Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
File:                     Sagbp1iajhvw4aCc9KoPTpCQHVc.mft (raw, json)
Hash identifier:          YZrdS4uHFUA1QtRjUpNlQBfwPn59pnzgZfdbV/L7SuA=
Subject key identifier:   4E:49:5C:E6:FC:87:34:83:19:6D:AD:F8:70:E0:ED:21:B9:36:E5:97
Authority key identifier: 49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
Certificate issuer:       /CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Certificate serial:       019F1A8D0CC49E49A8DB02EFC14744DC95C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
Manifest number:          15B7
Signing time:             Tue 30 Jun 2026 22:01:19 +0000
Manifest this update:     Tue 30 Jun 2026 22:01:19 +0000
Manifest next update:     Wed 01 Jul 2026 22:01:19 +0000
Files and hashes:         1: 98TJQub4EtN4BXIRrG4cNKh1xfw.roa (hash: ZCcnqtJ6qlNXte/XKxn3WGiCx4J7iiLBNWDpocMLxz8=)
                          2: Sagbp1iajhvw4aCc9KoPTpCQHVc.crl (hash: E+FBWq44mGQKaXvANibJNHu1kFl3RINosetYKichQ1Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 20:30:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1a:8d:0c:c4:9e:49:a8:db:02:ef:c1:47:44:dc:95:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
        Validity
            Not Before: Jun 30 22:01:19 2026 GMT
            Not After : Jul  1 22:01:19 2026 GMT
        Subject: CN=4e495ce6fc873483196dadf870e0ed21b936e597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:70:f1:eb:5e:15:0b:f9:bd:7c:65:13:7e:e5:
                    fb:59:4a:2f:07:4d:e1:80:fd:ea:f0:c6:4b:6c:d4:
                    29:0d:e7:e8:19:cc:f6:fc:b0:d7:19:d8:97:7c:a9:
                    50:9b:c6:47:3b:c5:5e:2f:09:80:dd:30:e7:9b:d9:
                    05:93:87:f2:a7:1b:7e:56:e9:24:e2:e6:89:38:99:
                    25:55:02:44:88:1c:c9:ae:65:93:81:f4:42:e2:bc:
                    5e:3e:24:01:ec:a4:5d:40:1c:3b:ef:bc:55:5f:8c:
                    d2:4a:94:3b:7e:07:6e:ab:a6:f8:fd:a2:f2:b3:89:
                    2f:f4:30:16:95:7c:b5:fd:35:93:b3:a2:cb:9b:91:
                    2b:54:cc:e9:72:23:cd:3f:5e:c9:a3:9a:ca:92:37:
                    24:67:4d:d7:3e:dd:37:9c:ed:98:ed:bc:10:62:06:
                    03:f2:ab:42:dc:29:bb:f5:b7:5b:79:92:f8:71:35:
                    7a:a5:5f:37:15:9d:83:c6:e2:01:7b:2e:53:0c:53:
                    97:4a:ee:b8:c7:52:ca:32:5b:1e:a9:b8:cd:1e:18:
                    df:22:c6:ac:15:0e:7d:a2:d1:ac:f5:49:1d:d9:17:
                    96:97:40:30:82:c2:79:51:e4:e9:46:5b:f0:cd:3c:
                    42:20:88:91:b5:89:47:d9:ca:3d:5e:a6:9d:ab:61:
                    19:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:49:5C:E6:FC:87:34:83:19:6D:AD:F8:70:E0:ED:21:B9:36:E5:97
            X509v3 Authority Key Identifier:
                keyid:49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:d9:e1:d7:bf:61:98:53:66:01:68:2c:c9:ff:f3:b5:fd:2a:
         18:cc:69:bd:5d:8f:db:f0:bc:3e:4a:82:7f:60:e0:45:8f:44:
         0d:39:11:b4:9d:63:f3:58:6b:e4:fa:e6:99:92:83:a1:a6:ab:
         a0:2a:91:9a:dc:9d:88:31:e2:da:8a:c6:87:f2:ef:f6:bd:11:
         07:b2:8f:3a:ee:b1:44:da:34:5a:37:b1:be:ff:fa:17:37:b7:
         ca:30:8a:59:fd:54:9b:69:6f:6c:e6:d4:db:9b:13:1d:0d:c3:
         f0:22:a7:42:76:8f:70:47:e1:f6:c2:92:c5:66:84:78:85:73:
         7a:1c:c2:a8:11:f8:63:68:cc:c5:9d:14:2a:fa:1e:f8:32:03:
         37:c2:b2:54:ad:3c:69:ef:c8:3d:3c:76:ce:c5:56:41:08:9e:
         04:6d:fa:a9:06:ac:e4:73:72:a7:e5:9e:7d:51:63:fe:40:50:
         cc:36:eb:2c:70:dc:72:58:ae:d6:7b:8f:ef:d9:ba:12:5b:8f:
         58:f0:7a:b4:c3:a9:12:9b:07:06:60:df:7a:fa:93:9a:dd:d3:
         c8:06:f4:c8:b1:bc:02:3c:1c:f5:ef:17:96:1e:a5:be:42:54:
         0c:8f:a3:eb:7c:1f:11:44:99:ae:54:16:e5:99:2f:2f:01:62:
         fe:04:d5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 02:53:45 2026 by rpki-client