Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
File:                     pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft (raw, json)
Hash identifier:          60u1peIunoYAKSZxzjiSNj6tAJ/p3mZlkVggdJS7D4s=
Subject key identifier:   B8:4D:6F:05:03:52:AA:0D:AC:BD:87:58:51:8A:5D:55:97:92:D1:7C
Authority key identifier: A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95
Certificate issuer:       /CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
Certificate serial:       019EC29210B8D578B30330D1345A3EC12164
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 20:00:12 +0000
Manifest this update:     Sat 13 Jun 2026 20:00:12 +0000
Manifest next update:     Sun 14 Jun 2026 20:00:12 +0000
Files and hashes:         1: ZMTWhcJ1e7tvXHUUl4ANoGMrIWk.roa (hash: 9yOiqGJYeL5bi8PHF9fNeVVcmhOJdy6bDsiWR0m6Ve0=)
                          2: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl (hash: 7FbIEGw4cEHLDKhA2vhF7DhVl6BEEEyDVB3k6tf5C8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:10:b8:d5:78:b3:03:30:d1:34:5a:3e:c1:21:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
        Validity
            Not Before: Jun 13 20:00:12 2026 GMT
            Not After : Jun 14 20:00:12 2026 GMT
        Subject: CN=b84d6f050352aa0dacbd8758518a5d559792d17c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:30:b7:ba:f2:06:ec:bb:d8:57:53:85:66:08:
                    6e:6f:c9:32:60:07:98:a3:ea:f2:50:7b:ff:41:4d:
                    a3:5d:fc:26:6b:79:4c:c3:25:d5:88:c4:d7:ee:db:
                    0f:54:06:6e:65:50:db:73:9a:fb:8b:a3:40:73:1b:
                    15:86:dc:89:67:f4:b5:6d:67:da:d6:db:32:05:cf:
                    e2:a8:88:5b:90:0a:06:2d:13:f8:48:ae:b3:00:67:
                    07:d5:ae:84:2b:95:44:06:cb:bd:e4:ba:6c:52:b1:
                    d2:14:97:2c:28:95:17:d0:49:38:07:f8:00:ff:26:
                    02:18:a9:7d:3f:e0:9d:8b:77:c9:b5:2a:46:24:71:
                    f2:05:16:d7:4e:bf:ed:80:72:b5:f9:99:6a:0d:ce:
                    c6:68:66:30:83:77:4c:26:c3:b5:a7:d3:0d:1f:1d:
                    36:f5:b8:f0:8d:8f:c7:e7:c9:8d:f7:90:9e:f3:91:
                    a6:26:b8:b5:4b:4a:cb:d1:2b:78:05:4d:e4:e8:af:
                    2f:fe:2f:45:a3:02:0d:d6:14:10:da:23:f7:f5:56:
                    71:2c:f0:b1:b2:33:ab:de:d2:17:13:0b:4a:0b:c4:
                    0c:ab:df:64:08:ca:dc:f7:12:45:03:9b:5e:ae:2b:
                    c5:d7:68:bc:b8:38:3b:87:eb:8d:8c:d2:87:f5:5b:
                    ac:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:4D:6F:05:03:52:AA:0D:AC:BD:87:58:51:8A:5D:55:97:92:D1:7C
            X509v3 Authority Key Identifier:
                keyid:A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:09:f3:74:b0:00:2e:bb:25:d0:fa:29:3d:a3:13:b8:76:88:
         43:2f:dc:5f:c0:c8:9f:35:ee:1e:d5:2c:cf:b6:d2:0b:83:55:
         ec:4f:a8:c4:4a:fe:e3:21:dd:9d:0f:11:24:2b:fe:e3:f7:22:
         09:2a:78:94:08:0a:9b:a9:fd:25:b3:11:22:bf:13:a1:91:e4:
         45:4b:dc:2b:fd:5c:4e:d7:d6:c4:6e:02:9a:38:4d:5b:a9:ba:
         53:1b:57:1f:e9:05:1a:8f:8e:46:24:6d:d2:68:75:2d:44:fc:
         65:c9:b6:ff:80:31:0c:5f:a3:e0:9d:73:49:5b:fa:8d:8f:c2:
         be:01:91:e1:64:21:de:65:27:3c:a4:b2:20:2f:9e:e8:89:20:
         ca:19:dd:80:5e:a4:41:ab:a9:79:10:ca:ec:16:3e:92:38:bf:
         1a:57:88:ac:27:f3:5b:de:d4:9f:5a:10:00:81:b5:b3:5f:d8:
         01:ee:13:9d:61:a0:e1:e7:3f:b4:73:cf:6e:ca:a2:1d:e0:bb:
         4e:3d:a5:2f:d9:26:20:f5:f1:3a:ff:e0:19:62:60:a7:b8:a4:
         c5:e4:a0:56:f7:fe:41:86:01:23:e4:95:4b:25:4c:ce:70:49:
         85:2b:79:bd:69:dd:84:b5:04:66:48:c7:ce:b1:8d:ff:01:ae:
         88:a3:57:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:24:16 2026 by rpki-client