Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
File:                     O6F4K2r7p8a88HC5P-1MyEr0E1I.mft (raw, json)
Hash identifier:          BibjkIsIhTmDMMLYjyFL6+YaE9MMzjbNZx0uQNuhPzQ=
Subject key identifier:   1E:CA:E9:31:93:46:0E:06:AE:5C:13:01:DE:23:A0:04:3F:27:D6:97
Authority key identifier: 3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
Certificate issuer:       /CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Certificate serial:       019EB7A11F714FAAE442E146BDF9FBE6CB34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
Manifest number:          195A
Signing time:             Thu 11 Jun 2026 17:00:50 +0000
Manifest this update:     Thu 11 Jun 2026 17:00:50 +0000
Manifest next update:     Fri 12 Jun 2026 17:00:50 +0000
Files and hashes:         1: C_fEnv_eRtdfHOrTALK5_eLV5ok.roa (hash: /2vtpruz4Kd8ELtmIOpyqLwlHo0YencLVWVxE/Dnmjs=)
                          2: O6F4K2r7p8a88HC5P-1MyEr0E1I.crl (hash: dB9qgdi/0qieWFAK0cpgGHpJmheOO3yI8yoRqDqsoUQ=)
                          3: pQejgEmzNw8i21WZUTBRMpyH0kA.roa (hash: +KDsF708PcX7ZR6TFqTEl20ksY/s2f/uGyYC/ymkOIY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 17:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:a1:1f:71:4f:aa:e4:42:e1:46:bd:f9:fb:e6:cb:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
        Validity
            Not Before: Jun 11 17:00:50 2026 GMT
            Not After : Jun 12 17:00:50 2026 GMT
        Subject: CN=1ecae93193460e06ae5c1301de23a0043f27d697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:67:06:cb:05:f4:bb:cb:2a:07:0f:41:c9:5c:
                    13:00:9a:f0:8c:5f:f0:6b:9a:3c:89:20:b5:cd:77:
                    a0:eb:70:f6:78:f7:64:04:85:a9:d4:0a:b7:ed:17:
                    a7:64:b1:e3:48:94:0e:23:c4:ff:ac:ea:9b:dc:ea:
                    3d:94:ae:58:03:8e:55:c1:f7:49:ff:93:13:cd:9a:
                    ec:37:4b:a2:f5:c0:a6:6d:a9:ba:41:b7:26:ba:5b:
                    c6:c0:7b:45:df:26:f5:56:09:d8:fa:5b:c9:0c:8f:
                    85:78:2b:c2:d8:ea:24:a7:44:c0:d5:12:9b:9d:5d:
                    e7:43:45:3b:eb:83:eb:db:a8:9f:1c:6b:f0:cf:1b:
                    49:42:e1:c0:7a:d8:64:04:3b:2c:74:b6:06:c8:60:
                    34:f7:70:d1:d2:c4:97:7d:33:d8:c8:d0:41:bd:4b:
                    7d:c0:c5:d7:45:8a:eb:69:c4:87:8a:cc:5c:41:79:
                    07:8b:95:51:bd:2a:c8:12:d0:90:c8:c6:f5:56:37:
                    a1:31:10:f0:b7:a7:ce:ec:be:1f:48:31:8f:4a:b1:
                    d3:05:20:29:f0:b8:05:8a:cd:9c:f2:28:ad:6f:8a:
                    ff:31:98:97:dc:91:a7:26:52:c2:a6:a5:bf:df:9c:
                    da:61:b6:65:c6:11:14:6f:d1:21:16:2d:e3:3b:4d:
                    20:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:CA:E9:31:93:46:0E:06:AE:5C:13:01:DE:23:A0:04:3F:27:D6:97
            X509v3 Authority Key Identifier:
                keyid:3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:af:1f:25:26:a8:99:20:59:d4:dd:f5:de:b1:60:bb:cf:97:
         63:3a:ee:ff:ac:5b:82:b5:d4:51:99:f0:09:ed:a7:a5:dd:11:
         2e:89:93:d6:e1:10:69:3d:92:02:f0:fb:b9:3c:60:cc:ff:8e:
         60:d3:90:40:8c:82:6b:b9:14:49:df:9b:08:07:03:e4:d5:2a:
         55:bb:6c:a8:26:5d:87:9a:b5:d5:b5:10:5f:49:60:8f:6b:24:
         3d:51:39:e8:89:94:cd:cf:89:a1:f5:50:b0:bd:d4:f9:ae:da:
         33:d3:6b:89:17:6c:3d:7d:97:cc:2e:44:e4:98:9a:80:71:3f:
         ee:32:56:17:73:7c:72:fa:b1:65:19:98:c6:21:92:65:c9:c6:
         bd:24:34:d2:42:89:58:91:ec:4e:ac:5c:1d:7a:7a:c5:66:28:
         0d:8e:63:0f:99:d6:77:48:f0:ac:6f:de:d6:21:dd:11:b3:91:
         90:b4:8d:68:d2:66:29:95:5a:a8:2f:9f:05:8b:ed:a8:25:8a:
         ea:26:22:2f:5d:a8:68:9b:33:a8:70:fc:b8:65:a0:25:da:a1:
         cb:94:d8:0a:ad:16:4b:ed:14:5e:b8:f5:82:65:b3:fe:37:90:
         9d:f4:f5:e8:b8:44:7f:7d:61:4d:5d:22:17:60:fc:cd:03:43:
         69:ca:2f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:33:57 2026 by rpki-client