Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft
File:                     muB8lKimr3pdGPTqrqeeJt-TIhQ.mft (raw, json)
Hash identifier:          GAQQ+svgusMwYyzsDJpo1Twlb+3AypnAvV0KRc82EYo=
Subject key identifier:   2C:25:C5:B5:59:A1:48:D1:EE:C8:B0:64:F8:46:2F:37:AF:01:FE:5E
Authority key identifier: 9A:E0:7C:94:A8:A6:AF:7A:5D:18:F4:EA:AE:A7:9E:26:DF:93:22:14
Certificate issuer:       /CN=9ae07c94a8a6af7a5d18f4eaaea79e26df932214
Certificate serial:       019EB84557FE343411B3E2B1A587C1D06B36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft
Manifest number:          195C
Signing time:             Thu 11 Jun 2026 20:00:12 +0000
Manifest this update:     Thu 11 Jun 2026 20:00:12 +0000
Manifest next update:     Fri 12 Jun 2026 20:00:12 +0000
Files and hashes:         1: i3LjlTv0cqfO8U47iFQcI5yeNfw.roa (hash: NUcR9PJxIM36308L6r/104nGPX7janujjExA79MiVJY=)
                          2: muB8lKimr3pdGPTqrqeeJt-TIhQ.crl (hash: oX0QdP3z7FU9fgLBv2TRX84yNVa1jReyWl2IW8exWWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:45:57:fe:34:34:11:b3:e2:b1:a5:87:c1:d0:6b:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae07c94a8a6af7a5d18f4eaaea79e26df932214
        Validity
            Not Before: Jun 11 20:00:12 2026 GMT
            Not After : Jun 12 20:00:12 2026 GMT
        Subject: CN=2c25c5b559a148d1eec8b064f8462f37af01fe5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f6:79:a0:67:17:d0:31:c4:a0:80:c2:1a:e5:
                    10:ed:9e:61:2d:8e:a0:14:32:3f:33:e4:c6:85:53:
                    de:1c:55:4e:cd:9b:11:6d:03:ec:db:6d:f7:d0:56:
                    9c:65:61:0e:67:83:ac:ea:8b:ba:64:98:b2:c3:2a:
                    36:25:59:d9:cf:21:df:3e:bc:bf:f9:8f:b9:3e:39:
                    15:7c:c1:8b:e9:eb:a5:04:ef:df:00:fb:dd:a2:eb:
                    01:b2:f5:75:46:79:b6:e7:41:5b:48:78:6c:42:a6:
                    ed:4d:b9:9f:f1:7b:22:d5:23:b3:db:3e:c2:19:4c:
                    33:a4:f1:fd:5b:a1:31:ec:53:38:78:3f:64:15:74:
                    80:24:91:15:22:66:4f:b3:a3:3c:8b:3d:a2:7c:1f:
                    51:05:a4:4b:f6:8c:de:c7:51:c4:37:4a:0e:e2:12:
                    44:c8:65:c0:b9:67:ef:2d:42:06:ea:9a:01:b6:d6:
                    73:1c:ad:0b:fb:36:1a:17:e4:96:1a:2c:6b:3b:e7:
                    dd:43:f9:ba:d3:13:b3:00:5e:d8:2f:2b:aa:2e:ca:
                    ba:25:63:f5:33:c7:0f:48:db:f5:69:c5:03:15:30:
                    7e:b2:ef:01:aa:0a:5d:7f:25:32:b4:8c:c2:47:01:
                    44:14:e4:de:4b:ca:be:c3:58:8e:a9:ba:60:1c:f6:
                    97:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:25:C5:B5:59:A1:48:D1:EE:C8:B0:64:F8:46:2F:37:AF:01:FE:5E
            X509v3 Authority Key Identifier:
                keyid:9A:E0:7C:94:A8:A6:AF:7A:5D:18:F4:EA:AE:A7:9E:26:DF:93:22:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:d1:8c:a4:74:ad:be:78:8c:50:06:e9:0f:91:07:bd:10:4e:
         45:11:7a:db:31:36:54:95:3c:f5:e5:d0:98:8a:fd:33:b4:47:
         b4:9a:52:65:a3:4f:b1:b0:1e:06:75:64:5b:ff:29:50:20:78:
         2f:08:09:af:df:f5:5f:19:bb:b6:a6:93:2d:85:31:e3:05:d0:
         4f:eb:a6:65:64:ba:1f:a0:cb:e5:27:16:f8:0b:4a:a0:ad:58:
         8f:6e:bf:84:82:86:da:fa:21:db:d4:62:69:7d:ff:d6:90:af:
         aa:9f:a7:90:06:15:cc:2c:e2:4f:57:3b:63:b8:d5:33:8a:93:
         70:de:79:29:13:89:4e:d1:58:21:1d:69:54:fd:65:6f:28:75:
         8d:a5:b6:0f:12:a9:06:c5:38:2f:27:be:7a:6c:57:0d:28:38:
         e2:69:65:a3:c9:69:77:ec:2e:cc:d1:e5:12:84:b6:51:a7:80:
         d8:42:c5:6b:90:52:c0:45:25:ef:9e:0a:10:c4:39:da:28:86:
         67:79:5a:23:ba:71:d8:dc:6b:53:43:83:a9:6b:8e:27:e0:09:
         6e:a5:5e:b9:04:b1:ce:30:2f:44:b1:90:12:12:53:50:2b:ab:
         60:87:57:5f:d6:8a:e5:8f:b5:62:d6:76:d5:5f:d0:b0:29:08:
         36:9c:23:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:16:06 2026 by rpki-client