             Fri 12 Jun 2026 23:00:35 +0000
Manifest this update:     Fri 12 Jun 2026 23:00:35 +0000
Manifest next update:     Sat 13 Jun 2026 23:00:35 +0000
Files and hashes:         1: AYzG9GaiQWV79exSpjDa6wEiL4U.crl (hash: 4YMhARJilzQRr89SmyrHOESSBy9C4bUR/JVJ2A5KC44=)
                          2: TM56q_Km90IofYyolcjUGG4s9_E.roa (hash: +vMdN883JqiJ4BCwwMasiDlvt3eGgHHdJPYkXZCMObo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:10:d9:05:ea:3f:22:ac:82:d8:ae:36:fd:ff:35:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=018cc6f466a241657bf5ec52a630daeb01222f85
        Validity
            Not Before: Jun 12 23:00:35 2026 GMT
            Not After : Jun 13 23:00:35 2026 GMT
        Subject: CN=c3096a4205c06c039fa155b99ecec678dc08e422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:67:09:b8:76:5a:f7:6a:95:7b:10:15:f0:d1:
                    35:a3:ef:7c:7c:f2:9d:26:54:7c:ab:a8:56:4a:9e:
                    c7:9a:a8:05:a4:7d:18:1a:2f:f2:25:c0:4c:e7:72:
                    4f:10:54:69:15:80:99:83:b8:39:ea:0e:0f:4b:87:
                    45:0a:8b:c7:ff:de:e0:e6:52:e8:30:ff:79:32:67:
                    ca:8d:49:63:88:6f:6a:76:09:4c:5a:ad:ce:3a:0a:
                    5a:f3:39:47:b7:15:83:ee:ad:3f:3f:89:cd:f7:c4:
                    86:6d:13:80:69:aa:57:01:77:97:a8:ab:dd:51:5d:
                    1c:99:d7:48:08:f7:15:c5:cf:cf:b5:f8:92:3e:2f:
                    63:36:e1:b7:07:e8:04:73:14:61:6d:7f:9a:2a:7d:
                    ed:ac:8f:55:a8:51:83:b7:15:08:55:6e:42:b4:15:
                    8b:82:98:c0:ed:ae:bf:f1:97:8d:b6:b4:8e:30:be:
                    f6:4f:e2:91:94:ee:a0:74:ad:93:f2:7b:8d:51:9f:
                    33:8b:e8:8a:88:85:4c:62:f6:7b:9f:28:bd:39:23:
                    40:79:3d:1e:66:5f:35:a1:cd:c6:d3:25:f3:8e:30:
                    d9:f4:8b:45:16:be:eb:57:1e:75:b0:36:97:71:52:
                    66:20:96:05:56:45:f8:7f:13:f4:27:8d:ee:ad:12:
                    be:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:09:6A:42:05:C0:6C:03:9F:A1:55:B9:9E:CE:C6:78:DC:08:E4:22
            X509v3 Authority Key Identifier:
                keyid:01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:85:26:76:37:e3:56:8c:09:ff:d4:58:ad:6b:d5:f4:25:28:
         fa:37:a2:79:40:57:fa:ee:8c:05:11:d4:f1:49:75:16:47:2c:
         16:3f:36:15:8b:c3:48:e8:bd:ff:85:cb:e8:db:30:42:bd:a8:
         c2:0f:20:ac:49:ed:b8:1a:79:1b:ee:d9:d7:87:e4:8c:00:22:
         18:d9:c9:2b:2a:a4:a9:89:55:2e:4e:dd:1a:4c:4a:ba:cf:a2:
         cc:3f:d6:5a:3d:a1:88:dc:85:56:c5:fd:d3:63:c7:ce:2b:c7:
         13:e6:00:78:04:28:73:cc:a8:a9:18:f4:dd:ba:fb:88:a0:2e:
         28:70:02:c9:12:56:6c:6a:af:51:39:a6:20:ea:a7:d7:ac:1c:
         7b:1c:4b:e9:6b:36:50:96:8f:f4:95:e9:b2:28:6f:ec:f2:17:
         20:64:99:ba:47:3a:30:41:91:6a:5a:c5:4d:3d:7e:ac:e4:43:
         6c:2a:12:58:20:89:7a:f2:db:e8:a3:8b:4f:4d:f4:07:f4:99:
         b4:81:4e:37:59:9c:e3:a7:e9:19:2c:24:06:cf:20:42:c2:bc:
         24:d8:0d:78:b8:4e:6a:82:e1:91:12:63:64:c5:60:4d:38:e6:
         40:fd:ce:78:f8:2b:49:8f:7b:74:6c:81:48:1a:00:29:35:d6:
         0d:ba:e5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:35:52 2026 by rpki-client