Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft
File:                     Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft (raw, json)
Hash identifier:          tuaPlMcVzJGeDFwmkyrUqt7meqMvYLNcA9gtd48Ib6w=
Subject key identifier:   21:CA:91:BE:92:C6:89:77:92:02:AA:2A:13:C5:7B:48:DC:1C:18:FE
Authority key identifier: 47:0B:E1:86:5F:50:79:E2:4B:1A:7A:DF:DC:A2:7E:E2:FE:5D:1F:89
Certificate issuer:       /CN=470be1865f5079e24b1a7adfdca27ee2fe5d1f89
Certificate serial:       019EBDDA7746D797F42FF5D8813286AF6D58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft
Manifest number:          195B
Signing time:             Fri 12 Jun 2026 22:01:11 +0000
Manifest this update:     Fri 12 Jun 2026 22:01:11 +0000
Manifest next update:     Sat 13 Jun 2026 22:01:11 +0000
Files and hashes:         1: 2XedQ5Z42dY_hRwTsKx81Lezyfc.roa (hash: X9ztJb3Rfx+FojOZ+RViUwDKlFgWmcbx151sFFMV0Eg=)
                          2: Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl (hash: ZPo559Ioejaxr5VBwCw7M34SyYeC6X9JmKHrWjBn9F0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:da:77:46:d7:97:f4:2f:f5:d8:81:32:86:af:6d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=470be1865f5079e24b1a7adfdca27ee2fe5d1f89
        Validity
            Not Before: Jun 12 22:01:11 2026 GMT
            Not After : Jun 13 22:01:11 2026 GMT
        Subject: CN=21ca91be92c689779202aa2a13c57b48dc1c18fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d3:dd:0d:a7:e1:dc:4a:e0:52:3e:ef:1c:30:
                    ef:09:11:9f:01:88:cc:70:10:f3:ef:33:b0:e1:bd:
                    4c:e3:e5:23:0c:b9:e2:b3:86:1e:2f:3c:14:3a:da:
                    71:e4:da:2c:30:4f:ce:00:47:b8:b3:07:34:f2:4b:
                    f5:26:26:16:45:94:7c:26:7d:c9:cb:c9:62:f8:37:
                    ce:3c:4b:b4:87:99:75:17:ce:ae:40:53:83:f7:66:
                    3e:39:d5:78:4c:56:eb:e2:4b:43:dc:53:91:82:3e:
                    0d:46:c5:77:de:f7:06:59:b8:12:6a:65:33:4f:b3:
                    ab:8f:22:87:53:2e:08:af:03:ec:84:09:4b:68:97:
                    28:fe:7a:c4:ce:a0:87:01:00:50:fc:64:cd:24:24:
                    c6:f2:d7:c7:a9:f7:e8:1c:ad:f9:b8:e7:ae:a8:29:
                    93:00:14:09:d8:16:8f:29:76:6a:68:c1:2d:64:f9:
                    ca:31:8a:6a:ce:b3:b9:27:1b:37:be:66:63:3f:48:
                    08:ff:c6:7d:4a:6a:22:a5:97:c3:fd:b0:cc:a1:ee:
                    14:16:a2:e1:50:2d:18:ce:2f:7a:8c:86:0b:bc:8e:
                    33:91:79:dd:ff:17:aa:03:73:d2:ee:93:0b:09:e8:
                    c3:08:c7:f3:72:b1:22:0b:3b:52:61:59:6e:a6:ad:
                    ba:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:CA:91:BE:92:C6:89:77:92:02:AA:2A:13:C5:7B:48:DC:1C:18:FE
            X509v3 Authority Key Identifier:
                keyid:47:0B:E1:86:5F:50:79:E2:4B:1A:7A:DF:DC:A2:7E:E2:FE:5D:1F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:2d:28:93:37:8f:78:f3:3b:af:0c:a6:66:8a:b4:8d:93:2f:
         c8:2d:a5:0f:2d:07:07:bc:a5:b8:28:29:ea:8e:c3:5d:17:82:
         57:93:a9:7f:a9:77:c0:fe:01:99:8d:cb:80:fa:39:9b:22:38:
         3f:a9:dd:ef:52:cd:8f:6b:08:de:89:6d:47:ee:01:cd:05:18:
         c4:f6:0b:6e:24:4c:51:e2:2c:2a:22:b5:30:d2:95:a7:6f:a7:
         ae:01:6e:d6:30:77:74:94:aa:e6:0f:17:a5:c3:bb:68:53:32:
         6c:7f:17:ea:f0:0c:86:20:99:8c:f9:5b:4f:3b:c0:c0:aa:32:
         93:86:d5:12:e6:58:f5:92:42:3d:3c:c9:73:26:e0:74:1b:e6:
         0a:d2:88:86:4a:d5:d8:0c:d8:6b:63:1f:a3:0c:67:53:5d:56:
         0d:ab:8a:04:ad:5e:cd:51:1c:a9:3f:a7:f1:18:ad:0a:31:6a:
         30:7a:14:bc:81:eb:3f:e6:6b:d2:96:86:8c:d0:0c:4c:77:40:
         07:81:f0:0c:e0:3a:2c:7f:07:6a:09:1b:de:36:4b:44:a8:f2:
         9c:d9:12:a3:55:d7:e3:65:72:a6:c8:8e:c2:a4:32:79:d1:97:
         23:59:dc:ce:95:55:e1:13:c5:97:94:ba:e2:62:62:ae:1e:74:
         fc:57:82:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:22:03 2026 by rpki-client