Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft
File:                     SVls7MId0CZ3pyfvN_BolUbqUJc.mft (raw, json)
Hash identifier:          0TqBHon8gYL9HGtbQ8UhGpsBDDHEVk/jdrm32LeKLxc=
Subject key identifier:   09:1C:A2:AF:83:BF:58:07:1A:95:29:E7:12:B4:56:26:17:E8:9A:12
Authority key identifier: 49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97
Certificate issuer:       /CN=49596cecc21dd02677a727ef37f0689546ea5097
Certificate serial:       019E8F81B05540EB3EBAFA1E05A3E0D75AA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft
Manifest number:          194E
Signing time:             Wed 03 Jun 2026 22:01:41 +0000
Manifest this update:     Wed 03 Jun 2026 22:01:41 +0000
Manifest next update:     Thu 04 Jun 2026 22:01:41 +0000
Files and hashes:         1: 0OHFR3u6ZXPU60e_Kpdpjm7xdtw.roa (hash: W4HSwATsQSpsxelPBRvCUZgXsPPIeFu2oVqzLSkQvRE=)
                          2: 0quk8yFCaAT37LSj27nfsEsyYa0.roa (hash: kjVH3PIcolbOXzfDdgURWGa/iVxgGSimg2ymBQo9Q1Y=)
                          3: SVls7MId0CZ3pyfvN_BolUbqUJc.crl (hash: lwTYRH2UNNyuGYMe35s3CixOzpb5rGnoeYGaa0So+oU=)
                          4: U7NLBjLIe7mftXvsPSwZXkAwwaE.roa (hash: 8sR7xzbSE5cXBiqX03gC/TGFCoIN2L88Z57q6SjbtWI=)
                          5: bGtNDdBH_WkcMa64RzZFy-PBle4.roa (hash: +I92es3myn53IJMXcAqqH0HCkUDgn2kr7/aOubFMtUY=)
                          6: oFUqqzfpz-z60arP7-4bJOUjzkg.roa (hash: b00DPHttrwifcINliBXvR0GCUX5oyGcXZZvJ8ECcEDE=)
                          7: quNtYWBjqvvDoKYNR4UlZqtF5-s.roa (hash: MxAuaNeYKwApf/bmNvm0Do0ftTLNbZaWSwjnaNo2/4M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:8f:81:b0:55:40:eb:3e:ba:fa:1e:05:a3:e0:d7:5a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49596cecc21dd02677a727ef37f0689546ea5097
        Validity
            Not Before: Jun  3 22:01:41 2026 GMT
            Not After : Jun  4 22:01:41 2026 GMT
        Subject: CN=091ca2af83bf58071a9529e712b4562617e89a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:41:26:c0:81:f9:b4:1d:bd:85:e4:9d:a5:a5:
                    ac:59:42:3d:ba:c2:fb:41:cf:3a:d3:bd:80:46:d0:
                    0e:ab:13:fa:2d:16:a2:ac:92:05:1a:f3:67:24:76:
                    b3:26:65:24:37:7c:83:39:25:57:e4:b6:77:14:80:
                    c3:2c:17:cf:91:ec:14:cf:21:66:3e:10:ba:1d:d5:
                    02:8f:50:06:e2:fc:93:25:09:03:54:ab:47:38:1b:
                    46:1b:32:a0:59:6c:19:8a:67:f9:e4:d3:95:2f:ed:
                    59:e9:a4:db:dc:fb:3b:dc:e9:8b:13:1e:a1:6d:39:
                    62:c8:4e:c0:c8:fc:c9:0c:60:ac:23:f6:d9:36:b1:
                    c1:e6:44:73:85:d1:4b:5c:91:ca:c0:99:0e:5e:af:
                    fd:ab:5c:7c:90:aa:c6:54:d7:05:a9:eb:aa:a2:65:
                    88:37:7b:04:20:40:ed:34:1b:07:7e:5f:a9:d8:a5:
                    b1:40:19:75:a2:d2:e0:82:83:ee:cf:4f:29:fb:dc:
                    8f:61:0b:a8:02:d6:62:68:3d:8d:82:68:2a:26:ce:
                    fc:cf:f9:c9:5d:92:ba:8e:7c:03:d0:df:c0:92:a5:
                    8c:0f:22:7b:2f:c2:b6:a3:a7:ef:c4:cd:6e:4f:ad:
                    4b:14:94:1c:b4:aa:f5:ef:7e:f3:07:2c:39:1b:e7:
                    94:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:1C:A2:AF:83:BF:58:07:1A:95:29:E7:12:B4:56:26:17:E8:9A:12
            X509v3 Authority Key Identifier:
                keyid:49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:a7:6a:b5:5c:99:cb:d5:e6:3c:27:c7:70:b8:ac:ae:88:88:
         ee:80:f3:94:88:8b:a3:5a:30:bb:78:f4:e1:2d:8e:53:54:d5:
         9d:fe:ad:60:4d:c0:5f:80:ff:8d:95:a4:9c:9e:2c:cd:5c:d3:
         b5:bb:77:a2:e7:2e:b1:fb:7e:f0:44:c6:99:6e:03:b6:7c:21:
         1e:da:d6:48:f7:c3:27:6e:67:97:9d:b0:ea:22:16:f0:cd:85:
         ca:63:9d:b5:f5:50:bb:07:db:63:aa:56:b1:50:87:80:65:c6:
         c4:e8:7c:db:c9:94:3e:0b:bc:b4:ae:c7:45:87:df:2e:c7:e6:
         4a:40:69:a2:a9:81:e7:35:9d:31:c8:80:e1:d5:dd:e5:ed:3f:
         4a:76:9d:2a:9f:b0:7b:13:ef:8c:ca:ea:2d:44:7b:c5:dc:ca:
         89:e7:d3:21:2e:ec:bb:fa:a8:23:5e:ab:1f:12:e3:da:ca:19:
         a0:dc:82:1e:f7:b0:e5:77:48:cc:25:e5:b1:d0:93:bf:9d:44:
         62:9e:08:7a:6c:3f:06:2c:c2:a1:a1:f8:d1:93:42:13:de:58:
         e5:ea:14:1e:27:f5:69:56:60:78:c4:ba:8f:67:52:22:4b:56:
         6d:0e:ca:b2:3d:e7:7a:62:b0:7b:50:3c:4e:90:ca:07:e2:72:
         b5:85:77:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 04:17:24 2026 by rpki-client