Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft
File:                     SeRO7qJladDdvQ6GN_Es9QWk7ek.mft (raw, json)
Hash identifier:          goYpq5FQZ3YDFW/whS/XOXbgRsC5EgXh2lBwFLXZOP8=
Subject key identifier:   E1:C9:03:2A:E4:5C:AA:8D:8E:0F:29:BE:19:0A:89:97:B1:CD:06:E8
Authority key identifier: 49:E4:4E:EE:A2:65:69:D0:DD:BD:0E:86:37:F1:2C:F5:05:A4:ED:E9
Certificate issuer:       /CN=49e44eeea26569d0ddbd0e8637f12cf505a4ede9
Certificate serial:       019F10ADD2368D5212F46EDCF13EF179B1A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft
Manifest number:          198E
Signing time:             Mon 29 Jun 2026 00:00:54 +0000
Manifest this update:     Mon 29 Jun 2026 00:00:54 +0000
Manifest next update:     Tue 30 Jun 2026 00:00:54 +0000
Files and hashes:         1: GeUW--hPT8o2pnbr6vUqN1nL0I4.roa (hash: /hKRpfPYym/y7mfH6PMx7JCo0hOLOhMMO2ioAJ8i8ac=)
                          2: LviMRn9_ALWXEXh18KS7ROO3kbY.asa (hash: mlRj/x3uwzMDAiQwgunweAXCBmQ8b/GoPuwWY6Ee+SY=)
                          3: MzCp_EhdHcpKPhvDpuOgeT8wOGQ.roa (hash: cWyQP57tffmbuPRh8jXrqPR/aGo4VRBu/ka+8DAvu8Q=)
                          4: SeRO7qJladDdvQ6GN_Es9QWk7ek.crl (hash: XLVGRmLux4l8d8gPWzYRtPx29vq6GohHrwDvz4h7Pjc=)
                          5: hEoypnAbDinC0QGassGs76xtnAw.asa (hash: xkbrTyJaG9QSCNIjm8fjAkbI7ZEMVBfs8nTofEueXdQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:10:ad:d2:36:8d:52:12:f4:6e:dc:f1:3e:f1:79:b1:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e44eeea26569d0ddbd0e8637f12cf505a4ede9
        Validity
            Not Before: Jun 29 00:00:54 2026 GMT
            Not After : Jun 30 00:00:54 2026 GMT
        Subject: CN=e1c9032ae45caa8d8e0f29be190a8997b1cd06e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e7:0e:b5:7f:21:cc:70:a7:43:3d:f3:7d:a6:
                    97:6b:f9:48:69:10:d8:16:21:a4:9e:ab:1b:45:4f:
                    e5:f2:ed:07:01:be:88:35:6f:e1:fd:10:6e:86:aa:
                    70:33:72:ac:53:bb:00:4f:14:61:f2:1f:29:31:cb:
                    e9:e9:e6:a9:6e:4e:42:04:35:5d:2c:8c:fa:c5:77:
                    a1:59:06:e9:29:12:00:35:b8:4f:00:06:68:e1:9b:
                    5b:aa:b6:98:ac:3b:30:d5:8f:18:1b:d8:01:a8:a6:
                    0c:7d:ef:a7:83:a7:00:cc:bb:da:38:d3:f8:7c:b3:
                    49:e7:49:44:ba:8c:fe:35:1c:97:1a:da:e1:69:80:
                    17:1c:3e:79:a5:3f:43:95:8d:e9:5a:98:03:25:7e:
                    c9:b5:49:df:6b:2a:ff:6c:a9:c6:73:4f:45:33:79:
                    aa:10:75:12:f7:50:08:07:4e:0e:1c:2e:2f:c4:09:
                    95:e5:5b:34:e3:ca:a8:2a:fe:4b:c4:df:46:fa:02:
                    a5:ce:ff:3c:5f:13:6f:a6:ce:e6:8f:08:50:05:79:
                    19:f1:8c:2c:bc:94:81:e9:c5:4b:da:7c:7b:e1:ef:
                    61:a2:14:7d:7a:80:a7:dc:37:82:d7:5a:b8:96:d8:
                    b3:cd:4a:fa:91:7a:44:3f:bc:2a:94:84:26:f6:54:
                    ea:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C9:03:2A:E4:5C:AA:8D:8E:0F:29:BE:19:0A:89:97:B1:CD:06:E8
            X509v3 Authority Key Identifier:
                keyid:49:E4:4E:EE:A2:65:69:D0:DD:BD:0E:86:37:F1:2C:F5:05:A4:ED:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:9d:43:37:81:11:37:09:86:ec:b6:7d:42:9d:98:ba:32:17:
         7a:d3:12:e6:cd:9b:44:0e:dd:48:b8:0e:62:d9:01:da:f4:43:
         f9:8b:df:60:5b:72:c6:f8:45:e5:96:93:3e:a5:f4:3a:84:40:
         fa:3c:57:13:69:08:bf:ef:2b:f5:ef:52:21:a8:d8:04:22:c6:
         79:53:a1:6c:01:4f:9c:cb:56:d0:d0:7f:11:2c:fd:7b:93:4e:
         c7:d8:4e:50:94:cc:90:64:e3:63:f6:82:cd:40:45:31:73:80:
         72:bb:66:c6:e5:7e:c7:97:e4:21:a1:06:60:ce:07:76:11:71:
         10:e8:71:2c:97:7e:a0:6f:de:7b:bb:b2:1d:ca:f7:95:a7:68:
         97:8e:51:0f:21:19:ee:46:42:f6:c4:3e:36:e0:c0:45:46:12:
         32:20:83:56:ac:b0:88:6b:4a:b4:59:dd:fd:fd:7e:31:17:5c:
         5b:8c:8f:35:78:93:7c:90:64:d4:54:0d:f1:8c:37:cf:cb:be:
         b9:7a:9c:b9:eb:79:4b:a9:cf:fa:5c:cb:3f:db:53:fe:bd:c1:
         c9:1a:2e:d4:44:e6:46:61:2b:87:d2:43:d6:12:7e:87:24:54:
         4a:58:35:c1:ef:39:25:62:2b:ef:61:c7:fc:f1:ff:97:b1:a4:
         db:a3:12:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:40:09 2026 by rpki-client