Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
File:                     H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft (raw, json)
Hash identifier:          usYE1CRDMAbukFzGqCB9NwP06shLm64W9hqYzTyIDsc=
Subject key identifier:   24:89:B3:42:96:74:02:6E:57:AB:A6:80:B3:0D:09:7C:68:1F:70:C2
Authority key identifier: 1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
Certificate issuer:       /CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Certificate serial:       019F122E29FB5B970B80EEC3D2D50572C0D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
Manifest number:          199F
Signing time:             Mon 29 Jun 2026 07:00:42 +0000
Manifest this update:     Mon 29 Jun 2026 07:00:42 +0000
Manifest next update:     Tue 30 Jun 2026 07:00:42 +0000
Files and hashes:         1: BMPT7NzV-DRi_JSyLfbyEmpeKTA.asa (hash: 15wpV31R6UH9KqtLpqrDAtPxo5M+xz55jsCaBxJ8PWk=)
                          2: H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl (hash: g+TLP9EP+mzLciGlJEG2CdLFaZR2mgRJQ3DR8V656Lg=)
                          3: RoJCbChu4UCP6HbU25IvOtcjfaQ.roa (hash: ZExXuwYNhboyV3wplBFPIwIw4SZUYPtrZTHjOMct0iE=)
                          4: TCMNO3-CS_Nx-NPlLu6HlbDn--Y.roa (hash: JY2kbXROkO8FWfujlDIjurbZxxm0qrKzSX4v6ycpeWY=)
                          5: X5485C7ZqsWTqkySl5Kn8ckUA60.roa (hash: w+70iAnq3DeMprlSCHwSgxGyujS0yHyNG0DURrrh5ls=)
                          6: Zl6fGzQYTOHjw4PolDvPxgAOgoQ.roa (hash: GhUA9dcCQFJ4Ezs37D2x3nBwq7ffRWZrt0wbE9KxdKY=)
                          7: aPxKVSvNRXkuueNUo0oD6qVAbdI.roa (hash: 61RoVPH2gZzr7aCEfyXLcJOn37DXu2XNDfa7Kms2beA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:2e:29:fb:5b:97:0b:80:ee:c3:d2:d5:05:72:c0:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
        Validity
            Not Before: Jun 29 07:00:42 2026 GMT
            Not After : Jun 30 07:00:42 2026 GMT
        Subject: CN=2489b3429674026e57aba680b30d097c681f70c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8f:e5:54:5c:ca:ea:5e:4f:1d:c8:03:fa:a6:
                    81:1a:12:d3:e6:e6:42:1b:6b:83:3e:ce:30:99:65:
                    5f:f6:a3:1d:33:f6:e0:ef:bc:c0:75:6f:10:31:ab:
                    49:f2:77:33:7c:77:a3:2b:87:eb:70:2d:4f:81:6d:
                    57:21:97:54:e3:30:18:88:4d:89:33:ef:0f:16:db:
                    04:89:34:91:6a:f6:ad:48:9e:8a:5b:26:6a:b5:f8:
                    a5:30:e8:7d:56:03:04:d1:cb:b7:64:7d:ac:1c:1a:
                    87:8b:87:a6:22:fe:34:38:70:71:ad:3a:bc:36:70:
                    c1:c8:1c:8e:6c:2b:18:de:9b:1d:7b:67:ea:3e:83:
                    3f:b4:bc:64:e4:fa:74:24:f0:64:2e:4b:5d:0a:14:
                    5a:dd:60:3d:c1:40:f2:6b:c1:83:f0:0f:27:ea:8f:
                    42:88:d1:cf:4e:67:ab:ec:b6:eb:ce:a1:3c:40:aa:
                    30:b3:f5:d4:2f:e7:5b:b2:60:6d:bb:17:46:ed:01:
                    be:02:c3:13:c6:c7:d9:4b:f3:9e:21:dd:b8:e0:94:
                    9c:62:d4:96:09:9a:bb:c0:18:b3:9d:2e:6b:c3:44:
                    85:1e:0c:29:40:a8:64:b5:b4:20:c6:09:0f:2f:c2:
                    d9:df:1d:7d:3b:6e:3f:d5:54:7e:6b:9b:ed:49:8a:
                    97:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:89:B3:42:96:74:02:6E:57:AB:A6:80:B3:0D:09:7C:68:1F:70:C2
            X509v3 Authority Key Identifier:
                keyid:1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:8f:bc:ec:8d:4c:6e:41:54:9e:00:9c:8c:3c:9c:48:1e:5d:
         6a:42:ce:9f:9d:8f:ec:35:ba:85:2a:4a:82:aa:73:d8:7f:94:
         f9:13:29:f5:d5:76:eb:81:0c:f0:6e:d6:fd:c4:48:2a:e6:25:
         cd:27:3d:47:d4:58:00:b5:a6:55:5d:31:e3:41:c9:a7:e0:c8:
         e7:78:6a:3e:20:89:4f:14:44:f0:b8:99:b7:ae:a2:18:13:7d:
         1e:2a:81:23:9b:1b:68:24:0f:44:df:31:e6:6f:1c:84:fa:a8:
         49:5c:bd:50:14:cf:c8:78:b2:32:2a:3e:7d:63:d5:51:c2:a7:
         86:80:46:ae:f2:c1:44:ca:1c:cb:96:3b:54:76:46:58:62:54:
         d6:c4:3b:33:61:c4:18:cb:94:21:b6:d0:d1:28:5e:38:58:fb:
         77:25:8d:7d:39:7f:a2:09:4b:19:bc:5e:f4:86:6f:68:6d:07:
         df:7f:92:cf:27:26:ae:e8:12:e5:18:f5:77:1d:b6:74:1c:2c:
         0b:cd:43:c7:9b:cc:41:cc:df:ba:e0:db:21:18:e1:c5:21:b9:
         1f:9b:df:a8:cb:6d:36:65:5a:da:cb:44:86:f7:53:19:f6:6e:
         f9:33:9e:7d:ba:ed:00:4e:21:0f:3a:5c:cd:bf:f4:f0:31:78:
         26:10:a0:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8SLin7W5cLgO7D0tUFcsDUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNjFhYTVkMWJlZmQ3YTBmZTNlNGRmZTNhYThkYTczZWZj
ZmJhMzQwHhcNMjYwNjI5MDcwMDQyWhcNMjYwNjMwMDcwMDQyWjAzMTEwLwYDVQQD
EygyNDg5YjM0Mjk2NzQwMjZlNTdhYmE2ODBiMzBkMDk3YzY4MWY3MGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5I/lVFzK6l5PHcgD+qaBGhLT5uZC
G2uDPs4wmWVf9qMdM/bg77zAdW8QMatJ8nczfHejK4frcC1PgW1XIZdU4zAYiE2J
M+8PFtsEiTSRavatSJ6KWyZqtfilMOh9VgME0cu3ZH2sHBqHi4emIv40OHBxrTq8
NnDByByObCsY3psde2fqPoM/tLxk5Pp0JPBkLktdChRa3WA9wUDya8GD8A8n6o9C
iNHPTmer7LbrzqE8QKows/XUL+dbsmBtuxdG7QG+AsMTxsfZS/OeId244JScYtSW
CZq7wBiznS5rw0SFHgwpQKhktbQgxgkPL8LZ3x19O24/1VR+a5vtSYqXLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCSJs0KWdAJuV6umgLMNCXxoH3DCMB8GA1UdIwQY
MBaAFB9hql0b79eg/j5N/jqo2nPvz7o0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDJHcVhSdnYxNkQtUGszLU9xamFjLV9QdWpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wYWQ0MTQtM2RmMS00YjM4LTg2OWUt
YzYyMWU4ZGY5NWZmLzEvSDJHcVhSdnYxNkQtUGszLU9xamFjLV9QdWpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wYWQ0MTQtM2RmMS00YjM4LTg2OWUtYzYyMWU4ZGY5NWZm
LzEvSDJHcVhSdnYxNkQtUGszLU9xamFjLV9QdWpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATo+87I1M
bkFUngCcjDycSB5dakLOn52P7DW6hSpKgqpz2H+U+RMp9dV264EM8G7W/cRIKuYl
zSc9R9RYALWmVV0x40HJp+DI53hqPiCJTxRE8LiZt66iGBN9HiqBI5sbaCQPRN8x
5m8chPqoSVy9UBTPyHiyMio+fWPVUcKnhoBGrvLBRMocy5Y7VHZGWGJU1sQ7M2HE
GMuUIbbQ0SheOFj7dyWNfTl/oglLGbxe9IZvaG0H33+SzycmrugS5Rj1dx22dBws
C81Dx5vMQczfuuDbIRjhxSG5H5vfqMttNmVa2stEhvdTGfZu+TOefbrtAE4hDzpc
zb/08DF4JhCgAQ==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:37:32 2026 by rpki-client