Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
File:                     jIVlV8QUaotQ3E2UQksGaAzvdVs.mft (raw, json)
Hash identifier:          c3gx199hvohMoYCvcf4EurBoxFcezwcjcp9UbqIEuDk=
Subject key identifier:   D8:F3:4A:A6:02:9F:05:2C:15:96:37:51:44:79:17:FD:D3:D4:42:21
Authority key identifier: 8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B
Certificate issuer:       /CN=8c856557c4146a8b50dc4d94424b06680cef755b
Certificate serial:       019EBFC8733FA6CA99DE4620CCEF68E02142
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 07:00:45 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:45 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:45 +0000
Files and hashes:         1: 5UgWz4TquW-RCZNQAffQO9XK1TY.roa (hash: K3S0eQrPAI5ZGDD9EhtxIW1xNbkOZ7avoejLjH/PyGs=)
                          2: TrdJEenqgtHhdFelNOTUIFotJQw.roa (hash: Dr0F+aTEx7ePrr0l9Z8JmKO/N1C2g7VZ2b2KhzfPrQQ=)
                          3: jIVlV8QUaotQ3E2UQksGaAzvdVs.crl (hash: gWjda+stAgsjwjMWSi2UGyioceYDpkwda1NpdnjGxN4=)
                          4: kzDbK2QoBVIIp9tqNTtnUJP1NZs.roa (hash: X7UOIcXOkpLacmMqPlB5bii5jBSrwu1Tt1zBt5jizCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:73:3f:a6:ca:99:de:46:20:cc:ef:68:e0:21:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c856557c4146a8b50dc4d94424b06680cef755b
        Validity
            Not Before: Jun 13 07:00:45 2026 GMT
            Not After : Jun 14 07:00:45 2026 GMT
        Subject: CN=d8f34aa6029f052c15963751447917fdd3d44221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f1:e1:eb:b4:07:84:76:a0:94:4b:23:bf:f5:
                    fb:b3:d9:fa:b5:34:c5:bf:fd:29:df:0a:81:cf:09:
                    d9:39:b1:f9:fa:a4:cb:62:b6:49:1c:cd:c3:63:fa:
                    5f:3f:51:18:b4:f3:bb:8e:05:31:8d:73:c8:74:9c:
                    dd:fa:8a:83:16:60:39:94:86:fc:b1:ba:e7:23:33:
                    f0:68:46:69:31:cf:01:4c:06:b3:9d:e1:80:4b:b9:
                    fb:d2:3b:e0:ff:10:e9:98:f6:a4:ad:6e:27:fd:61:
                    63:c3:4a:88:f9:70:bf:01:49:00:80:a5:d8:68:55:
                    21:cb:2e:7a:fd:4f:a0:ad:82:71:5d:96:a1:08:79:
                    0a:0d:0c:3a:b6:09:02:24:ab:0d:91:1d:3b:33:5a:
                    49:99:ad:99:b7:bb:5f:aa:3e:fc:6b:da:da:ba:f1:
                    e2:50:4e:a8:b7:f6:a4:73:ee:c8:cd:d9:82:7d:88:
                    a6:5d:a5:2c:8b:b4:6d:a0:bd:3d:a5:aa:be:7e:3a:
                    82:c7:80:f0:6b:a5:16:fa:ca:37:e5:a4:8f:16:98:
                    4b:02:cd:a3:de:13:c6:ed:30:c8:bb:48:5b:da:ad:
                    40:a9:24:02:5f:10:c9:db:13:91:c2:78:ef:6b:62:
                    f2:ae:27:43:06:f4:37:c0:51:c1:32:1f:1c:99:d5:
                    dd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F3:4A:A6:02:9F:05:2C:15:96:37:51:44:79:17:FD:D3:D4:42:21
            X509v3 Authority Key Identifier:
                keyid:8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:ae:1c:3d:90:26:ba:f8:d6:bd:ca:90:99:ed:a1:f6:fb:13:
         22:44:66:9f:e2:f0:2f:70:08:4d:fb:a8:9b:f2:e8:4a:86:90:
         b4:c8:7f:95:b9:2a:6f:cb:d8:d1:85:f3:08:d7:fe:6a:0c:33:
         a4:51:10:53:31:64:ce:d2:2a:53:5d:82:81:a2:b5:ec:e0:44:
         47:2a:7d:1f:bf:10:3e:51:eb:78:65:18:7d:63:6a:9c:51:8b:
         2b:d4:ec:22:a0:5f:7f:e8:f3:f4:5e:a8:90:7d:d7:6d:a8:a6:
         24:e9:7c:bb:aa:68:fb:fb:cf:f5:14:02:54:c2:bb:a6:31:77:
         e8:fa:19:32:98:ab:5f:90:07:1d:a7:28:60:8e:3e:e8:a1:3f:
         c8:16:85:43:9e:f8:78:1b:38:7e:2e:08:f9:69:f6:45:1c:82:
         b2:07:8a:4d:1e:37:5f:9d:a1:93:b4:13:65:73:93:d9:4f:c9:
         1d:e3:4c:33:58:ab:1d:fa:fb:2e:1e:b2:e6:19:76:74:2b:3d:
         94:bf:80:c5:5d:63:34:7d:2d:a0:4f:3a:c4:68:13:f5:7f:66:
         fe:f4:66:2c:d0:75:b2:32:71:d5:9a:8b:b0:4f:d0:3d:a0:65:
         52:82:81:d0:be:2d:c2:37:db:a1:d3:ea:b9:d2:fd:d4:66:24:
         10:12:a7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:42:57 2026 by rpki-client