Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft
File:                     DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft (raw, json)
Hash identifier:          UfZXpjg6u7P58yLvxXnIWtrSKalzzs/M2NtNcNFN8Xc=
Subject key identifier:   FA:FB:9E:16:BF:75:5D:7F:90:7F:D0:D7:06:9E:8D:E8:C6:7B:FB:49
Authority key identifier: 0E:B5:10:D7:C9:15:A4:BE:6D:F6:B1:6F:F5:82:FD:2D:6A:D2:36:05
Certificate issuer:       /CN=0eb510d7c915a4be6df6b16ff582fd2d6ad23605
Certificate serial:       019EBEB65BC35E062B71C90FCFA2DB197FE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft
Manifest number:          195D
Signing time:             Sat 13 Jun 2026 02:01:22 +0000
Manifest this update:     Sat 13 Jun 2026 02:01:22 +0000
Manifest next update:     Sun 14 Jun 2026 02:01:22 +0000
Files and hashes:         1: DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl (hash: 6S3bGjfehR7HSBJDcpxBGtSapa+dNDHHWB1eX63ogAA=)
                          2: Eo2yGv92Iskz5EbG0NmCt1URmKk.roa (hash: fxnebqPHQp7jptxrhNUpFE2k+KgOhPZJRXJqh9LjE7k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b6:5b:c3:5e:06:2b:71:c9:0f:cf:a2:db:19:7f:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eb510d7c915a4be6df6b16ff582fd2d6ad23605
        Validity
            Not Before: Jun 13 02:01:22 2026 GMT
            Not After : Jun 14 02:01:22 2026 GMT
        Subject: CN=fafb9e16bf755d7f907fd0d7069e8de8c67bfb49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:63:4b:09:a2:53:f3:d8:66:81:fa:43:52:8c:
                    4d:66:9f:45:31:bd:fc:29:af:ba:37:82:dc:ff:02:
                    e9:26:c5:90:68:5d:af:f9:24:e7:e7:d2:d1:f4:32:
                    4f:8d:8a:5c:ca:bf:78:e5:2d:63:8d:a1:7b:04:cd:
                    a5:30:38:3e:3c:13:e2:ca:70:2f:fb:5c:59:92:e2:
                    62:79:57:7e:61:c9:eb:01:69:fb:93:89:50:6b:44:
                    25:b7:07:b9:e9:dc:37:4e:75:3c:91:3e:8c:13:9f:
                    05:ee:ae:82:63:de:05:83:65:aa:04:dc:a4:44:5d:
                    c7:5a:c4:e9:a9:24:84:6f:a6:0e:d6:56:21:20:e8:
                    1d:b3:ee:5f:9c:69:e0:96:d8:e0:05:87:83:11:c7:
                    9c:01:c3:d5:31:29:7f:ad:bc:2a:7f:e6:6f:b5:a4:
                    da:ff:fd:dd:fd:b9:44:a7:7a:b9:2e:24:ba:aa:d4:
                    3d:db:67:9d:06:f6:79:61:48:8f:8d:a8:49:9c:3e:
                    5b:e2:0e:60:ef:db:dd:56:54:16:a4:0f:4d:71:47:
                    89:c6:e3:b5:1c:d1:45:ac:a5:00:9d:ef:b8:7a:7d:
                    e8:ee:5f:da:92:6b:9c:28:ca:04:1e:89:cb:a9:80:
                    50:29:4d:a3:0d:b1:b7:59:c3:9a:47:62:e6:4c:c0:
                    be:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:FB:9E:16:BF:75:5D:7F:90:7F:D0:D7:06:9E:8D:E8:C6:7B:FB:49
            X509v3 Authority Key Identifier:
                keyid:0E:B5:10:D7:C9:15:A4:BE:6D:F6:B1:6F:F5:82:FD:2D:6A:D2:36:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:ad:f1:5a:8c:8f:65:5e:b4:e2:95:a2:3d:11:5f:07:31:ec:
         d6:40:90:52:e3:e4:a9:7c:5f:c8:50:9b:62:0f:81:04:69:48:
         47:56:e5:13:8c:f2:9d:26:30:06:9d:a5:10:5e:a4:5d:bf:94:
         72:cf:46:cf:a0:b8:0f:2f:9f:79:19:62:62:c5:4d:fc:d3:af:
         d4:8d:16:b9:7b:4c:c0:45:c8:4e:71:cd:c1:5d:39:a3:cc:24:
         d6:83:69:45:cd:91:39:11:a4:0c:27:9a:3c:3c:f9:2b:ec:a1:
         4a:84:57:cd:9e:62:3f:82:46:da:0f:4e:50:be:46:7b:69:48:
         d2:aa:7d:b8:62:05:e6:c6:b0:c3:d5:7b:58:bb:4b:29:f3:79:
         d4:eb:69:2a:46:89:b8:a9:d6:cf:9a:cd:48:4e:a7:a4:b9:f6:
         b1:a8:2b:96:6b:0f:f2:10:fb:d3:e2:18:18:90:09:d1:f7:c6:
         df:fb:5f:2f:96:ff:72:5c:bb:df:d4:a8:83:bd:64:53:d5:3b:
         14:0c:b4:44:d6:a6:93:07:be:52:e2:f8:ee:32:ce:ab:a5:d6:
         bd:50:b7:aa:c9:21:6f:01:8e:e3:48:86:ba:ed:25:8e:7c:63:
         77:6c:c4:5d:5f:dc:a1:72:46:42:a1:70:fb:9d:9c:35:3f:ea:
         bd:7c:8c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:58:09 2026 by rpki-client