Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
File:                     0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft (raw, json)
Hash identifier:          hHfMQmkoJV86TtMtEfey+H80InKWFKFhhbfcrt9o7OQ=
Subject key identifier:   70:01:D0:0C:1B:5F:D3:22:E6:3A:94:A3:9C:A1:A8:62:7D:5C:66:0E
Authority key identifier: D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36
Certificate issuer:       /CN=d2a4452602c9df977c9d5dd8dc13b6661df40136
Certificate serial:       019EBFC8C8E86DBA5B1A865AC28926797FA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
Manifest number:          195D
Signing time:             Sat 13 Jun 2026 07:01:07 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:07 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:07 +0000
Files and hashes:         1: 0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl (hash: Gq045mXrigBV4KlyvLmxv+A23fEvr2HtZ+NxPDnoPGY=)
                          2: 25O7M2UWZLtjZfht3TvmhhoKUbU.roa (hash: aHZMolfVFoYqPERvCPULtiENfnmx30XYIbMKIT0hRPE=)
                          3: DdN7vkJnOB--YPWssHLoFQourZw.roa (hash: 4Xwtg1/EpdhFY06tPduHwk9/msCJ+le6Q0TbeFIOaTA=)
                          4: ik9bQHA3wdhcXWdy4pApX4ViEtA.roa (hash: YUhchzwns71ZrkZmZzkm82sDpa46jMSA30HHNbNFaao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:c8:e8:6d:ba:5b:1a:86:5a:c2:89:26:79:7f:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2a4452602c9df977c9d5dd8dc13b6661df40136
        Validity
            Not Before: Jun 13 07:01:07 2026 GMT
            Not After : Jun 14 07:01:07 2026 GMT
        Subject: CN=7001d00c1b5fd322e63a94a39ca1a8627d5c660e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7b:ff:82:a3:e3:71:3d:ff:44:51:4f:e9:21:
                    56:d8:6c:d5:92:ce:0b:1b:f6:3b:bc:08:41:5f:bf:
                    8e:4d:23:08:bd:1e:22:ec:4a:e5:13:95:7a:90:06:
                    80:64:4d:d0:b1:78:f0:6c:ac:7d:21:40:32:d5:be:
                    4b:9f:cc:fc:9e:30:fc:3d:13:b6:74:d4:16:ae:bb:
                    cd:86:9e:3d:2d:98:4f:b3:d5:c4:2b:c6:6b:11:fa:
                    6d:3b:15:5b:07:d8:17:5e:0e:44:ea:7b:b2:40:ca:
                    3b:74:28:40:3b:f2:ef:a6:81:cd:94:bd:b0:92:c9:
                    21:3c:f3:aa:a8:b5:35:92:7c:36:d2:bf:bd:c9:6b:
                    aa:93:6a:1a:1f:56:f4:70:c3:08:86:c1:37:1d:8c:
                    2e:69:16:f1:77:0e:47:a1:46:b6:7e:01:8c:b7:42:
                    2a:18:e3:d3:72:7f:a0:55:04:b2:ff:49:13:02:9f:
                    45:89:f7:47:0a:31:33:c0:77:f4:d8:67:21:d4:34:
                    d0:e9:2c:2b:cd:a0:20:0b:dc:4c:cf:6b:32:36:a6:
                    8c:31:27:ab:e5:99:92:a1:75:43:2b:61:ba:57:cf:
                    52:47:91:d4:40:6c:16:03:3d:01:34:1b:fd:38:af:
                    6d:88:87:1d:a8:a8:c8:41:37:19:34:94:36:8e:b7:
                    3c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:01:D0:0C:1B:5F:D3:22:E6:3A:94:A3:9C:A1:A8:62:7D:5C:66:0E
            X509v3 Authority Key Identifier:
                keyid:D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:28:71:7e:1a:7e:de:07:c6:83:e1:83:fe:24:a3:ab:c2:88:
         75:59:df:7e:93:24:1d:bd:1e:64:e0:7c:9a:63:6e:73:1f:e5:
         72:2a:46:46:da:76:8b:ae:95:14:eb:be:7b:e7:d2:cb:7a:04:
         75:fb:f3:f4:6b:46:de:70:d3:60:d8:4a:b7:aa:e9:9b:18:93:
         02:7b:b6:28:c1:12:e8:08:d7:9c:21:70:f1:e3:5d:67:2a:eb:
         d5:c5:42:5d:1c:7c:39:5e:ad:59:fc:a2:54:d6:2f:91:96:65:
         45:47:b1:cd:a9:34:c1:b5:8c:b4:0f:10:80:01:9d:d9:da:e9:
         1b:24:33:89:a2:a3:a5:c3:54:f2:40:63:f7:67:bb:68:97:57:
         4d:8a:29:a6:21:81:6e:8f:c3:e9:a3:3e:41:1d:60:94:3f:d5:
         f2:dc:d6:63:0e:e4:fd:dc:84:e3:e0:11:f0:27:63:0a:05:58:
         f2:63:f8:eb:aa:b8:90:b1:89:37:e2:18:d8:95:0c:45:00:b1:
         01:2a:c0:93:8e:9a:be:47:76:f3:87:ae:a1:b7:ef:dc:9e:2b:
         08:d7:cc:7c:64:ea:cf:17:7d:fd:54:f9:aa:18:d2:4c:1a:f0:
         1e:50:88:2f:61:89:c4:ee:b8:15:4c:72:32:f0:c9:2a:97:ce:
         93:fe:b5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:58:34 2026 by rpki-client