Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
File:                     Goed4cdfu9LDHR2QgUBW8n1X13Y.mft (raw, json)
Hash identifier:          62JXY/q7lqKD9g/d8kft7WQk4/ycNrUZVY20QGGFP20=
Subject key identifier:   60:92:2B:55:E7:51:6F:7C:AE:82:00:3F:C7:48:AB:D7:1F:50:31:D0
Authority key identifier: 1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76
Certificate issuer:       /CN=1a879de1c75fbbd2c31d1d90814056f27d57d776
Certificate serial:       019EC2C92F5AE889CCB378D101FAFE720C45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 21:00:25 +0000
Manifest this update:     Sat 13 Jun 2026 21:00:25 +0000
Manifest next update:     Sun 14 Jun 2026 21:00:25 +0000
Files and hashes:         1: Goed4cdfu9LDHR2QgUBW8n1X13Y.crl (hash: wRd0KkTYSEyWcMOiu7ux/mLBIClXcUU6hsT1v8a3XCY=)
                          2: ISm6RQxOZnxLUyH-R-CphPRNqZo.roa (hash: T+YGLuiGKtWgSDHKqlkXSycewSm5xaVhDYtV47JELiM=)
                          3: OYrxag2gdKVWmcS_MSjERgU_Ji0.roa (hash: Up6LnAiF7e1D845y6IhDGcXjWiOaIs0vsPTFZeoDQ24=)
                          4: p5utnLd33eKKva_RAEO_Xi-exGo.roa (hash: o9yl5ENus82WxKAzd4PkSoVYVHhX9LlBVWPF96ouh8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 21:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:2f:5a:e8:89:cc:b3:78:d1:01:fa:fe:72:0c:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a879de1c75fbbd2c31d1d90814056f27d57d776
        Validity
            Not Before: Jun 13 21:00:25 2026 GMT
            Not After : Jun 14 21:00:25 2026 GMT
        Subject: CN=60922b55e7516f7cae82003fc748abd71f5031d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:88:f8:e8:3f:6d:f8:48:47:40:6e:a0:ed:04:
                    0e:70:68:71:46:6e:98:24:f6:3e:e6:ae:45:4d:c8:
                    1c:37:65:b4:2f:e4:ca:01:a4:b3:5d:0b:f2:e4:83:
                    c8:ea:bb:2c:c9:94:52:b8:e3:49:cb:4a:a9:7d:d2:
                    16:5c:92:b0:ad:46:a3:83:db:61:ad:84:26:ce:91:
                    02:72:6e:3a:7c:4b:13:d4:12:b9:9a:3b:f7:68:3e:
                    54:87:ac:2a:f5:1a:3d:dd:22:02:a2:60:e3:f8:7f:
                    ce:f4:b7:ad:c5:e6:c6:03:57:b1:b8:c1:c1:3d:20:
                    a5:c6:51:4f:78:22:91:37:ec:24:ee:72:61:4b:5f:
                    42:f9:81:2a:cf:02:83:c7:0f:b7:78:e9:5f:1b:5e:
                    b8:33:3b:92:f4:b8:72:ad:0d:db:a2:29:f8:b3:17:
                    42:75:13:7e:42:b9:e3:5e:78:a0:ff:bc:4e:89:75:
                    fb:56:48:33:24:01:3a:d7:d7:b5:36:c7:41:5f:7f:
                    3a:f3:e5:c8:a3:d2:3f:ef:ab:56:0a:76:73:b7:83:
                    89:05:5e:84:18:09:e2:41:17:16:19:f7:91:42:9e:
                    06:62:9d:f6:0b:f6:a1:cf:1c:13:96:0b:c5:14:f6:
                    29:09:6d:de:f1:50:67:a8:56:d1:d4:13:f1:43:ab:
                    88:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:92:2B:55:E7:51:6F:7C:AE:82:00:3F:C7:48:AB:D7:1F:50:31:D0
            X509v3 Authority Key Identifier:
                keyid:1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:d2:f6:2f:2d:b8:a5:9f:d7:47:05:9d:2a:54:47:25:63:68:
         99:da:02:9e:f1:02:a6:6e:2d:6d:e6:a0:58:09:d5:2c:35:92:
         0d:a8:57:b4:72:88:2e:44:bf:a9:ea:2e:fe:9f:ba:05:dd:a7:
         3a:9c:fc:9f:3f:23:a9:2b:91:09:b9:a8:d5:6d:b8:3c:43:6b:
         0e:0e:f0:92:a7:25:a0:86:78:da:a9:98:bb:73:a5:c4:2d:7d:
         43:cd:45:ef:14:cd:a7:2a:cc:02:f4:52:9f:2a:a0:4a:ed:03:
         c2:ef:e4:48:c6:f0:0b:5b:d5:7f:45:21:c2:82:97:8b:da:85:
         71:3d:d9:01:96:18:21:46:78:07:28:51:de:f8:0f:df:59:23:
         46:98:c0:c7:c5:31:cd:8b:e8:c5:6b:a2:c7:29:b0:0c:16:f1:
         55:0b:40:6a:4e:66:33:c6:85:d6:c3:cd:c8:f0:df:48:2c:82:
         d0:0d:d6:2d:c4:20:f9:88:b5:0f:6f:83:10:d5:6f:7b:33:c5:
         bf:d5:4d:a9:8d:90:77:50:36:4b:99:46:20:66:a9:98:09:70:
         59:6d:74:51:ef:ae:0b:c7:b9:d1:33:2d:f7:67:0d:13:74:b7:
         84:cd:45:23:e3:1e:df:e6:23:0c:5b:82:bb:ef:d9:b3:b3:28:
         ca:24:4c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:36:03 2026 by rpki-client