Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
File:                     xFvSa8XYHu6cjhotDXjRDarggZU.mft (raw, json)
Hash identifier:          Ish6ioWtoLXWreIjh5F/ExVjLQ3fVFc9ja6w4tQd/7Q=
Subject key identifier:   6A:56:E3:8F:F2:F5:45:EB:D7:5C:B6:96:2B:C3:69:E8:4F:62:66:1A
Authority key identifier: C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
Certificate issuer:       /CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Certificate serial:       019EBFC8A1549D5D36785EFE18EF63C2C884
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 07:00:57 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:57 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:57 +0000
Files and hashes:         1: FX91S7TqeS_5eNXFwkhAJLeDMDY.roa (hash: 7/g0n2srHScQb2lUJNavUfjGDwgVOP/uF61M1Zy+4aU=)
                          2: xFvSa8XYHu6cjhotDXjRDarggZU.crl (hash: ifU7FFkEwwXl3ku7MlcjTahVgBlaoW7WnNApXfrI0tY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:a1:54:9d:5d:36:78:5e:fe:18:ef:63:c2:c8:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
        Validity
            Not Before: Jun 13 07:00:57 2026 GMT
            Not After : Jun 14 07:00:57 2026 GMT
        Subject: CN=6a56e38ff2f545ebd75cb6962bc369e84f62661a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:72:8b:02:a3:93:54:f0:2e:dc:da:3e:1a:e8:
                    d8:80:18:77:50:b6:0f:ee:f6:37:39:b0:d4:25:7d:
                    88:89:c4:01:75:5c:64:a1:83:bd:65:40:1d:d7:31:
                    7a:25:3f:7a:98:8d:9d:c5:64:e8:ca:8e:19:0f:1b:
                    35:b9:a0:69:78:05:c2:73:b1:54:d8:0a:0a:0c:e8:
                    1e:40:a3:14:10:94:72:b2:76:e4:94:0b:59:63:63:
                    31:25:50:33:cd:96:2f:a3:7a:c7:96:96:2d:04:bc:
                    72:e2:e4:46:ce:7d:05:59:b2:7b:8d:67:1d:95:cd:
                    18:b5:37:a0:78:e0:e1:3e:82:0f:dc:74:4f:0d:4e:
                    ff:1f:a8:68:8c:ec:3b:d8:7a:41:c6:d3:f5:6a:a7:
                    0f:b6:5f:f6:01:2a:1a:25:a1:32:c4:2b:e0:a2:b0:
                    bb:d9:80:6e:02:66:b5:2e:55:8c:a1:f4:10:5a:e9:
                    51:3d:5c:61:5c:de:e9:79:4f:5b:85:e2:6e:21:38:
                    03:5f:83:c7:9f:d5:c8:60:7f:6a:20:43:14:04:c5:
                    bd:80:e2:64:3e:1e:ad:42:d1:3a:e4:c9:6b:27:62:
                    7a:9e:b4:9f:e0:79:98:14:37:5f:50:29:df:bf:a5:
                    63:96:64:0e:1c:fd:3e:1b:3c:8e:10:ac:13:88:58:
                    8f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:56:E3:8F:F2:F5:45:EB:D7:5C:B6:96:2B:C3:69:E8:4F:62:66:1A
            X509v3 Authority Key Identifier:
                keyid:C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:00:37:65:b9:e1:fe:5e:24:05:a3:63:fb:09:d2:14:d2:42:
         c0:db:30:d0:c5:ac:a6:80:2c:e9:ef:96:b9:62:d8:67:75:e0:
         08:9b:3a:84:76:b8:34:e3:4d:0a:22:9d:ee:17:03:1b:3b:a3:
         99:41:68:23:d0:68:59:f3:25:c4:0a:a4:fb:11:40:30:bb:a9:
         b1:81:0a:23:e9:07:73:56:5e:51:ed:35:a3:0b:e6:4a:48:a7:
         cd:6e:26:e5:a0:6b:dc:38:0a:14:72:7c:53:d7:4c:ee:94:1b:
         62:65:11:66:85:55:71:92:42:b9:e2:82:6f:70:19:aa:2b:cf:
         51:e3:4e:8c:0d:1d:62:fa:86:b6:e9:ff:12:db:68:f9:9a:e8:
         c2:70:95:51:8e:36:50:c1:3a:ee:19:b8:98:2b:66:ee:91:68:
         56:89:8d:e3:d5:b6:98:19:2e:60:84:2d:50:10:56:3b:3a:5d:
         a9:ab:b2:0a:cd:d4:ef:0c:e6:a9:94:c3:c0:3a:ba:eb:92:39:
         ef:4d:70:04:3b:d7:67:e5:68:7d:b5:4b:03:32:bb:91:e9:2a:
         5d:27:4a:a7:90:9a:4a:60:e5:35:2e:ea:31:6c:63:99:ae:96:
         f2:86:07:ff:84:a5:1e:d7:a6:66:f0:48:6e:f5:39:d3:1a:6f:
         ed:54:8f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:29:16 2026 by rpki-client