Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
File:                     sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft (raw, json)
Hash identifier:          XOph3DOaQFDgnl/ipRBIrvQ6mtEkXLOlzlnGOIPaYTI=
Subject key identifier:   AF:CE:F6:6E:DD:E5:08:0C:10:95:4C:09:9F:21:8F:AA:D6:D4:B1:BB
Authority key identifier: B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A
Certificate issuer:       /CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a
Certificate serial:       019F28129A8DF3BC0DDECF053512D717D170
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
Manifest number:          198F
Signing time:             Fri 03 Jul 2026 13:02:15 +0000
Manifest this update:     Fri 03 Jul 2026 13:02:15 +0000
Manifest next update:     Sat 04 Jul 2026 13:02:15 +0000
Files and hashes:         1: Q-FFM01cbkfw_d8UfrmIQr3mDSE.roa (hash: SPQggi+U+SwusUS7292cc4kZDqdLk+Y6Fxy1n2N8dxo=)
                          2: sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl (hash: WtfEfH9LYtSr6kHfBty1NHmqHrORPbbVzNbuI4G47fE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 Jul 2026 13:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:28:12:9a:8d:f3:bc:0d:de:cf:05:35:12:d7:17:d1:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a
        Validity
            Not Before: Jul  3 13:02:15 2026 GMT
            Not After : Jul  4 13:02:15 2026 GMT
        Subject: CN=afcef66edde5080c10954c099f218faad6d4b1bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ac:be:77:7d:97:9e:79:fa:6e:96:53:c5:4d:
                    0c:f5:f9:65:c7:f5:cf:9a:5e:f1:02:28:54:af:9a:
                    e3:ee:11:36:b2:ee:45:e5:4b:f3:f4:de:b8:62:0a:
                    57:02:52:41:30:09:9c:c5:cb:3f:70:56:4b:04:b0:
                    20:ac:d9:3f:4b:e9:fc:d1:82:64:5c:08:d7:09:a6:
                    83:96:87:7e:5e:fa:12:06:d5:50:91:6c:87:b4:e2:
                    7b:05:f1:29:b2:6b:8a:71:d5:35:f7:b0:7d:81:7e:
                    65:94:ef:29:08:5c:ff:76:00:72:f7:7b:e6:79:15:
                    d9:64:c6:b8:89:dd:15:10:48:09:6e:eb:79:c7:2f:
                    23:e7:82:28:0f:7d:10:bb:21:00:bc:c6:4c:f3:3a:
                    cf:0f:68:64:19:b2:79:b8:97:1c:cf:b9:aa:44:72:
                    f9:f6:4c:a6:ce:83:11:0b:44:5e:b3:2d:2c:d4:a5:
                    0d:e3:4d:9c:6c:c4:c0:48:b0:28:05:e4:55:f2:b4:
                    f4:eb:0d:a5:c5:21:98:0a:bd:8c:e6:d9:84:cf:ff:
                    e5:ed:e4:44:1b:02:f2:39:3a:56:80:27:2d:fb:30:
                    70:b9:fa:34:c6:ac:9c:f5:ae:f5:93:3d:ba:bc:f0:
                    b5:aa:4c:64:69:eb:cf:54:da:ca:2d:91:5e:99:58:
                    aa:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:CE:F6:6E:DD:E5:08:0C:10:95:4C:09:9F:21:8F:AA:D6:D4:B1:BB
            X509v3 Authority Key Identifier:
                keyid:B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:41:c3:4b:1f:37:15:6c:f4:92:02:bf:b2:1a:a9:d2:1e:e6:
         80:af:96:a8:41:87:bd:2f:5a:fd:99:44:8a:91:8a:dd:05:45:
         b0:3b:0c:d2:0c:b4:cf:c8:03:29:66:20:3e:d2:80:11:94:a7:
         58:5c:03:b1:16:90:ce:36:de:bb:dd:97:3d:c4:61:d5:eb:d3:
         e3:7a:f3:96:46:de:54:1b:f3:8b:09:87:11:43:a9:c3:01:b9:
         29:cb:fc:27:61:40:67:12:06:9d:59:bf:56:41:87:d0:c2:fc:
         9a:49:78:e4:44:6d:70:06:50:62:96:2e:a9:97:e0:68:33:2f:
         f3:48:24:6e:54:36:62:0b:42:c8:88:0c:91:ec:a4:3c:61:15:
         33:28:62:9b:5b:af:c7:48:70:94:a3:a4:e0:d9:50:a8:0f:9e:
         e6:c3:95:8d:44:2b:b2:0c:e7:50:21:fc:cd:65:fc:f2:07:dc:
         c7:ff:d2:1e:36:ea:50:cd:d8:36:15:fe:5d:94:48:e5:a1:bf:
         ea:cb:9e:a7:f4:86:95:11:b3:f4:3a:e1:9b:13:43:49:f2:c8:
         30:72:f5:78:09:da:70:dd:81:76:8a:c6:2a:83:74:8a:5a:b2:
         26:6d:06:8e:ec:07:8e:5f:ca:f8:2d:b1:de:7f:2f:ba:ac:74:
         75:1a:b0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 21:48:42 2026 by rpki-client