Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
File:                     xgWHGIm53K_n7DE2rtHd_uLfvH0.mft (raw, json)
Hash identifier:          fUfKgSHOFokkqhp58Z6mBDhW15JV9rkByWAOnLPEsRU=
Subject key identifier:   08:F2:84:D1:25:0E:81:61:18:83:93:84:85:74:D0:65:64:A8:9D:76
Authority key identifier: C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
Certificate issuer:       /CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Certificate serial:       019EB98EF9DDD4A2BDF2EA49C050975C801A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
Manifest number:          195A
Signing time:             Fri 12 Jun 2026 02:00:15 +0000
Manifest this update:     Fri 12 Jun 2026 02:00:15 +0000
Manifest next update:     Sat 13 Jun 2026 02:00:15 +0000
Files and hashes:         1: LS6g_qbOyr5L3M2tEJSHcqYLaGo.roa (hash: pmKUoQElX3xSvG0E8J7HtZYFqjVisgOfWkSTHkEuCRA=)
                          2: p_1zOjE7RDNIPM-9ijPLsTD4cC4.roa (hash: XKWGoP/7AKlCb/UQ1yCnmOl4XCSltYQxcpO0+1gE4vE=)
                          3: xgWHGIm53K_n7DE2rtHd_uLfvH0.crl (hash: 1CzGrFbwnA8ZKCRN30btnl4MMXIZcB13MHCZ4jNQ3iE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:8e:f9:dd:d4:a2:bd:f2:ea:49:c0:50:97:5c:80:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
        Validity
            Not Before: Jun 12 02:00:15 2026 GMT
            Not After : Jun 13 02:00:15 2026 GMT
        Subject: CN=08f284d1250e8161188393848574d06564a89d76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7d:ee:b6:c2:5c:dd:a0:5d:90:84:1a:b4:b9:
                    57:45:cc:f5:58:17:e8:e3:63:3b:41:b8:f2:52:18:
                    c3:45:fd:64:08:bf:6c:94:53:20:fc:0e:0b:da:18:
                    d8:59:f9:10:80:8f:ae:82:d4:2e:a2:d4:54:60:99:
                    0a:a6:14:80:be:30:bd:b0:4b:8d:ca:79:c4:58:90:
                    98:e9:9c:f0:9d:04:2b:a2:f0:07:0d:78:aa:45:70:
                    66:3f:05:be:05:76:76:66:a1:f1:ec:cc:ea:06:8f:
                    b9:4f:6c:54:a3:6a:a7:d2:0f:2e:01:3d:37:6d:c5:
                    64:8d:6c:59:f8:32:34:72:29:d1:71:77:78:12:8e:
                    50:86:7c:6e:b1:70:f5:23:54:c6:1f:a9:f3:3c:f0:
                    8e:b3:da:18:21:39:83:10:f9:40:84:7b:f5:92:c4:
                    e5:f7:42:0a:96:a7:6a:29:dc:4e:4e:a3:91:80:0b:
                    0a:cf:b2:46:a0:f1:e3:e6:b2:c3:e1:bb:b5:e8:24:
                    97:d1:9d:95:68:d4:35:c6:f9:77:25:a3:86:d9:a9:
                    7b:e4:a4:0f:62:d2:98:69:d8:af:d0:fb:eb:86:fe:
                    f1:06:fc:bb:d3:83:c0:d6:0a:88:fd:80:84:fb:fd:
                    ba:4d:68:74:cb:cf:02:e3:2d:7b:f9:73:44:3f:3a:
                    64:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F2:84:D1:25:0E:81:61:18:83:93:84:85:74:D0:65:64:A8:9D:76
            X509v3 Authority Key Identifier:
                keyid:C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:2c:1e:71:fc:e4:f6:20:c4:a5:55:5f:85:f0:b6:09:23:94:
         60:68:c6:79:68:fb:2c:a2:90:39:ac:1f:ab:ee:97:9e:42:6c:
         0a:dd:62:a5:18:22:d9:b1:63:90:fb:87:8d:f4:ae:a7:92:a1:
         7d:a8:af:29:6e:f8:e0:f2:55:c0:39:2b:ac:5b:96:85:ee:9f:
         0c:34:14:7f:28:73:c3:00:fc:4c:44:54:a2:02:72:b0:82:c1:
         dc:14:ca:1d:72:c2:78:6f:70:06:83:1b:5b:23:0e:9c:aa:8d:
         56:b5:97:c3:86:41:88:e9:bc:09:b6:f0:5d:78:83:c5:86:57:
         9a:bd:3c:ec:e6:59:fc:72:08:18:80:c5:72:1f:af:f3:11:91:
         cc:5d:9d:26:f0:80:78:68:d2:08:74:f8:fc:2f:6a:7e:36:c7:
         52:81:1a:c2:f4:0b:0a:2d:7b:ed:5a:ae:60:09:7f:28:bf:12:
         9e:9b:83:56:fa:cf:71:6e:13:44:bb:6c:41:14:4e:89:ed:4b:
         57:ab:03:d7:64:eb:ac:b6:9a:70:44:94:e8:3a:28:fd:b3:d4:
         3f:79:ff:5a:9a:2d:6c:b1:ab:c9:31:9d:7b:b3:52:e6:5c:f9:
         2e:d6:d2:f9:f0:35:49:04:fe:c6:5f:20:e0:ff:56:f2:9e:73:
         f6:4c:69:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:10:58 2026 by rpki-client