Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
File:                     inuFwxZYaxmdJr_Ej-JZiTnLb94.mft (raw, json)
Hash identifier:          bu/R+qAaJw2oTh8xx2TIAszPMrxEN+KVaUd0d4aTlXA=
Subject key identifier:   DB:6D:72:94:7E:26:40:F6:3B:90:A3:11:07:36:1B:2F:86:2E:24:36
Authority key identifier: 8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE
Certificate issuer:       /CN=8a7b85c316586b199d26bfc48fe2598939cb6fde
Certificate serial:       019F1F457DE5D44397902CB2EB05B7FAD929
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
Manifest number:          198B
Signing time:             Wed 01 Jul 2026 20:01:15 +0000
Manifest this update:     Wed 01 Jul 2026 20:01:15 +0000
Manifest next update:     Thu 02 Jul 2026 20:01:15 +0000
Files and hashes:         1: b2w6O9WirtRCdzK66va1rPliDCM.roa (hash: stbRk0sxdQicjLZT3kCAibpOrHEkv6FoTLisoOLFpLg=)
                          2: inuFwxZYaxmdJr_Ej-JZiTnLb94.crl (hash: d5Mq2u/PgXyTaCgtLvzFxNAqR8qjM1ncyJuncHm9gb8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 Jul 2026 14:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1f:45:7d:e5:d4:43:97:90:2c:b2:eb:05:b7:fa:d9:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a7b85c316586b199d26bfc48fe2598939cb6fde
        Validity
            Not Before: Jul  1 20:01:15 2026 GMT
            Not After : Jul  2 20:01:15 2026 GMT
        Subject: CN=db6d72947e2640f63b90a31107361b2f862e2436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:26:14:66:1b:d1:0d:00:80:3c:77:d6:99:33:
                    61:83:b1:51:a5:c9:11:fd:fa:97:77:ff:59:7c:ee:
                    d6:6e:c1:62:d5:19:d6:06:9c:1d:30:9f:47:cc:a2:
                    66:22:7b:79:ed:99:96:e2:d3:f6:87:3c:98:0b:3a:
                    dc:f6:33:13:9e:63:3e:09:8c:af:78:b9:d8:79:69:
                    19:ba:45:9e:a0:f7:6f:ab:17:e9:1b:39:5f:c8:91:
                    2f:0a:2c:2a:fc:29:a8:a8:99:e8:d0:95:a5:e1:58:
                    c4:44:1e:61:a8:c5:69:ed:c2:65:25:52:1e:68:73:
                    3c:37:55:ee:4a:42:3b:da:98:c7:e0:4c:f7:6f:ce:
                    97:32:d3:41:68:fa:4b:c4:d2:0e:5b:97:ae:03:d3:
                    01:0d:de:09:93:1d:5b:f4:2c:56:48:50:c0:6b:4c:
                    7b:7d:3a:49:eb:8e:c0:7f:b5:61:20:06:fc:ff:16:
                    d2:c9:84:9c:88:77:b5:76:58:1f:3b:04:af:9b:23:
                    ba:8b:c0:32:71:fa:da:ae:e4:b7:b5:88:29:72:00:
                    58:fa:44:92:50:ee:54:07:02:2d:4c:8a:ab:23:13:
                    c7:fd:91:95:fd:77:a4:ee:e8:4a:76:13:e5:53:fb:
                    ee:ea:fc:c7:bc:7e:eb:67:4c:04:45:0f:1d:43:92:
                    a0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:6D:72:94:7E:26:40:F6:3B:90:A3:11:07:36:1B:2F:86:2E:24:36
            X509v3 Authority Key Identifier:
                keyid:8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:1d:ad:3b:c1:c9:9a:8f:b4:4b:53:a0:09:57:b5:ad:cd:35:
         73:bd:c0:f8:2b:c8:31:68:37:4c:70:a6:a8:64:5e:f1:e5:6c:
         b2:f1:2b:7f:e0:26:e9:26:07:7d:a1:2a:2c:06:bd:49:d4:f9:
         83:11:9a:f1:83:ef:60:17:13:eb:0d:7e:a8:a0:63:ec:49:bf:
         c3:72:e7:cf:21:52:16:74:e1:7e:c3:02:16:51:41:10:f5:d9:
         f4:02:bf:46:d1:70:56:91:31:41:b4:f5:0e:dc:28:88:e6:6a:
         d9:46:ff:cf:f1:60:67:f5:52:ec:81:5c:83:6e:90:9d:3a:e9:
         58:af:fb:73:13:22:93:4c:51:fe:42:35:20:cf:33:23:38:cf:
         45:f8:0e:bb:97:e9:c5:8a:a5:6c:81:cb:28:94:0e:1a:46:a4:
         6f:5c:e6:b7:36:c4:70:88:31:75:93:df:92:25:b4:63:2d:d2:
         39:14:10:00:de:c5:68:c0:86:d6:33:ef:71:08:45:7b:a8:6b:
         0a:e4:70:e3:f5:80:58:bf:cd:84:c1:02:20:10:2f:d4:a9:01:
         5c:c7:0a:0d:ed:fd:21:f6:80:c5:bc:ab:8e:f7:66:18:d2:c5:
         3a:86:df:df:b6:52:23:0c:77:d2:ea:2e:e1:ba:54:59:c4:8d:
         64:bf:38:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 22:53:19 2026 by rpki-client