Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
File:                     fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft (raw, json)
Hash identifier:          hbWRmEFWJNjoIY99wgAsqeGfsoFZJNmaql0yQkdymYI=
Subject key identifier:   0E:A8:B5:71:0B:A0:71:FB:02:32:4F:FD:40:D9:B1:A6:C2:2E:84:64
Authority key identifier: 7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2
Certificate issuer:       /CN=7d0ac334438a53d18ae40efc9368768b931cfac2
Certificate serial:       019E9C9817A5F9A952CF24DCE02096D88F10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
Manifest number:          194B
Signing time:             Sat 06 Jun 2026 11:01:13 +0000
Manifest this update:     Sat 06 Jun 2026 11:01:13 +0000
Manifest next update:     Sun 07 Jun 2026 11:01:13 +0000
Files and hashes:         1: WJpebRSVLbQrdcjeB04EXCpIhRg.roa (hash: XP6zMi85BeS7CS6gjX07ym99dXpvUnSFZsiLXXS4Qvw=)
                          2: fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl (hash: PJxyHkjcEM5iVvIAXJu864rs++8RrWJsuTzXqztBUyk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 11:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9c:98:17:a5:f9:a9:52:cf:24:dc:e0:20:96:d8:8f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d0ac334438a53d18ae40efc9368768b931cfac2
        Validity
            Not Before: Jun  6 11:01:13 2026 GMT
            Not After : Jun  7 11:01:13 2026 GMT
        Subject: CN=0ea8b5710ba071fb02324ffd40d9b1a6c22e8464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b7:ca:1e:51:f2:2a:fb:8e:45:9e:4c:53:51:
                    3f:57:a7:4b:cf:ca:e7:f6:ec:b3:31:ad:34:88:96:
                    27:32:32:94:7f:e3:67:d5:8d:49:ee:4c:a0:28:98:
                    67:9e:9e:3c:32:68:15:a0:28:34:c7:a2:8d:99:0a:
                    a3:e0:bc:8e:73:05:8a:5a:99:4f:0f:a1:5a:e7:b9:
                    35:6b:f2:15:e8:9b:16:71:f2:44:52:c5:f9:bd:ea:
                    2f:d2:35:19:af:66:6e:46:1d:24:f4:ca:8f:5e:ee:
                    0c:0b:dd:ff:70:ff:01:f4:d6:04:2c:34:0e:10:f4:
                    74:91:fe:e3:5a:73:e8:2d:30:cf:e5:e2:b7:cc:59:
                    43:13:1e:4e:3a:df:df:02:b0:97:73:ff:28:93:b4:
                    62:72:02:3a:5a:60:b4:23:21:a9:7e:7f:18:95:f4:
                    49:bb:6b:2a:d8:00:00:bc:21:79:41:77:1e:e9:70:
                    65:ef:e1:1e:95:16:fd:d2:c8:05:8b:54:fd:61:69:
                    5f:26:d8:33:3f:3c:e2:16:b2:63:66:e6:76:df:06:
                    93:d1:fe:d8:55:9f:83:4f:3c:9f:02:7d:02:40:15:
                    22:75:dc:fe:f1:3d:ad:5c:90:b4:19:4e:98:84:26:
                    8a:e8:f8:9e:ae:28:cd:7b:67:06:5b:68:c0:21:23:
                    54:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A8:B5:71:0B:A0:71:FB:02:32:4F:FD:40:D9:B1:A6:C2:2E:84:64
            X509v3 Authority Key Identifier:
                keyid:7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:f4:3d:78:6c:ce:fc:89:8d:66:0a:db:3f:6a:2e:8c:91:b3:
         e4:4f:87:a2:14:00:92:6d:57:90:86:b7:77:29:ea:26:51:82:
         d2:93:56:ca:e8:04:71:33:c8:c3:18:70:0c:18:8b:3a:12:a6:
         7e:61:95:2e:e9:b4:79:96:22:f3:49:df:a0:96:cf:16:b3:ff:
         21:6d:04:e4:7d:1a:c5:cd:23:64:55:85:79:9b:0d:6c:e3:05:
         63:4f:50:34:f0:59:3c:89:50:9f:f0:26:d7:03:aa:b3:eb:7e:
         7f:81:ba:20:99:32:60:cc:ca:f5:84:d7:0a:18:c7:dd:91:43:
         c5:f8:9d:09:d5:50:d4:f5:3c:69:1e:b3:e7:58:fc:38:2b:a6:
         fe:40:d6:12:28:4a:ff:53:3e:2d:bc:b7:f7:6a:3d:d9:8c:d0:
         ac:45:ea:d6:be:7e:b6:7e:17:69:73:11:16:69:21:43:03:91:
         bb:25:7f:ee:d2:19:68:23:6b:95:27:f5:81:1e:cf:e9:15:85:
         8c:6b:e0:3b:67:be:e3:eb:cb:1e:77:91:ea:32:08:95:cf:39:
         bb:8d:42:49:24:34:9a:af:db:e4:cf:1d:7c:6b:cf:59:8b:66:
         c1:2a:b3:7c:4e:cf:92:f2:6c:64:6a:6c:82:c5:97:42:90:a5:
         7e:3c:f0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 15:51:01 2026 by rpki-client