Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
File:                     y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft (raw, json)
Hash identifier:          ZZ9l0rj3N5z5dyg6Ge3TH5rZqTWvIF1lMUkXOizanPI=
Subject key identifier:   24:BC:56:A1:05:23:C8:26:0B:77:19:66:28:DA:0E:DF:25:C7:A7:6A
Authority key identifier: CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
Certificate issuer:       /CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Certificate serial:       019EB921F17D9A61DB52A51C97B1EF6CC823
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
Manifest number:          195A
Signing time:             Fri 12 Jun 2026 00:01:09 +0000
Manifest this update:     Fri 12 Jun 2026 00:01:09 +0000
Manifest next update:     Sat 13 Jun 2026 00:01:09 +0000
Files and hashes:         1: kvnj2cNsUgWmKqruiHTj8IAxW0w.roa (hash: 2sBzVhGKmjkLG0YmT86Sdiztaegp2q/NY0RQl2BxzZI=)
                          2: sMktTpfGHbgv6HFYRTILiDr3y4Y.roa (hash: pIuZdKxK8yFs7L1CCJy6Vhhj+nazdkwlFtFaPKVuzK0=)
                          3: y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl (hash: yx1YrhY26V5boyjt9A2mitOXlycGr4OJSF7DNtaeDug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:21:f1:7d:9a:61:db:52:a5:1c:97:b1:ef:6c:c8:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
        Validity
            Not Before: Jun 12 00:01:09 2026 GMT
            Not After : Jun 13 00:01:09 2026 GMT
        Subject: CN=24bc56a10523c8260b77196628da0edf25c7a76a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a2:1b:f6:14:0d:4d:33:f9:72:b1:a9:b3:dc:
                    84:5c:2d:44:3e:c2:ba:be:37:dc:4a:20:0c:cb:b5:
                    73:62:ec:16:76:d6:7a:f9:79:79:a1:8e:3b:b2:9f:
                    f9:19:66:bc:1b:9c:b0:51:af:2e:fd:2b:58:b3:58:
                    e6:65:e4:66:4f:7a:77:24:61:49:e6:c1:b0:09:28:
                    ca:49:90:bd:2e:65:cf:e1:9e:e7:7f:3f:16:b3:1f:
                    3c:4f:47:65:02:99:2f:83:16:96:3f:99:ec:ba:c1:
                    50:da:d1:24:ae:f2:00:f5:77:ce:fc:db:20:3d:b6:
                    24:d0:99:05:50:21:9b:c4:d7:d5:5e:09:12:9a:34:
                    a9:69:46:06:90:8d:56:47:c1:2d:2e:bd:ed:93:4a:
                    ef:ce:ea:c8:a4:e5:d6:9c:61:f2:a0:15:fb:a5:4b:
                    a6:48:76:cd:f9:7b:99:b4:c1:04:36:a4:8e:a1:bb:
                    fa:40:b8:84:60:db:23:42:06:29:ab:e5:2c:f3:8c:
                    6b:9d:e3:ab:07:22:45:04:a9:37:19:9e:cf:b4:c9:
                    62:77:20:8b:df:6e:f7:98:27:e2:cd:f2:db:3b:2c:
                    85:4c:5e:58:4a:4e:ba:af:9f:eb:dd:e0:19:c8:14:
                    ab:72:a1:26:de:e1:3c:b8:db:95:36:4a:4c:4b:de:
                    0b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:BC:56:A1:05:23:C8:26:0B:77:19:66:28:DA:0E:DF:25:C7:A7:6A
            X509v3 Authority Key Identifier:
                keyid:CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:d7:07:f6:a6:df:03:3d:0b:3e:47:f7:99:8a:99:66:13:8c:
         06:d4:6a:19:cd:60:10:06:33:43:e7:70:76:98:5a:fd:4a:4f:
         81:8f:2d:a0:5b:5c:1b:0b:cb:7a:df:1e:d0:70:84:7e:46:db:
         0c:b5:51:9a:7e:45:d1:2d:22:79:9a:f7:6d:14:39:15:54:8f:
         f2:2e:6b:86:0a:84:ca:ac:98:20:ad:5f:df:ed:09:d6:9a:ad:
         39:6e:f7:49:63:2d:f5:69:44:8a:14:07:69:46:10:2a:4b:5a:
         a3:a0:82:6b:22:96:52:33:47:c3:ec:cf:cf:f8:ba:f3:86:f9:
         bf:8d:96:fd:22:16:5c:5c:5b:08:73:d5:9b:b0:29:24:4c:7a:
         59:2a:c3:13:3d:09:a5:da:c3:43:bc:57:ce:49:08:46:f2:62:
         e8:0b:0e:45:11:c7:df:38:8d:e5:61:0f:cc:3c:3b:2f:92:9f:
         9e:eb:ed:23:2e:8e:8c:1f:fb:dd:2d:f9:6f:fd:d4:6c:aa:36:
         a9:64:74:28:da:f6:19:14:9c:4b:fd:08:e0:35:1e:28:a2:33:
         8d:c8:a0:4f:4c:f7:be:95:51:0e:c9:a8:24:c3:f8:d2:66:0f:
         06:3a:fa:e1:7e:5a:a1:0c:cd:59:f5:bc:cd:13:e0:16:29:bd:
         85:54:79:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:54:15 2026 by rpki-client