Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
File:                     j7YTPVwhCdim-bvKpJbb6uNHl1w.mft (raw, json)
Hash identifier:          i+1fkJCJjAG6r883K4mkCyiNsf+kgRLJ0vU93FiMzNo=
Subject key identifier:   20:9E:E8:0E:86:5D:1E:CC:04:07:11:11:AB:E0:35:36:CB:64:47:88
Authority key identifier: 8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C
Certificate issuer:       /CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
Certificate serial:       019EC29299362459D76531A4A85293028F39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
Manifest number:          195F
Signing time:             Sat 13 Jun 2026 20:00:47 +0000
Manifest this update:     Sat 13 Jun 2026 20:00:47 +0000
Manifest next update:     Sun 14 Jun 2026 20:00:47 +0000
Files and hashes:         1: OZhWUwGTJJgySO4m4Q-1c3zg7BI.roa (hash: fGvKZaOlhgdkgyxl6/1AuWFmm3crcDp6VjKR5yKK6Ms=)
                          2: j7YTPVwhCdim-bvKpJbb6uNHl1w.crl (hash: ZkchetdVgs5PIJmBWo+6HRDVatFDIXEdwL+GGRo6z+E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:99:36:24:59:d7:65:31:a4:a8:52:93:02:8f:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
        Validity
            Not Before: Jun 13 20:00:47 2026 GMT
            Not After : Jun 14 20:00:47 2026 GMT
        Subject: CN=209ee80e865d1ecc04071111abe03536cb644788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1e:d0:06:a4:83:fb:44:75:ea:4c:13:5c:76:
                    6a:6c:ad:f0:da:29:2c:13:4d:6a:5f:12:62:2e:4b:
                    47:96:90:d1:1f:89:dc:5a:e1:bc:a1:fa:b7:21:b2:
                    48:3c:bc:86:c9:cf:8f:25:fd:04:c3:6e:16:d8:b5:
                    2d:99:fd:86:11:d6:fd:14:30:a5:47:21:28:fc:0b:
                    aa:83:e8:58:54:c3:e6:6b:3d:74:a5:c3:b9:d3:d0:
                    9e:84:0f:69:8f:f4:26:cc:67:07:df:75:e1:6e:b7:
                    d4:22:a3:65:ba:51:a8:00:45:1b:ad:2d:91:e0:00:
                    6c:cb:a8:2f:ee:24:95:36:74:45:ff:c1:86:25:25:
                    4a:e2:8e:2b:94:e1:15:d8:04:4b:89:6d:cf:1c:c6:
                    e3:02:da:3a:75:6f:27:10:03:39:e5:ef:89:9a:95:
                    c8:c8:8a:2b:98:8c:dd:ec:f5:e4:00:d8:e2:ce:0c:
                    1e:8b:50:a4:97:c7:62:71:b8:e7:be:d5:1e:ff:76:
                    33:26:e9:dd:8e:d7:68:d8:38:f8:59:0c:89:5b:5d:
                    c1:ba:a7:97:f6:c9:f2:af:3a:16:a1:df:80:fb:b6:
                    7e:e0:c7:36:b2:ec:f1:4e:9d:0a:55:49:27:03:bc:
                    6e:55:84:fa:f5:d6:a3:b1:3b:55:fd:0f:57:d9:63:
                    93:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:9E:E8:0E:86:5D:1E:CC:04:07:11:11:AB:E0:35:36:CB:64:47:88
            X509v3 Authority Key Identifier:
                keyid:8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:d4:56:23:3e:a6:d5:5f:54:f2:b6:58:32:7c:0e:a8:6e:2c:
         02:23:9a:1c:b7:77:53:07:2f:0b:79:14:a7:4f:be:67:4f:e2:
         12:78:86:f6:4e:0a:99:9b:aa:32:7b:df:ed:e5:a3:7e:d1:1d:
         35:2b:94:1a:38:f3:3d:e6:1d:68:ef:04:31:17:6a:cb:c6:20:
         9e:94:21:4f:a8:9a:fe:34:ee:ea:db:b6:72:04:59:5d:94:61:
         55:28:f6:68:dd:3c:32:56:69:cd:90:86:0c:37:58:8d:05:40:
         33:5f:69:c7:fe:4a:4c:d4:cf:b6:7e:56:01:01:db:4c:3b:51:
         08:1b:b9:10:31:7b:ec:fd:e7:9b:44:34:fd:6e:cd:fa:69:2d:
         db:3d:be:bd:b1:f0:11:9a:60:de:df:70:65:e8:dd:00:ae:21:
         1a:34:c5:c5:85:c1:36:fb:b9:5b:5e:81:75:fe:6f:98:93:c0:
         46:73:26:c5:23:d2:bd:ca:56:d8:29:8b:30:57:e3:89:72:ac:
         bc:9b:04:e5:01:1f:cb:be:29:55:bc:f4:96:52:b2:23:8f:2e:
         3c:88:c6:85:63:e4:60:72:ae:fa:db:71:7e:54:d8:ea:64:cd:
         84:9d:46:07:8f:8d:fa:b4:fc:86:fa:6c:34:b7:0f:0d:d6:f7:
         ba:26:74:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:38:01 2026 by rpki-client