Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
File:                     K8hpV3Lw5k87mhYhczzAJQb3RwI.mft (raw, json)
Hash identifier:          IFED0QvoLZt11JNZ72rT4GHJJeyrDLV/kwEGxnW21IU=
Subject key identifier:   4E:EA:84:87:A1:D1:D1:3C:84:2D:73:BF:AF:0F:E0:FA:44:12:6A:1C
Authority key identifier: 2B:C8:69:57:72:F0:E6:4F:3B:9A:16:21:73:3C:C0:25:06:F7:47:02
Certificate issuer:       /CN=2bc8695772f0e64f3b9a1621733cc02506f74702
Certificate serial:       019EB957FCE5DFCEC3413CF6F25FEF8F3AA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
Manifest number:          196B
Signing time:             Fri 12 Jun 2026 01:00:11 +0000
Manifest this update:     Fri 12 Jun 2026 01:00:11 +0000
Manifest next update:     Sat 13 Jun 2026 01:00:11 +0000
Files and hashes:         1: 5CrZJSgU3umnhBpv3SBW8GVEgqE.roa (hash: 2gixcHV7KBq6bvuQpRe8OX0ebav7J2q4kd7P6HGr740=)
                          2: 66eo3bJdi9RGbEdDXS4tD5cqq_o.roa (hash: 5t8peN4WCQBgYdxTrPyY0DXm3aBeHyQsSo4GmYIKBxg=)
                          3: K8hpV3Lw5k87mhYhczzAJQb3RwI.crl (hash: hN8zdsdI985OyYiTkUd4W3zbdsMeebKh/qVJoObm1Pc=)
                          4: K_ZSiUHd1rB1pcqdi19och0DGOM.roa (hash: 8mJ7F1VxOqtPJAA3HEixFXJNyvdHfHViy/fRZXdsxig=)
                          5: QPcZtk0DXKyMJbNEz2ZuJuMfm00.roa (hash: umOLljeZUfmplY2DajwQdgANFJvFzfTBHi6UK1dXAg0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:57:fc:e5:df:ce:c3:41:3c:f6:f2:5f:ef:8f:3a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc8695772f0e64f3b9a1621733cc02506f74702
        Validity
            Not Before: Jun 12 01:00:11 2026 GMT
            Not After : Jun 13 01:00:11 2026 GMT
        Subject: CN=4eea8487a1d1d13c842d73bfaf0fe0fa44126a1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:af:b1:26:0e:cd:6c:ff:d1:82:82:11:9d:a8:
                    28:ca:4f:8e:2d:1b:80:09:24:5a:4e:fb:44:d1:9b:
                    fe:2c:6b:ca:b8:c8:a8:1e:83:b0:d4:73:a3:35:33:
                    5a:1a:8a:6c:50:59:42:9c:68:1f:5d:b1:51:8d:fc:
                    c6:1c:29:39:6a:5a:f7:f2:26:43:7c:55:d4:9b:95:
                    d6:5c:25:b9:ab:c2:90:13:61:54:01:3a:b8:5e:88:
                    a0:d9:e3:df:fc:c7:c3:55:fc:df:aa:de:65:02:dd:
                    f9:bf:69:1e:d7:5d:70:5f:aa:2f:64:62:26:1d:87:
                    41:51:cd:ca:93:d5:ef:71:50:a4:06:01:bb:eb:79:
                    8e:ca:9d:a5:93:3a:ae:85:2c:18:b0:cb:63:6c:b1:
                    8f:1b:7b:98:d3:c9:d5:9c:65:85:f5:ab:cf:38:67:
                    66:b5:eb:0c:f7:cf:8d:e3:c0:65:54:aa:36:96:bf:
                    d4:04:ed:27:c3:1d:45:60:85:0a:c5:a9:1d:e6:be:
                    4a:8f:57:7f:23:48:50:4a:a9:a5:73:99:30:a5:df:
                    64:fb:f7:49:cd:97:3d:3c:34:94:18:22:c7:74:47:
                    93:b3:8d:7b:1b:62:7d:3a:59:30:4f:7a:d8:3a:fd:
                    0c:d3:f6:22:b3:34:c4:ef:17:f2:83:16:a8:ec:cf:
                    f0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:EA:84:87:A1:D1:D1:3C:84:2D:73:BF:AF:0F:E0:FA:44:12:6A:1C
            X509v3 Authority Key Identifier:
                keyid:2B:C8:69:57:72:F0:E6:4F:3B:9A:16:21:73:3C:C0:25:06:F7:47:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:d3:b6:82:82:50:a7:c8:be:45:10:aa:33:85:86:4e:c9:08:
         ba:8f:b1:37:2d:53:63:af:97:f1:3d:8f:0d:55:b1:4f:c3:90:
         dc:94:c1:7e:93:19:56:03:0b:6d:59:0d:a0:91:b5:f6:21:39:
         82:1d:4f:21:d1:d5:95:4f:48:a1:4a:53:a4:0a:77:ad:df:c8:
         1f:86:e4:4c:86:21:f5:3a:e7:7e:15:78:36:c7:78:98:60:eb:
         1d:33:3c:b4:08:ce:f0:ab:27:29:73:e2:75:6a:70:ab:57:98:
         a7:37:e5:d5:6b:23:bc:ac:2b:26:60:25:a6:86:5a:0f:13:19:
         69:14:42:15:fb:ed:f3:1a:c7:d7:7e:86:4f:12:14:ad:85:bf:
         8f:06:51:89:e4:28:e9:4f:6e:b1:cd:41:8d:73:14:69:8f:2f:
         99:07:d0:ce:59:fc:e5:11:66:bf:47:c9:a2:13:11:86:ed:77:
         42:fb:66:a4:42:07:68:b6:3c:92:7d:ee:84:fb:df:89:1a:9f:
         70:4a:69:c0:e5:40:cf:71:b1:12:cf:d0:45:88:33:54:38:e0:
         37:71:12:84:5d:69:2c:5c:b8:24:65:2e:38:79:0e:88:c0:5d:
         16:09:6c:24:42:ae:89:87:cb:cb:fa:83:27:ef:b5:16:1f:b5:
         93:bd:a7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:12:31 2026 by rpki-client