Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
File:                     2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft (raw, json)
Hash identifier:          viEns11i/2sfvzv2bu3A18iS5tT2NS+ibxvX3BZGbVA=
Subject key identifier:   F5:0C:63:12:F5:DE:1B:96:99:9D:00:A5:F9:2C:3B:26:F7:BA:C9:F2
Authority key identifier: DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
Certificate issuer:       /CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Certificate serial:       019F37BC28F19D2CEF825CC1D13DF007CB8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
Manifest number:          199E
Signing time:             Mon 06 Jul 2026 14:01:45 +0000
Manifest this update:     Mon 06 Jul 2026 14:01:45 +0000
Manifest next update:     Tue 07 Jul 2026 14:01:45 +0000
Files and hashes:         1: 18LLAEyGOzDEqVOGhVOCxXqhlAE.roa (hash: hcwsbast1UClS6I7r5Yp2sr8qWj/P9phtpAzkLi6VMw=)
                          2: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl (hash: EZs7Mr/2T2m/kOnMrq5ZiXzOVawG+j6oF1mbnoMnI4Y=)
                          3: jmMWtYPg5S_tnA2cdWpf_Zexx00.roa (hash: dKIhy7fI/lqIY1llduzbpk7aDMWsC7JfkBKhXfdEng8=)
                          4: yb6eeUKKTu5xnfipewiooSY4ygA.roa (hash: JsoZM3IdjQEOypKxcGbJATYKZoZ7dmyzU6migcewEJw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 14:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:37:bc:28:f1:9d:2c:ef:82:5c:c1:d1:3d:f0:07:cb:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
        Validity
            Not Before: Jul  6 14:01:45 2026 GMT
            Not After : Jul  7 14:01:45 2026 GMT
        Subject: CN=f50c6312f5de1b96999d00a5f92c3b26f7bac9f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ad:08:af:15:6f:ad:91:94:9f:0c:c8:42:09:
                    02:84:c4:56:ff:65:7a:32:85:e4:34:fd:18:2a:17:
                    6e:c1:62:c1:c7:1b:1e:eb:2f:8f:0f:74:d4:d0:9d:
                    2f:83:d6:8b:a8:d9:0e:96:53:be:25:03:e4:69:77:
                    3b:78:64:b9:1a:c9:f3:e9:8a:17:dc:4b:16:51:55:
                    db:78:37:2c:2b:44:77:84:e1:8d:f1:89:fd:a6:0c:
                    1e:d2:66:20:1e:61:37:3c:de:ef:a1:69:94:6d:a7:
                    96:57:eb:bc:8a:2b:f0:ea:1c:00:cf:de:5e:1d:24:
                    93:72:d1:74:69:b9:21:36:11:e6:d5:b0:44:04:a4:
                    25:e8:64:4c:0d:d0:ec:a4:dd:ae:61:6d:b8:4c:41:
                    d1:b6:0a:2b:d8:05:be:db:90:da:33:c9:6e:5f:34:
                    91:88:3a:3e:f6:d4:1c:4c:95:5f:f0:a3:c1:9a:bb:
                    bf:fc:8a:7d:69:d8:86:6e:0e:c2:04:0e:47:ce:65:
                    ae:90:8c:4b:60:8c:80:b2:82:e4:eb:39:5e:a8:d9:
                    15:e9:3b:30:e7:cb:6f:78:c6:d9:a9:e4:9b:54:20:
                    68:d7:a1:b3:8f:3e:53:70:c7:a9:4b:e5:8e:3e:66:
                    f3:31:ba:11:48:bb:3d:6c:5f:99:ee:71:60:23:36:
                    48:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:0C:63:12:F5:DE:1B:96:99:9D:00:A5:F9:2C:3B:26:F7:BA:C9:F2
            X509v3 Authority Key Identifier:
                keyid:DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:d7:0a:7c:6d:33:e0:7b:c2:fb:64:96:ad:cf:86:a2:1a:d8:
         01:6b:35:e3:f8:10:d2:48:d6:d2:09:c3:32:7c:68:a3:c2:52:
         52:34:de:6c:de:73:23:70:c9:51:7c:9d:56:c9:c0:db:53:dd:
         8a:49:ba:6f:53:31:5c:3f:91:d5:22:7b:2f:5b:85:4d:77:de:
         11:f9:54:5e:7d:bc:7d:57:fe:b2:f8:a3:4b:21:14:23:51:b2:
         9b:57:a1:99:54:b7:3f:c6:24:07:3f:14:1a:59:6a:97:cc:5e:
         f4:ce:9a:0e:86:de:6e:b9:1b:e3:d5:cb:04:fe:49:56:80:2f:
         7e:d6:a4:86:92:13:4c:5f:b2:5a:fb:8c:ab:93:da:87:65:44:
         f2:2c:6c:d0:64:08:f3:db:c5:ff:0a:bd:08:dc:85:07:b1:75:
         77:d4:c1:3d:f6:39:db:ee:6a:ab:8d:b3:ba:15:01:a0:88:42:
         21:ee:d3:cb:e4:4a:a5:48:19:64:80:d7:00:0c:b6:6e:2f:ed:
         05:81:15:66:60:07:58:de:5b:47:ba:da:44:6a:b8:c5:f6:f3:
         34:68:97:5d:7b:86:82:19:89:4f:8c:c3:a4:71:18:eb:ba:dc:
         96:76:41:1f:8f:34:a4:7a:d3:90:d5:92:f1:11:35:91:fd:54:
         a6:9a:7b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:25:43 2026 by rpki-client