Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
File:                     9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft (raw, json)
Hash identifier:          P47cvxU/YHL0b63KLPvDQtp1qGEAmisy/Bow9A8g3nM=
Subject key identifier:   D8:65:A8:ED:DA:A2:08:35:50:AE:6D:A3:FF:C2:4B:CC:DF:3B:A4:AC
Authority key identifier: F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38
Certificate issuer:       /CN=f68b2f4e668ef0a176a8bd0004e2777670833238
Certificate serial:       019EBF5B0595F70EB87D7F4D3F4BEE19F6D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
Manifest number:          195D
Signing time:             Sat 13 Jun 2026 05:01:13 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:13 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:13 +0000
Files and hashes:         1: 9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl (hash: 1qEo00CrD7kKghlDTlqQWHnRg/IZrjlyJ17rHJeHXVc=)
                          2: YOETByGoQWvX1MVQbtKSNQjPq4I.roa (hash: e5Ix1WhHdMT4rCzknHHsERtns5aDH3xdPuHebqlTS6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5b:05:95:f7:0e:b8:7d:7f:4d:3f:4b:ee:19:f6:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f68b2f4e668ef0a176a8bd0004e2777670833238
        Validity
            Not Before: Jun 13 05:01:13 2026 GMT
            Not After : Jun 14 05:01:13 2026 GMT
        Subject: CN=d865a8eddaa2083550ae6da3ffc24bccdf3ba4ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d2:25:50:39:ab:ee:d5:9e:ff:51:58:51:50:
                    30:e3:c4:b5:de:2d:5c:a1:58:b6:59:81:8a:3c:b9:
                    19:53:c4:f3:ae:21:35:cd:1a:39:b7:b5:e3:30:8a:
                    c2:d3:24:36:81:ba:65:48:59:6c:4b:02:5f:91:77:
                    13:ac:1a:1d:62:53:2b:fe:87:84:3c:35:bc:02:49:
                    01:1e:06:1f:86:d7:19:db:b4:30:7f:fa:96:77:41:
                    73:c1:99:56:39:90:c6:e5:22:02:c3:37:e4:18:15:
                    dd:27:0b:23:cb:26:bb:f8:27:91:b9:76:48:08:c5:
                    83:71:48:08:e3:ef:24:c2:90:fd:c9:f5:45:8d:83:
                    d1:f8:1a:ad:a9:83:48:5e:dd:05:c1:f4:33:8a:82:
                    c2:95:ba:be:6b:84:87:2e:40:34:ff:89:38:f1:4a:
                    f2:32:bc:55:89:a4:96:36:60:0e:df:62:37:3f:cc:
                    20:7f:66:c3:e0:04:e8:4b:37:f9:e5:3b:14:f4:6f:
                    3c:cd:dd:9a:34:3b:bd:95:da:45:28:dc:70:4a:4b:
                    78:eb:28:77:72:97:97:cc:1c:cd:f9:fd:66:ec:75:
                    4f:3e:a2:3b:d8:e6:af:b4:a4:92:61:14:4e:71:1d:
                    39:f1:ad:30:58:0e:5f:00:f9:14:59:da:ba:14:8b:
                    68:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:65:A8:ED:DA:A2:08:35:50:AE:6D:A3:FF:C2:4B:CC:DF:3B:A4:AC
            X509v3 Authority Key Identifier:
                keyid:F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:b6:02:e7:da:cc:09:2c:28:1f:5c:16:eb:fa:72:44:63:83:
         b8:f2:3d:6f:92:47:14:bb:3f:09:d8:7f:bf:b8:e4:92:1f:bd:
         48:9a:07:80:13:cf:57:6f:af:bf:48:8f:53:09:df:76:d6:a4:
         a2:d0:30:95:db:35:18:b7:de:33:10:05:bc:db:3d:59:e2:ab:
         74:08:8a:71:5d:8e:51:c2:39:09:b2:8e:77:75:33:1a:1e:e6:
         2d:02:28:ac:5d:4c:78:b1:47:5f:92:41:d9:4f:1b:20:b2:90:
         b6:c9:11:5a:01:45:8a:e0:d3:e8:53:68:20:d8:c1:02:a6:d7:
         8c:25:d1:3c:1c:d8:8d:9d:13:ef:70:c1:4b:e5:b0:8d:12:93:
         bd:f8:32:8c:9f:13:72:0f:ed:8a:db:68:4a:3e:52:0c:19:92:
         d6:7b:3c:37:85:8b:e3:34:d0:10:b1:bb:ed:75:c1:73:d8:0f:
         70:1e:1a:72:0e:bc:38:bc:57:47:b6:d4:69:63:4b:4c:7b:df:
         7b:d0:63:91:17:92:72:d9:ab:d3:87:e6:bd:45:6c:40:59:50:
         69:2d:ed:04:d7:31:00:6c:cf:08:49:e9:79:2e:c5:45:58:89:
         46:c1:37:8d:ca:d8:6e:53:31:41:9e:19:79:ab:f9:1c:43:01:
         a8:13:ce:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:05:57 2026 by rpki-client