Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
File:                     Y7gncq89YRuZsbpuPrbL_RaWU2M.mft (raw, json)
Hash identifier:          HWiKUWOo/uIcbpNRsLr3W1oDaLKzn9d34p+sRc4ngEY=
Subject key identifier:   6D:D4:68:74:A6:A1:43:21:4B:83:1D:76:E6:E0:E2:4F:38:67:58:59
Authority key identifier: 63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63
Certificate issuer:       /CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363
Certificate serial:       019EC4EF253A46B0B16628D6A79E6B8C24B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
Manifest number:          195F
Signing time:             Sun 14 Jun 2026 07:01:07 +0000
Manifest this update:     Sun 14 Jun 2026 07:01:07 +0000
Manifest next update:     Mon 15 Jun 2026 07:01:07 +0000
Files and hashes:         1: 3B1_EUp7x7N1kARo16GQ1nuj9Is.roa (hash: aSJvJUBxwg2ZnRrO3zv+qRAM43Ox0HLnky8GrLpOBIA=)
                          2: NUUQjDeFWzC4FPVGBmAx-z5bJ0E.roa (hash: wnbRGeNLfXYztX1J3cZAfrSN12bQBDpo4cnmGFyaLCs=)
                          3: Y7gncq89YRuZsbpuPrbL_RaWU2M.crl (hash: eyKbbSXlkhnTY2Z/VZbvPwqBXHxmyiN7W+/x0/SMhi4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 04:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:ef:25:3a:46:b0:b1:66:28:d6:a7:9e:6b:8c:24:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363
        Validity
            Not Before: Jun 14 07:01:07 2026 GMT
            Not After : Jun 15 07:01:07 2026 GMT
        Subject: CN=6dd46874a6a143214b831d76e6e0e24f38675859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:29:f5:0f:e5:e7:b0:b1:6c:a8:a0:b0:4c:2b:
                    9f:c7:f2:59:5d:6f:99:bc:a4:ae:3e:e9:54:bf:64:
                    93:98:cb:12:81:f9:26:ef:b3:dc:e4:d7:a8:f8:61:
                    c4:ae:98:a5:cd:36:43:c9:11:87:d4:30:39:01:d5:
                    01:89:0b:d6:e7:84:d7:e2:5c:fa:cf:1d:37:8c:a6:
                    2d:3e:37:ca:9f:e5:68:c6:15:fd:bd:5c:62:30:52:
                    81:0d:72:d3:57:be:11:06:c7:43:7e:4b:ca:13:ab:
                    2a:c8:17:97:99:06:25:94:25:89:ae:d8:ff:f5:2e:
                    8e:9d:09:c9:28:0b:dc:32:b1:02:cf:21:4b:9b:bb:
                    6d:0a:fd:eb:68:38:c9:f4:d3:fb:b4:6d:5f:2a:e9:
                    a5:8d:03:d7:86:f2:0d:a6:5b:4e:07:c0:87:5c:f5:
                    f7:00:e7:96:c3:bd:88:9b:d5:e9:dd:30:df:68:6c:
                    07:ee:f8:28:28:b7:ff:0e:c2:55:40:88:dc:2b:26:
                    38:b3:25:1b:f9:d0:b8:f2:01:83:0e:0d:6d:03:96:
                    92:71:26:29:ab:9f:12:17:07:da:92:fe:33:bb:31:
                    a0:bf:29:7b:02:29:06:39:00:12:70:c5:ec:3a:47:
                    bc:3e:d8:df:16:85:a9:9d:7b:dc:86:4b:e5:af:1d:
                    22:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D4:68:74:A6:A1:43:21:4B:83:1D:76:E6:E0:E2:4F:38:67:58:59
            X509v3 Authority Key Identifier:
                keyid:63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:6a:dc:b2:02:86:66:2c:d2:4a:23:8e:a0:6c:7e:fc:f0:f1:
         29:0a:01:58:f0:45:63:41:dc:fe:e0:d8:90:8d:ba:ca:77:3b:
         33:90:02:f7:a6:a8:97:44:0d:08:e7:e8:3e:ae:86:d8:3f:a5:
         af:f1:04:20:bd:44:e2:24:7f:09:ad:67:a7:08:3e:d3:3d:97:
         76:f2:da:99:9d:37:a9:9b:58:9b:66:e8:c7:cd:38:df:d0:9d:
         09:51:0e:9a:95:b1:fc:92:b3:78:77:2c:6f:f8:ef:ad:8f:34:
         d9:fc:23:be:68:a1:1a:9c:51:a7:b7:d6:0f:a3:41:b6:f4:d7:
         5a:52:f1:12:13:d3:4c:29:77:d3:58:7f:2f:a4:37:c0:e4:07:
         82:53:4b:d7:c4:31:11:a4:de:47:29:cc:cc:be:87:58:72:16:
         fc:21:2e:51:dc:4f:d9:f6:7d:e5:31:e3:99:04:12:ab:e2:d0:
         e9:3b:44:0b:0b:e8:67:91:81:a8:17:46:c2:26:d0:71:c8:95:
         8f:49:15:5d:72:be:5e:d6:33:9d:ad:fb:92:ce:8b:d9:f8:33:
         7d:7d:40:2d:c4:7a:ba:65:ed:93:34:1d:b8:51:01:3b:d0:8c:
         60:8d:39:ba:30:a6:77:f3:91:c2:15:d5:aa:8b:01:dc:e9:f4:
         a4:d2:75:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:34:13 2026 by rpki-client