Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft
File:                     7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft (raw, json)
Hash identifier:          RWz2RoQgjrenWa39s0d8x8ZDH3VpYXbK8n8V1Qso+1k=
Subject key identifier:   B4:B9:31:A5:73:3A:E3:A2:D5:8B:50:1F:D4:40:98:A0:8C:B5:C0:71
Authority key identifier: EC:3C:E4:E2:B1:AD:29:08:67:DD:C7:7F:31:E5:F1:53:E9:B2:08:87
Certificate issuer:       /CN=ec3ce4e2b1ad290867ddc77f31e5f153e9b20887
Certificate serial:       019EC17FEEE09316332C1D21BEE6B4CA7BBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 15:00:47 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:47 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:47 +0000
Files and hashes:         1: 7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl (hash: p+m+tgjXOdV5nu3fPZF0PZpDPuvO2PZ77xHV2JzXsnA=)
                          2: LBTtiJAp5O6Ow7kEVp8kVmTM7Gw.roa (hash: N4Dq+gbQXVdAatGtvXXu2yj7TOMEElBVnNjMgumVWCk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 15:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:ee:e0:93:16:33:2c:1d:21:be:e6:b4:ca:7b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3ce4e2b1ad290867ddc77f31e5f153e9b20887
        Validity
            Not Before: Jun 13 15:00:47 2026 GMT
            Not After : Jun 14 15:00:47 2026 GMT
        Subject: CN=b4b931a5733ae3a2d58b501fd44098a08cb5c071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:be:ff:f4:61:bf:44:d7:7c:ac:a2:b1:ef:5f:
                    2f:34:0b:b4:f6:a7:2b:6b:0f:49:48:a5:d0:4f:5e:
                    55:75:77:b4:d5:92:73:88:15:da:0a:9b:95:90:62:
                    07:7f:9f:cf:28:c9:9a:b7:f8:22:bb:31:80:d6:56:
                    07:ab:c3:65:63:c4:b5:9d:ec:88:c5:00:0a:6b:5f:
                    55:98:f3:07:a0:91:3a:f8:0e:24:9a:ea:bf:16:4a:
                    a7:a0:d7:f1:14:b5:ff:eb:7d:9f:dc:84:c1:b0:e2:
                    29:c2:b1:fa:12:48:35:5a:6e:cc:06:43:30:3b:dd:
                    39:b6:f0:5e:28:bf:c3:99:1b:4a:58:81:fe:ed:e3:
                    7f:5c:f1:5a:03:4d:23:c9:fd:ae:78:00:c0:34:57:
                    3d:1d:e4:ba:15:14:b6:37:64:a8:f3:aa:ac:9a:72:
                    36:b9:ab:fc:cc:e8:e0:39:a4:dc:c7:ed:a0:95:4f:
                    d3:63:16:b1:e7:6c:28:c3:6e:32:79:ba:de:b1:7a:
                    00:c2:9d:3c:a1:fb:f0:2f:b5:68:45:5c:3c:27:9b:
                    58:0c:f7:5e:25:af:92:1b:61:dd:90:cb:ac:5d:c3:
                    77:ac:85:4c:89:ba:db:ff:b9:e8:e4:30:af:91:e7:
                    ae:3f:1f:f4:bb:c5:84:03:c6:d8:de:63:76:3c:3e:
                    f9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B9:31:A5:73:3A:E3:A2:D5:8B:50:1F:D4:40:98:A0:8C:B5:C0:71
            X509v3 Authority Key Identifier:
                keyid:EC:3C:E4:E2:B1:AD:29:08:67:DD:C7:7F:31:E5:F1:53:E9:B2:08:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:72:3e:b5:cb:e6:ac:29:07:ca:79:22:42:3f:b8:7d:54:3b:
         bd:03:0b:55:bf:f1:48:1d:ed:f9:d3:13:75:77:c2:dc:ff:03:
         71:9c:76:cf:cd:8b:c1:f0:7a:4c:46:5a:8d:67:09:40:31:df:
         ca:32:4d:a5:ca:97:51:14:41:c2:f1:56:57:f2:69:f0:40:0a:
         9a:25:44:03:d5:6a:08:54:6c:81:b8:f9:39:03:c0:b8:3c:9e:
         b7:bd:87:6a:2d:04:ef:ef:be:88:9d:42:b3:51:be:ba:ee:2a:
         58:fd:1f:8c:b4:ea:84:e6:61:c7:27:fd:dc:ad:19:05:f6:e1:
         35:b3:9e:2a:0b:32:fd:24:8b:0f:70:c5:f5:41:62:d5:85:95:
         98:96:dd:fd:6e:95:4e:63:11:4d:57:3a:31:6a:f1:70:c6:a9:
         05:30:b0:43:b1:77:4f:b8:4c:d8:45:40:27:21:d6:0e:2d:4b:
         68:ea:ac:c7:7e:68:90:68:92:54:d5:35:98:42:51:4b:ad:e3:
         0c:62:c9:c8:61:f7:8d:bf:f2:21:fb:3f:ef:d0:91:36:5f:64:
         79:97:86:f4:ad:26:7d:01:f2:a2:99:8c:72:67:8e:9f:96:3d:
         21:71:9e:36:ff:e0:01:5b:46:9c:c5:d8:c3:c7:43:47:fc:c6:
         94:7f:20:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:00:09 2026 by rpki-client