Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
File:                     hg2fAamLUU69PCcj1_frRIMm9eI.mft (raw, json)
Hash identifier:          bsb5xmGMdZenM3srYDVf8TXx4CzxTvsqxIYeV8UGYj8=
Subject key identifier:   8D:A6:3A:1C:01:A9:5D:8D:F9:56:97:50:12:3A:1C:FB:48:E0:39:ED
Authority key identifier: 86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
Certificate issuer:       /CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Certificate serial:       019F12657663DD02026C3E1C759919E0F6BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
Manifest number:          198C
Signing time:             Mon 29 Jun 2026 08:01:07 +0000
Manifest this update:     Mon 29 Jun 2026 08:01:07 +0000
Manifest next update:     Tue 30 Jun 2026 08:01:07 +0000
Files and hashes:         1: 7mhV_rdVlcfkhURFQ4wNrLsuU1c.roa (hash: VRlZTooxFrT0D1E6AOYVVz4EsX/5w5g/g1JyVqO9SPM=)
                          2: h_hShADtBIzeK-Szx9l4bfm8jag.roa (hash: hsH1pDZZoflDWpuxdoPCV7EaJcM0R+/7hC4hgh317+4=)
                          3: hg2fAamLUU69PCcj1_frRIMm9eI.crl (hash: bEgJVr+3lbYcQ/wKlY57tnDlcZgKOEVsDEna5J3SCKw=)
                          4: mBU4ZRokNQYo8hY7jxPLO4xVWjE.roa (hash: fbuOZHgRTTEjubl87/wnr5NfhswtzCz7CKZVt7r/aRI=)
                          5: rPAahRiAFhKEWjnyhz4z-0lkvXU.roa (hash: zzqyB+t4YAf4zoHDwM87ojkF2fRZqc5eAp62HCRrYX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 08:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:65:76:63:dd:02:02:6c:3e:1c:75:99:19:e0:f6:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
        Validity
            Not Before: Jun 29 08:01:07 2026 GMT
            Not After : Jun 30 08:01:07 2026 GMT
        Subject: CN=8da63a1c01a95d8df9569750123a1cfb48e039ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4e:b2:b9:ae:30:5f:ae:21:83:94:76:47:15:
                    21:8a:9c:54:4d:70:06:bd:1d:7d:14:e6:9b:dd:7c:
                    20:6a:1b:3a:5e:1a:2c:7e:ea:08:f1:1c:ae:1e:74:
                    e7:65:d7:3f:c2:a6:f4:b4:11:e6:46:be:9e:9f:b4:
                    ba:0d:f3:17:3d:c1:59:26:1f:cc:90:76:24:7f:b5:
                    55:a9:1d:8f:cb:4b:26:53:93:af:26:d0:ef:06:f0:
                    14:ca:45:d6:3d:34:24:ae:ef:7e:2c:a3:b3:3e:fe:
                    2a:5d:30:e2:71:f9:8e:f9:d2:9e:85:4a:18:4a:6f:
                    f9:1e:b6:27:26:42:5d:5a:3c:3d:89:4f:74:fa:6d:
                    2b:f2:47:54:8d:6b:3e:de:45:6b:9a:ec:a1:42:6f:
                    a4:1e:03:37:cb:2a:7f:54:54:3b:9b:7a:72:2d:33:
                    3e:d5:e5:73:e3:6a:26:fc:06:82:84:c8:fd:6f:0d:
                    d6:27:5a:9b:9e:cb:4b:7c:47:fd:6d:1a:2a:14:ca:
                    1c:4a:10:81:de:6c:12:31:00:51:89:d5:5e:7b:b2:
                    0c:38:3c:5c:8f:97:5b:29:05:92:09:80:b1:91:69:
                    c6:45:97:ca:1e:5e:6b:90:33:85:ae:42:18:8c:b6:
                    d0:94:54:d3:11:ff:a4:7e:c7:36:24:ec:82:d7:fd:
                    d7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A6:3A:1C:01:A9:5D:8D:F9:56:97:50:12:3A:1C:FB:48:E0:39:ED
            X509v3 Authority Key Identifier:
                keyid:86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:99:7f:e9:25:eb:41:fe:d2:1e:b7:77:b8:50:ed:db:35:db:
         b7:57:56:91:93:0d:f5:f1:74:3f:15:f4:95:68:fb:8e:a7:a5:
         81:85:5a:6f:88:fa:43:1e:ad:4f:e3:87:2c:93:86:2b:6f:51:
         c8:5f:4f:8c:df:06:37:c4:19:b0:ac:4b:fc:99:d9:d5:18:eb:
         3e:36:ab:cc:92:28:b4:06:94:d2:9e:15:b2:af:de:7a:0e:d7:
         dd:ba:44:da:2e:73:a6:63:d5:38:6d:98:b8:3b:6b:f1:7a:97:
         a2:8b:33:51:c3:2f:53:f2:79:27:d1:88:42:17:60:c1:d1:48:
         b6:94:c7:a7:30:63:13:ff:93:c7:92:69:f2:1b:7a:cd:90:a2:
         fd:79:8e:08:94:80:54:e5:bf:1a:8b:ca:7d:c7:bb:58:34:64:
         60:b7:08:6b:f8:f5:fa:02:45:71:2c:66:32:18:1f:08:01:26:
         4b:73:aa:0e:ae:37:1c:92:9e:57:74:18:2c:1d:18:13:2c:c7:
         4c:c6:1d:ca:0f:6a:2f:51:b9:89:d2:dd:9b:f3:06:c2:e5:6c:
         9c:ae:56:cf:7f:a8:ee:4c:d8:38:82:a2:4f:8e:b2:62:68:9f:
         b4:ae:e5:44:b1:f5:74:f6:7f:da:c3:8c:d5:3a:b6:55:3a:43:
         a4:88:56:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:43:50 2026 by rpki-client