Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
File:                     M3EM-B0hd3qY09mZ3B5urgVffDw.mft (raw, json)
Hash identifier:          jT+AAEuxg+JtpyJqH4AV8G1WqK3ZvaRyf2nHyhfDuz4=
Subject key identifier:   22:2F:25:9D:DD:D5:38:1F:CD:B2:1B:CF:DA:E1:82:F2:7D:B7:24:38
Authority key identifier: 33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C
Certificate issuer:       /CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c
Certificate serial:       019EC224466CB570E1D4C7E0E99F9CDE4D15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 18:00:17 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:17 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:17 +0000
Files and hashes:         1: 7MkQZGhOVtHQk5MQ7ZY9WW07D8Q.roa (hash: Cn+90mJi74+2BcOC5W598tXat8oZgbiFe0T88t32ER0=)
                          2: M3EM-B0hd3qY09mZ3B5urgVffDw.crl (hash: uBRbg8319gTOYmx2X48oDnoNNXtbVxaOa69MsZ1ipOU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:46:6c:b5:70:e1:d4:c7:e0:e9:9f:9c:de:4d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c
        Validity
            Not Before: Jun 13 18:00:17 2026 GMT
            Not After : Jun 14 18:00:17 2026 GMT
        Subject: CN=222f259dddd5381fcdb21bcfdae182f27db72438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fd:13:0a:18:31:34:8a:5d:56:cc:ec:4d:fa:
                    16:9d:30:87:44:5c:57:00:46:9a:07:d8:cf:7f:43:
                    5b:0c:35:f3:2f:0d:12:3d:05:8a:a5:5f:43:ef:31:
                    14:7d:b1:9c:a7:5b:1a:bb:35:cc:b1:79:08:60:e6:
                    87:31:64:e7:13:f1:f6:00:13:98:34:d5:15:f8:d1:
                    09:31:0f:d6:d2:bd:d5:b3:cd:e6:7f:f7:6f:68:59:
                    b6:9e:d5:c3:09:41:a4:cb:ef:8f:7a:81:90:81:d5:
                    b3:a7:ad:86:32:61:ee:4f:b9:16:a1:38:a6:b7:b6:
                    48:25:d7:b3:75:13:88:df:b8:65:67:be:e3:a9:c6:
                    79:fb:73:ee:50:d2:95:aa:95:fa:d4:1c:db:cd:49:
                    70:2c:4a:45:3d:91:37:d4:c9:35:a4:76:ad:e9:ee:
                    7a:0c:6c:66:c2:39:b9:a4:23:42:ce:83:7d:f0:f7:
                    01:45:d2:6d:3f:47:4a:24:22:50:0c:9d:df:95:d4:
                    5b:33:df:75:ce:1b:09:51:5d:c5:f5:9b:db:4b:74:
                    af:c6:96:56:28:57:c6:f3:b9:46:57:88:a5:2d:ce:
                    9d:71:bd:3e:8c:99:7d:7e:47:1b:af:a1:51:54:fb:
                    81:ec:de:79:dc:ae:4a:58:1c:03:ea:29:d0:6e:e9:
                    8e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:2F:25:9D:DD:D5:38:1F:CD:B2:1B:CF:DA:E1:82:F2:7D:B7:24:38
            X509v3 Authority Key Identifier:
                keyid:33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ac:12:4a:53:ba:ad:00:b5:da:35:23:b7:5b:85:7c:e3:ce:
         8b:6c:b9:97:51:93:00:e1:36:13:67:67:02:b8:d5:b0:71:d7:
         d7:c0:64:34:34:4e:99:7c:71:56:70:69:6a:b3:14:9a:6e:b9:
         12:21:de:48:52:f9:c9:2e:72:15:ab:de:0a:35:4e:6b:ef:ce:
         e2:1d:75:8f:c2:f3:83:d2:82:dc:2a:b4:9f:27:06:eb:35:e9:
         24:e1:e8:ee:5a:fe:b7:20:0b:05:4b:06:93:bb:b2:ce:2f:07:
         a7:58:61:ce:da:3c:2e:f2:ee:63:f3:e2:b9:bc:df:38:97:4e:
         13:80:c4:d9:05:a7:3e:a7:55:81:3e:a3:7d:5b:0d:8b:33:fb:
         bf:52:6b:1b:9e:81:a8:c9:41:3a:b3:ef:13:50:e2:da:b5:ba:
         6b:ae:99:d5:8d:e4:0e:bc:60:fc:30:ed:40:bf:49:a1:a7:64:
         00:c9:37:20:b9:21:4a:31:64:0d:89:8a:5f:5b:4c:28:aa:02:
         cc:56:d4:f2:5e:ae:c1:be:f9:14:4b:35:60:6c:f6:a7:5a:70:
         5a:6e:02:75:ee:0e:c3:ce:ba:89:a8:6d:a0:9c:92:c7:80:f8:
         78:e2:de:1e:60:a3:4d:2d:1d:45:b5:23:35:ff:8a:b2:5e:3c:
         29:32:99:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:25:22 2026 by rpki-client