Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
File:                     Cx5y89CVf1puO9G4RKEqYUdEkCc.mft (raw, json)
Hash identifier:          rOXPNqJN4OruuwNfLSqul4mEZ6b6IApnPYvb5Ge3EAA=
Subject key identifier:   D1:9B:A4:E2:A6:5D:13:75:90:5C:39:BA:AB:1B:75:B9:C7:B9:41:B4
Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
Certificate issuer:       /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Certificate serial:       019F1B9F8C83EEEC05995A4B864763DE791E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
Manifest number:          199F
Signing time:             Wed 01 Jul 2026 03:01:08 +0000
Manifest this update:     Wed 01 Jul 2026 03:01:08 +0000
Manifest next update:     Thu 02 Jul 2026 03:01:08 +0000
Files and hashes:         1: Cx5y89CVf1puO9G4RKEqYUdEkCc.crl (hash: dQSYs6dirQMKq/MnUgqaaOMD1CHvnA2FCwiKaxsqbqM=)
                          2: GPIsYlil8kPkRS6gEM2NHsqbCFY.roa (hash: kvkFMQZNWkoCHYm6i5KcWUr0FuuwyQMeHon9wF+Il04=)
                          3: hsTKNuFtecu81R43BCP7v63FtKE.roa (hash: Jfq06SGiKWbDyYONhWT4ALN3kqL199bV3kH8pBzjomI=)
                          4: sJSAOEoKH3yqMibmQkkicbcwvd4.roa (hash: 3WriKsxAWFbvJqa+g1N1RIzhXWZvpso2ZA3Pg5F32hg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 23:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1b:9f:8c:83:ee:ec:05:99:5a:4b:86:47:63:de:79:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
        Validity
            Not Before: Jul  1 03:01:08 2026 GMT
            Not After : Jul  2 03:01:08 2026 GMT
        Subject: CN=d19ba4e2a65d1375905c39baab1b75b9c7b941b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:27:b7:8e:ff:99:2e:f7:a1:14:9b:f6:b9:4f:
                    b0:f6:de:59:9f:91:92:b7:fc:09:04:e1:8b:3e:e6:
                    0d:65:b2:6b:8e:f3:e1:35:49:7e:1f:ee:92:94:4c:
                    d0:9f:a0:af:cb:73:bf:1f:ed:3d:89:95:8b:9a:7c:
                    62:7f:f8:14:4c:3d:ab:fa:f8:fa:03:93:d4:cd:3b:
                    03:b3:b5:67:09:45:c9:5a:cc:3b:83:90:c4:14:77:
                    f1:73:a3:b1:ef:bc:7b:f4:0b:30:8d:77:42:2d:c0:
                    1a:64:49:dc:2f:4e:7d:54:d5:c3:80:71:a5:0f:1f:
                    53:05:15:c6:35:26:ee:2c:31:c2:c5:60:c0:80:b5:
                    e6:a7:01:40:31:49:0c:60:4b:28:e4:ec:e5:4f:7c:
                    4f:7c:ab:84:81:5c:b2:6d:48:2f:d7:91:b7:06:4b:
                    13:a6:87:9c:67:72:79:ed:75:dd:02:d5:e0:6f:7e:
                    66:27:eb:f9:b3:25:97:c6:18:d5:8f:19:50:fd:56:
                    95:75:5f:76:ff:83:0f:cc:27:c4:8f:fe:36:1c:8f:
                    cb:34:a9:9b:0f:4b:d6:e9:6f:5f:3b:75:2c:f7:bc:
                    b4:42:06:2c:a5:20:a5:8a:ee:1b:c0:f5:a8:35:ff:
                    9d:fe:c9:53:09:47:2b:25:3d:c6:25:8a:90:a8:a6:
                    dc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9B:A4:E2:A6:5D:13:75:90:5C:39:BA:AB:1B:75:B9:C7:B9:41:B4
            X509v3 Authority Key Identifier:
                keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:aa:50:21:32:bb:82:39:de:cd:18:d0:8f:39:ec:8c:c2:d7:
         be:97:56:5a:da:2e:cf:cf:2e:db:31:00:6d:38:c2:c7:45:3f:
         e9:ee:22:da:62:18:07:1a:d0:24:a5:99:ec:b0:a6:17:26:8b:
         aa:d2:4b:24:a4:b1:93:d1:bb:14:ca:e4:83:a2:d3:37:6c:ff:
         c7:1b:ca:bc:b6:7c:02:5f:90:60:5b:27:de:cf:9e:c3:a3:f9:
         83:12:a0:ea:b2:85:ce:e6:fa:1d:e6:34:1d:ce:0c:ed:26:a9:
         e3:e4:d3:fd:b5:1f:40:15:9f:c9:bd:44:ef:18:27:94:a3:98:
         4c:89:ef:e1:24:7a:2c:73:12:cf:3b:07:ad:a2:33:02:98:c8:
         56:ed:27:c0:93:1c:6b:2c:89:cf:68:cb:34:5a:a3:68:e3:b3:
         25:75:25:e8:43:11:94:24:fd:13:df:74:2f:41:6e:62:06:78:
         b2:7a:4a:99:b4:77:12:31:2a:e2:20:be:68:3d:bf:a6:eb:9d:
         21:16:dc:00:5c:9b:74:10:6d:5b:de:c3:1d:7b:fd:e9:ef:c3:
         4f:56:bb:b2:8e:93:18:0b:15:8e:0e:3c:a1:dc:ff:f5:b9:b7:
         c1:25:0c:78:74:18:05:c7:54:a7:dc:2f:d6:f9:0f:99:da:7c:
         13:56:ad:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 06:28:07 2026 by rpki-client