Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
File:                     dzvnzzJSpol11eIkWJjAPE-2Ddo.mft (raw, json)
Hash identifier:          4y4PS+1xDKhk6DDR62Q+0WSZD+2dHMQyiVC6Y9mFddg=
Subject key identifier:   CE:53:A8:ED:1E:A7:B6:E0:8C:96:6D:E8:70:26:0B:E5:8C:D0:50:D6
Authority key identifier: 77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA
Certificate issuer:       /CN=773be7cf3252a68975d5e2245898c03c4fb60dda
Certificate serial:       019EC2FFEEF688A8282A78F6BF39737A40AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 22:00:13 +0000
Manifest this update:     Sat 13 Jun 2026 22:00:13 +0000
Manifest next update:     Sun 14 Jun 2026 22:00:13 +0000
Files and hashes:         1: CN-YBDFfJ_MolBe276I9XevEuB8.roa (hash: GrTaXSgf/YZ10gbgtBsOa25F1Liht2flF1Xb3WbreJM=)
                          2: dzvnzzJSpol11eIkWJjAPE-2Ddo.crl (hash: 9UEFHK/PK6r571sIwNel1t3Gi7LCcMm7Yr5kX2M+Cbg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 22:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:ff:ee:f6:88:a8:28:2a:78:f6:bf:39:73:7a:40:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=773be7cf3252a68975d5e2245898c03c4fb60dda
        Validity
            Not Before: Jun 13 22:00:13 2026 GMT
            Not After : Jun 14 22:00:13 2026 GMT
        Subject: CN=ce53a8ed1ea7b6e08c966de870260be58cd050d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b1:1b:19:38:e3:12:22:82:2f:e2:4a:04:d9:
                    5a:c4:98:25:b4:26:df:1b:72:a8:4b:e1:d5:9e:ae:
                    b1:f9:72:1c:a4:ca:19:af:9c:19:77:f0:83:8a:6b:
                    83:e8:1e:2b:49:30:b0:55:0c:32:f1:a5:76:3f:87:
                    92:60:df:09:5c:29:68:64:1b:69:87:ea:14:a1:fa:
                    21:67:2d:00:26:10:7d:58:98:af:d3:0b:ff:fb:35:
                    44:eb:5f:49:b8:ca:8b:09:24:35:97:27:cc:d9:fd:
                    53:43:89:91:75:08:34:ed:e4:e3:89:e5:46:61:80:
                    8c:8c:39:cd:78:e7:b6:98:78:b8:db:46:fa:72:69:
                    48:b9:49:79:b3:d7:c1:55:02:d9:9f:e3:61:1e:2a:
                    58:0a:8c:9e:c7:45:b4:bb:cc:52:d7:f6:0a:74:5a:
                    d3:e9:96:54:3f:28:1d:06:80:e3:7f:40:70:0c:c2:
                    57:90:9d:d6:45:af:90:00:4f:54:1e:0d:0a:dc:db:
                    21:01:05:54:dd:c0:c8:2b:94:fb:e5:c0:ad:36:ad:
                    ac:73:9e:40:9c:28:56:71:b8:79:8e:b8:5e:4c:26:
                    4d:c2:c6:61:f6:75:2b:dc:2d:ba:f7:67:32:42:4f:
                    29:a4:cf:fd:9e:24:a1:46:df:11:5f:12:d8:44:be:
                    94:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:53:A8:ED:1E:A7:B6:E0:8C:96:6D:E8:70:26:0B:E5:8C:D0:50:D6
            X509v3 Authority Key Identifier:
                keyid:77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:cd:ff:65:2e:14:cd:50:3c:38:f2:6e:e8:eb:81:e4:b8:31:
         e7:60:20:4e:fd:92:b5:da:48:63:e4:5a:96:d9:7a:ab:cb:69:
         39:95:a0:8c:0a:77:eb:5e:1a:9d:61:85:c0:d2:d4:cb:1e:33:
         b3:78:df:fb:2a:75:fe:b6:d8:83:e2:6d:64:0c:3d:f2:aa:0e:
         10:86:5f:8f:1e:b6:9a:d3:b5:bc:7e:38:ac:88:a5:4d:0b:9f:
         b9:66:01:e2:6a:8a:29:c1:95:10:05:d0:71:23:f5:18:08:e0:
         e0:95:79:8e:15:de:a2:5b:f8:05:43:58:5e:30:50:3e:a0:e5:
         47:8d:46:ff:72:1b:0f:8b:57:81:82:cd:71:e8:d5:e3:36:50:
         04:53:a1:d4:b4:ad:d5:69:f2:24:30:3e:44:e1:ee:43:93:38:
         8b:19:31:74:0b:49:8b:d3:e2:80:82:b1:6e:aa:d0:15:d4:61:
         1b:0f:41:a7:ff:86:c9:42:44:0b:e5:f4:4b:b3:0e:90:d3:da:
         1d:3b:ed:8a:d4:cb:51:93:69:29:c9:95:55:ac:a1:6f:35:38:
         c7:14:f3:5d:a7:22:e5:66:a5:1e:3d:4a:58:85:61:c8:38:cb:
         2d:10:92:24:de:d0:dd:96:94:e5:ec:e6:46:dd:da:07:15:65:
         91:48:a9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:09:26 2026 by rpki-client