Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
File:                     1zCimUHvvHp5J_ApSB4scloaZxE.mft (raw, json)
Hash identifier:          hnPISiX/os+TL7DXLBmehlJl4dnBk01rz1izVdjc5ok=
Subject key identifier:   B2:4F:84:B4:12:77:C9:9E:53:CE:A1:F3:A5:30:CF:B0:99:34:7F:9A
Authority key identifier: D7:30:A2:99:41:EF:BC:7A:79:27:F0:29:48:1E:2C:72:5A:1A:67:11
Certificate issuer:       /CN=d730a29941efbc7a7927f029481e2c725a1a6711
Certificate serial:       019F3CE2BD7DCD4A8111EBFBF9715A4ED7F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
Manifest number:          199B
Signing time:             Tue 07 Jul 2026 14:02:00 +0000
Manifest this update:     Tue 07 Jul 2026 14:02:00 +0000
Manifest next update:     Wed 08 Jul 2026 14:02:00 +0000
Files and hashes:         1: 1zCimUHvvHp5J_ApSB4scloaZxE.crl (hash: N/skwfyo4FuhpQkux6wJIjMLKpe3iZhi0hxstl+8thE=)
                          2: YsrfKZUom0hhdvtAbQlQ31S1LpI.roa (hash: QER6EJFTVwn6uMFElRbueTl9ramohyi1r1R/wDUOkjQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:3c:e2:bd:7d:cd:4a:81:11:eb:fb:f9:71:5a:4e:d7:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d730a29941efbc7a7927f029481e2c725a1a6711
        Validity
            Not Before: Jul  7 14:02:00 2026 GMT
            Not After : Jul  8 14:02:00 2026 GMT
        Subject: CN=b24f84b41277c99e53cea1f3a530cfb099347f9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7f:92:37:d5:27:6b:24:a9:62:18:49:a7:39:
                    98:d5:86:d7:ee:3f:70:b5:91:5a:57:06:73:b3:74:
                    ff:10:ff:cb:9c:fc:76:83:26:8e:1a:d3:2e:0f:7a:
                    f4:77:df:ba:48:42:9f:37:a5:01:9e:93:50:01:2d:
                    4d:2d:6c:5d:84:e4:10:2e:3d:d9:8a:20:e7:f5:c7:
                    08:90:d8:ee:07:13:ae:f5:fb:de:d2:c4:33:16:6e:
                    7d:b1:00:00:9a:1d:55:a3:60:09:a9:f9:38:3a:a9:
                    09:c1:5a:94:e9:09:0b:65:17:0b:92:4d:ae:ba:c9:
                    41:80:92:13:05:43:b6:33:0e:26:bf:2b:b0:8d:b2:
                    da:b6:a1:33:c1:73:6e:31:62:28:ab:fd:03:ad:0d:
                    88:8a:00:32:98:a4:c2:05:be:42:b5:e2:65:42:9f:
                    62:3f:f4:b4:8f:84:52:ab:24:b4:93:e2:4c:4d:20:
                    c3:4b:06:4a:c4:18:74:44:73:8d:b6:bf:be:4d:c8:
                    f6:4f:5b:da:1a:9f:0e:59:c3:29:88:0c:88:62:58:
                    ea:63:e5:f2:c6:03:88:c1:28:80:42:9e:0f:66:c7:
                    fe:15:49:b1:cb:6e:5f:5b:fc:e1:ed:a9:df:27:cd:
                    9d:2b:f8:a5:4a:9c:48:ad:94:21:96:a9:8d:3b:f5:
                    9f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:4F:84:B4:12:77:C9:9E:53:CE:A1:F3:A5:30:CF:B0:99:34:7F:9A
            X509v3 Authority Key Identifier:
                keyid:D7:30:A2:99:41:EF:BC:7A:79:27:F0:29:48:1E:2C:72:5A:1A:67:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:61:fa:0e:a8:5f:2d:dc:81:fb:74:79:97:22:f3:29:71:ba:
         e3:c3:6b:86:2f:63:c4:f5:fc:ac:e8:1a:15:25:df:1e:21:04:
         76:d3:ec:54:95:b0:1c:6c:f5:90:8b:7c:91:81:e4:49:57:36:
         07:38:34:af:31:9c:20:6f:69:66:be:4f:c1:5e:fb:80:e2:9b:
         61:4c:55:fa:be:f7:ef:ad:67:c6:78:96:7d:15:99:e8:a2:ef:
         2d:4b:35:9a:e3:9c:9b:11:a6:f1:e9:aa:19:8e:c0:01:a5:e9:
         91:21:16:50:a0:7e:26:f0:49:b9:a0:fa:74:03:5d:db:72:a3:
         31:87:51:d2:5c:bb:7d:e6:2e:18:c4:df:c8:7a:5d:fc:08:a2:
         36:f0:26:e1:d1:73:7f:ae:0c:36:ef:62:97:1b:58:8f:bf:c3:
         d3:c0:9a:ad:54:4a:13:ac:bf:25:78:9a:f4:17:c6:88:68:fd:
         c6:93:cc:56:ef:c7:95:3e:4a:dd:8e:d5:a2:31:04:ea:fd:d6:
         5e:53:41:7e:81:e1:ce:a5:4e:7c:55:8a:86:f7:a0:05:da:8c:
         fc:47:68:3a:37:fa:d5:a0:9f:8a:ef:82:61:6a:67:f0:a6:d1:
         55:56:31:dd:ab:34:fd:d6:d0:2a:e5:d2:ea:de:53:36:5c:fa:
         e2:7c:68:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 23:12:09 2026 by rpki-client