Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
File:                     RbvSGTZCUwoBf08cvlYuIXCz370.mft (raw, json)
Hash identifier:          OTs+MRMZhh+ZxMIm+NmPym54NR8H0/fwR5C3A1t7fg0=
Subject key identifier:   20:04:1D:99:F3:0D:43:5E:72:43:89:99:DE:15:B9:9F:49:09:AA:B8
Authority key identifier: 45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD
Certificate issuer:       /CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
Certificate serial:       019F08190C4EC9847C0E7CCFC864871B1522
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
Manifest number:          117D
Signing time:             Sat 27 Jun 2026 08:01:26 +0000
Manifest this update:     Sat 27 Jun 2026 08:01:26 +0000
Manifest next update:     Sun 28 Jun 2026 08:01:26 +0000
Files and hashes:         1: 1--457KV1-R-2AyDnu5gwQjLQg_o.roa (hash: 8N9wCT8kfIgyzoJcGZvHmJgv1bgcFxw3DbUmqgeqDIc=)
                          2: 4aqwAHha90l1eelclAQUVQR1I44.roa (hash: tcKMrTjhcN6vhODlC9CVcmb++R8Mkr/fDJOT6nlWeQ0=)
                          3: 9hzuEkfOLx6dbtvls8L-DK7YVvk.roa (hash: hKZSYd06joPWfMKvJuesIx8vrhQYzK0wkVb/y/gid8E=)
                          4: RBeFCjxIM7miAZu7QTFUMKs99XY.roa (hash: 632Ss4tpXpsH0DMtGlQw8IheEnppDKOHlGmiaPoTHgE=)
                          5: RbvSGTZCUwoBf08cvlYuIXCz370.crl (hash: W5AfqSVVH6rL8n3CBV78BSHMQ7uP4+WT9xZnH5wSsj0=)
                          6: e2mICNZ-ktWR8rRC8DNSqAlzYS0.roa (hash: Felav9tNWd/FcQPP7GRNQiXa/u4OHWKkmJPe4XvqDUM=)
                          7: eSTze8MlBFRraV4dsl31h2iw1VI.roa (hash: lDAECqzqHU746njNX6dpVZo+oFs2oTdwqB1k/OKzU9E=)
                          8: gxpF5Ywmi9CVdy65UZl-VezFpFY.roa (hash: u4fV+dkW37+bQyCJf6mzLseCn34MI5XSnX8fv1o7KNw=)
                          9: hLiW33dYFtk93njm1Q1HKa7zbas.roa (hash: tK/30Ejl4gGabl5/3tryRax+Y14BBBbKwIaeKOFx3Oo=)
                          10: l6wS_VO91DxNt91DRsp0DvYwmuo.roa (hash: 22h/qy7HYLT12nuxMyq//AhQ3qbzsI+VO3MFY5icjPc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Jun 2026 08:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:08:19:0c:4e:c9:84:7c:0e:7c:cf:c8:64:87:1b:15:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
        Validity
            Not Before: Jun 27 08:01:26 2026 GMT
            Not After : Jun 28 08:01:26 2026 GMT
        Subject: CN=20041d99f30d435e72438999de15b99f4909aab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:83:8f:94:78:10:b5:cb:2a:ba:04:c6:8b:90:
                    c4:0c:27:e2:a0:e8:a6:1d:9e:6c:99:37:ce:e4:0a:
                    48:ac:d7:f5:4c:23:aa:71:ff:eb:ed:a7:c0:0b:60:
                    bc:64:fe:69:64:8f:4e:08:a2:ac:ac:cd:91:41:f7:
                    77:1a:5a:a2:87:d4:94:33:72:17:cb:2f:a2:4c:a0:
                    ac:a1:87:6a:2f:01:2c:f4:72:28:9c:a6:b4:64:c4:
                    55:4d:81:ac:fc:93:ed:69:26:80:18:d4:1a:52:a5:
                    e5:55:6e:c8:8b:b4:59:97:ee:67:cd:19:5e:d4:e3:
                    da:55:44:80:b3:35:86:50:51:25:b5:7e:36:b3:e8:
                    90:2a:1c:56:e5:a7:12:06:8d:19:09:b0:a1:68:6d:
                    19:07:89:45:e3:15:74:c5:a1:a8:d1:0e:78:51:f6:
                    2a:05:5e:13:ff:17:6f:74:f4:d4:f0:af:3f:b5:6f:
                    da:f4:e3:f9:9d:c2:2a:ee:08:7b:1b:0a:6b:df:1b:
                    65:61:c4:30:7f:92:8e:e9:36:e0:67:9a:22:0c:9d:
                    93:06:d4:3f:63:af:72:82:82:cc:bd:34:8f:ec:96:
                    12:94:72:72:bf:11:9b:c8:d9:2a:4d:21:e2:36:e9:
                    ca:81:c7:1b:9f:d6:01:41:74:b0:9c:cb:c6:75:1a:
                    13:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:04:1D:99:F3:0D:43:5E:72:43:89:99:DE:15:B9:9F:49:09:AA:B8
            X509v3 Authority Key Identifier:
                keyid:45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:0d:e7:a7:e3:cc:d9:67:9e:27:f2:a9:03:46:48:d5:be:d7:
         ab:1c:5c:03:c7:49:91:5e:27:a4:58:cb:db:af:54:a3:7e:f7:
         23:a7:af:38:55:62:09:5e:75:c7:13:15:09:cc:ea:5f:f8:50:
         75:ff:28:32:c5:a8:80:d0:23:44:c4:4d:1b:e0:cd:7b:5e:d6:
         16:75:0f:cb:ab:d8:a4:6b:d4:73:d3:e8:2f:20:92:a4:b1:4a:
         14:eb:aa:02:75:aa:c3:22:ab:3e:41:7f:1d:55:82:3a:29:36:
         54:28:7a:de:6c:64:01:3d:5e:b9:10:5e:47:c7:bc:8b:97:39:
         8b:58:3b:b7:00:d0:26:02:9a:4d:9a:d4:6a:7d:ee:c0:05:f7:
         00:92:6f:46:fa:79:da:9a:3a:2d:4d:92:d5:ba:65:ec:de:0f:
         b4:0b:a0:a2:28:a4:66:2f:a9:a6:86:de:7d:26:70:19:66:8c:
         eb:db:2e:38:4e:35:12:a1:83:1e:87:dc:b2:8d:77:28:94:8f:
         18:da:a0:b7:6f:f1:85:93:1f:c4:9f:1d:d6:86:8d:04:80:95:
         a5:fc:f5:1b:0b:2f:35:b5:43:41:ec:14:4e:a5:55:d8:2d:ee:
         12:1d:b9:be:51:c8:6e:65:70:96:c7:db:8d:9a:86:79:b9:98:
         ee:ba:27:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 18:47:17 2026 by rpki-client