Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
File:                     C1yvJi_b_MX_MOKKUQRkbieokmI.mft (raw, json)
Hash identifier:          p03IA/O1bVQK9fZI+Ue26Gcl9ProrGgd+niA2lDbSbQ=
Subject key identifier:   35:E6:8A:1D:41:85:BC:99:6F:22:6A:85:10:F9:98:DE:D5:4D:D8:CE
Authority key identifier: 0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62
Certificate issuer:       /CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
Certificate serial:       019EB8EA73FAA2F07ABC9B0DD4220BA9BCC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
Manifest number:          195A
Signing time:             Thu 11 Jun 2026 23:00:33 +0000
Manifest this update:     Thu 11 Jun 2026 23:00:33 +0000
Manifest next update:     Fri 12 Jun 2026 23:00:33 +0000
Files and hashes:         1: C1yvJi_b_MX_MOKKUQRkbieokmI.crl (hash: QviAHtxZYybsR1TU5L+mPTMaZWVI7EXcg1Sw+oFnPsc=)
                          2: OWJuJrNuwbbFDFgA56uuuJeCvL8.roa (hash: /ZFH55PDC4s2E7M5LW3jwm4Uto4IlWIhyCzpet8FzZY=)
                          3: jHOSi9_oJekIEx4EmUwyddmGDN8.roa (hash: Ntcg6Twu+N2HgOTH++SeVjtpqrilgEpyp5kKVNoLrTg=)
                          4: kN99vFdbAempQ2A2_gxGNJ7ed64.roa (hash: 1v+1gMi8uf5SBhW1FJK7tf586/slgxWuh9VuZL56b4M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:ea:73:fa:a2:f0:7a:bc:9b:0d:d4:22:0b:a9:bc:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
        Validity
            Not Before: Jun 11 23:00:33 2026 GMT
            Not After : Jun 12 23:00:33 2026 GMT
        Subject: CN=35e68a1d4185bc996f226a8510f998ded54dd8ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:40:5b:c7:c0:bf:88:b7:7a:0a:91:16:d9:45:
                    27:c0:d4:29:6b:b4:00:c0:b6:0d:16:30:34:5e:f0:
                    1d:5b:0f:41:a4:7e:a2:f7:cd:06:7f:a9:d9:c0:46:
                    91:25:d9:da:ff:3e:ea:96:34:9f:6e:d2:d0:6a:ab:
                    52:63:f7:ce:89:4a:9a:89:4f:a5:f4:8c:32:90:83:
                    af:a2:0d:56:2d:bd:af:65:eb:7d:98:5b:6a:40:45:
                    24:e2:ee:ec:b6:21:7b:3b:0c:cf:73:1b:45:f3:75:
                    c9:fa:cd:06:99:a9:b6:6c:a1:2d:14:41:ed:09:84:
                    39:aa:f4:f9:03:39:09:55:63:9a:1f:1e:0b:65:4d:
                    d3:e9:24:cd:ed:a5:30:6e:31:b2:12:d5:1c:65:ff:
                    6f:71:a6:a3:2f:fa:cb:6f:ee:63:be:b0:54:11:d1:
                    c5:87:de:e3:19:d0:e7:46:f2:68:c3:69:e4:2f:37:
                    68:5e:36:09:7c:f4:48:b6:75:bc:be:44:50:6e:3b:
                    3e:73:51:e7:5f:e3:f4:d8:0c:a9:0b:43:f2:77:ee:
                    9a:4a:7f:89:1e:bc:ab:c1:dc:30:1a:d5:00:16:6b:
                    49:61:ef:8d:23:e9:f2:a2:33:c5:83:dc:e8:fe:e5:
                    9f:b1:61:70:cc:76:ee:11:37:c1:2c:56:27:73:17:
                    40:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E6:8A:1D:41:85:BC:99:6F:22:6A:85:10:F9:98:DE:D5:4D:D8:CE
            X509v3 Authority Key Identifier:
                keyid:0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:ed:96:21:23:95:12:1d:ae:51:e1:0d:22:0d:f3:9e:82:99:
         31:a4:5f:21:6c:c7:1b:bb:7d:e0:bd:74:60:25:00:8a:4b:3d:
         7f:32:23:df:59:78:de:07:85:81:df:29:6c:90:3f:9c:fa:18:
         b2:42:b8:02:15:35:03:43:68:fd:63:9b:a5:45:9d:46:38:66:
         cc:98:59:c1:2a:db:6f:04:92:7e:28:fc:bc:fd:f2:2b:36:1a:
         09:f6:fe:3a:08:53:1f:33:d2:a5:fb:bf:2b:88:94:23:df:45:
         3b:4c:b1:d2:23:b7:b0:0c:bd:1e:d3:9b:ff:48:40:6a:19:5a:
         fa:f4:36:af:59:5d:cc:64:a8:ee:ad:7e:52:1e:8f:25:8b:f4:
         06:98:71:6e:fb:40:cc:d8:f6:e2:67:1c:75:a8:29:20:00:83:
         17:7a:c6:9b:9b:8a:85:5f:b5:f8:fb:f3:ac:aa:f5:eb:9b:94:
         c7:b5:62:be:12:db:57:fd:a1:f0:56:bd:2f:c2:4d:89:67:95:
         51:cf:41:82:cf:0c:78:bc:ef:cd:d5:d6:48:b2:be:10:3b:5c:
         eb:fd:01:25:9d:44:ff:9b:be:ce:74:77:ac:21:85:58:99:f6:
         04:07:05:8d:73:6d:b5:ec:5e:da:ac:54:33:e8:55:cb:50:88:
         9b:be:e3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:58:51 2026 by rpki-client