Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.mft
File:                     cH9-5quc9Ej5lJNn-3wO3hBz-X8.mft (raw, json)
Hash identifier:          yVDLIqb7SQgK9fSM1ZIcq7Nb8YvwU8kHx22tWaHs2E8=
Subject key identifier:   6D:E7:B7:E2:00:D6:53:38:E8:04:31:01:D2:63:95:9C:91:E3:5D:14
Authority key identifier: 70:7F:7E:E6:AB:9C:F4:48:F9:94:93:67:FB:7C:0E:DE:10:73:F9:7F
Certificate issuer:       /CN=707f7ee6ab9cf448f9949367fb7c0ede1073f97f
Certificate serial:       019EDCC11B66AC2218CE0C7D4645F9042816
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cH9-5quc9Ej5lJNn-3wO3hBz-X8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.mft
Manifest number:          196A
Signing time:             Thu 18 Jun 2026 22:01:43 +0000
Manifest this update:     Thu 18 Jun 2026 22:01:43 +0000
Manifest next update:     Fri 19 Jun 2026 22:01:43 +0000
Files and hashes:         1: cH9-5quc9Ej5lJNn-3wO3hBz-X8.crl (hash: FVxo6QKT9ZA7K/lV74qAnkG6B9lFmCiDnswGliPm1L4=)
                          2: zgLXTpk-8H2GpRU6zjvUcBKVFgQ.roa (hash: +8sCtRK7E8WuZa8zAB4CIbZay8o7tR+1lHOEMtgrIqo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cH9-5quc9Ej5lJNn-3wO3hBz-X8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Jun 2026 20:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:dc:c1:1b:66:ac:22:18:ce:0c:7d:46:45:f9:04:28:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=707f7ee6ab9cf448f9949367fb7c0ede1073f97f
        Validity
            Not Before: Jun 18 22:01:43 2026 GMT
            Not After : Jun 19 22:01:43 2026 GMT
        Subject: CN=6de7b7e200d65338e8043101d263959c91e35d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5a:04:13:ec:1c:70:a9:b0:30:07:f5:54:57:
                    19:20:59:e7:49:60:f7:00:ea:2b:bb:80:df:f5:d2:
                    1f:8d:10:93:f3:25:47:88:1b:cb:4b:ef:c8:6c:13:
                    78:e6:68:cd:01:c1:15:b8:af:e9:0e:af:eb:54:f8:
                    fb:ff:e7:64:3f:b3:cb:b9:36:7d:4a:f9:40:07:a0:
                    04:fc:80:d0:41:2f:a1:08:b0:dd:a6:00:ca:57:52:
                    92:73:94:11:d0:ea:9c:79:57:68:da:65:c0:68:df:
                    6e:12:f1:41:16:24:34:56:2c:54:e5:89:d5:6a:a3:
                    ce:9c:42:33:5a:2e:f5:31:27:c7:66:cd:63:9d:f4:
                    eb:9b:e2:4b:54:e3:4f:e0:31:09:91:b3:f3:2a:0a:
                    a6:29:a0:f6:66:4f:f6:fc:71:b3:51:8b:4f:c6:49:
                    f8:6f:03:03:ae:ca:d2:98:38:99:46:5b:5a:70:0f:
                    52:42:bd:47:30:44:33:37:1c:2e:c6:5a:60:98:63:
                    c1:42:ca:75:99:db:fb:1a:8c:a6:83:71:ac:d8:a2:
                    7c:4e:12:9f:2b:cf:9f:73:cc:86:7a:db:87:64:b2:
                    7e:ed:13:fa:4b:f3:a1:f5:fc:ef:a3:93:cd:7f:ec:
                    04:13:b6:b5:2a:75:90:58:fb:93:87:76:03:ae:8c:
                    c9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E7:B7:E2:00:D6:53:38:E8:04:31:01:D2:63:95:9C:91:E3:5D:14
            X509v3 Authority Key Identifier:
                keyid:70:7F:7E:E6:AB:9C:F4:48:F9:94:93:67:FB:7C:0E:DE:10:73:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cH9-5quc9Ej5lJNn-3wO3hBz-X8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:a1:48:ef:e7:78:10:9e:b3:97:57:92:d5:94:a1:f8:e5:54:
         25:7d:f4:25:31:29:13:45:58:07:4d:b3:31:a7:5d:73:85:50:
         0b:e8:9f:2f:4a:57:65:96:66:8c:47:46:ca:6f:ae:28:3e:10:
         c5:a2:d0:9b:e4:80:ad:89:9f:03:f3:86:e0:f5:f1:57:4e:8c:
         c1:03:f3:9e:8e:24:0c:e9:de:c3:68:9c:a7:47:41:aa:49:5a:
         be:0e:5d:12:c1:35:2d:92:19:b8:69:32:5e:5e:1c:7b:33:6f:
         38:11:e3:b1:e9:fa:85:02:4c:c3:f1:c6:6d:17:31:51:a3:ed:
         eb:36:df:d5:0c:e8:4a:96:6b:c2:20:22:68:76:dc:d2:00:f9:
         dc:46:41:c0:f0:59:11:2c:51:40:8a:aa:38:5c:f0:20:92:62:
         fa:79:57:bd:31:e0:75:f4:d1:13:e4:3e:8e:de:f3:bf:eb:57:
         42:93:04:89:c7:a2:86:d3:ec:51:2c:03:04:3f:27:d2:09:8c:
         6a:82:b3:88:62:4e:c8:67:01:56:25:3f:b9:cd:88:7d:48:07:
         1e:ea:c0:96:0d:96:e9:f0:f7:61:bc:4e:2a:b0:ea:fa:a7:43:
         aa:7d:df:3d:ae:40:26:16:fd:10:cf:a2:4c:de:5e:07:1b:ae:
         01:59:27:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 04:32:55 2026 by rpki-client