Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
File:                     hLWkCydKlj5e0-8C6DmcubG7DHs.mft (raw, json)
Hash identifier:          sdYkunzmJuyTtj6fRqLrXbBXNxAKqNasVfGba8DwYSA=
Subject key identifier:   4F:A5:DE:5D:63:D2:B9:A4:2C:40:63:DB:D0:A7:86:C3:F0:AE:8C:DA
Authority key identifier: 84:B5:A4:0B:27:4A:96:3E:5E:D3:EF:02:E8:39:9C:B9:B1:BB:0C:7B
Certificate issuer:       /CN=84b5a40b274a963e5ed3ef02e8399cb9b1bb0c7b
Certificate serial:       019EBFC80E465401C2E9341422D2A036E2DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 07:00:19 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:19 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:19 +0000
Files and hashes:         1: hLWkCydKlj5e0-8C6DmcubG7DHs.crl (hash: oI+4hfslpkyco0x8y8qLqmEyrppz9YKfuDqHeUjCGNY=)
                          2: heDWIjAtV4Dfu6bhg1J9nZcl5qo.roa (hash: zW/+lZ7RfSWqiEzqmlzW/11hnbmw6v/qc+vi/mY5ysc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:0e:46:54:01:c2:e9:34:14:22:d2:a0:36:e2:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84b5a40b274a963e5ed3ef02e8399cb9b1bb0c7b
        Validity
            Not Before: Jun 13 07:00:19 2026 GMT
            Not After : Jun 14 07:00:19 2026 GMT
        Subject: CN=4fa5de5d63d2b9a42c4063dbd0a786c3f0ae8cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b1:cf:6c:6c:79:23:b2:95:1b:ee:45:e9:9e:
                    30:62:44:9f:d4:2b:38:66:3f:a5:bd:c0:78:17:6b:
                    0d:59:b9:3e:79:a7:77:67:e5:11:e4:95:bb:64:c4:
                    c9:1f:81:b8:54:c3:bb:3f:41:fc:b9:b0:06:5a:ce:
                    fe:c9:c8:cb:f9:19:a8:5e:0c:2a:00:75:47:d9:f3:
                    36:91:cd:f6:30:00:48:cf:e4:f5:8e:7d:0f:8e:0c:
                    8f:df:82:39:f7:58:68:cb:e6:3b:0a:09:7a:a8:91:
                    e5:e5:71:5d:7d:c3:eb:e0:31:02:02:77:a6:04:4b:
                    9d:a0:1a:f1:3f:a1:39:28:33:f6:03:9d:87:9d:f6:
                    5c:1d:ae:88:8d:ba:8f:67:a3:36:27:38:d9:1a:f4:
                    ae:31:38:84:03:9a:07:69:04:3c:b6:0a:ca:a3:dc:
                    d9:50:fa:20:72:43:f6:4e:8a:0e:90:59:1f:91:46:
                    31:21:fc:cd:ae:6f:2f:62:35:6e:86:7b:9d:9b:9b:
                    73:d0:d6:bd:ee:0a:06:32:8e:3c:44:7a:b5:b1:36:
                    1d:fd:09:96:82:4c:94:7e:71:14:1b:01:33:f3:12:
                    70:ea:55:a4:9e:03:d6:b4:95:ff:36:7d:2c:a9:fa:
                    1d:1c:64:1a:3d:2b:7d:c2:ed:7e:39:2c:b8:1c:53:
                    d9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A5:DE:5D:63:D2:B9:A4:2C:40:63:DB:D0:A7:86:C3:F0:AE:8C:DA
            X509v3 Authority Key Identifier:
                keyid:84:B5:A4:0B:27:4A:96:3E:5E:D3:EF:02:E8:39:9C:B9:B1:BB:0C:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:0f:51:ba:c8:67:12:06:f3:77:dd:3c:44:68:ec:ac:51:07:
         ed:2d:c0:d0:d8:03:8f:78:43:f9:d8:9a:8b:8a:ca:a5:c4:16:
         a6:31:03:8f:75:2f:ef:86:35:66:75:52:2e:e8:ee:62:28:fe:
         c4:7f:5d:87:af:42:60:22:95:c1:ee:86:85:2a:7a:ef:1e:28:
         45:74:ea:2d:25:26:05:1d:a5:b4:27:25:cd:98:c5:a1:89:fc:
         49:39:b4:07:32:fa:45:76:f5:03:34:7b:46:16:8f:e7:97:e9:
         2d:78:da:f7:64:ef:f8:cc:83:89:af:7f:bb:2d:72:be:af:68:
         08:3a:55:f3:df:e4:2c:2e:4a:96:25:98:7f:c8:1f:c4:b8:b7:
         22:bf:9b:fe:ed:07:ab:92:b6:7e:63:ea:d6:af:7f:43:de:2a:
         9d:43:e6:ac:2b:c9:e4:4e:e4:6f:69:0f:f8:52:08:0d:35:b3:
         55:e0:1c:b9:42:f4:a5:49:1d:89:f0:7b:ae:ac:f4:a1:59:04:
         6b:9d:75:4c:7f:c7:3d:06:16:09:37:c2:e8:ed:1f:13:38:1b:
         f9:fe:ee:e5:9d:b9:5a:7a:ad:e9:4a:9f:fb:e8:8d:11:90:ce:
         fd:54:ab:a0:ab:9c:96:ca:0a:a3:0a:56:1b:09:69:92:67:eb:
         da:86:25:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:10:03 2026 by rpki-client