Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft
File:                     0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft (raw, json)
Hash identifier:          15/TuyIPjN67yYS6fRWem9lOYEj/6razqAjF8V1i2+A=
Subject key identifier:   A4:57:24:C7:FF:E3:9C:BF:C0:4A:2A:A8:6A:46:FB:54:2C:36:1E:09
Authority key identifier: D2:D3:8F:45:97:05:1B:6C:0D:DF:1B:B8:66:AE:4E:94:70:3E:15:5E
Certificate issuer:       /CN=d2d38f4597051b6c0ddf1bb866ae4e94703e155e
Certificate serial:       019F17551436E5E118A2E4DD6379E20B708D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft
Manifest number:          198C
Signing time:             Tue 30 Jun 2026 07:01:19 +0000
Manifest this update:     Tue 30 Jun 2026 07:01:19 +0000
Manifest next update:     Wed 01 Jul 2026 07:01:19 +0000
Files and hashes:         1: 0tOPRZcFG2wN3xu4Zq5OlHA-FV4.crl (hash: 22YrBcQrbP9rG34/OJDU4H8I4LtiA8Rl36lzym8t7qQ=)
                          2: qKlROkZlk3DYFTmipBNFAH2SseM.roa (hash: 4ZEDkg/LHUGlc95hTTGad49qSD826UApgpQuVs6AZok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 07:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:55:14:36:e5:e1:18:a2:e4:dd:63:79:e2:0b:70:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2d38f4597051b6c0ddf1bb866ae4e94703e155e
        Validity
            Not Before: Jun 30 07:01:19 2026 GMT
            Not After : Jul  1 07:01:19 2026 GMT
        Subject: CN=a45724c7ffe39cbfc04a2aa86a46fb542c361e09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bb:47:ca:64:e9:8d:64:dd:9d:c5:6d:9e:e3:
                    ac:ce:4a:09:a9:6d:54:93:c2:48:a3:fa:ca:78:c9:
                    0c:ac:1e:c3:76:02:d2:f9:03:21:48:50:04:80:65:
                    2f:7f:73:d1:0f:47:30:0d:bf:e3:70:81:59:0d:c0:
                    67:d9:05:11:57:c5:f6:58:81:1f:53:0f:1e:ca:c3:
                    39:de:ba:f7:7a:98:dd:08:81:03:92:59:af:ae:9c:
                    2c:77:2c:9a:d5:9b:72:1f:cf:b9:de:0c:09:a5:47:
                    92:94:60:0f:41:3f:18:33:48:64:64:58:90:5e:27:
                    d8:70:97:b6:63:3a:b3:0b:04:05:81:21:91:99:a5:
                    2a:1b:e6:ff:2c:0c:37:e9:79:ae:a4:dc:54:ca:c8:
                    27:b2:1b:ed:c2:28:7e:7b:88:5f:17:32:da:b7:f3:
                    1b:42:43:70:fe:00:3e:07:a9:8f:c5:a1:02:53:44:
                    19:80:7c:08:87:03:41:23:1f:fb:cc:f4:80:1a:31:
                    cc:cd:90:92:fb:7b:89:fb:1f:b1:5f:01:3c:2a:72:
                    82:5c:01:a8:1e:5a:c3:fc:b8:59:cd:cf:7f:84:83:
                    0f:f1:5e:22:39:76:6e:63:f2:a3:13:68:73:27:69:
                    58:e0:75:3d:78:09:6c:4b:c4:1d:e5:90:4b:40:a0:
                    31:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:57:24:C7:FF:E3:9C:BF:C0:4A:2A:A8:6A:46:FB:54:2C:36:1E:09
            X509v3 Authority Key Identifier:
                keyid:D2:D3:8F:45:97:05:1B:6C:0D:DF:1B:B8:66:AE:4E:94:70:3E:15:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8e7d77-89c8-452c-a9bf-bc5f897c724a/1/0tOPRZcFG2wN3xu4Zq5OlHA-FV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:47:c3:ec:ae:3f:d2:e3:c0:ed:28:1b:13:4c:01:6e:19:aa:
         0f:65:4c:e5:25:2d:b6:5a:04:f8:a7:4b:98:b5:52:02:db:0c:
         1b:14:e7:e3:28:2d:fb:86:5a:ae:43:15:b3:0f:97:4a:38:c8:
         b9:3f:d7:6d:3e:fb:78:69:54:3b:ae:93:8d:eb:5b:8e:3b:79:
         69:94:4d:d0:15:16:86:96:f6:c1:29:ef:87:2b:55:8b:ba:df:
         bd:8b:d8:99:d8:3e:be:81:ab:b0:b2:19:35:0a:44:fa:47:5b:
         b4:83:62:81:4b:5a:42:f6:5e:0d:e2:2c:27:bb:fa:de:6e:35:
         ec:97:79:2d:bf:0a:b9:0c:da:e1:5f:a6:11:70:2e:42:c6:78:
         12:27:fe:cf:95:2a:c8:9e:6e:c9:9e:ed:18:e3:a8:7d:c9:2e:
         a5:dd:1b:82:a2:98:4b:ae:22:50:c1:c4:c2:c0:b2:bf:f7:b8:
         d0:71:56:af:75:c5:d3:e0:97:d8:ca:a7:1a:43:78:fb:6c:60:
         f1:ed:56:d2:ff:4e:ad:47:f2:b0:7c:05:75:47:bb:af:8d:69:
         a1:6a:6d:00:e6:64:5c:65:84:e3:15:8a:9e:40:12:22:89:54:
         c2:37:0b:48:07:71:07:30:1d:0e:3c:93:2e:06:29:c3:36:71:
         6a:e3:c4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:53 2026 by rpki-client