Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
File:                     _h0Y2aIic226wjERC4jerI2wM20.mft (raw, json)
Hash identifier:          d4QwdgyefbeI5suWkfAXJ/J5SUe2hkZaeAkBAvgSb6k=
Subject key identifier:   AA:10:BD:E7:EA:F3:4C:0B:7E:68:48:53:CC:34:DC:F7:BF:39:EB:7D
Authority key identifier: FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
Certificate issuer:       /CN=fe1d18d9a222736dbac231110b88deac8db0336d
Certificate serial:       019EB9C6552433FDE2B40F38FC78F183BB7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
Manifest number:          195B
Signing time:             Fri 12 Jun 2026 03:00:43 +0000
Manifest this update:     Fri 12 Jun 2026 03:00:43 +0000
Manifest next update:     Sat 13 Jun 2026 03:00:43 +0000
Files and hashes:         1: BGnG6gtmJf9oXbmJn6G8to3OAXQ.roa (hash: 7lUuJCGm6EGdC4KlGNBvD3jQRgoMt2XAzy3kEwKql7A=)
                          2: GRQeTTIlDXdek7LI3xSxbyP0wko.roa (hash: /36LNNo/X3fjiRfzW93svxxPJpEouDboCXaZzVepsY0=)
                          3: QIkShXbbHThv1aeU1a-peKPDkSs.roa (hash: VjCUy/EF7Rus5PhS1elNAKUIyC4Ng0/nopkU975oiO4=)
                          4: _h0Y2aIic226wjERC4jerI2wM20.crl (hash: NQNwbIs6pdYhta8JSgAz3wcQbDBxwwQO7otUJD4pdJQ=)
                          5: iYHzEnXzX7Ri36tD7aub9iMoOmA.roa (hash: 1jW4is5cwWCDH+AJEWg+glpxZJwRIEFEPAYxOuttUh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:c6:55:24:33:fd:e2:b4:0f:38:fc:78:f1:83:bb:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe1d18d9a222736dbac231110b88deac8db0336d
        Validity
            Not Before: Jun 12 03:00:43 2026 GMT
            Not After : Jun 13 03:00:43 2026 GMT
        Subject: CN=aa10bde7eaf34c0b7e684853cc34dcf7bf39eb7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:38:87:f0:e3:c4:fd:69:5e:27:ac:9e:a8:a6:
                    70:b4:31:a9:1d:82:01:a4:d1:bd:33:8f:bf:1b:a4:
                    1d:8e:4f:6a:51:78:c0:b3:16:c1:04:e6:0f:8a:7b:
                    f6:89:3f:e5:49:0b:8f:73:29:18:bd:7a:00:70:99:
                    17:31:12:ac:92:aa:79:03:e4:2a:25:5c:30:05:46:
                    3f:df:8a:5c:a3:d4:70:c7:0b:60:b6:14:b7:f0:bf:
                    f3:65:70:50:01:03:c9:8a:78:74:3d:c5:46:d0:a9:
                    fd:f7:29:92:33:6e:51:6e:16:e9:10:5b:25:00:33:
                    0b:22:a1:c3:b9:cb:82:3b:71:f1:92:9b:f7:68:8d:
                    e9:f0:f2:9b:06:c5:99:3e:13:d2:e9:b5:ba:cf:f7:
                    c6:fe:7b:9a:b5:11:5d:00:8a:d6:fa:62:7f:15:03:
                    86:c0:62:ae:06:a6:18:95:4a:cd:67:67:04:8c:5a:
                    01:7f:0a:5c:9f:88:cb:14:c1:e9:2a:ce:dc:fb:82:
                    39:98:4a:d9:ad:56:a9:91:67:d0:4a:5d:a0:f9:09:
                    56:f6:84:0a:7c:69:f6:a9:df:ec:0d:51:d7:ed:27:
                    00:9f:52:2b:68:46:a2:af:d7:51:df:9b:85:20:a7:
                    f9:99:f7:24:af:ba:11:fa:d8:3f:94:13:bb:85:c1:
                    e0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:10:BD:E7:EA:F3:4C:0B:7E:68:48:53:CC:34:DC:F7:BF:39:EB:7D
            X509v3 Authority Key Identifier:
                keyid:FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:af:10:18:3c:5b:ba:39:ce:b3:9f:9d:fd:1b:63:77:ec:3a:
         81:eb:8c:53:74:ed:94:a6:09:81:77:44:e6:80:d3:23:6c:7f:
         08:95:97:fa:51:7a:95:d0:ab:25:d9:93:54:c4:a4:7a:6d:32:
         bc:86:f7:ac:1f:76:ca:9a:4e:4b:32:d4:18:3e:e4:cb:29:b8:
         d9:da:61:a4:ed:62:e2:21:cb:86:13:8f:83:12:84:2e:cb:7b:
         b6:e0:98:81:20:7b:8b:f3:6f:21:55:01:68:66:f1:3d:e9:0e:
         9b:3f:5f:b6:ec:89:c2:58:82:a4:f5:d4:bd:f0:94:34:56:3d:
         20:a6:15:ed:77:50:23:2d:79:bc:3c:f8:0e:5e:9b:70:1e:ff:
         8f:5b:99:ca:7b:e8:bc:d4:17:07:30:fa:05:56:68:5a:a3:ff:
         36:25:75:32:11:43:7e:8f:71:89:21:3d:ed:48:52:78:54:4c:
         47:b8:a8:80:4f:9d:99:13:3f:f7:ca:ac:e0:ed:e2:ed:47:de:
         39:74:e8:b8:41:f4:f9:11:56:bf:89:e6:0b:8b:a3:7c:f6:46:
         f8:bb:63:48:e4:b9:ca:27:67:aa:b4:bc:e5:12:1c:5e:2f:d3:
         36:2c:35:ea:55:ce:2c:27:52:e3:68:e0:b5:76:71:6d:ec:7d:
         17:15:5a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:28:34 2026 by rpki-client