Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
File:                     A0sO7SxaeHrYf7SfBNP989D0nUw.mft (raw, json)
Hash identifier:          q9eeZobm2aYIM7bxmF0V8gK24GOE9ShxhQv1dhR8vLc=
Subject key identifier:   63:B3:E6:43:53:E8:80:78:EE:65:9E:90:21:FA:48:79:6B:7A:C0:90
Authority key identifier: 03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
Certificate issuer:       /CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Certificate serial:       019F17F93E03C03DBE005799AEC0F104EB5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
Manifest number:          198C
Signing time:             Tue 30 Jun 2026 10:00:38 +0000
Manifest this update:     Tue 30 Jun 2026 10:00:38 +0000
Manifest next update:     Wed 01 Jul 2026 10:00:38 +0000
Files and hashes:         1: A0sO7SxaeHrYf7SfBNP989D0nUw.crl (hash: zt9VgSWciYU2c79uNbZ8puiIt3BtIhPbz73KH3ll3Rs=)
                          2: AnjhFMrWNEvE6l4HScTxK_j27SU.roa (hash: q/okpxUfXsi/Ghlksygzoe9SFHbeI77lnOKud4Wi2WM=)
                          3: ZRqL0ZQYom47oCvdLADk1vcBuk4.roa (hash: GIVmQ7w9VSaVEEGnKk80w5fPNmlaYNBnsxkMwqLM9S8=)
                          4: s-hYEuR7QzCMZYkhMtC8P1oHx24.roa (hash: xVxCRO6iWAgbZPNlY9qjziiMXXmRZfi75ei52vrfj30=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 10:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:f9:3e:03:c0:3d:be:00:57:99:ae:c0:f1:04:eb:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
        Validity
            Not Before: Jun 30 10:00:38 2026 GMT
            Not After : Jul  1 10:00:38 2026 GMT
        Subject: CN=63b3e64353e88078ee659e9021fa48796b7ac090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c0:e9:36:97:b1:f7:81:80:7c:53:5f:09:34:
                    7f:61:df:99:38:a1:eb:f3:b4:77:da:b1:0e:43:b5:
                    a5:55:87:c3:b3:44:f8:bc:fb:cf:d0:ba:d4:d7:af:
                    a4:ab:c9:42:dd:8e:9a:b2:0f:54:9e:22:c0:cf:a0:
                    61:06:43:de:cd:37:22:45:1f:9d:f2:9f:ef:e2:3a:
                    db:3e:ea:5d:32:fc:92:9c:f3:bf:cf:c2:23:82:17:
                    d1:86:b6:a3:48:64:75:5b:6d:c7:3c:35:09:0c:4c:
                    5b:7c:3d:d1:99:5a:73:55:b6:61:60:b1:1d:96:30:
                    73:dd:96:9d:d1:fb:c5:ed:da:5e:8d:96:c8:a7:4c:
                    fc:01:d7:b9:bc:62:1a:89:11:eb:94:5d:21:e1:0b:
                    96:fb:eb:5e:63:67:16:5e:79:75:ea:69:ea:d8:33:
                    94:84:a4:38:f1:37:2b:bb:70:37:54:12:c2:ce:6d:
                    e9:2e:75:7c:18:87:69:f9:39:f4:41:13:4c:9c:75:
                    7a:3c:1c:57:4f:bf:67:0d:8a:40:4d:42:af:f4:f3:
                    3b:45:ac:59:d7:5f:b0:c6:e3:f5:db:81:d2:2b:77:
                    61:d3:1e:c7:b8:aa:9c:0a:a7:da:ec:eb:55:36:46:
                    85:43:06:b7:ba:ca:44:97:da:47:38:01:03:56:ce:
                    95:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B3:E6:43:53:E8:80:78:EE:65:9E:90:21:FA:48:79:6B:7A:C0:90
            X509v3 Authority Key Identifier:
                keyid:03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:a1:7e:bc:b3:e2:76:fb:60:27:b2:a2:8c:51:93:48:50:52:
         cd:9a:4b:1c:3e:71:c5:46:90:4c:e3:78:b3:f2:f2:4c:7b:4a:
         01:90:f0:49:b3:d2:02:de:b6:f7:77:45:1b:85:39:e7:35:03:
         29:0c:ac:bc:89:34:20:b1:61:3b:93:25:c6:ee:12:ef:ff:76:
         ca:95:ae:16:c4:81:55:6a:1c:67:57:39:10:ad:9d:b1:59:39:
         73:be:51:8b:ce:d8:06:19:1f:53:21:ea:be:8b:5f:f2:26:32:
         09:6f:70:ac:c8:51:fc:32:f8:29:49:04:e9:98:b3:04:3a:37:
         09:16:54:a9:2f:3e:c5:df:c0:01:72:72:54:1b:80:dd:e8:35:
         42:8b:48:0b:ab:ef:02:f0:68:b7:46:67:ad:53:29:ba:3e:68:
         05:a1:80:24:bc:27:70:d3:97:87:4e:1d:0a:f2:48:15:de:08:
         0b:74:1b:0f:63:db:b5:14:8d:c0:e1:3f:e7:b4:f6:8a:67:15:
         23:ae:5f:f4:8a:8a:63:71:db:ec:48:f5:aa:81:bd:fa:24:26:
         4c:7a:0e:30:a0:7d:f9:e3:c9:88:b3:8d:06:aa:8d:9c:f3:a6:
         26:3b:87:20:9f:00:9d:f4:9d:d6:49:90:73:f7:2e:be:22:71:
         d8:3c:3a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:19:15 2026 by rpki-client