Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft
File:                     y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft (raw, json)
Hash identifier:          v1DlWBl6WQ44Wnctn/Kq5Ym2anzxyemDaUc0w0c9WjE=
Subject key identifier:   0A:D5:AC:F1:D0:F6:9D:9F:EB:EF:16:A0:5E:C1:07:81:7B:45:23:FE
Authority key identifier: CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2
Certificate issuer:       /CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2
Certificate serial:       019EB87D20AAAF6F33CAD68607AF614D7536
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft
Manifest number:          195C
Signing time:             Thu 11 Jun 2026 21:01:08 +0000
Manifest this update:     Thu 11 Jun 2026 21:01:08 +0000
Manifest next update:     Fri 12 Jun 2026 21:01:08 +0000
Files and hashes:         1: 9tnMBfiIpNVErByTpvjDqn5wKbY.roa (hash: kOpNjJnS/Tt8SHMz9QLvG0L/TVTmkM0mNYtN/5t0qzc=)
                          2: LqlXRkUNKwk_-dmKpSc5KGKpKes.roa (hash: 1jOcNl6r3kwVN+AqleFupD5CggyBXmRcpL/EsxE+2Ks=)
                          3: VJaS-jYIuprV7YtO1DCuyd2g5wY.roa (hash: hL/BN/PlAs7Bgm3HIeGTv4CgOWk68zftN+8vu/Zh/Kk=)
                          4: eV_cnBLHExwM3HoFdmLAj8EL0dU.roa (hash: izY6q8vOLE3p/u7foQA9fiAmgnD5RtTMesu7+JH2h/0=)
                          5: qDwRi2lUn6QwtTVR74uQNIDyQDY.roa (hash: jR4Cc4WipI4p46sG0PogQImTneHDTqWPMtigJYRDeY8=)
                          6: y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl (hash: p1rPsNzELhNtcqv5aa0fsW6uf3YjoAjjDGUm6e+y9c4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:7d:20:aa:af:6f:33:ca:d6:86:07:af:61:4d:75:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2
        Validity
            Not Before: Jun 11 21:01:08 2026 GMT
            Not After : Jun 12 21:01:08 2026 GMT
        Subject: CN=0ad5acf1d0f69d9febef16a05ec107817b4523fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ce:5c:29:93:03:05:d3:fa:5d:33:74:a0:91:
                    3f:ad:ed:38:c3:30:7a:58:e1:ab:d7:50:9d:c9:e1:
                    5d:57:81:b6:55:1e:ad:21:18:99:cc:40:6a:c8:df:
                    96:dc:28:72:b5:c5:04:db:3e:47:5b:d2:16:37:b2:
                    69:02:ce:6c:6b:9b:80:89:bc:52:2f:88:bd:19:77:
                    6d:55:e2:bd:9e:f0:d1:55:6a:b4:e3:9c:ff:72:b9:
                    8b:83:a1:1c:50:e2:05:e1:6d:9f:a3:6b:1b:cb:c9:
                    eb:8d:c1:f0:26:ee:35:33:f7:e1:67:b7:cb:98:fe:
                    72:41:bc:10:53:4f:ba:b9:23:f4:15:44:b4:c0:4b:
                    fc:67:0e:38:4b:5f:b2:34:4d:92:59:e6:58:c7:4d:
                    25:9c:30:f1:c3:21:c0:3c:1c:79:ad:91:64:91:58:
                    1b:1c:04:1c:1e:bc:bc:ad:8e:41:81:30:c7:15:15:
                    31:48:10:04:bb:4f:61:40:86:15:8c:98:d8:fc:18:
                    70:93:68:74:44:e4:47:a8:3e:8c:b1:bd:7a:1e:c9:
                    df:b5:ba:db:a2:a7:75:5a:56:7f:af:f2:80:6b:c9:
                    7c:56:55:b8:cb:4a:de:e1:01:0c:71:27:83:c6:3b:
                    5e:73:8c:ef:a3:d1:24:4c:7a:7b:09:76:2c:4a:6d:
                    13:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D5:AC:F1:D0:F6:9D:9F:EB:EF:16:A0:5E:C1:07:81:7B:45:23:FE
            X509v3 Authority Key Identifier:
                keyid:CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:11:d5:ef:fc:3b:80:02:2b:da:d1:7d:f7:25:04:a1:6b:be:
         5b:65:75:38:92:f5:5f:1f:e3:a9:a4:c7:97:5c:4f:19:fd:c7:
         8c:f5:8d:81:ee:d6:20:a3:40:6b:43:14:c9:6e:60:e2:d8:00:
         3b:ab:3e:96:dd:5f:2d:c5:7b:f2:36:91:8e:8f:6b:6f:5b:98:
         1b:c1:a6:10:ae:6e:bc:ee:ae:b8:b4:57:20:0d:da:ba:e7:31:
         19:72:4a:02:e1:a0:79:c6:4e:e0:0a:a6:21:bc:02:35:9f:49:
         bc:80:15:f6:07:08:85:db:de:1c:5a:68:de:3a:77:91:e3:05:
         d3:a2:c2:ac:a9:94:61:c4:9c:d5:37:0c:fb:55:67:b7:9a:7f:
         f5:27:3c:0e:2c:6c:08:d8:f3:12:88:8d:ce:73:c7:98:57:eb:
         4b:6d:f5:57:b3:6a:46:15:e4:1c:c7:31:9f:ce:f7:ba:5a:9a:
         e4:14:9c:69:5b:0c:7e:19:b4:fb:5a:6e:c8:14:17:ae:32:0c:
         71:c3:48:df:3f:ec:f9:b5:bd:00:ad:62:87:a7:fb:6f:89:f2:
         0f:35:1f:93:9d:f4:85:e2:3a:e7:6d:88:55:56:29:99:91:6c:
         f7:5e:75:a7:da:51:5e:70:8c:38:50:6d:e0:d3:96:72:d2:32:
         04:44:92:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:37:47 2026 by rpki-client