Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
File:                     C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft (raw, json)
Hash identifier:          IHbA+FaTVi7zd+g1m6qQxO3GigRd0lfe5tWcVi5Syg4=
Subject key identifier:   74:BF:9B:45:97:76:4B:91:82:59:1E:2E:00:A6:73:EB:E8:B5:1F:05
Authority key identifier: 0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE
Certificate issuer:       /CN=0b42fb4831c1daf2d963c47638d703086eeca8de
Certificate serial:       019EBE7EFB43D36A5B29BBF766DC312B5071
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
Manifest number:          195E
Signing time:             Sat 13 Jun 2026 01:00:53 +0000
Manifest this update:     Sat 13 Jun 2026 01:00:53 +0000
Manifest next update:     Sun 14 Jun 2026 01:00:53 +0000
Files and hashes:         1: C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl (hash: DP1pGCI9BHpAgAMM/LhMaVsC9klVdXhI/OGXE4raOR4=)
                          2: CG82gzRyJjDfFWfuD3mZCTUFAGk.roa (hash: gKZxL4EPwYbDm8mzGxioP2eZTGCmezZu5Mvtzl5e1/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7e:fb:43:d3:6a:5b:29:bb:f7:66:dc:31:2b:50:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b42fb4831c1daf2d963c47638d703086eeca8de
        Validity
            Not Before: Jun 13 01:00:53 2026 GMT
            Not After : Jun 14 01:00:53 2026 GMT
        Subject: CN=74bf9b4597764b9182591e2e00a673ebe8b51f05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f4:db:04:00:66:03:54:0b:b1:f7:51:6f:dc:
                    99:9a:ce:a1:e7:86:ad:f8:69:fd:7d:81:a4:a6:ba:
                    4c:5f:ac:97:96:ac:03:d4:bb:1e:f9:d1:80:ac:43:
                    eb:46:fb:8e:e8:05:77:41:72:85:e5:a3:94:ad:e9:
                    cc:b8:fc:b7:10:80:c2:9b:bf:18:f3:08:53:dc:56:
                    75:e4:b2:00:a6:1c:aa:fb:8a:e7:bb:39:de:5b:e0:
                    fb:2f:19:93:df:97:a4:c5:0d:0c:d9:5e:98:55:b5:
                    2e:94:88:7e:25:ec:99:0b:9a:8b:ea:68:62:cb:3b:
                    77:df:cd:e1:13:41:bb:8d:8e:3d:8f:51:bc:98:35:
                    08:d8:11:bf:f4:ea:0d:23:91:06:de:0d:df:1d:ce:
                    07:13:09:97:c6:10:6b:97:68:53:e2:76:6d:c4:d4:
                    ba:be:c9:3a:17:ff:de:06:e8:0a:a2:91:6d:0a:1a:
                    21:c3:9b:0f:f7:8b:f6:8f:66:10:21:b2:16:ab:a8:
                    48:ea:6f:13:eb:e2:84:aa:7b:ec:f0:3d:7b:a5:8b:
                    61:1e:82:4f:18:8c:60:8f:f0:58:91:19:92:e4:fe:
                    ca:4c:48:5b:57:1f:25:10:e6:09:63:2a:c8:b5:14:
                    6c:4f:85:be:2c:ce:55:23:b3:be:eb:ba:fe:13:6e:
                    33:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:BF:9B:45:97:76:4B:91:82:59:1E:2E:00:A6:73:EB:E8:B5:1F:05
            X509v3 Authority Key Identifier:
                keyid:0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:b2:33:c1:7e:24:67:ef:39:6a:d4:d8:d9:09:7b:11:75:20:
         dc:23:c2:81:bf:1d:ca:76:45:42:28:6a:b6:c2:77:53:f1:34:
         69:6f:19:f4:d0:ce:d3:55:59:a4:1f:32:50:b1:78:3d:fd:9d:
         83:8c:a9:6f:83:b0:ae:16:72:1e:20:39:2b:22:ba:68:42:6b:
         e3:f1:11:ac:51:42:10:a3:c7:e9:75:8f:55:2c:9d:87:9c:42:
         76:9b:ad:b6:8d:b8:76:7c:e0:4f:07:b6:82:be:4a:f6:40:02:
         e2:44:d4:40:8a:a3:ad:7c:f3:0f:16:16:4c:7a:3d:ff:3f:de:
         b8:66:8d:07:2b:20:92:7a:a5:5c:65:49:40:49:20:3d:81:b1:
         38:56:22:a4:de:98:5b:0c:0f:c2:63:aa:1d:27:10:74:a6:b6:
         e6:08:59:d0:5a:dd:4d:f3:49:00:d0:1b:80:01:75:91:d2:14:
         8f:68:13:83:b1:ee:f0:30:85:13:a7:d4:c2:95:b5:cc:9a:64:
         a0:5c:e0:bf:2a:a7:90:16:e3:c1:c3:9d:b1:2d:6d:b2:69:9c:
         66:b9:7b:db:38:e8:59:f4:1c:f5:1c:c2:3c:2e:a7:82:06:e0:
         33:91:76:8d:5b:c5:31:b2:14:21:53:8e:f4:53:24:9e:a4:2c:
         54:05:18:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:36:15 2026 by rpki-client