Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
File:                     1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft (raw, json)
Hash identifier:          mvb2uyIAe2ryryj0StTcUjkhZ1O5nJTXbL68Xa/SJY4=
Subject key identifier:   C6:C0:FA:B1:86:FF:EE:4E:74:14:8A:3F:9D:AC:8D:83:99:E6:D7:71
Authority key identifier: D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96
Certificate issuer:       /CN=d70b07459e2f116fb5a97f11bae75c0db491c196
Certificate serial:       019EBF91813295958AF004F541231C581E2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 06:00:44 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:44 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:44 +0000
Files and hashes:         1: 1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl (hash: Oz6dllXefjt4vToDICxVCjvdT8osQtr3IPqRcrPd4vM=)
                          2: 4mgNH8XwBSSzfcxM2M3wBB24llg.roa (hash: eqAYAn3Tw5ha0/M1juELQFyoOAhP8ul6NtZvl3loSp4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:81:32:95:95:8a:f0:04:f5:41:23:1c:58:1e:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70b07459e2f116fb5a97f11bae75c0db491c196
        Validity
            Not Before: Jun 13 06:00:44 2026 GMT
            Not After : Jun 14 06:00:44 2026 GMT
        Subject: CN=c6c0fab186ffee4e74148a3f9dac8d8399e6d771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e5:83:d3:f0:0c:12:fb:b0:70:9e:aa:fc:b2:
                    9f:38:5a:b4:ab:70:51:58:dc:dd:30:3d:f9:e6:20:
                    4d:88:82:e7:41:a5:d8:31:c4:36:0a:e2:f2:ef:82:
                    11:9f:3f:b6:00:43:2b:ed:3a:26:92:28:30:5a:3d:
                    bf:97:ee:26:d1:f5:9c:22:20:f2:57:85:77:bc:e0:
                    84:80:d3:0d:a2:b3:17:c7:6a:ce:cc:9f:e6:c5:ef:
                    e7:e6:e0:ee:6e:29:fa:61:49:9a:cd:30:78:b3:7d:
                    ab:e3:05:c8:a1:e6:3a:bc:30:06:14:7d:2b:0a:b2:
                    0d:fd:e6:41:2b:72:0e:b2:19:9d:3f:b4:73:55:cd:
                    c4:15:02:50:3e:02:3d:ea:1a:d4:e0:ab:37:20:42:
                    47:05:45:88:48:a0:aa:f2:02:44:bf:8f:de:8e:3f:
                    0a:d8:67:7d:01:58:6a:0c:55:f8:a5:7b:89:ad:b4:
                    af:ce:ab:1b:c5:a3:44:de:50:1a:73:ca:6b:7e:d0:
                    ca:91:05:f9:b9:55:63:0a:47:33:46:a4:45:0a:03:
                    09:87:df:08:ff:ea:ce:f7:2b:57:2e:7d:d8:07:33:
                    d2:c2:2f:59:07:dd:7a:d6:91:cd:25:78:03:f5:e1:
                    40:9f:89:71:aa:96:93:e4:6d:b5:fc:4b:cf:a7:c4:
                    3e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C0:FA:B1:86:FF:EE:4E:74:14:8A:3F:9D:AC:8D:83:99:E6:D7:71
            X509v3 Authority Key Identifier:
                keyid:D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:8b:ed:8f:27:fa:9e:4e:41:95:78:31:9a:a7:ba:88:a6:cc:
         07:ac:33:7c:70:57:f2:10:62:e1:30:6e:d2:8a:87:ac:99:2e:
         a6:00:01:d2:56:e8:5e:33:63:00:0f:c4:7a:c8:24:b8:90:f2:
         24:3e:dc:55:2d:63:d5:f0:8c:85:3a:23:bf:0f:9d:80:4b:34:
         46:dd:69:b6:1e:f0:d7:da:13:14:25:c6:2a:5c:06:dc:09:68:
         90:e9:1e:47:66:ac:d8:5b:d0:7a:e5:d3:8c:f8:1d:3d:87:ad:
         d5:aa:bb:8c:c8:da:36:21:c6:f8:72:1e:87:32:3d:b4:22:57:
         79:0c:78:52:aa:36:d2:13:f7:92:0e:b0:fa:6c:39:af:8e:59:
         e1:d3:09:ba:0f:04:70:f7:3b:eb:e4:93:83:c0:3b:2c:9c:b8:
         b0:60:91:77:6c:d1:cc:85:4f:ce:9a:1c:c4:97:8c:ab:46:64:
         59:04:a5:41:91:03:79:76:64:8c:17:84:ee:f6:59:e5:31:1c:
         ae:f7:c2:0e:06:59:4a:d3:60:55:a7:02:f8:3f:da:85:75:cb:
         05:b2:89:36:31:20:e0:c5:43:9d:41:c4:c9:ef:9f:38:83:46:
         82:50:18:a2:dd:05:10:64:5b:28:74:40:9b:db:19:28:8d:20:
         95:c7:e6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:31:10 2026 by rpki-client