Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
File:                     cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft (raw, json)
Hash identifier:          oOSk8/7QiHrdW+mHR/7G/ot+/O+hmCOA8FNzpE0OORw=
Subject key identifier:   5F:27:91:6A:A4:CB:BA:19:7C:2A:DC:C0:00:AA:B5:04:B2:83:B3:00
Authority key identifier: 70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07
Certificate issuer:       /CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07
Certificate serial:       019EE36759B388F9F4C0D765387D98968ABF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
Manifest number:          197F
Signing time:             Sat 20 Jun 2026 05:01:01 +0000
Manifest this update:     Sat 20 Jun 2026 05:01:01 +0000
Manifest next update:     Sun 21 Jun 2026 05:01:01 +0000
Files and hashes:         1: 1-xRRF6t6KGdWMUcKGA94gVVYBt4.roa (hash: Ha8Q7daEnMbbFyY/dxOcBlU2bNw+1RH5tta+lgnhb9k=)
                          2: J7nxHJR2q_5-XSxPJIIrOEd_2qM.roa (hash: rk9skdq4jJ58Yezr/EGSdkIl0oNJ4Rc1ouYxvWKZPx4=)
                          3: Snl5qCrO18GvoZkBCNag-_FCvXQ.roa (hash: boOmLIzLkXM0jR5/AjohjFmN5/TCVfh/j8d7LjiBERk=)
                          4: WInZSLnnGSQiu1WNXz8M2PoWvVY.roa (hash: fvhBez0/rVC+YOWpQ3YX0TtdpMREsi6UE/qQfQbepu0=)
                          5: cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl (hash: Gp4KBeb4YAhQsYlGPFG7YAtoSLoebWUZSaJpR98nGQI=)
                          6: lcsEIDZ8kCR9rhkUlN9uCzqWyGk.roa (hash: lV4Xq524SycxtnX+ET+22iLBNWE46Mr/vlQVFjNh0m0=)
                          7: r8QQa0KeKI1GL64nr5wN_b7RP5c.roa (hash: VPjTppJbG0cInafRi0EuzWNFWUjNr+CGPb1+lvJ/FIU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Jun 2026 04:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e3:67:59:b3:88:f9:f4:c0:d7:65:38:7d:98:96:8a:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07
        Validity
            Not Before: Jun 20 05:01:01 2026 GMT
            Not After : Jun 21 05:01:01 2026 GMT
        Subject: CN=5f27916aa4cbba197c2adcc000aab504b283b300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fe:6a:ec:3f:24:21:20:7f:49:f3:bc:24:8d:
                    eb:4f:dc:a4:07:a3:ba:c4:ba:50:95:52:01:d9:6f:
                    30:11:35:0b:8d:bc:e8:36:a8:bf:04:0f:f9:88:c6:
                    05:bc:04:3d:8b:b5:27:e4:b9:a1:74:2e:8d:73:a6:
                    36:62:4d:bc:c1:a1:f6:2a:16:94:dc:3d:ba:7d:8d:
                    d5:79:68:d6:2c:4b:a5:ed:82:e2:e6:a8:29:65:d4:
                    07:c3:a1:13:ee:3d:8d:59:4d:09:31:7b:9f:25:ca:
                    0b:31:f7:48:a1:ba:94:97:2a:ac:5a:0a:16:94:b9:
                    34:78:cd:95:5d:5a:25:86:90:b8:8c:2f:96:b4:0c:
                    7a:9c:79:02:f5:d7:93:1c:58:5b:de:ab:81:18:e6:
                    6f:98:d7:68:e9:0b:84:97:3d:59:b3:1b:0e:f3:fa:
                    75:6d:63:a3:5e:51:d7:70:f8:ce:6c:87:f5:18:ca:
                    dc:69:c4:e9:71:fa:85:46:bf:f2:b0:3c:f4:38:39:
                    c8:d7:58:91:00:5d:83:a4:d7:da:2e:15:11:da:d3:
                    c0:19:ef:92:e9:ed:bf:7c:a6:31:fa:2b:70:20:ce:
                    7d:c4:03:4d:61:de:6a:1a:fe:73:d8:73:6d:94:bf:
                    75:e6:3a:9f:e0:69:bd:56:68:33:4e:cd:bd:4f:4b:
                    49:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:27:91:6A:A4:CB:BA:19:7C:2A:DC:C0:00:AA:B5:04:B2:83:B3:00
            X509v3 Authority Key Identifier:
                keyid:70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:3b:6b:f9:44:c1:34:6e:bc:89:c7:3a:a0:08:b4:2b:25:22:
         38:58:1c:3d:55:18:8c:e2:52:14:93:d6:83:ab:17:6d:f9:70:
         32:67:85:f6:94:f0:68:20:3c:09:5c:bb:f0:9c:8f:89:ac:cc:
         ea:e6:6f:42:3a:d9:94:e5:0d:44:e7:21:59:e3:78:22:27:60:
         75:71:ae:64:53:55:28:b2:ee:a8:d2:cb:e6:29:f6:66:f9:7b:
         14:da:6b:50:06:6e:62:79:12:7d:33:c4:72:38:67:82:ea:44:
         de:6c:6c:34:27:1b:9f:8c:82:27:f3:e1:a7:60:ea:32:d1:10:
         94:0f:11:4f:d8:f5:ec:3b:d5:14:3d:7a:81:8c:5c:19:1a:ea:
         35:b7:e9:9d:a6:ac:37:a8:14:f7:a0:93:1a:a2:e7:12:14:08:
         5e:76:e5:62:ce:42:a7:fd:26:59:ea:50:5d:9f:b9:81:44:1a:
         df:58:87:4e:18:b9:04:35:cf:fd:58:87:b0:2d:b6:a4:9f:c7:
         b7:69:6d:66:f6:dc:8a:8a:67:9a:26:35:17:de:14:6f:f5:14:
         49:05:d9:af:96:40:30:d1:88:ab:c2:40:29:4a:4a:c5:e3:c1:
         30:85:d4:50:84:cb:23:b8:8a:3a:2a:86:38:a7:89:02:54:a5:
         9a:66:45:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 12:37:54 2026 by rpki-client