Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File:                     t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier:          5Zo/C1YncnzE14GKeUQ/KPEibSYWPoRgFGh8a+jxYy8=
Subject key identifier:   29:46:E8:4F:E9:7B:49:64:D3:C5:D3:75:80:3D:51:6B:F4:20:77:1F
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer:       /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial:       019F17F97251DE686643FB89C1D12FF2E4C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number:          198C
Signing time:             Tue 30 Jun 2026 10:00:51 +0000
Manifest this update:     Tue 30 Jun 2026 10:00:51 +0000
Manifest next update:     Wed 01 Jul 2026 10:00:51 +0000
Files and hashes:         1: 2MSpCLbIJT_dNS85cUQH7P6hQQQ.roa (hash: LqxKJfwKg1vJNoy6niHI6Ay0t/ibwSsUhqanJ+kZvVg=)
                          2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
                          3: XKyWf4Y6NjYLpXjJG8NNu1YgV8I.roa (hash: Wg/rYioLK0eT7zXUczkOHExRo3EIegYLBIdXxr8Hp88=)
                          4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: 7U+NyJ0M4lJrDZo7n7ftggRaWhuSTzBixq6ojFY/nOQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 10:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:f9:72:51:de:68:66:43:fb:89:c1:d1:2f:f2:e4:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
        Validity
            Not Before: Jun 30 10:00:51 2026 GMT
            Not After : Jul  1 10:00:51 2026 GMT
        Subject: CN=2946e84fe97b4964d3c5d375803d516bf420771f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:75:25:2e:eb:65:f0:13:a4:45:cc:23:9d:dc:
                    b4:42:89:2a:95:ab:2b:98:ef:38:8e:6e:3a:23:28:
                    eb:71:b2:91:e6:fa:97:12:da:6c:c0:76:e2:d4:64:
                    c9:8c:3f:e5:c5:8c:80:8d:25:c2:da:8a:27:b9:98:
                    d6:42:0d:52:5f:62:42:9e:bf:f4:86:41:85:a4:8d:
                    37:37:3a:b5:f0:d8:b6:f3:54:cb:40:5c:d2:df:41:
                    f5:3c:8a:e0:78:71:af:d9:5d:06:0e:2b:05:f4:25:
                    54:e8:18:79:24:c1:36:5a:f8:ac:e1:ac:99:a0:0b:
                    2f:f2:3b:e6:21:11:05:c1:1f:20:fe:dc:18:2e:07:
                    e7:d2:55:60:9a:5f:a4:47:d9:89:81:67:16:ec:40:
                    d6:63:5a:ce:c4:6a:3f:84:d7:7d:cc:3f:91:02:4e:
                    15:b7:f3:ad:69:f5:94:a9:ed:3b:4a:61:9e:00:26:
                    6b:02:64:39:74:0b:95:69:15:41:59:62:29:62:dd:
                    d4:3a:a5:db:d9:03:df:93:2c:36:df:1f:44:1a:6e:
                    77:83:94:41:77:67:93:18:06:e7:af:80:5e:7b:35:
                    79:a2:72:7e:4f:16:43:7b:58:c7:18:3f:85:30:d0:
                    17:31:c5:3f:4d:c2:3d:f8:7a:ef:a5:df:1b:87:bf:
                    40:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:46:E8:4F:E9:7B:49:64:D3:C5:D3:75:80:3D:51:6B:F4:20:77:1F
            X509v3 Authority Key Identifier:
                keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:65:50:c8:19:31:30:0f:78:36:20:ef:2a:86:c6:b3:de:94:
         03:b9:13:15:a5:d7:2f:dc:f9:6d:0d:0b:4c:38:73:8e:63:4a:
         2c:43:ce:cd:dd:78:9b:36:5a:1d:2b:b9:36:d6:c1:f9:76:76:
         74:83:39:92:74:08:1e:82:26:bf:23:1a:2d:9c:a2:25:80:c1:
         09:58:d8:7b:ee:32:d9:ab:1c:3f:6b:e2:11:e9:95:ea:07:fe:
         24:1e:8d:2a:d9:4d:c2:1a:b4:fd:a3:57:47:6b:37:c7:5c:66:
         2e:6a:d8:07:cc:16:b3:d9:34:9c:95:ef:42:19:58:01:09:1c:
         68:bc:75:57:c2:fd:a0:41:66:21:6a:09:e4:ed:0e:23:f1:5e:
         e2:36:4c:69:9d:82:8b:28:0c:03:f1:06:94:b4:8c:03:c8:b1:
         32:92:6a:0b:9b:c8:dc:7c:81:4f:19:2f:d5:fa:94:c0:79:79:
         62:ef:61:8e:2e:12:88:45:6b:03:3d:86:e7:28:89:29:10:63:
         4b:da:f4:3e:f2:14:dd:6c:cc:1c:7b:66:61:35:45:e8:0e:a1:
         5d:d2:97:e6:8b:95:be:0b:b6:ca:dd:1f:24:ec:d1:e5:78:ea:
         ca:4b:4a:6e:1d:6a:f8:93:72:63:04:89:68:35:3f:28:ee:2a:
         71:c4:96:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 20:19:01 2026 by rpki-client