Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
File:                     CdCil56bZlLWG5Ad1VoZKNv9z20.mft (raw, json)
Hash identifier:          2JPhYBxCADymqtmVQOW42J84UbAE5DUKI6uDGJOdLLY=
Subject key identifier:   54:6C:15:12:B5:F6:D9:22:67:C9:E0:AE:FC:0D:B9:D0:76:7A:9F:A1
Authority key identifier: 09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
Certificate issuer:       /CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Certificate serial:       019EBEB6362289390E976E4892348CB9EA3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
Manifest number:          195E
Signing time:             Sat 13 Jun 2026 02:01:12 +0000
Manifest this update:     Sat 13 Jun 2026 02:01:12 +0000
Manifest next update:     Sun 14 Jun 2026 02:01:12 +0000
Files and hashes:         1: CdCil56bZlLWG5Ad1VoZKNv9z20.crl (hash: oQIOuOyZYNh5NajGS374lB8UdwF6NRXN9LOIeHfZiw0=)
                          2: NmgrOBcP0tgFCTOWcRYJnixwDJY.roa (hash: Ao15E11G2dQ+8WLi/IRmXPfGBQ5eaUZAO3CZk8b1evU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b6:36:22:89:39:0e:97:6e:48:92:34:8c:b9:ea:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
        Validity
            Not Before: Jun 13 02:01:12 2026 GMT
            Not After : Jun 14 02:01:12 2026 GMT
        Subject: CN=546c1512b5f6d92267c9e0aefc0db9d0767a9fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6b:76:c7:6f:cb:40:cd:78:a3:d8:bb:16:81:
                    62:43:cb:46:38:af:b4:98:9e:4e:33:c1:d0:d5:11:
                    a2:fb:2e:54:48:c1:c8:f7:da:26:79:e3:ce:6d:74:
                    c8:41:5b:dc:c6:88:4b:88:b6:92:8f:1e:ca:f6:5d:
                    53:3d:28:b5:41:4b:6f:a7:1b:2b:14:ec:4c:7f:64:
                    1d:6d:b0:b2:a0:57:25:ee:39:fa:1e:9a:60:28:cc:
                    0d:72:bb:4e:78:8c:b0:48:9f:37:89:fc:ff:f8:21:
                    e1:c8:4e:13:b7:66:72:93:4e:67:0c:09:90:db:76:
                    6a:3d:bc:1d:a7:59:b8:c7:a6:81:92:d4:63:f0:5a:
                    56:dd:87:34:b0:f7:e7:66:a8:46:1a:64:f7:0c:35:
                    48:de:68:3a:4a:93:51:3e:1b:6d:00:16:fb:83:a5:
                    a1:06:9a:7e:a2:94:f1:3a:d5:fd:80:e7:8e:0b:bb:
                    a6:92:77:7e:3f:e2:42:f3:96:d6:64:be:7d:c2:c9:
                    2d:14:80:49:8f:c8:f3:4c:b2:d9:f8:55:fc:b0:56:
                    6b:cd:46:37:2f:fa:95:61:a9:12:c6:e4:fd:0a:9e:
                    a1:e1:c3:3c:24:60:e0:30:f6:a7:52:20:ba:4e:b2:
                    3f:5c:3d:1a:e5:ac:0e:e0:c9:ef:00:fc:b7:db:19:
                    18:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:6C:15:12:B5:F6:D9:22:67:C9:E0:AE:FC:0D:B9:D0:76:7A:9F:A1
            X509v3 Authority Key Identifier:
                keyid:09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:8d:15:a1:51:2e:98:7b:af:12:7a:fb:0a:6d:12:78:9c:70:
         78:53:50:c9:0e:8c:73:97:2f:9d:73:88:6b:0f:ed:45:b3:57:
         30:6d:bc:19:22:e4:db:33:c4:7f:b3:35:c0:ad:62:07:37:41:
         1a:8f:a0:97:e5:3b:34:c5:eb:43:d6:1b:bc:b8:21:c6:5b:c7:
         dd:f1:8f:ce:ef:f6:27:19:99:f2:81:a8:84:4e:46:52:3c:95:
         47:73:e9:5e:26:b0:48:80:9b:c9:ff:12:fc:b2:7d:43:d6:c3:
         66:04:96:d6:49:96:b8:09:72:98:be:cf:1b:cd:91:c9:ef:09:
         9b:25:d6:c2:f4:5e:29:ad:50:a9:b7:bf:58:e8:c4:9a:69:79:
         0b:c5:fb:98:0a:5a:34:31:86:9c:25:41:77:34:fa:a8:2d:98:
         46:81:91:04:c0:24:9d:2d:6b:a9:4e:5a:c2:57:04:4e:f2:7d:
         25:49:cb:98:84:cd:e2:7b:da:a7:3e:24:92:e6:62:eb:48:e2:
         b2:2f:2c:bf:93:9c:3d:ab:dd:03:e3:8a:e2:ca:c0:3d:ef:5d:
         57:52:8f:db:53:8f:34:ca:1a:cc:1e:53:51:6f:ed:fd:78:2f:
         68:cb:2a:4a:40:90:b3:fa:87:7c:1f:e2:d6:48:e8:f3:5e:ac:
         cf:c3:f5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:56:09 2026 by rpki-client