Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
File:                     DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft (raw, json)
Hash identifier:          /2i3IG8XtJwV4WN/TYonQNoZYoXpEZA1/zZqeC4G+fk=
Subject key identifier:   72:00:92:B2:3A:22:F0:F2:50:8D:BF:A9:E0:1E:9E:70:90:35:1D:6C
Authority key identifier: 0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C
Certificate issuer:       /CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
Certificate serial:       019EBCFED5FB9D3809F8087BFD08C597782F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
Manifest number:          195B
Signing time:             Fri 12 Jun 2026 18:01:17 +0000
Manifest this update:     Fri 12 Jun 2026 18:01:17 +0000
Manifest next update:     Sat 13 Jun 2026 18:01:17 +0000
Files and hashes:         1: D32i6_dCWTSsyvln6Op_fVc7ifQ.roa (hash: Al7b3A0tyoRmZ6j5Fdgg5aD1e2Ddf8niF7ufLQSci6A=)
                          2: DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl (hash: eUHCB8hMWpkB25RdRV+CS+AekFELijFAhudhqk/U05k=)
                          3: cRdmmZiNILryID4MaoZH-egP0Pc.roa (hash: Tc3P5pw52D848VbuoEwG61qEEaFgbEGdqefrzUmOWZA=)
                          4: dO_oeTKff3dNZT_GL6N0iMSDLeA.roa (hash: U9kjCpU+QQfnTA2jCeD/iAdC4QIXldj/AsRqVA98Jco=)
                          5: hKslTlGWTrYnNFRq7nm02w7iSks.roa (hash: hx/Lg8Qct01wevwfLicpLCIZWwNva1xX/icDKHDKOOo=)
                          6: qsPJeU-C_65tmjEWpGQYQUIEajo.roa (hash: 1cn7hAG7OagxW4P/nzGgq4cV1HKNDko3iBj1s+1Q88U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:56:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bc:fe:d5:fb:9d:38:09:f8:08:7b:fd:08:c5:97:78:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
        Validity
            Not Before: Jun 12 18:01:17 2026 GMT
            Not After : Jun 13 18:01:17 2026 GMT
        Subject: CN=720092b23a22f0f2508dbfa9e01e9e7090351d6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:82:61:09:75:37:74:79:17:16:f6:90:c9:94:
                    7a:46:2a:50:39:89:cc:7d:ae:1f:cb:5b:68:fb:cc:
                    0f:d4:d6:cb:06:4c:c2:c1:4d:b2:f9:eb:82:41:b7:
                    04:e9:9c:df:54:ff:cb:86:75:a8:70:aa:27:5a:e8:
                    94:01:ff:6a:85:5d:3c:50:9a:76:e6:2a:1d:1b:17:
                    06:84:0f:39:8f:33:c8:31:13:03:d6:2a:61:c9:68:
                    9e:d9:f0:ef:73:0a:b1:78:6c:0d:b8:12:a1:4b:19:
                    cc:21:45:99:d0:ff:34:c4:8c:bb:2f:c4:88:fe:6d:
                    9a:30:4f:c0:07:bf:7a:78:e7:63:02:4e:d1:63:2b:
                    04:45:d9:7f:54:07:55:e6:8e:77:55:ed:f5:8e:b1:
                    45:b6:69:d8:a3:1f:2e:67:a4:61:b4:d8:52:74:c7:
                    18:c9:80:21:45:f8:df:af:a9:01:a2:19:fa:85:bd:
                    06:2b:20:8e:28:76:f3:04:52:69:d3:11:12:8b:4c:
                    dd:d4:c7:a5:5c:b6:99:fe:fc:a7:55:c2:a7:68:2a:
                    d1:c7:c8:76:1c:2f:3c:db:b1:51:5c:8a:46:f2:30:
                    cc:b9:3a:ae:6d:50:05:31:13:7d:16:8d:64:d4:f9:
                    13:16:ad:56:b5:b8:c5:ff:71:bd:bf:f2:07:fb:a1:
                    fb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:00:92:B2:3A:22:F0:F2:50:8D:BF:A9:E0:1E:9E:70:90:35:1D:6C
            X509v3 Authority Key Identifier:
                keyid:0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:25:4a:ab:76:dd:b3:00:68:41:03:65:5a:18:7d:97:15:71:
         a7:8c:34:65:2a:84:4b:00:d7:a7:9d:cf:05:89:25:16:63:a1:
         93:0c:bf:8a:22:2b:61:26:99:1c:c0:02:97:5d:72:69:25:24:
         a3:29:a6:72:9b:59:a4:33:61:39:50:a1:da:d5:be:bd:59:8f:
         80:76:4a:bc:7e:e2:be:3f:75:56:b1:93:a3:a4:ed:e3:d8:75:
         ae:fe:ba:62:6f:89:c9:56:cb:68:ad:40:2b:f7:9d:6d:1d:ff:
         62:d9:c8:7a:f7:23:f0:28:76:bc:a2:54:3d:80:b5:c0:1b:8c:
         32:17:87:d4:8a:f2:1d:fc:02:fe:43:35:ec:de:e4:4b:b0:ee:
         03:8b:ac:ec:94:44:16:b7:ae:79:f4:aa:a2:f1:53:76:55:08:
         6a:53:58:9d:68:5f:36:cc:d4:f7:47:ae:77:a9:ef:b3:b6:7f:
         8d:19:c4:0d:a1:a3:6b:68:ec:5a:bd:0b:81:20:e8:9b:a4:52:
         8c:4e:ed:78:4f:4c:25:e8:9e:ec:b3:77:ce:e5:01:48:cb:25:
         92:9f:e7:ed:91:aa:82:75:ff:5f:7a:10:4b:54:3f:c9:52:8c:
         08:1c:7d:2c:65:8f:a7:d2:d3:67:43:4c:fc:39:f0:22:8d:20:
         36:00:4b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 03:14:58 2026 by rpki-client