Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
File:                     r-xPShbMUb1RYhARU5zrV0rBXQI.mft (raw, json)
Hash identifier:          rUoXBxEzEjKcCDfykvF8G13GVkuEw1EWP+vEgHKcpOM=
Subject key identifier:   25:A3:3A:F5:5D:47:63:B6:E0:4B:F4:8B:11:C7:99:53:13:B1:ED:4D
Authority key identifier: AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
Certificate issuer:       /CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Certificate serial:       019F122E6BD51603BCAF678BF6B6A86A7749
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
Manifest number:          198B
Signing time:             Mon 29 Jun 2026 07:00:59 +0000
Manifest this update:     Mon 29 Jun 2026 07:00:59 +0000
Manifest next update:     Tue 30 Jun 2026 07:00:59 +0000
Files and hashes:         1: 1-kk5YtawRkJQwdDT4MsBuFBc3Yo.roa (hash: Aamvd7Z6s9hiJAa6DbrukXmWAwrVI2PPj/AOKYI7G4U=)
                          2: PoqWbVHh-FUr2dkHNr-gmxi2c-8.roa (hash: YLgUsuGSocGrObs4G25+Ghw9LtEJ63hht/5KGdZnHW0=)
                          3: pjM3LX3IWBwhVZCLWvigLJvSQJQ.roa (hash: 3UYX3NqDLCGEU8dgjIHi5102NNO+66HkfR/cZxzpA3A=)
                          4: r-xPShbMUb1RYhARU5zrV0rBXQI.crl (hash: gES4FpOFxDLhdwORStqB7uL1Q6r7kyB2hZPfB8MUa+Y=)
                          5: t5ZpdQdakz93WmXWJ_al0M0qYog.roa (hash: ZYC1omK7NgO2nQPCpRlt52kAchXz0Fe3jlMw43xrEYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 07:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:2e:6b:d5:16:03:bc:af:67:8b:f6:b6:a8:6a:77:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afec4f4a16cc51bd51621011539ceb574ac15d02
        Validity
            Not Before: Jun 29 07:00:59 2026 GMT
            Not After : Jun 30 07:00:59 2026 GMT
        Subject: CN=25a33af55d4763b6e04bf48b11c7995313b1ed4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:55:49:97:c9:64:62:32:6f:a1:af:a6:a3:c4:
                    65:e0:e4:2f:77:4d:a5:2e:5e:35:dc:3e:22:79:1f:
                    e4:b0:5c:64:b2:d4:6c:ae:7c:fe:5e:2f:74:56:64:
                    dc:bb:92:dd:13:0a:3a:86:bc:c7:dc:19:c9:3f:80:
                    f2:ea:14:a8:ee:cc:34:c1:3f:42:92:81:45:37:22:
                    ad:19:de:ed:46:b7:80:22:08:4f:e4:32:8a:35:65:
                    9c:62:34:de:28:6f:81:5f:e6:fa:5e:58:88:ad:85:
                    b4:62:2e:65:69:e6:ee:7a:85:83:6e:79:33:9a:b3:
                    e3:99:ef:d5:de:9d:ed:ed:1f:53:8d:cd:79:89:07:
                    50:c7:e0:99:3c:f7:83:8d:2a:f7:cb:ad:56:c3:05:
                    3e:ce:6f:a4:0a:d2:b8:f5:4e:c0:9c:52:a3:7c:b8:
                    54:fe:d0:d9:34:58:ee:bf:9b:38:f6:d6:c3:63:fe:
                    f4:b3:28:12:74:db:32:7c:4f:3c:06:2e:42:76:38:
                    5f:5e:98:75:f1:63:72:29:8e:c4:41:6c:bf:0e:85:
                    02:98:b3:3a:ee:ef:5f:06:28:9b:88:7e:e3:46:e4:
                    08:c9:70:78:ef:b4:d6:e1:fb:17:31:53:da:a8:f7:
                    1d:07:22:2f:3a:53:42:87:5b:09:1b:be:b6:66:af:
                    d5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A3:3A:F5:5D:47:63:B6:E0:4B:F4:8B:11:C7:99:53:13:B1:ED:4D
            X509v3 Authority Key Identifier:
                keyid:AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:01:bb:69:ae:49:58:1c:94:6f:95:66:69:47:ae:2f:e7:de:
         10:e6:2e:9c:2f:2f:81:3c:bf:84:14:14:43:f4:8c:03:04:fa:
         a8:49:21:9b:d3:4c:5f:39:e9:32:89:28:8c:9c:6b:46:84:57:
         2b:95:9c:3f:d7:a8:07:ee:30:02:86:74:ea:ae:9f:98:f7:a4:
         42:01:46:8a:05:1b:c7:ef:e8:45:ae:e9:4b:d7:b3:f6:c4:b3:
         11:1d:45:40:50:ac:de:bb:cd:fd:df:c3:61:9c:98:49:f8:02:
         e9:0e:d4:a9:a6:5f:7a:ee:52:e1:e0:56:65:83:40:d8:3b:10:
         4b:88:fd:08:74:15:e2:0f:73:71:44:b8:a0:7f:fc:cc:3a:1c:
         6f:67:9e:1a:08:eb:5e:c7:45:2f:88:d6:ce:9d:6b:2e:99:eb:
         e3:9d:0e:b9:1c:b4:96:59:47:bb:e3:04:52:ab:e6:79:a1:23:
         a3:c1:84:8b:63:70:a9:6a:4e:f2:dc:b0:7d:d6:f0:ed:de:f2:
         18:32:e9:c9:10:c5:d3:5f:74:cc:be:de:0c:21:61:56:07:5d:
         23:02:6e:17:7f:ec:9f:1d:d3:da:f8:b8:1a:2c:b1:f6:61:f6:
         9b:3a:21:05:08:db:df:9e:6c:d5:a4:96:de:b3:2d:cd:e3:3d:
         f8:e9:2b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 13:45:50 2026 by rpki-client