Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
File:                     aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft (raw, json)
Hash identifier:          XvOk76mmKdJyzWNZ5dNXpPdLAFBkGLJQ/2A/wIMlYJA=
Subject key identifier:   43:DA:7D:34:2C:AC:AE:C2:BF:8B:E1:54:EF:55:98:50:A2:BA:B7:2E
Authority key identifier: 69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA
Certificate issuer:       /CN=694a2ed9a412747fcd644749de57d9ff780393aa
Certificate serial:       019EC0DAE809113FDE52C35498B0E63E99E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
Manifest number:          195D
Signing time:             Sat 13 Jun 2026 12:00:31 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:31 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:31 +0000
Files and hashes:         1: aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl (hash: 1ppAYM03ymQLd/1OGWsUeXEvEcUOkLHJx5tlwkdUlOY=)
                          2: xk7gnuwRExVZ3WpkBbinksRcNPA.roa (hash: Y5M1fjS98FTBsE2/QZ9YYs0JV68w5Upx40qPZ+9XJj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:da:e8:09:11:3f:de:52:c3:54:98:b0:e6:3e:99:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694a2ed9a412747fcd644749de57d9ff780393aa
        Validity
            Not Before: Jun 13 12:00:31 2026 GMT
            Not After : Jun 14 12:00:31 2026 GMT
        Subject: CN=43da7d342cacaec2bf8be154ef559850a2bab72e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ac:bd:92:35:7a:52:b3:9c:85:1f:04:12:31:
                    bc:a0:10:d9:36:ef:a8:40:8d:33:89:cd:9e:41:7f:
                    dd:a9:ea:50:0d:b2:9c:7e:97:7a:3d:8b:b4:65:bf:
                    57:62:33:64:f6:85:5e:59:23:88:61:8d:36:ec:19:
                    49:83:a3:83:d9:eb:d2:6c:89:fb:99:54:d6:70:6e:
                    8e:9e:30:b7:10:ea:f0:f8:d2:53:9a:66:e1:94:0b:
                    2d:6a:e7:f9:9c:2b:d0:13:a2:52:c9:99:c6:1b:4e:
                    82:80:18:e2:93:48:85:72:5b:2a:05:1d:4a:3c:e7:
                    14:7c:dd:52:33:0e:bc:30:18:af:20:41:22:8b:90:
                    f7:10:bd:ad:37:a7:50:a8:c7:b9:14:5e:df:8f:b3:
                    d3:e3:8b:69:3b:cb:23:eb:62:95:fa:51:11:e5:96:
                    08:14:db:7d:ce:4f:0d:8d:2e:a3:76:25:ef:eb:ec:
                    4f:9c:e7:8e:a3:71:62:d9:12:0e:3b:5d:da:96:30:
                    fb:a4:e7:a3:13:63:43:f3:d6:12:a5:3e:0d:7d:85:
                    2a:f2:55:8e:66:06:a5:28:81:57:38:86:f7:99:d7:
                    c0:b3:30:3e:58:e4:c3:f4:aa:18:ce:6b:d2:d0:bb:
                    d4:2e:dc:ff:d6:8e:cf:8f:9f:0c:1d:f8:4e:88:ca:
                    c2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DA:7D:34:2C:AC:AE:C2:BF:8B:E1:54:EF:55:98:50:A2:BA:B7:2E
            X509v3 Authority Key Identifier:
                keyid:69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:f1:80:d2:a8:41:5c:87:5d:2d:40:c8:a2:5d:a3:77:4f:22:
         f2:87:d6:fd:79:48:99:f9:9c:ce:c4:74:22:96:25:19:fb:a7:
         44:88:3e:cc:f3:b7:2b:eb:b3:07:5e:75:4f:e0:1c:6f:e8:13:
         1e:59:70:03:da:07:cd:32:a9:3e:26:9a:81:17:cb:59:16:c5:
         2a:ad:c5:d3:99:6e:23:75:bc:fe:1f:f9:a8:a5:87:3b:89:13:
         e8:42:7b:e6:5f:5a:67:b5:ab:0f:91:8f:fd:87:af:1d:93:56:
         49:20:72:1c:e9:e9:a9:ea:f9:00:76:0a:b2:7a:81:fe:6a:ae:
         1e:c9:5d:43:95:dd:ff:d1:d3:9e:3d:a5:05:88:88:59:59:21:
         da:aa:2e:a5:96:5f:17:55:20:4d:d5:c5:2c:e1:28:72:07:ac:
         21:8c:84:fe:e6:11:95:cd:47:5b:11:89:f2:c3:60:fc:bc:dc:
         be:b3:c1:4b:72:af:d7:fd:1c:db:5c:a0:fd:9c:2f:3d:32:ad:
         04:56:7a:fe:f9:11:77:03:59:e2:7c:e5:a2:12:9f:ea:bf:53:
         b1:98:65:5d:8f:40:f7:d6:66:d2:d1:e0:83:4d:dc:3f:2e:fc:
         d8:e3:ce:93:28:d4:df:b3:c6:01:c9:45:1e:a3:29:95:b7:66:
         94:e0:14:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7A2ugJET/eUsNUmLDmPpnmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NGEyZWQ5YTQxMjc0N2ZjZDY0NDc0OWRlNTdkOWZmNzgw
MzkzYWEwHhcNMjYwNjEzMTIwMDMxWhcNMjYwNjE0MTIwMDMxWjAzMTEwLwYDVQQD
Eyg0M2RhN2QzNDJjYWNhZWMyYmY4YmUxNTRlZjU1OTg1MGEyYmFiNzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqay9kjV6UrOchR8EEjG8oBDZNu+o
QI0zic2eQX/dqepQDbKcfpd6PYu0Zb9XYjNk9oVeWSOIYY027BlJg6OD2evSbIn7
mVTWcG6OnjC3EOrw+NJTmmbhlAstauf5nCvQE6JSyZnGG06CgBjik0iFclsqBR1K
POcUfN1SMw68MBivIEEii5D3EL2tN6dQqMe5FF7fj7PT44tpO8sj62KV+lER5ZYI
FNt9zk8NjS6jdiXv6+xPnOeOo3Fi2RIOO13aljD7pOejE2ND89YSpT4NfYUq8lWO
ZgalKIFXOIb3mdfAszA+WOTD9KoYzmvS0LvULtz/1o7Pj58MHfhOiMrClQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPafTQsrK7Cv4vhVO9VmFCiurcuMB8GA1UdIwQY
MBaAFGlKLtmkEnR/zWRHSd5X2f94A5OqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVVvdTJhUVNkSF9OWkVkSjNsZlpfM2dEazZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85ZTRmMjEtZjllNi00OTQyLTk2MDEt
YWRmNDNmMDRlYzljLzEvYVVvdTJhUVNkSF9OWkVkSjNsZlpfM2dEazZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS85ZTRmMjEtZjllNi00OTQyLTk2MDEtYWRmNDNmMDRlYzlj
LzEvYVVvdTJhUVNkSF9OWkVkSjNsZlpfM2dEazZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsPGA0qhB
XIddLUDIol2jd08i8ofW/XlImfmczsR0IpYlGfunRIg+zPO3K+uzB151T+Acb+gT
HllwA9oHzTKpPiaagRfLWRbFKq3F05luI3W8/h/5qKWHO4kT6EJ75l9aZ7WrD5GP
/YevHZNWSSByHOnpqer5AHYKsnqB/mquHsldQ5Xd/9HTnj2lBYiIWVkh2qoupZZf
F1UgTdXFLOEocgesIYyE/uYRlc1HWxGJ8sNg/LzcvrPBS3Kv1/0c21yg/ZwvPTKt
BFZ6/vkRdwNZ4nzlohKf6r9TsZhlXY9A99Zm0tHgg03cPy782OPOkyjU37PGAclF
HqMplbdmlOAUyg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:39:35 2026 by rpki-client