Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
File:                     0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft (raw, json)
Hash identifier:          7sIb6ljAh1pjUnYghChkiNYfMW/tEk0ZMFz912oTtII=
Subject key identifier:   C5:72:0A:A7:40:96:A2:42:05:C4:3E:1C:77:D2:4B:0F:DE:78:15:4E
Authority key identifier: D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7
Certificate issuer:       /CN=d0f6b8436f6634cd31d7097ce242a549935b18d7
Certificate serial:       019EBAA24A0B01AFE68808DB2CE5140A91F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
Manifest number:          192C
Signing time:             Fri 12 Jun 2026 07:00:58 +0000
Manifest this update:     Fri 12 Jun 2026 07:00:58 +0000
Manifest next update:     Sat 13 Jun 2026 07:00:58 +0000
Files and hashes:         1: 0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl (hash: uO0gAiaJCfps6HE9BP+XJFi0eTA14YWwu1Wv1QDNQQs=)
                          2: 5oT4wQDby08NkKpZXaWKlUX_zBw.roa (hash: UH0KTt9pI8ZDsM/VAmcpjDz5ijVSpSbjaototx0G23E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 07:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:a2:4a:0b:01:af:e6:88:08:db:2c:e5:14:0a:91:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f6b8436f6634cd31d7097ce242a549935b18d7
        Validity
            Not Before: Jun 12 07:00:58 2026 GMT
            Not After : Jun 13 07:00:58 2026 GMT
        Subject: CN=c5720aa74096a24205c43e1c77d24b0fde78154e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b7:ee:84:f8:bf:2f:10:80:40:0b:e0:0b:00:
                    f2:62:0b:6e:53:aa:44:46:fe:e7:55:80:d1:18:e8:
                    7f:2b:3b:28:c9:d2:ee:ca:06:62:46:39:7b:b4:05:
                    0f:be:c7:f9:7e:be:d4:6c:9e:a4:f1:59:44:59:cb:
                    dd:a0:26:9b:26:2e:42:4a:82:a9:29:6b:80:b8:f1:
                    0e:a1:5c:d7:ca:dd:8e:47:e9:94:47:ce:4a:3f:f1:
                    66:b0:00:89:7a:21:ca:1d:82:8a:f7:0b:6b:e5:50:
                    4c:1b:6e:a4:ac:91:df:c2:78:39:9b:02:7a:5b:01:
                    ad:81:5c:4e:6c:20:9c:52:98:1c:06:8f:c9:96:59:
                    43:24:e2:98:61:7d:db:bd:bd:a4:f3:37:6e:0c:e6:
                    63:60:35:4b:c8:25:e5:9f:ab:58:f8:76:ec:75:02:
                    e1:26:bc:db:8e:f2:0b:3b:7c:ca:2b:5d:4a:41:43:
                    f6:46:c4:e7:3c:27:1d:3f:93:0b:9d:e9:3d:91:c4:
                    a3:f6:62:ac:75:43:5a:05:c8:0a:0b:a1:b8:66:91:
                    77:fc:c2:61:99:33:ea:91:0b:1d:4d:e9:9b:a4:ec:
                    fe:58:d8:af:18:a3:20:db:2a:79:bc:b5:58:86:6b:
                    6c:ed:94:fd:d5:23:49:c8:80:f0:6e:2d:ef:b4:83:
                    4b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:72:0A:A7:40:96:A2:42:05:C4:3E:1C:77:D2:4B:0F:DE:78:15:4E
            X509v3 Authority Key Identifier:
                keyid:D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:e0:01:53:9c:8c:ce:f7:dc:a1:2f:2f:ca:f1:6b:cb:7e:f2:
         db:fa:d8:f4:5c:2b:5e:ab:ba:9e:09:79:ea:b2:e8:4e:21:ac:
         52:26:e8:a6:97:e6:23:00:62:af:9a:90:f3:07:8c:c0:78:38:
         e3:2d:08:c4:a6:59:30:af:a4:1a:ed:b1:b2:b2:35:b7:1c:52:
         d5:8e:36:a4:64:37:a4:7c:a6:a0:05:5e:33:61:19:c1:a2:d9:
         af:d2:75:e7:76:a0:76:2f:13:37:bf:f5:64:62:1d:5e:d7:88:
         4f:58:ce:28:85:28:9d:20:26:99:bc:fc:c5:45:38:0e:5f:c4:
         7f:4d:2b:87:2e:bf:09:9b:4a:ce:f2:ab:49:77:33:bb:4c:ee:
         32:43:d5:f2:ab:95:c9:ff:77:5f:0f:bf:e9:7b:e1:41:48:dc:
         66:c6:b1:8e:bd:5b:7b:b2:f6:30:96:5a:0c:a2:fe:a5:74:3e:
         c7:7f:8a:48:0e:a8:0c:03:54:05:0a:15:2a:31:17:34:1e:af:
         11:ab:65:19:a1:69:68:e0:fc:12:11:2d:35:27:f1:4a:8b:64:
         b3:8b:75:32:71:47:09:9b:7f:25:b6:7a:9c:5e:b3:e8:58:4b:
         5e:33:03:5b:1b:d2:e3:9f:c5:72:e4:64:02:cd:fc:b8:72:55:
         f0:37:ec:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 14:13:48 2026 by rpki-client