Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
File:                     l0Zhyxw45jvXi9aysdaGhqVBW_U.mft (raw, json)
Hash identifier:          sQDw7mbdPIziSdySHUNmvrx+WL8ue4PshKh4H5bAZKI=
Subject key identifier:   06:8F:2B:41:5E:B7:22:04:F7:6E:D2:DE:6D:52:7A:BC:AA:BC:4A:92
Authority key identifier: 97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5
Certificate issuer:       /CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
Certificate serial:       019F1152BF8DF1FEA2F46988D1D17808F990
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
Manifest number:          198E
Signing time:             Mon 29 Jun 2026 03:01:03 +0000
Manifest this update:     Mon 29 Jun 2026 03:01:03 +0000
Manifest next update:     Tue 30 Jun 2026 03:01:03 +0000
Files and hashes:         1: 3JvVaHFxMvE7oKb_Rk5KcxOo0QM.roa (hash: ni3uO/fhFfgK3uTopvt+sNnEoUiIwxpRI4kiwz3P0Q4=)
                          2: C9Y58BKwkaw0ZHTl_j0txcpI-HU.asa (hash: 6ft+Zt4xMqD8pufWleBqsqUW7RgXeGTKhk+GP4M0q7Q=)
                          3: b4x9At5aHU384b0djamWkOwy0Gk.roa (hash: kQ+bOS8CQlnm4PmXuVXiGK4SgaDFMpdC3HI9bBKlvtQ=)
                          4: l0Zhyxw45jvXi9aysdaGhqVBW_U.crl (hash: 88GBAMM33o+DLomWLdGiI2teiFDROjV6Jzmto4/MUBU=)
                          5: mYpQfCwGUFa_N3gCiTs-pRnvFpc.roa (hash: gQqVTcaiR3QtkZ8CYSUcJShg6d7Q858NjMwMx9HDxMo=)
                          6: vEZLnR5almH1CGYItYBwVOGJqYY.asa (hash: Q9dmdkbTJa12zCUuc9rAzbHv2trspyTh+XDW4FOxvK4=)
                          7: yu-i2x-62u9GgIqkbHtrB0flg3s.roa (hash: DBRnQF75P0UT8wiwqTpnRrbuWAWKmmICP891u/zUXI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:52:bf:8d:f1:fe:a2:f4:69:88:d1:d1:78:08:f9:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
        Validity
            Not Before: Jun 29 03:01:03 2026 GMT
            Not After : Jun 30 03:01:03 2026 GMT
        Subject: CN=068f2b415eb72204f76ed2de6d527abcaabc4a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fa:1b:8a:4a:21:8d:0c:71:a1:a7:48:5e:f9:
                    c9:27:b5:2b:99:49:6f:37:4e:c4:59:34:87:ac:1c:
                    32:c6:d5:3b:0a:53:17:47:a3:f7:86:b8:ab:f6:88:
                    7f:df:4f:ff:36:d2:d8:52:e2:7e:2d:b7:d1:31:5a:
                    1a:de:ee:10:c6:f1:7d:4e:ff:e7:c1:b2:ce:f5:98:
                    f6:22:38:24:54:a3:6f:3e:b1:9e:1b:3b:34:51:c2:
                    91:f2:77:29:7f:d1:2c:e2:23:90:3c:1f:d2:86:e3:
                    6b:a7:50:39:78:a2:44:89:39:7e:2b:c1:c5:88:3f:
                    e9:b7:84:88:0d:40:c1:3f:95:6a:8b:1c:6d:34:f5:
                    da:88:f0:c8:62:9a:13:50:ec:a9:03:1d:8e:fa:c0:
                    1e:19:a3:53:38:b0:54:4d:85:80:03:ce:5d:42:b2:
                    c5:e1:bb:65:50:08:2e:ca:31:31:52:e7:f0:29:7e:
                    c9:17:41:d3:40:5d:ad:b4:45:a1:d5:f7:96:a5:b1:
                    60:16:c1:95:2f:e2:a9:b5:56:73:cf:4b:a5:c8:8c:
                    c0:59:82:54:ed:37:27:fb:c2:10:63:ff:3b:bd:29:
                    30:fd:e1:37:dc:ca:b2:76:79:82:54:bb:f3:cc:b6:
                    d6:17:72:f8:c3:e0:85:97:13:15:99:a6:57:95:09:
                    9f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:8F:2B:41:5E:B7:22:04:F7:6E:D2:DE:6D:52:7A:BC:AA:BC:4A:92
            X509v3 Authority Key Identifier:
                keyid:97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:b2:eb:ad:76:e2:9c:b1:de:9f:a3:af:62:8f:a7:82:cd:f2:
         c6:05:dd:11:3b:23:a8:6b:ae:89:2f:f5:85:95:7c:21:c7:b3:
         b5:4f:e4:50:dc:09:eb:26:37:a6:04:37:b9:fd:96:36:86:ed:
         83:54:d9:5d:f2:53:44:0b:9d:0a:ca:06:bf:c8:0f:b2:36:95:
         c3:e5:5e:c6:8d:c2:56:8f:21:fc:ca:c0:0b:76:49:a7:ed:ad:
         67:3b:b4:11:83:b9:4f:e0:4e:54:6a:4d:62:96:d0:31:18:32:
         97:f4:ed:6e:fb:99:07:10:c8:4f:cf:b3:90:d8:72:af:42:ba:
         cb:e4:97:8c:96:a6:6d:2a:9c:2c:76:da:8b:68:fa:89:8d:42:
         20:ed:be:23:83:78:5e:fc:be:1f:10:48:e8:27:50:85:93:8e:
         5a:e6:ff:ff:5f:16:cd:6d:d5:33:1a:0a:f9:d8:5b:6e:9a:3c:
         45:a3:cd:cd:7c:34:f0:de:8a:7d:b6:a8:71:cf:51:f7:2a:bd:
         c9:8a:8f:b7:73:a6:98:1a:bd:1d:dd:ad:c7:10:ea:3c:90:a7:
         fb:b7:fe:ac:7e:20:aa:4f:8c:e4:ce:ee:54:cf:52:af:69:82:
         7f:9f:6d:8c:c6:ab:50:b0:0f:28:e4:a1:23:3b:0c:26:87:9a:
         c7:9e:79:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:37:45 2026 by rpki-client