Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
File:                     v124EbXV0FvsN-6dCaTsUu7tGtU.mft (raw, json)
Hash identifier:          ixs1JqTiwNXZO9vMeOH4rNn+29f3ezRvyVxtX0A+83Y=
Subject key identifier:   B0:51:FC:4B:D6:08:CD:EC:84:6C:49:08:0E:8B:83:46:E5:27:87:E4
Authority key identifier: BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5
Certificate issuer:       /CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
Certificate serial:       019EB9FD51C7F62C53769A41A57E72D6EC01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
Manifest number:          195C
Signing time:             Fri 12 Jun 2026 04:00:46 +0000
Manifest this update:     Fri 12 Jun 2026 04:00:46 +0000
Manifest next update:     Sat 13 Jun 2026 04:00:46 +0000
Files and hashes:         1: KIh3iVyzYzBFwGCfMvIVwpDbwps.roa (hash: 0aqbny00NM5+aliDEhOtMTVMWp3rSs0L91g1Lzq7VNE=)
                          2: TFL4paU1haNnRInCWqOJo9sZT2Y.asa (hash: mHqD6U6ln2GlV4OWaVbyFcs+NJUkiBYoMa3GtoILhzg=)
                          3: cK35oW3CRoDVTabPCj-bao3z8NI.roa (hash: Ebd+i8ctjoE4+ZV/syWp95hkz3ZcP0gcjB71tiszUJs=)
                          4: ftWl42XlVR06kFIc2c0GqMJzHUE.roa (hash: nYy1i5V68Ehly7gVpP19Cgh2GN1U/c5mj8ykEj8Zqek=)
                          5: v124EbXV0FvsN-6dCaTsUu7tGtU.crl (hash: +pG4Dr1+G66hn+FeZu2d/IggKaXoperkq7VfBS6d4D4=)
                          6: wAYSOlZXIwRTXJ1_sEHsvUg6_Hk.asa (hash: sD8ye+o6KlRiRfxK9grgMbdXDN9cGHkO49QpZZCQGaY=)
                          7: wsCCmspEM6WspzHVHs3VS2kVt5s.roa (hash: hed0UXeEzgYWiVtnJDozjUnK8u7srJbOFxteQGQPqbY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 04:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:fd:51:c7:f6:2c:53:76:9a:41:a5:7e:72:d6:ec:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
        Validity
            Not Before: Jun 12 04:00:46 2026 GMT
            Not After : Jun 13 04:00:46 2026 GMT
        Subject: CN=b051fc4bd608cdec846c49080e8b8346e52787e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6b:47:ac:40:6a:a2:14:63:60:70:b7:c9:b9:
                    e1:fc:4d:88:0f:dd:e8:e4:86:b2:89:0e:12:cc:85:
                    fb:e2:25:9f:31:73:09:ac:59:1e:24:23:1b:08:f0:
                    90:38:b7:d3:b0:96:8f:8b:ea:de:fe:c9:47:f9:0d:
                    ee:b9:b0:3d:9a:8e:f9:93:86:89:fe:d4:1d:29:19:
                    ce:73:71:14:ca:f4:06:51:e7:e4:2e:46:e0:b7:f5:
                    7d:f9:ec:37:53:cb:e3:f0:a3:3a:1f:35:0d:50:41:
                    28:2a:cf:73:e1:3e:a2:13:d3:24:09:b8:1c:c1:ea:
                    c7:3f:18:97:8b:ec:74:f7:61:57:36:09:c0:57:8f:
                    7a:e2:98:c3:cd:03:a2:a6:09:ae:da:65:a4:4a:4d:
                    01:c4:9f:f9:31:04:c7:89:d5:ff:6f:de:49:31:eb:
                    a3:5d:5a:88:5e:58:c7:55:cb:ff:c1:6b:d6:b0:be:
                    83:ac:da:75:78:65:b9:81:b9:24:b0:88:1a:ad:32:
                    a2:be:3c:ed:70:25:11:e6:15:0f:1d:22:f6:cb:d2:
                    00:e4:ae:4f:b8:04:b5:ec:ef:92:c3:63:8f:70:2c:
                    dd:3b:6e:44:48:b7:89:dc:2b:3e:91:80:bf:d4:b9:
                    53:51:20:34:2f:9d:33:61:39:8b:82:87:18:ea:59:
                    b0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:51:FC:4B:D6:08:CD:EC:84:6C:49:08:0E:8B:83:46:E5:27:87:E4
            X509v3 Authority Key Identifier:
                keyid:BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:6d:0d:37:21:e2:b4:54:e8:70:8a:6d:86:3e:bd:54:b3:ae:
         5d:b5:ef:60:3d:b6:36:02:fa:98:75:bf:9a:10:09:fa:29:f6:
         94:f7:22:91:9a:a3:9a:29:0c:4d:b8:40:5e:0f:15:ef:cf:cb:
         5b:13:20:f1:35:08:91:74:6f:82:ab:1d:cb:c8:2b:19:2b:ee:
         14:6d:2b:fe:44:83:84:32:6b:3d:6c:e6:51:2b:5b:d1:25:94:
         e7:94:07:1f:bf:62:db:8c:2a:a8:ec:49:5d:b1:2b:8c:5e:2b:
         22:59:72:c0:65:a8:ff:9c:a6:f1:96:a3:45:48:7b:01:70:b7:
         f5:47:e2:e1:f9:6d:39:58:0c:48:79:05:14:0f:01:4b:8a:f2:
         a1:ef:ed:6a:95:0f:54:fa:c6:db:55:21:1f:b7:bb:19:e4:a6:
         11:32:79:65:66:b4:8a:9e:f5:41:78:73:59:f8:ae:56:aa:69:
         2b:aa:d6:76:d2:a7:f9:14:3c:3c:09:8c:1a:32:2a:df:a2:3c:
         4b:b0:72:a4:9f:df:cf:03:cf:87:24:6f:0c:3b:3b:cb:51:f0:
         87:17:39:c3:5f:cd:c7:1e:70:5d:34:12:12:9a:e6:9b:02:ff:
         26:e9:ad:b8:d4:b5:af:01:be:65:13:d1:7e:60:8c:a2:19:e9:
         2a:6b:c7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:51:16 2026 by rpki-client