Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
File:                     fhVA_dWt1rd1SYwePyXJDiE6YS8.mft (raw, json)
Hash identifier:          WIDnZHCzg3+sl8/oK1NX/lXPf9N/Lr/k40j+9nkZIQ0=
Subject key identifier:   12:7F:DD:3C:B0:03:21:68:5B:74:46:30:98:B7:5B:86:C9:3C:1E:38
Authority key identifier: 7E:15:40:FD:D5:AD:D6:B7:75:49:8C:1E:3F:25:C9:0E:21:3A:61:2F
Certificate issuer:       /CN=7e1540fdd5add6b775498c1e3f25c90e213a612f
Certificate serial:       019EC3A5D432F19530C395DD0C4418B94FAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
Manifest number:          195D
Signing time:             Sun 14 Jun 2026 01:01:25 +0000
Manifest this update:     Sun 14 Jun 2026 01:01:25 +0000
Manifest next update:     Mon 15 Jun 2026 01:01:25 +0000
Files and hashes:         1: fhVA_dWt1rd1SYwePyXJDiE6YS8.crl (hash: dd2pYOwrGA+B4F8u+NGxolxAKBCLCDVnZt/v2xlCqlY=)
                          2: vypF4u6T8pornEd354CldlnvJ5Q.roa (hash: X/qPs2fMpklVg8cmNTWhzWpJY0nHbNqBSCIvT5rmL0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:a5:d4:32:f1:95:30:c3:95:dd:0c:44:18:b9:4f:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e1540fdd5add6b775498c1e3f25c90e213a612f
        Validity
            Not Before: Jun 14 01:01:25 2026 GMT
            Not After : Jun 15 01:01:25 2026 GMT
        Subject: CN=127fdd3cb00321685b74463098b75b86c93c1e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:11:18:5f:4b:d9:30:62:e1:8c:a3:ec:fe:13:
                    82:b2:eb:63:5a:22:fa:d6:91:60:af:84:72:40:ed:
                    1a:c6:3c:73:d1:4c:b0:54:34:ce:ba:bd:a6:e9:ed:
                    c7:fe:ba:51:2e:31:c9:0d:12:44:0f:0c:1d:03:e5:
                    ec:ca:c8:1b:e5:35:73:18:08:66:ea:f1:d2:e9:f7:
                    59:a6:c5:22:0f:da:8b:1f:ca:eb:22:db:a6:52:85:
                    4a:dc:c8:61:f2:80:c5:48:49:23:bd:18:36:6c:48:
                    46:0a:1f:9d:52:62:9c:0b:2f:50:38:50:fe:fc:b4:
                    ec:98:61:35:8c:51:f3:4a:92:a0:d2:63:24:be:98:
                    5d:17:b9:9b:e7:2e:04:fc:a1:08:ad:fc:0c:95:35:
                    da:44:b8:12:b3:60:db:f0:06:e9:a7:13:c2:22:6e:
                    3b:4e:c6:56:26:46:0c:f1:90:20:c8:1e:26:3f:1b:
                    f3:4a:d9:4f:a9:46:55:7d:b0:2b:b6:d8:be:5d:f1:
                    36:b9:2a:3c:46:c1:1b:be:cc:ba:df:9e:1d:d1:a1:
                    81:87:6e:1e:ee:20:57:af:b3:4c:7e:6f:9d:c4:50:
                    16:10:02:e5:5b:3c:6a:d7:36:a4:fa:2c:47:a3:1c:
                    65:64:6f:c4:d7:52:78:f0:e1:f1:9d:92:2f:f0:5a:
                    57:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:7F:DD:3C:B0:03:21:68:5B:74:46:30:98:B7:5B:86:C9:3C:1E:38
            X509v3 Authority Key Identifier:
                keyid:7E:15:40:FD:D5:AD:D6:B7:75:49:8C:1E:3F:25:C9:0E:21:3A:61:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:b4:f5:14:eb:e7:09:cd:c0:2a:9e:b1:d0:4c:26:8f:42:41:
         c8:0c:69:8e:3d:d9:c8:e9:1f:7f:35:33:00:5b:e0:f1:e4:d6:
         ea:b5:15:27:c4:bb:53:6a:2e:df:6b:3e:24:cd:e7:d5:0f:59:
         a6:28:cd:d0:e6:1f:5c:d8:ed:56:29:3f:87:32:b6:e6:d2:77:
         97:e5:4c:40:7c:8e:38:fc:74:2c:bd:0e:58:ee:58:14:22:46:
         03:23:0c:f6:bd:14:35:67:26:8b:8a:e4:f2:ae:e8:9e:4d:e3:
         99:ba:83:5a:c8:53:5d:bf:44:be:e8:f2:1a:f5:5e:95:d3:da:
         ba:19:3c:18:3a:9b:4b:75:5d:7d:cc:2f:58:45:57:0e:c1:46:
         17:9a:a5:09:ec:16:fc:ce:b8:65:01:81:4d:a2:fc:98:61:54:
         91:03:13:b8:5c:e3:4b:85:f0:b8:d1:b4:67:d6:b9:e0:af:1a:
         70:97:af:77:c5:f1:1e:64:f5:0e:c6:40:3a:4f:44:96:7f:34:
         39:ed:65:1f:2d:3e:2f:09:17:e9:1a:c3:10:8a:3c:ba:a6:2f:
         3f:94:50:7e:5b:bd:32:29:f9:a2:8f:fc:7f:91:d6:d1:e1:37:
         dd:e8:03:34:0e:27:7e:a5:64:ca:21:77:a5:eb:2c:ae:24:ea:
         67:63:fc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:36:18 2026 by rpki-client