Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
File:                     ESe41aUEAgm4mTvyAxeJw7K6t8c.mft (raw, json)
Hash identifier:          iw7D2qW4rGiJWs2v3sMd+F/3EMc5v2ux2BPdgJXA4XQ=
Subject key identifier:   74:3A:4E:B2:3F:97:F9:A9:46:DD:81:C8:8D:60:92:78:DD:11:01:C8
Authority key identifier: 11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7
Certificate issuer:       /CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7
Certificate serial:       019EC1EE1F1935720667CB90D600B546BB49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 17:01:08 +0000
Manifest this update:     Sat 13 Jun 2026 17:01:08 +0000
Manifest next update:     Sun 14 Jun 2026 17:01:08 +0000
Files and hashes:         1: ESe41aUEAgm4mTvyAxeJw7K6t8c.crl (hash: KWwMqWVIH/SX0tXqgksCwii/NP4+by3GKskB58UNkdU=)
                          2: Vj-jl645n2kvkyifqeqjUT8mbTk.roa (hash: sy/gtDfl2XECiDgxiAjMKqlkJRB/dQlkZ9hhKjq79wQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ee:1f:19:35:72:06:67:cb:90:d6:00:b5:46:bb:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7
        Validity
            Not Before: Jun 13 17:01:08 2026 GMT
            Not After : Jun 14 17:01:08 2026 GMT
        Subject: CN=743a4eb23f97f9a946dd81c88d609278dd1101c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ef:02:4b:10:87:0e:e1:bc:1c:a9:d3:88:9f:
                    b3:c5:72:25:c4:36:21:6d:88:d5:1f:f3:ae:d8:b1:
                    c4:d9:fc:12:58:21:b0:5d:0b:1c:d8:00:ef:2c:20:
                    b3:a0:46:37:aa:2c:0e:17:87:92:b4:8f:f5:1e:2f:
                    db:f3:ec:0f:cb:d7:cd:e4:d2:a4:3c:1b:9d:45:80:
                    d3:26:53:26:32:ba:5a:5e:b0:e9:76:04:4e:4c:fe:
                    73:e1:f4:f7:41:3e:24:85:fa:b8:4a:fd:a6:16:e5:
                    48:a8:88:f1:64:5b:b5:3c:81:d7:2e:10:32:38:74:
                    fd:1c:26:37:a7:e1:c4:2a:63:7a:77:55:9b:b0:8f:
                    bc:29:34:db:48:c7:cd:93:40:e5:c0:db:59:90:fc:
                    37:a2:53:6f:f8:9e:f4:66:a7:86:a3:b1:43:b1:1d:
                    85:07:48:b0:97:8f:68:21:a6:7b:65:ba:09:e4:eb:
                    58:89:33:c3:a1:5d:55:1e:dc:64:fb:8f:cd:f9:8e:
                    31:41:13:44:14:0c:5e:c5:3f:7c:e4:27:33:4c:6c:
                    4a:49:b7:dd:69:3c:e7:e9:51:c6:ca:71:72:31:06:
                    81:ee:47:39:a9:6f:40:88:2c:f1:b2:af:6b:d4:7d:
                    a4:50:5f:74:1a:f3:b8:ce:75:2b:db:cc:df:63:2a:
                    7d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:3A:4E:B2:3F:97:F9:A9:46:DD:81:C8:8D:60:92:78:DD:11:01:C8
            X509v3 Authority Key Identifier:
                keyid:11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:dc:1f:3b:f2:1e:38:4c:de:ae:c3:cf:ed:e6:41:3f:a4:62:
         99:bb:ec:cd:da:90:26:4d:fc:1e:0f:89:74:47:ea:13:37:a0:
         e8:1d:09:16:01:37:f1:e6:1e:f5:f1:75:e0:c1:37:b0:1a:3a:
         dc:9d:d8:76:16:6a:94:ca:e4:d1:f1:e8:5c:2e:32:65:0a:68:
         6b:af:84:b1:bb:82:c5:6a:2c:5c:44:c9:96:c9:36:2b:f2:cf:
         a7:7f:fe:3b:82:46:91:ab:cb:38:74:3d:2f:37:5f:4d:bd:2d:
         8d:75:80:78:2e:69:1d:79:21:c1:21:65:28:1b:f2:1d:2d:fb:
         dc:68:f5:53:4f:4e:af:62:2b:91:ca:b7:03:11:58:aa:fb:4d:
         4f:a8:39:50:7d:d2:d7:f6:4b:44:8f:c1:20:92:d8:74:55:1f:
         3b:1e:69:9e:ab:d5:fa:a5:b3:ef:7b:ff:b2:f5:cf:dc:07:76:
         35:c2:24:9d:e3:69:37:f2:a7:0f:7d:10:ca:21:f6:54:33:5d:
         26:58:ab:5d:30:46:6a:9c:a1:76:ed:5a:73:5c:65:a2:60:5d:
         58:31:10:31:02:0e:f0:88:b1:6b:11:ba:72:1e:78:31:95:e8:
         dd:17:a3:a5:3b:b1:c8:23:d9:1f:c0:f0:be:3a:c5:fd:2d:46:
         78:7c:5d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:57:26 2026 by rpki-client