Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
File:                     A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft (raw, json)
Hash identifier:          dOK/9fh8khxQTQFi2LCT4shaikDH0ALdxntBZRBwaJk=
Subject key identifier:   93:6C:4D:FC:28:82:2D:D1:DD:FC:FB:42:0D:EC:1B:00:C1:30:F2:6B
Authority key identifier: 03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61
Certificate issuer:       /CN=036aac34c66fda64b67eb96b02d819789febe861
Certificate serial:       019EC1124050ECBC34AFE573A26F4D799695
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 13:00:59 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:59 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:59 +0000
Files and hashes:         1: A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl (hash: TZvPZWzBhuAot+DTHjxt8hEzoi/RrL07f9/ujyw88Lg=)
                          2: Sozb0mBjd1VpRMeQfzzDEX1Nqbc.roa (hash: tt3YVOI88Qv/1ZNyGYonfAo/TKHCa8OFHVuJXMdS3yo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:12:40:50:ec:bc:34:af:e5:73:a2:6f:4d:79:96:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=036aac34c66fda64b67eb96b02d819789febe861
        Validity
            Not Before: Jun 13 13:00:59 2026 GMT
            Not After : Jun 14 13:00:59 2026 GMT
        Subject: CN=936c4dfc28822dd1ddfcfb420dec1b00c130f26b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ee:e4:d5:a9:4f:2a:a1:7f:d1:a5:bd:5d:6f:
                    4f:1b:26:45:47:ff:15:6c:5c:53:76:28:bb:76:af:
                    db:e7:69:4d:92:93:15:3f:73:22:40:a6:5b:7e:fb:
                    dc:94:1a:97:c3:68:c1:ec:68:11:1a:b2:fe:03:4d:
                    9d:ad:2b:b2:f5:84:d5:87:21:f2:de:74:b2:44:96:
                    60:cc:6d:b4:f1:6a:d0:1a:1c:d9:21:ba:01:ab:a5:
                    86:0e:85:1b:c7:05:88:5e:bf:7a:99:c1:e1:c5:55:
                    33:09:92:2c:b1:14:bc:55:19:73:ae:f9:dd:12:29:
                    ff:20:40:54:24:24:1b:12:b8:6f:2a:4c:dd:73:68:
                    0e:cf:e6:f9:82:2e:1a:3c:d7:a8:c0:8f:ac:5a:5f:
                    33:67:ea:98:8d:ee:00:b4:ca:db:98:d1:da:30:b6:
                    99:b3:7a:07:87:c3:47:e5:2b:24:a6:cd:7c:38:53:
                    30:49:54:11:ce:54:82:68:3c:f5:82:a9:ee:80:80:
                    83:ab:62:35:85:41:ec:66:20:64:0a:04:4c:d6:59:
                    f7:77:11:7b:c3:d3:33:d1:71:f9:a3:bf:0d:cb:15:
                    9b:80:fc:fd:e4:ed:c4:9a:bf:1f:70:ff:90:34:f3:
                    ff:1e:37:5d:66:9e:33:76:e9:38:2b:c8:94:0c:d5:
                    cd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:6C:4D:FC:28:82:2D:D1:DD:FC:FB:42:0D:EC:1B:00:C1:30:F2:6B
            X509v3 Authority Key Identifier:
                keyid:03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:b1:4f:d0:d5:9b:d1:eb:c6:9b:9e:3e:cf:a1:d4:1d:61:70:
         55:f9:9c:3a:70:4e:49:1e:05:0f:2d:cb:29:44:37:72:a6:d2:
         95:bc:3f:35:7f:75:aa:16:6f:6a:13:05:25:e4:a4:27:9f:84:
         7e:94:d7:be:4a:37:c2:9e:3d:1a:80:ec:8b:86:13:68:36:c0:
         d2:68:f3:10:67:0f:e1:b1:4f:21:9b:15:59:6f:69:93:71:44:
         d6:2c:eb:9f:95:6e:c4:b6:06:80:c1:b8:bf:a3:18:fb:b9:71:
         f6:98:ad:57:98:87:00:9e:a5:28:65:07:b9:93:d6:2c:09:a1:
         71:f3:85:9d:72:07:d7:58:bd:87:9f:67:bc:ac:bd:6a:61:1d:
         9f:3b:32:a8:f1:05:fa:63:26:99:8b:9d:54:be:39:ff:92:42:
         88:04:6e:d4:ee:eb:fb:2e:06:da:75:2d:63:9d:5d:e1:8e:a9:
         f5:7b:9b:e4:fc:59:df:a3:54:08:79:fc:89:4f:47:46:90:04:
         85:87:a6:99:44:da:3c:85:cb:3c:17:5e:8b:ef:b7:17:d1:60:
         e5:13:0c:42:1e:76:a6:93:9f:92:8e:86:5c:64:e2:9f:47:d1:
         12:2d:9d:95:40:e2:b8:54:e2:dd:55:3a:d3:4b:da:cd:bc:59:
         b1:09:15:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:49:33 2026 by rpki-client