Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
File:                     MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft (raw, json)
Hash identifier:          rNpFtq7gkq1tfGFonAQhDb5e6PQi9aVUQDR/JSOzq+w=
Subject key identifier:   7A:0A:19:50:80:73:7B:1D:AF:54:A7:AF:91:F2:96:07:49:DF:D8:26
Authority key identifier: 30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4
Certificate issuer:       /CN=30aee11b2943572d11becc425c684b48bbb2cbd4
Certificate serial:       019EE2C3231D56B7045DA14C271AF67BA6AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
Manifest number:          196C
Signing time:             Sat 20 Jun 2026 02:01:39 +0000
Manifest this update:     Sat 20 Jun 2026 02:01:39 +0000
Manifest next update:     Sun 21 Jun 2026 02:01:39 +0000
Files and hashes:         1: MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl (hash: 4u38Lnn+GG4XKObpqWfXkWjMQ1IhvIVUqX+cIqNNero=)
                          2: cWWM9ZpSxCOLjBSdEIJNLYZmfIc.roa (hash: /VirzHss1ndnL0VauqeSmTCntzhbwvddkhihXgztiNo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Jun 2026 23:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e2:c3:23:1d:56:b7:04:5d:a1:4c:27:1a:f6:7b:a6:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30aee11b2943572d11becc425c684b48bbb2cbd4
        Validity
            Not Before: Jun 20 02:01:39 2026 GMT
            Not After : Jun 21 02:01:39 2026 GMT
        Subject: CN=7a0a195080737b1daf54a7af91f2960749dfd826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7f:24:af:40:02:f0:c5:93:bc:0c:62:72:66:
                    bd:96:3e:68:95:e3:52:94:50:90:af:ac:cc:55:ea:
                    c5:b5:31:57:e1:ba:ee:98:6a:e6:86:9c:2d:18:2a:
                    60:fb:8a:36:fe:57:d6:57:94:7e:72:4a:64:55:d4:
                    a6:4c:ed:e6:00:a3:32:e4:a3:f9:f7:9d:a7:39:ec:
                    83:7d:e3:8c:b5:ff:cd:7d:e9:08:71:37:85:5c:f3:
                    cd:b3:18:1a:a8:1e:fb:c4:e5:82:b3:b2:ba:7a:8f:
                    be:65:65:25:db:c3:26:2f:64:f8:0d:98:41:5d:66:
                    ae:ff:8d:2c:09:20:54:f9:2f:22:23:e0:2b:c8:29:
                    57:3f:38:e0:9a:73:c3:23:53:4b:c6:f0:22:d3:0b:
                    e9:79:f5:4f:79:87:a7:23:1e:6b:45:0f:f9:6a:5d:
                    42:28:0f:0b:17:b5:72:6a:53:5f:5a:8d:52:61:9f:
                    bf:03:05:15:d7:d9:3e:79:1f:29:2c:4d:2a:3b:42:
                    fc:86:17:4d:1c:e7:40:fa:2d:5a:1e:45:ba:7d:06:
                    aa:60:fb:4d:1d:6c:b1:0a:d0:aa:af:40:47:60:c7:
                    09:46:76:34:94:43:49:85:e2:34:29:23:ed:b4:1e:
                    93:66:0d:de:75:9b:31:0a:76:6c:60:82:69:59:32:
                    01:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0A:19:50:80:73:7B:1D:AF:54:A7:AF:91:F2:96:07:49:DF:D8:26
            X509v3 Authority Key Identifier:
                keyid:30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:2d:e0:46:3d:b5:c5:ba:72:9c:6f:ec:78:6b:dd:f9:cc:85:
         aa:65:6b:f0:9f:94:e9:df:e1:cf:8c:b8:1a:8b:d2:73:f1:33:
         e6:dd:b6:04:b3:31:8e:5d:52:51:c3:40:2d:2e:98:1f:86:a1:
         f6:0c:6d:42:5a:f3:6d:ec:55:70:ed:43:68:fb:02:a1:d8:02:
         71:71:a5:36:0f:44:5c:4e:5e:75:98:bc:78:ba:94:a4:10:8e:
         e6:6d:9e:b7:f9:17:bc:2a:eb:b1:84:62:67:79:b5:18:80:97:
         ee:86:97:77:3d:1a:4e:4b:0b:9e:44:a5:48:79:79:dd:88:00:
         a8:61:d5:41:bb:53:94:f5:d2:92:7e:fd:d3:ed:4b:1d:8e:14:
         32:67:c3:16:29:1a:f8:9b:e2:b6:91:db:49:7b:97:fc:d2:27:
         b1:71:e3:75:6c:f0:75:8e:fb:ff:fc:9e:3d:bb:28:f2:c8:4f:
         60:d0:fa:5e:3c:e8:3e:88:c7:5d:fa:88:c3:85:52:a7:ab:2a:
         67:b0:f1:31:f9:76:26:82:1e:5c:40:4a:dd:68:4d:36:ea:a1:
         e7:46:ce:50:08:c4:e4:9b:97:95:e9:f6:cc:ea:1b:f6:6d:82:
         08:49:b0:ce:66:86:45:b7:b8:e2:ed:df:6c:3f:68:a8:b6:39:
         ea:2f:9d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 07:45:05 2026 by rpki-client