Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
File:                     1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft (raw, json)
Hash identifier:          ZNDaWZxLkoO1gWuts6KcO/qi7HzS94+WDcSawhve450=
Subject key identifier:   A6:FF:25:29:73:53:63:69:FB:22:8D:A6:CE:0D:CC:EB:C1:B0:4A:C4
Authority key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
Certificate issuer:       /CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Certificate serial:       019E8FB79F342EEF109B6AA3157EEDAE86BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
Manifest number:          194D
Signing time:             Wed 03 Jun 2026 23:00:36 +0000
Manifest this update:     Wed 03 Jun 2026 23:00:36 +0000
Manifest next update:     Thu 04 Jun 2026 23:00:36 +0000
Files and hashes:         1: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl (hash: rA9QQzkyCQv20ir7t1JpIXFGmmwjy9n1nHxXpUfPPfE=)
                          2: 40tYHzrdIOKM0_j4QKh_7shzx8k.roa (hash: SKNQQTkqDQxf7nvw2qRuH0Vq4RF5cs3xZPCOte7W/OA=)
                          3: QNpprllplAM88mMrWtN3ag177fE.roa (hash: 5dP2zjfT0bTz8XtRVCAWieBHqUYv0AqhPnTwXU8eFn4=)
                          4: Ss-pxg7MCUnATOQpuT8Jh8a6KnM.roa (hash: kmr+HuErFhNT7cviIumckQWDHYCPiWsB0llSSAYvKio=)
                          5: dkTEhcSUjmDmfcgVaKjPvVY65ho.roa (hash: CEmoGVLgn+ZeP+7mTHI7wWOP1MgXpbR4Ij+5W74s23I=)
                          6: fXSStTtN6IqbqkCD3E5j3kC-YHI.roa (hash: zVgHJh9lJVijMpBB+dDgMK+AGLHEUW+Je1xWignFzIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:8f:b7:9f:34:2e:ef:10:9b:6a:a3:15:7e:ed:ae:86:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
        Validity
            Not Before: Jun  3 23:00:36 2026 GMT
            Not After : Jun  4 23:00:36 2026 GMT
        Subject: CN=a6ff252973536369fb228da6ce0dccebc1b04ac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d9:1b:b1:54:71:b3:38:7f:7e:ef:2a:03:a5:
                    fe:86:fc:01:4e:5f:c1:26:f0:62:f8:1d:57:d4:04:
                    0f:67:cb:5c:e1:3d:73:72:d9:68:e2:ce:5f:54:e6:
                    19:4f:00:a5:37:16:57:a3:6d:dd:08:d3:86:bf:ae:
                    14:22:c1:e8:02:94:ef:da:cc:45:6e:dc:89:ea:3e:
                    74:f4:e8:0f:b7:4e:39:2e:15:b3:5a:44:02:a8:98:
                    67:d4:93:39:06:e7:f1:45:1e:63:bd:1d:72:9b:8e:
                    df:d5:ef:da:05:30:33:d0:3f:3a:5f:35:e2:1c:94:
                    0a:d7:ea:ef:c9:43:dc:f5:76:a3:49:4f:b3:4f:89:
                    08:97:e2:36:01:4a:78:49:3b:dc:00:0a:45:cd:cb:
                    09:5d:45:ad:4f:fe:a9:8b:84:1e:1b:e2:54:a2:2d:
                    6c:45:f7:0c:01:59:82:d9:6a:aa:6e:9b:d9:b8:f2:
                    e2:95:a5:8a:af:38:07:c5:09:19:01:6c:c1:13:91:
                    d5:d3:84:99:db:af:5e:0d:2c:24:53:91:8d:0e:d5:
                    78:1b:1d:73:d0:28:d3:76:c8:c3:88:49:14:ce:77:
                    ef:04:96:a2:b3:a9:63:58:ea:7b:7c:7a:88:0f:69:
                    a5:4d:e9:8a:f2:fa:a6:e3:46:07:f1:74:d0:df:e9:
                    17:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:FF:25:29:73:53:63:69:FB:22:8D:A6:CE:0D:CC:EB:C1:B0:4A:C4
            X509v3 Authority Key Identifier:
                keyid:F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:db:f8:f5:b3:51:bd:64:77:15:36:9d:e9:3b:04:c9:bd:4b:
         e7:f7:e3:26:0e:74:77:00:e1:a7:df:88:66:36:21:d9:4b:bb:
         d6:13:85:da:b9:1d:35:29:71:22:5e:87:72:59:61:7f:58:15:
         85:9b:33:c6:21:e2:1e:c5:1f:7d:2b:f3:ba:f5:70:14:82:6b:
         f7:7d:69:51:ba:14:e0:8c:72:aa:45:7f:10:32:ca:a2:f3:b0:
         38:7a:d8:9b:c6:9b:25:0d:9e:45:f5:e7:b1:48:2d:f5:c1:08:
         ea:41:4a:6d:5c:f1:f4:86:6a:f9:47:40:47:f8:49:0f:2b:6c:
         1e:88:e9:ae:8b:5c:18:a9:36:ca:8a:41:02:d3:49:08:c3:a6:
         33:1b:cf:8e:f9:ac:bc:9f:ac:53:7b:19:9a:54:c1:82:40:bc:
         40:27:18:23:d0:d5:c9:c9:7c:d1:be:44:4a:fa:04:71:02:ec:
         59:2c:d3:6e:90:2e:43:1c:fe:50:77:1f:83:cb:a8:33:da:b6:
         b5:8b:03:3a:dc:3f:a4:62:cb:c1:98:2b:cf:6a:c2:f8:08:4c:
         ef:5b:e2:73:31:a6:46:5b:02:0d:a5:14:fd:f6:99:ae:aa:83:
         91:2b:33:e3:f5:a6:ed:f4:ff:ac:45:c9:86:b0:c9:c8:79:8b:
         a4:60:99:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 08:00:47 2026 by rpki-client