Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
File:                     9XvH8urwyvppvuX6vmcSK0Nj_nI.mft (raw, json)
Hash identifier:          ErWcMmlHwAPDlcKREOwW/RlyeO/QeKM0xqLYxoRoD0c=
Subject key identifier:   82:95:B0:13:32:5A:99:9E:E8:DA:C0:14:19:3F:4C:D4:D9:18:8D:F1
Authority key identifier: F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72
Certificate issuer:       /CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72
Certificate serial:       019EC1B67D15DA35C6F4516085D9A16C5235
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 16:00:22 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:22 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:22 +0000
Files and hashes:         1: 9XvH8urwyvppvuX6vmcSK0Nj_nI.crl (hash: 3rG4IhbD3aig53LyEZ+G0jO/ajj1OxGxRf7Y4DclKvU=)
                          2: smlZ7JTHvm4P3nZNzZsryZ_yA5A.roa (hash: +VBNM06YqR+uhNJp3b1HBKPNStgs2sJGwRLlTNxj+ZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b6:7d:15:da:35:c6:f4:51:60:85:d9:a1:6c:52:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72
        Validity
            Not Before: Jun 13 16:00:22 2026 GMT
            Not After : Jun 14 16:00:22 2026 GMT
        Subject: CN=8295b013325a999ee8dac014193f4cd4d9188df1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7b:94:92:41:84:a5:60:f4:af:f0:dc:8b:c7:
                    1b:86:31:95:10:74:7b:e7:80:92:b7:9b:98:d1:1a:
                    8a:14:c3:28:19:7c:82:2c:21:f3:4b:ec:ae:53:4b:
                    a3:7f:23:a5:d2:ae:26:7a:ed:8b:9a:b9:21:ee:92:
                    a4:fc:df:2b:7c:ca:dd:31:82:db:8f:bb:8f:d4:55:
                    7a:be:ec:ca:8d:b3:c8:a5:17:8b:81:62:bf:3f:41:
                    ca:00:2e:3a:68:47:35:f0:8e:f3:3f:6f:4f:fd:e7:
                    d8:29:4d:b9:69:b5:16:54:7d:a6:92:6e:63:b2:88:
                    f9:c1:7f:8e:f1:72:1f:cb:ec:fa:e0:73:11:97:c2:
                    7a:cb:4c:ed:84:d0:ca:f3:71:7e:9b:7f:62:f4:a1:
                    22:2d:77:7d:54:4e:b1:1e:dd:16:0a:ce:b3:32:df:
                    4d:97:0c:23:73:cb:05:5d:70:80:ec:39:70:17:22:
                    bd:58:4b:f5:98:91:b5:f3:74:ca:d7:9d:04:29:e9:
                    8a:2b:8d:fc:d1:9e:d8:35:dd:db:11:bf:91:17:c8:
                    20:f6:bb:22:01:0c:84:ed:99:fc:02:22:29:ba:de:
                    85:33:0f:5b:34:00:df:21:f3:ed:a9:79:0c:4f:8e:
                    fc:5a:e8:6e:df:c3:4e:61:c5:07:ea:7a:b1:02:ea:
                    b0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:95:B0:13:32:5A:99:9E:E8:DA:C0:14:19:3F:4C:D4:D9:18:8D:F1
            X509v3 Authority Key Identifier:
                keyid:F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:e4:dc:dc:a5:51:5c:25:8c:a9:55:2c:19:6a:e8:b9:2b:df:
         dd:97:81:79:a2:ee:0c:09:cb:48:42:bb:73:bd:09:98:c2:a3:
         61:e9:d2:fb:82:ad:6d:f4:15:38:f7:10:56:40:aa:88:19:20:
         a2:64:75:f0:48:f7:5b:80:55:6b:ab:36:ea:b1:d2:f9:2a:79:
         2c:e2:7a:58:96:15:31:96:41:ae:c1:e6:22:ff:c9:e6:d7:37:
         c0:6d:f5:72:b7:64:26:c9:22:3e:4d:c6:27:76:20:b1:f5:1a:
         90:14:9a:85:67:a0:d2:d4:80:62:21:20:4a:7e:fc:82:b0:fc:
         87:0b:35:78:e9:23:0c:b8:b3:11:54:3a:7a:29:3e:8f:30:39:
         b9:ce:d8:9b:36:2e:5a:3d:4a:bf:22:2c:f3:5c:e3:d0:51:9f:
         f4:01:a5:69:b0:ce:7c:22:3b:f7:d3:fb:13:16:5b:07:88:24:
         58:2a:7d:4a:fc:5b:58:af:35:f0:3b:f8:ce:82:c1:0e:79:1c:
         10:8d:37:4f:ae:b2:2a:27:66:9c:0d:4c:b1:a2:c3:bb:f2:b8:
         6c:ac:22:15:0e:13:19:ff:ac:c6:a9:5f:89:9a:29:1b:df:df:
         bc:12:1d:36:97:bf:8d:86:72:8b:71:83:4e:9a:c4:0a:05:ed:
         52:98:4d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:34:38 2026 by rpki-client