Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
File:                     rSzwPkTaKLcxnqe3tbEQubjLenA.mft (raw, json)
Hash identifier:          xrMujTnLt3ss/fFoL0N0Y0rBKgX1sPj8yKoAEHA5SLE=
Subject key identifier:   5C:29:86:37:4F:9E:A6:B8:4B:D2:C4:53:53:8E:26:65:51:D3:2E:70
Authority key identifier: AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70
Certificate issuer:       /CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70
Certificate serial:       019EB8B4487C38E47381B9F6F9F8F7C21D22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
Manifest number:          195B
Signing time:             Thu 11 Jun 2026 22:01:23 +0000
Manifest this update:     Thu 11 Jun 2026 22:01:23 +0000
Manifest next update:     Fri 12 Jun 2026 22:01:23 +0000
Files and hashes:         1: X50-n9cVU2Zq24SDbQ05Dv_q5v0.roa (hash: S7zmoSUIsI4P7LLg9xapiyTzbeO1NkyzmEJQWzWpHOE=)
                          2: rSzwPkTaKLcxnqe3tbEQubjLenA.crl (hash: omXmzD5VsADwmO3zwQZHj9oI8fgBrX63sZsumBYt/ZM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:b4:48:7c:38:e4:73:81:b9:f6:f9:f8:f7:c2:1d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70
        Validity
            Not Before: Jun 11 22:01:23 2026 GMT
            Not After : Jun 12 22:01:23 2026 GMT
        Subject: CN=5c2986374f9ea6b84bd2c453538e266551d32e70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9b:d3:d5:dc:34:8f:34:c1:99:3f:e8:64:bc:
                    84:4c:97:f3:4d:a7:6c:fe:67:e2:89:1c:3c:80:62:
                    e6:fb:6c:76:0c:8f:e6:80:33:74:67:c8:5d:94:c8:
                    e9:41:51:7e:98:94:0d:ff:13:13:1c:5e:fe:a6:1e:
                    7e:f4:19:c5:7c:f3:d6:47:6b:2f:b0:a7:b3:cc:e7:
                    90:f4:c1:81:7e:f3:04:e2:de:2a:b1:c9:4f:8b:46:
                    c3:e0:dd:fe:c4:e9:d9:d5:72:68:c1:19:53:3e:1d:
                    b0:ca:6a:14:bc:e6:e3:7e:5d:e1:da:a1:81:82:f3:
                    08:89:14:78:09:c4:12:40:0d:30:86:a7:71:34:9f:
                    d7:0a:4b:fa:3c:e5:6c:4f:96:7b:20:fa:c8:c0:26:
                    94:a2:8a:c7:e0:35:0b:1a:f3:75:53:9e:38:55:e6:
                    a6:91:4b:79:30:30:ba:45:85:c5:f9:b7:72:39:92:
                    00:34:d4:0f:6e:47:35:e0:57:97:c1:1f:7c:76:c0:
                    4e:9f:36:a2:98:64:36:f8:67:fc:9d:34:37:71:ae:
                    f8:d8:1f:45:39:df:28:7f:dc:28:fc:f2:6b:e9:f9:
                    75:08:1c:1a:e2:17:43:eb:5f:d7:e5:1b:23:f2:17:
                    21:23:1f:9a:06:37:cf:dc:56:84:4b:59:1e:58:02:
                    72:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:29:86:37:4F:9E:A6:B8:4B:D2:C4:53:53:8E:26:65:51:D3:2E:70
            X509v3 Authority Key Identifier:
                keyid:AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:be:fc:e5:42:61:7e:5b:94:61:4d:e5:47:53:ac:bc:90:23:
         ff:3f:82:5a:48:fb:d4:c9:2d:e6:77:4c:d4:3d:5f:6f:96:f9:
         51:ae:f4:ec:1b:ba:a4:c7:85:28:4f:c5:ce:97:e4:8f:3d:d7:
         53:39:9c:f1:c4:3b:5d:32:7d:c7:27:ec:a2:b0:4c:08:28:33:
         2f:95:59:89:1e:f2:c4:34:ea:34:9e:b5:ea:e5:c8:79:6b:7d:
         07:d1:d2:65:43:90:ff:8d:44:fc:db:3c:e1:61:02:93:ba:8d:
         8a:77:bc:95:09:df:94:5b:6f:39:8c:ac:a6:b8:2b:b3:3e:72:
         0a:13:30:3b:ec:12:46:0d:22:47:56:de:6b:48:38:cd:0a:a5:
         ad:0a:4b:12:72:bc:cc:36:d8:17:bb:df:a9:93:44:60:7b:90:
         d5:37:f5:09:0f:f8:d0:6e:1e:c6:0d:a1:bf:8a:54:d7:00:17:
         ce:43:10:cd:d4:7f:8a:95:dd:42:40:d5:c1:78:4e:b6:a0:4c:
         39:63:f1:d6:1e:a2:7c:eb:25:35:45:0e:1c:f8:4c:c1:cd:d8:
         80:81:15:b0:ec:d7:49:a2:1b:c0:3b:38:c6:3d:90:fe:8a:4b:
         c6:d6:1c:73:74:cd:50:69:8c:85:8b:e4:ff:52:47:d9:c1:fc:
         e6:5c:5a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:32:59 2026 by rpki-client