Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File:                     khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier:          DxAkdum2bgcNyWFMHZD0O/OhC+IQ84jd0KnhhO+aXt4=
Subject key identifier:   50:EB:8A:97:54:BC:FB:FA:12:CC:A1:2F:7B:08:AB:DB:08:C9:F9:2A
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer:       /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial:       019E9E4F7188B23894B091B81D474EEB84F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number:          194B
Signing time:             Sat 06 Jun 2026 19:01:06 +0000
Manifest this update:     Sat 06 Jun 2026 19:01:06 +0000
Manifest next update:     Sun 07 Jun 2026 19:01:06 +0000
Files and hashes:         1: IGA1ulxSxKGkoLSG34jnJfGS8GM.asa (hash: Wb9Cwa31gXG46doK7XO0BE6KGITY40XEAXzduJEsDJA=)
                          2: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: lPeGfK7tD74MRvWNH8OxQqsLALFPPXzm5zSAGooCMRk=)
                          3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 19:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9e:4f:71:88:b2:38:94:b0:91:b8:1d:47:4e:eb:84:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
        Validity
            Not Before: Jun  6 19:01:06 2026 GMT
            Not After : Jun  7 19:01:06 2026 GMT
        Subject: CN=50eb8a9754bcfbfa12cca12f7b08abdb08c9f92a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:05:f5:21:a8:e8:2b:02:32:23:7c:a9:fe:fc:
                    37:5d:46:d5:d8:db:31:cc:48:13:6d:c7:da:c3:5e:
                    75:7f:b3:21:1a:66:b0:09:df:62:62:58:c8:49:2e:
                    ff:43:42:42:b4:c1:cd:7a:f1:99:4d:4a:4d:ce:4b:
                    52:67:80:66:cb:06:1d:bd:86:5b:c8:be:8b:02:2a:
                    ee:89:4d:d5:b1:77:00:e7:9b:93:5b:64:9e:dd:7b:
                    3b:23:59:b8:bd:d6:7e:b8:ba:89:5b:5b:29:fe:b7:
                    a0:29:24:84:9c:64:a8:e0:5d:7d:23:18:1d:b0:7c:
                    4e:24:ee:b0:ca:47:e0:e0:25:42:8e:d1:bc:a8:ed:
                    e1:d9:42:fd:f7:d9:21:02:e2:a9:41:d9:a1:fe:3f:
                    fc:37:69:e3:fc:40:ec:4b:26:68:ec:49:d7:b6:e3:
                    d5:14:5c:d6:30:96:cb:27:91:87:3d:63:f4:7c:16:
                    c5:eb:f3:cd:af:1f:be:2c:47:ac:df:f6:31:9b:26:
                    31:bd:58:fb:f2:2f:ff:4f:ac:0e:8d:5d:61:f2:52:
                    f2:00:64:03:51:c0:e6:a0:e6:89:f9:5c:7c:af:5a:
                    9e:e3:4f:e6:26:a9:11:a0:b4:77:c7:62:31:bd:9c:
                    ce:5a:17:0f:04:05:12:dd:d4:c2:7e:bf:9d:a0:bf:
                    06:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:EB:8A:97:54:BC:FB:FA:12:CC:A1:2F:7B:08:AB:DB:08:C9:F9:2A
            X509v3 Authority Key Identifier:
                keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:75:6e:90:fc:83:c7:cb:e9:4d:e1:2e:87:e7:22:73:f0:34:
         ab:e5:53:be:b2:62:9f:2a:94:07:a1:be:68:2a:1c:00:69:1c:
         e0:93:5c:df:bc:fb:84:cd:65:0b:19:b3:89:4d:b7:f7:9e:d9:
         52:74:4d:35:9f:56:52:e6:49:5b:e3:dc:c0:10:60:c0:01:05:
         33:20:26:c8:e8:a1:3a:96:49:cf:f9:0c:c3:5e:52:46:3d:a1:
         5d:89:2d:c6:f0:3b:24:57:ef:e0:9d:95:2d:64:4e:34:fb:25:
         4b:3f:80:e0:52:b8:28:b4:68:20:07:0f:4f:16:13:3c:cc:5d:
         71:c7:86:ce:f0:b5:6f:62:ee:7a:1c:38:44:0c:66:f6:f6:85:
         54:79:68:12:43:7b:1d:3d:86:6f:bf:6c:dd:4c:da:86:5d:9c:
         f3:ad:48:5b:cf:2d:d0:2b:d6:ae:36:9f:36:33:10:41:9a:e3:
         d4:aa:0e:2e:c2:bd:75:98:58:42:f2:8d:41:67:48:aa:a5:db:
         b8:58:3f:b1:5c:cd:61:2e:60:21:20:74:d5:f7:d4:bf:fe:3a:
         ca:a1:8b:19:fd:0b:14:d6:2f:07:72:ac:72:72:a2:81:8c:dc:
         62:8c:f0:b4:2e:60:4f:5e:22:34:19:72:9d:ca:18:65:79:4d:
         ae:e6:3b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 7 04:30:46 2026 by rpki-client