Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
File:                     pByW6THu5BuJnWLH24NjNEajxCs.mft (raw, json)
Hash identifier:          +OpbnXryTjemhdf+CC/BcBJsBarStFHN6f9nqn/oeUA=
Subject key identifier:   8A:27:95:40:E1:8A:F9:3B:27:CE:92:76:1F:41:A3:DC:31:38:31:D4
Authority key identifier: A4:1C:96:E9:31:EE:E4:1B:89:9D:62:C7:DB:83:63:34:46:A3:C4:2B
Certificate issuer:       /CN=a41c96e931eee41b899d62c7db83633446a3c42b
Certificate serial:       019EBF5A607E43D3815289A4C0BA75D7EFCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 05:00:31 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:31 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:31 +0000
Files and hashes:         1: 08erSysabwz5oeBdP8PLy755AHA.asa (hash: RIOLOsPK24oYYh42JNS8I14+Rr+oEV6iLUu+Usr4/PY=)
                          2: Ug2vF1vgPHmEqRhi6uOzDzFa8k4.roa (hash: J3X4+yL+W+OJhZWrAFHs4AhqGxikLkSzill4Qp4q87Q=)
                          3: pByW6THu5BuJnWLH24NjNEajxCs.crl (hash: BbC8Dc9sC5HYlcXlJsd1j5HmTIdTE6+GO9SA/REoA84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:60:7e:43:d3:81:52:89:a4:c0:ba:75:d7:ef:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a41c96e931eee41b899d62c7db83633446a3c42b
        Validity
            Not Before: Jun 13 05:00:31 2026 GMT
            Not After : Jun 14 05:00:31 2026 GMT
        Subject: CN=8a279540e18af93b27ce92761f41a3dc313831d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e8:25:ea:9b:ed:5d:3b:52:80:46:2a:fe:2b:
                    ac:fc:e0:18:5f:cf:75:37:70:0c:5b:99:49:89:1b:
                    2c:69:da:74:64:c9:ff:bc:1b:4d:05:70:8b:8e:e1:
                    46:da:db:22:20:74:65:eb:df:d1:9c:2e:85:f5:54:
                    32:0a:e9:e4:f8:4a:69:61:14:60:7b:42:9e:d5:e0:
                    90:1d:43:a0:12:60:f4:21:7c:b1:94:bf:80:f2:6f:
                    ce:d7:be:ab:50:83:51:ab:af:d8:f7:3e:9c:4b:c7:
                    f5:52:4c:99:10:c1:7c:72:0f:cb:fd:f2:a7:ce:fb:
                    82:38:5b:37:4d:83:c7:91:92:e1:21:e9:cc:ca:07:
                    81:57:ca:8b:e3:7b:3d:4c:22:8c:f9:8d:40:db:ce:
                    4f:3b:ee:a4:55:e2:db:e8:5b:61:8f:03:7d:63:61:
                    55:24:ee:67:9e:30:64:7d:92:74:b3:48:d3:22:1c:
                    1e:b0:37:74:42:3e:eb:61:80:a3:94:d9:69:3a:0d:
                    34:51:32:21:c0:c8:c8:20:fb:56:f8:9e:c7:58:a4:
                    44:30:58:59:9c:ee:70:f8:20:44:67:72:9f:53:41:
                    c3:72:38:f7:92:c8:18:53:e4:52:13:a6:d6:57:e5:
                    f5:39:21:7d:82:63:43:65:c9:28:91:01:c4:25:5a:
                    06:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:27:95:40:E1:8A:F9:3B:27:CE:92:76:1F:41:A3:DC:31:38:31:D4
            X509v3 Authority Key Identifier:
                keyid:A4:1C:96:E9:31:EE:E4:1B:89:9D:62:C7:DB:83:63:34:46:A3:C4:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:d4:ad:d6:36:ef:64:7e:ae:89:9b:f2:51:37:b8:76:39:e8:
         e2:50:37:c6:53:fd:a6:f8:73:66:4f:a6:5d:20:47:38:83:b4:
         27:29:cd:dc:01:9b:8e:72:72:16:36:27:b9:63:93:95:57:ed:
         95:af:48:d6:c5:46:16:f1:67:05:46:01:0b:05:19:a7:fc:34:
         5d:8a:46:23:8c:6f:b5:92:ae:88:f7:2c:8f:b4:b3:c0:35:1b:
         03:ef:22:ed:ff:2e:0d:1a:34:c9:4a:2a:ac:0d:ef:46:6c:c7:
         80:09:4e:60:1d:2b:5f:78:7b:60:dd:5f:60:b3:a2:74:cc:74:
         c1:8d:9a:77:bc:9f:cc:66:e5:6c:ed:7b:71:a7:18:1a:85:9b:
         4d:fc:84:68:04:5a:67:8e:22:21:41:0b:e9:39:10:3a:d4:b4:
         57:5d:8a:9d:85:cd:1f:52:b8:c4:3f:8e:71:44:12:46:b8:3f:
         aa:b0:b7:39:59:ef:8b:b4:6b:9d:96:21:16:96:e3:5e:99:a0:
         1a:df:a5:89:19:6b:49:56:f0:83:2e:f6:dc:af:bb:18:75:b2:
         3a:09:52:3d:a1:bb:e0:ac:61:db:84:34:74:dd:a0:90:e5:37:
         d3:58:be:d7:e0:62:ef:b7:08:3d:b7:d4:9c:67:d4:3a:b9:af:
         f9:a4:45:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:01:26 2026 by rpki-client