Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
File:                     2rU_myHRPgeOPoRNZF7qhYDxzOE.mft (raw, json)
Hash identifier:          7cBs85KIiEkF8uWt2PfIiOMxH7H/gqVvh9P5xX3ylIo=
Subject key identifier:   B6:8A:70:42:EB:AC:16:BF:56:4A:60:65:B8:A0:22:94:A0:3E:98:CA
Authority key identifier: DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1
Certificate issuer:       /CN=dab53f9b21d13e078e3e844d645eea8580f1cce1
Certificate serial:       019EB8461AC185671BFECFB617B80BA1118F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
Manifest number:          195B
Signing time:             Thu 11 Jun 2026 20:01:02 +0000
Manifest this update:     Thu 11 Jun 2026 20:01:02 +0000
Manifest next update:     Fri 12 Jun 2026 20:01:02 +0000
Files and hashes:         1: 2rU_myHRPgeOPoRNZF7qhYDxzOE.crl (hash: cGJjQEbrxEeln/FkuHSnqN/vKSSH/f5InTATj3oUcM0=)
                          2: mdgwEYDWnao0bVx89QT9Skm53nM.roa (hash: /jy8t/OJp9tVxCw/0qf7Mw46uVUZ9NIjSKlEDS6qgU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:46:1a:c1:85:67:1b:fe:cf:b6:17:b8:0b:a1:11:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dab53f9b21d13e078e3e844d645eea8580f1cce1
        Validity
            Not Before: Jun 11 20:01:02 2026 GMT
            Not After : Jun 12 20:01:02 2026 GMT
        Subject: CN=b68a7042ebac16bf564a6065b8a02294a03e98ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6c:a6:cf:9e:31:63:64:15:b3:24:70:97:a3:
                    56:65:26:a3:b3:73:23:1d:59:0f:ba:6c:ef:c2:35:
                    57:19:e4:04:4d:56:82:06:fd:e4:e8:4e:46:84:af:
                    6a:be:49:a6:d4:23:bd:81:33:e8:78:6f:c6:67:20:
                    b1:42:32:23:e7:84:68:4d:96:ce:87:8a:00:f8:86:
                    36:4d:7c:fb:23:cc:ba:b4:71:ce:c0:6e:11:50:60:
                    cd:60:10:c0:bf:87:a4:40:ee:eb:29:86:b7:bf:1d:
                    44:ff:d6:e8:52:74:63:aa:d9:90:4c:59:29:5a:83:
                    00:4e:24:87:a4:1f:fb:18:39:91:de:8e:ef:28:9e:
                    d1:c5:fc:b0:44:42:09:09:4f:1a:a1:7c:9c:b1:30:
                    79:ce:53:bb:ad:ed:56:1d:fa:7f:19:af:81:97:14:
                    45:ad:ec:2b:45:9e:21:b4:f2:41:74:1b:6b:83:8b:
                    a5:be:26:30:3a:58:45:bc:f6:99:fa:ce:a8:89:c0:
                    b1:df:05:c8:61:df:e6:b2:9f:f6:30:34:d3:16:3a:
                    b7:77:8a:36:23:8e:7f:b1:1d:35:71:2f:af:ec:06:
                    39:54:cb:f8:57:ff:36:fc:0a:13:1e:96:1a:b6:b6:
                    65:50:ff:e7:2c:da:33:32:95:c7:69:14:df:5c:74:
                    eb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:8A:70:42:EB:AC:16:BF:56:4A:60:65:B8:A0:22:94:A0:3E:98:CA
            X509v3 Authority Key Identifier:
                keyid:DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:69:d8:49:9f:77:f2:81:2d:42:db:55:c8:5e:12:02:75:5d:
         a5:b0:ee:43:ae:a6:10:72:a0:f6:47:c6:84:22:c4:f8:f0:4c:
         6a:24:9c:52:98:47:c0:3f:4e:5e:77:ce:5c:2f:9c:0e:1f:55:
         3a:f1:44:6b:b5:ca:54:b8:da:fb:ff:92:51:dd:03:f1:22:dc:
         51:04:cf:8c:ce:96:d3:60:f2:85:4d:65:95:0c:11:ac:69:8a:
         ce:fb:5c:1b:4d:c5:4b:11:e9:41:51:74:55:ae:c3:b3:99:75:
         e0:0b:fa:66:f0:56:bf:0a:aa:d4:0f:68:27:a8:95:ad:8c:74:
         92:cb:c1:50:8a:2f:e2:45:43:b3:d0:c6:8c:e0:15:6d:4c:d0:
         c8:74:f0:43:85:6c:92:44:b8:9c:01:aa:f3:3a:c3:8a:0e:af:
         ad:27:43:7f:af:9c:95:46:d6:6d:b1:4f:3d:47:31:88:be:1f:
         67:c0:3b:51:e9:2a:0b:c6:3e:aa:da:9c:68:6a:7f:ca:40:b6:
         86:00:f0:4e:36:f1:75:50:ec:91:06:43:ce:b7:bd:0b:4f:1f:
         a6:f1:9c:a4:5d:c5:3c:c8:70:d3:59:3f:22:26:05:0c:f4:df:
         44:93:24:db:92:01:8d:5c:2e:e4:7b:db:8b:1a:7e:a9:16:53:
         46:df:0c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:24:28 2026 by rpki-client