Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
File:                     x9qC6HeTPZwslSyzdsk6qjN919I.mft (raw, json)
Hash identifier:          AOOyTQZw0edfqh78b5e8mYVyiL20+cRM/51efWOdCLI=
Subject key identifier:   A3:EB:A4:59:1A:65:E9:C0:69:97:A1:0D:36:8B:69:4F:53:B7:26:3D
Authority key identifier: C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
Certificate issuer:       /CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Certificate serial:       019EC14879DB2214AD24F7EECE94916C590F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 14:00:12 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:12 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:12 +0000
Files and hashes:         1: iLa7f2S3_d-gftGTw6gty0-Uiak.roa (hash: rM0PahqNF2zfpsbMJjY2LhMIvSX7eg/hz/KEUHOLLAA=)
                          2: x9qC6HeTPZwslSyzdsk6qjN919I.crl (hash: 1zOw0e8GCjoUvcZbPUMGwE5qfOaSNOt8PF7Z6lICkjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:48:79:db:22:14:ad:24:f7:ee:ce:94:91:6c:59:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
        Validity
            Not Before: Jun 13 14:00:12 2026 GMT
            Not After : Jun 14 14:00:12 2026 GMT
        Subject: CN=a3eba4591a65e9c06997a10d368b694f53b7263d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:42:4b:ee:73:cf:00:69:f7:58:8d:e2:3d:ae:
                    e4:23:0c:56:eb:c8:fb:45:a8:dc:fc:e8:c1:b4:47:
                    42:3c:45:e7:f4:7f:ad:da:74:17:26:08:ba:62:8c:
                    ad:eb:43:fd:7f:e8:1a:92:f4:71:94:2e:00:83:0f:
                    d7:48:5b:67:80:11:9e:05:fc:bf:2b:9c:d6:4d:33:
                    62:eb:e0:9e:1a:df:20:1e:69:e4:4d:29:85:41:53:
                    8a:3d:aa:79:b0:8a:82:1f:f1:98:1e:fe:2b:09:71:
                    cb:47:44:3b:0d:37:fa:d0:c5:8c:5a:da:94:63:ca:
                    fd:63:24:5d:f1:a0:0f:cf:cd:c2:1a:99:97:ea:04:
                    33:9b:6b:03:ed:7e:61:1d:9a:5e:87:c6:e4:ed:05:
                    f9:58:3b:7e:26:ac:f4:43:07:3e:c3:b3:85:8c:e9:
                    45:35:bd:8b:12:2a:43:31:dc:78:14:a2:f7:5f:74:
                    81:8d:8d:2b:a3:c4:f9:4f:21:0b:1b:e7:7c:f9:eb:
                    1f:1c:68:6e:41:56:df:f9:e4:7f:e4:55:91:68:c5:
                    94:a9:13:18:83:b4:16:5d:52:39:7e:d2:f5:c8:fe:
                    31:97:99:e1:7a:c4:5f:1d:e8:67:ad:2f:5b:8d:39:
                    fe:18:ce:ce:f9:48:2f:bf:0d:b1:f1:c8:4d:84:cf:
                    f8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:EB:A4:59:1A:65:E9:C0:69:97:A1:0D:36:8B:69:4F:53:B7:26:3D
            X509v3 Authority Key Identifier:
                keyid:C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:8c:29:cc:fe:67:4c:d8:19:0e:5b:6c:b7:a7:97:93:11:30:
         16:3b:da:9c:b3:ab:27:3f:2a:32:0a:aa:af:25:b7:57:1a:e7:
         15:3a:a7:91:92:68:aa:5e:83:0e:7f:08:1a:d0:62:91:66:7a:
         de:1f:4f:0f:3b:73:cd:b5:8e:a2:9c:7c:3f:83:95:e8:15:ff:
         1a:e2:bf:1d:3f:f7:4d:2c:29:1d:97:2f:fd:78:47:14:18:86:
         28:be:21:f9:62:c6:98:05:3f:a1:c3:ff:fd:67:57:c2:52:19:
         2c:17:64:7d:e9:fc:73:fb:77:9b:3f:ab:10:cb:49:ec:bf:92:
         61:1e:74:27:e5:f2:73:92:a4:d6:2f:9b:94:09:7a:ad:f0:64:
         c5:bb:47:43:65:29:df:c4:0c:e7:8c:f4:74:c7:44:14:04:a8:
         e5:0f:60:c8:41:13:4f:ed:1f:47:c1:1a:d4:18:2e:1b:77:ff:
         df:47:73:2d:7d:52:95:e7:3e:ac:72:15:7e:b8:df:f8:13:b4:
         10:e3:f9:b1:a4:d8:76:69:c4:ed:0f:ad:30:a2:7e:18:3b:cb:
         ba:8e:5a:fa:f6:16:1b:f5:de:2f:fa:9c:ec:b7:f9:0d:d7:91:
         61:ec:ca:0c:8f:34:86:20:69:8c:09:8e:36:0c:67:9c:08:58:
         ca:a2:b7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:09:02 2026 by rpki-client