Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
File:                     aDg_-p8gvwIcCQJimUIS1xZn7QI.mft (raw, json)
Hash identifier:          dr70QV+K6ep0JTB+29jczsHKV/e7ZjNmjpHse5YTuPE=
Subject key identifier:   4B:AC:CE:E7:8D:42:13:64:2A:CB:FE:20:D1:20:0C:DB:BD:72:C7:77
Authority key identifier: 68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02
Certificate issuer:       /CN=68383ffa9f20bf021c090262994212d71667ed02
Certificate serial:       019EF94B5B944996037F8E7D933126FF3C5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
Manifest number:          197A
Signing time:             Wed 24 Jun 2026 11:02:05 +0000
Manifest this update:     Wed 24 Jun 2026 11:02:05 +0000
Manifest next update:     Thu 25 Jun 2026 11:02:05 +0000
Files and hashes:         1: 1U6aj4iJ-y4osFcsxDSCV5GyIkA.roa (hash: UcR0Wdw86ylcwoNswSuJ+itYBJCzYFEmZPLbaTiKVvU=)
                          2: IGOtfSCHb-PcgN6otd-LjwgBgcY.roa (hash: mIaFqnuv58vVdHvIIehpAChWeIDBu6nXZiEhEu38H88=)
                          3: QgnGVYDtjT7Xiv9bSXAiMYcOfC4.roa (hash: 7jyRblRC2U+uJRMS8zI6UzI2pyhKabixPwkdu8GGav8=)
                          4: aDg_-p8gvwIcCQJimUIS1xZn7QI.crl (hash: p2SYsJ3hrEX9yvgzEFcGS4nJtiUwyZqw3se/SEskWP4=)
                          5: rgfQ7RnUFYhCryuejjkJdBuljlI.roa (hash: zzWPOS9zzP/+5hzXtVsNoePksI2Qor0wOj+9tNGbjH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 11:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:f9:4b:5b:94:49:96:03:7f:8e:7d:93:31:26:ff:3c:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68383ffa9f20bf021c090262994212d71667ed02
        Validity
            Not Before: Jun 24 11:02:05 2026 GMT
            Not After : Jun 25 11:02:05 2026 GMT
        Subject: CN=4baccee78d4213642acbfe20d1200cdbbd72c777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ba:3e:8b:f1:12:10:fa:4d:fd:49:e8:ec:0d:
                    87:c3:06:a1:ac:86:a3:69:c4:39:c3:51:8d:61:a5:
                    a2:b3:6f:e0:1e:09:ae:15:af:19:64:3a:66:89:27:
                    b6:6a:c0:fa:35:ad:8c:bd:de:c1:b7:d9:75:e2:09:
                    45:0e:85:ca:94:3e:32:82:c5:c6:8b:bc:d1:21:bb:
                    b2:88:46:56:be:f4:b7:48:09:9f:ae:94:a2:91:e8:
                    a4:70:00:64:cb:79:9e:19:41:4c:78:51:c3:02:b6:
                    44:19:c0:2e:5f:87:96:16:47:4b:ed:14:f4:c6:b6:
                    2d:2e:5b:9c:f4:71:23:4c:73:98:54:41:38:1c:7f:
                    cc:0d:9a:d9:92:a6:1f:c2:37:ab:7d:33:96:11:3e:
                    4b:26:4e:17:2c:b8:e1:e5:31:8d:a2:13:93:20:4d:
                    36:d6:18:d6:66:ee:26:a1:da:a5:5a:51:59:52:99:
                    95:69:c1:7d:6b:a8:48:69:47:24:68:8d:bc:64:5a:
                    07:fb:b6:1c:69:22:95:06:05:79:92:89:61:73:b9:
                    6c:fb:4b:3b:d1:a2:64:9c:5b:70:a2:d6:9f:0b:04:
                    f8:2d:f9:20:df:c0:f2:22:de:14:ba:7a:14:39:d1:
                    04:12:06:8a:fc:d1:6a:93:a8:1c:6e:8a:8a:06:d8:
                    9b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:AC:CE:E7:8D:42:13:64:2A:CB:FE:20:D1:20:0C:DB:BD:72:C7:77
            X509v3 Authority Key Identifier:
                keyid:68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:ac:5a:8a:d2:9d:8f:de:30:59:5b:3c:17:e2:26:10:50:48:
         02:fc:84:b5:ca:c6:52:3f:84:09:6a:d4:b6:14:15:e1:2c:89:
         61:e0:ca:c1:5f:38:6b:23:7e:91:a1:c7:b9:42:e6:84:cd:2b:
         fe:5a:d6:26:e8:35:84:72:d7:c9:f6:ad:37:7d:48:06:06:a1:
         c4:12:ef:05:e6:03:d4:30:79:a3:30:2e:0b:25:73:5c:c1:76:
         a2:22:46:43:bd:59:91:b0:ce:ec:d1:e5:af:70:ab:66:e6:78:
         9c:8b:47:ff:7d:01:b9:eb:d5:7c:c1:b2:cc:05:3c:81:e6:66:
         d6:c1:01:e8:9c:07:04:19:16:0f:1d:73:9b:f0:0c:01:c5:54:
         9b:d9:8c:cc:cd:d2:27:42:6c:fa:a9:c4:dd:63:e2:c0:0e:a7:
         05:eb:9e:7d:2d:d1:6d:30:c3:98:c7:e2:37:a0:0a:f7:ab:8e:
         5a:2d:af:14:1f:10:49:3c:e5:ca:53:96:ba:36:82:83:53:25:
         31:aa:ed:d9:1c:b4:05:2c:d7:61:d4:dd:1d:94:6f:db:c5:10:
         8e:03:5f:c1:55:4b:20:08:c0:51:9b:27:32:dc:41:25:8c:e4:
         27:f3:64:4a:c6:c4:11:28:f2:01:70:77:91:41:22:cb:b7:c2:
         55:f7:f1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 21:18:05 2026 by rpki-client