Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
File:                     1-RVYjvgFRokoxj2rCGMAheXQj2U.mft (raw, json)
Hash identifier:          lkyLw7eZv/uJ9QU6VuyiBtE92hz77onnY81lDepT93I=
Subject key identifier:   22:53:81:0C:9A:19:8A:95:7C:2F:1F:04:37:9E:97:1F:EF:1F:F9:E2
Authority key identifier: F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65
Certificate issuer:       /CN=f915588ef805468928c63dab08630085e5d08f65
Certificate serial:       019F17C2DCF5C4C633024A299E3E3ED5830A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
Manifest number:          198A
Signing time:             Tue 30 Jun 2026 09:01:14 +0000
Manifest this update:     Tue 30 Jun 2026 09:01:14 +0000
Manifest next update:     Wed 01 Jul 2026 09:01:14 +0000
Files and hashes:         1: 1-RVYjvgFRokoxj2rCGMAheXQj2U.crl (hash: D8hOBgN6PUFOqi8qXMVuAxtxxe2rt9OYxr8BldilY9c=)
                          2: 7uqMUTjf5_dRZtlY5W6uIyVJIBw.roa (hash: +PFpSUBUn21QY3VMxev9eNCTJ4x+TBdranLn3xHpsiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 09:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:c2:dc:f5:c4:c6:33:02:4a:29:9e:3e:3e:d5:83:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f915588ef805468928c63dab08630085e5d08f65
        Validity
            Not Before: Jun 30 09:01:14 2026 GMT
            Not After : Jul  1 09:01:14 2026 GMT
        Subject: CN=2253810c9a198a957c2f1f04379e971fef1ff9e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:97:cb:71:e5:35:d3:11:94:91:fe:16:cf:c8:
                    00:e6:68:62:89:0b:1e:23:4c:a5:28:24:ac:8f:aa:
                    d3:2a:c0:e6:7a:26:f0:8e:02:51:68:84:87:79:2d:
                    3d:f2:c4:d4:12:a6:f6:54:33:09:4a:af:a9:ca:5e:
                    d4:ea:2d:67:f7:ed:5e:ee:da:ff:16:27:d4:a9:67:
                    22:8c:f0:bb:59:00:33:81:ee:30:7d:77:43:27:58:
                    9b:68:ff:b5:85:f6:9c:93:85:96:3a:3b:e1:93:de:
                    f2:19:60:15:94:47:3f:ce:0a:8b:2d:4f:b5:48:a3:
                    ae:13:54:b4:12:b0:5b:64:eb:34:77:18:d6:bf:17:
                    93:1d:82:1a:2c:4e:d3:2c:66:ab:1f:6d:a3:40:fa:
                    a4:67:a0:84:d6:30:f3:e0:55:c8:0d:6a:85:8d:82:
                    53:5f:b1:68:ab:f7:ab:bf:43:b1:c3:16:0a:9e:3f:
                    14:79:17:72:50:b3:fa:80:6c:7f:bc:27:a0:87:fd:
                    ba:23:ee:40:97:6d:62:f1:ac:33:83:e6:e5:0f:03:
                    86:32:33:76:c4:db:2a:ff:bb:2f:61:48:94:5a:94:
                    79:a8:97:ca:7f:da:93:29:0f:f1:6f:7e:6e:12:0f:
                    0a:88:2d:76:e4:e7:0f:b9:45:ed:17:6c:8e:32:18:
                    fb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:53:81:0C:9A:19:8A:95:7C:2F:1F:04:37:9E:97:1F:EF:1F:F9:E2
            X509v3 Authority Key Identifier:
                keyid:F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:79:1f:88:86:e4:8b:c5:c5:4e:ec:64:58:8f:da:67:dd:8d:
         ea:32:19:b6:7e:1c:9e:fd:77:2f:2b:dd:a1:ce:d7:97:b4:a7:
         d2:6f:ef:12:1d:30:69:39:68:50:f9:41:31:a4:3e:29:7b:74:
         bd:84:d2:02:f2:02:a8:f7:57:88:5c:5a:32:4f:58:bf:d8:ce:
         ed:0e:6e:bd:81:4e:ab:22:f3:14:d2:6e:55:99:f4:3e:57:48:
         93:56:7f:2a:fb:25:a3:b5:e5:50:3b:e2:c5:be:05:fc:4d:7d:
         5a:a8:5a:ee:f2:c5:55:28:5f:6e:b5:c2:1c:5b:05:39:bb:ef:
         57:df:2a:2a:7f:fa:47:8c:6f:02:80:ec:2f:8e:20:9c:b3:33:
         4a:e5:54:b7:64:87:b8:84:f7:2a:58:a9:9f:33:23:6a:59:53:
         3b:25:50:fa:7f:40:ea:72:ef:90:6c:29:90:a2:25:fc:69:cb:
         87:1d:75:2e:37:3b:a1:19:9a:20:63:18:8b:56:60:f6:5e:cf:
         8e:3b:99:60:24:37:94:40:a2:4b:cf:1c:fd:08:d1:40:85:9b:
         53:58:5e:a5:e4:27:69:9a:52:4e:96:5e:34:e6:17:33:43:7a:
         0f:fb:1b:3a:fd:1e:53:94:c9:40:c1:6a:2a:01:c9:61:d8:c1:
         7d:c0:ae:af
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ8Xwtz1xMYzAkopnj4+1YMKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MTU1ODhlZjgwNTQ2ODkyOGM2M2RhYjA4NjMwMDg1ZTVk
MDhmNjUwHhcNMjYwNjMwMDkwMTE0WhcNMjYwNzAxMDkwMTE0WjAzMTEwLwYDVQQD
EygyMjUzODEwYzlhMTk4YTk1N2MyZjFmMDQzNzllOTcxZmVmMWZmOWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopfLceU10xGUkf4Wz8gA5mhiiQse
I0ylKCSsj6rTKsDmeibwjgJRaISHeS098sTUEqb2VDMJSq+pyl7U6i1n9+1e7tr/
FifUqWcijPC7WQAzge4wfXdDJ1ibaP+1hfack4WWOjvhk97yGWAVlEc/zgqLLU+1
SKOuE1S0ErBbZOs0dxjWvxeTHYIaLE7TLGarH22jQPqkZ6CE1jDz4FXIDWqFjYJT
X7Foq/erv0OxwxYKnj8UeRdyULP6gGx/vCegh/26I+5Al21i8awzg+blDwOGMjN2
xNsq/7svYUiUWpR5qJfKf9qTKQ/xb35uEg8KiC125OcPuUXtF2yOMhj7NQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCJTgQyaGYqVfC8fBDeelx/vH/niMB8GA1UdIwQY
MBaAFPkVWI74BUaJKMY9qwhjAIXl0I9lMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1SVllqdmdGUm9rb3hqMnJDR01BaGVYUWoyVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvN2I5MjI0LWFiZjEtNGNhMy1iMDAx
LWJjODI3N2U3NWUwYy8xLzEtUlZZanZnRlJva294ajJyQ0dNQWhlWFFqMlUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzI0LzdiOTIyNC1hYmYxLTRjYTMtYjAwMS1iYzgyNzdlNzVl
MGMvMS8xLVJWWWp2Z0ZSb2tveGoyckNHTUFoZVhRajJVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUXkf
iIbki8XFTuxkWI/aZ92N6jIZtn4cnv13Lyvdoc7Xl7Sn0m/vEh0waTloUPlBMaQ+
KXt0vYTSAvICqPdXiFxaMk9Yv9jO7Q5uvYFOqyLzFNJuVZn0PldIk1Z/Kvslo7Xl
UDvixb4F/E19Wqha7vLFVShfbrXCHFsFObvvV98qKn/6R4xvAoDsL44gnLMzSuVU
t2SHuIT3KlipnzMjallTOyVQ+n9A6nLvkGwpkKIl/GnLhx11Ljc7oRmaIGMYi1Zg
9l7PjjuZYCQ3lECiS88c/QjRQIWbU1hepeQnaZpSTpZeNOYXM0N6D/sbOv0eU5TJ
QMFqKgHJYdjBfcCurw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:12:11 2026 by rpki-client