Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
File:                     CbARCuS4F5SlCIMfy17cyNX9Lxs.mft (raw, json)
Hash identifier:          K/9x7Ga1fBcmK6bjTn0EpL9YiQMD7KXLKVizUjc0jrg=
Subject key identifier:   EB:5E:39:4B:66:83:3E:31:CB:95:25:6F:28:8E:84:1B:9D:B6:CE:3A
Authority key identifier: 09:B0:11:0A:E4:B8:17:94:A5:08:83:1F:CB:5E:DC:C8:D5:FD:2F:1B
Certificate issuer:       /CN=09b0110ae4b81794a508831fcb5edcc8d5fd2f1b
Certificate serial:       019F190CE84DA2BCAE45E97C07B6FB4075F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
Manifest number:          198C
Signing time:             Tue 30 Jun 2026 15:01:44 +0000
Manifest this update:     Tue 30 Jun 2026 15:01:44 +0000
Manifest next update:     Wed 01 Jul 2026 15:01:44 +0000
Files and hashes:         1: CbARCuS4F5SlCIMfy17cyNX9Lxs.crl (hash: 3eWwBofLr9NOSaQIStzUxu93CFm9wGXk1MSwynjPsiU=)
                          2: TalsxsnLALDwzR9eYbJ5IPHvuw0.roa (hash: 5TrfT+iuoAx5Pp91gpenuYisGgHzZknoAb6QwNtFQgE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0c:e8:4d:a2:bc:ae:45:e9:7c:07:b6:fb:40:75:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09b0110ae4b81794a508831fcb5edcc8d5fd2f1b
        Validity
            Not Before: Jun 30 15:01:44 2026 GMT
            Not After : Jul  1 15:01:44 2026 GMT
        Subject: CN=eb5e394b66833e31cb95256f288e841b9db6ce3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:89:34:eb:b7:e5:eb:9b:50:85:fa:d2:38:57:
                    b7:b6:54:1a:45:9a:2c:42:33:b9:d5:b9:9b:75:ab:
                    a9:b0:9f:be:e9:d7:86:d3:71:45:1d:d4:fe:ba:cd:
                    6b:08:24:5d:3d:88:af:87:46:1d:d9:6b:ae:1e:09:
                    78:46:8b:73:88:7f:ed:73:f4:eb:6f:98:90:27:ab:
                    50:7c:bf:b1:88:f2:a6:cd:2d:11:f8:04:23:c4:70:
                    a8:cd:d0:ff:45:3b:44:f9:ff:73:5f:56:ae:82:2d:
                    e0:31:0f:85:f7:5a:4c:2b:cf:db:7b:a5:5d:81:49:
                    4a:ae:96:b5:ad:43:db:ee:22:ef:10:3a:6f:51:c3:
                    1d:92:71:44:12:3c:e5:91:3a:98:46:20:bd:2a:33:
                    f7:48:b5:6f:0f:b2:1d:9f:de:62:7e:03:96:fa:bf:
                    32:97:00:67:e2:dc:97:e1:8a:10:ec:37:81:6d:33:
                    cc:b6:79:01:72:f2:7e:a6:e5:14:04:5a:50:41:41:
                    da:4a:e4:00:e2:99:7b:fa:6a:34:db:06:18:0e:1e:
                    89:06:5d:d2:3c:5b:16:54:b0:64:4f:de:bd:83:80:
                    8a:62:ef:2b:bc:93:c6:b5:08:07:d4:c1:61:44:a8:
                    27:a8:e9:18:f0:dd:62:3d:8e:3d:64:ed:87:28:8d:
                    fb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5E:39:4B:66:83:3E:31:CB:95:25:6F:28:8E:84:1B:9D:B6:CE:3A
            X509v3 Authority Key Identifier:
                keyid:09:B0:11:0A:E4:B8:17:94:A5:08:83:1F:CB:5E:DC:C8:D5:FD:2F:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:ea:86:70:1d:65:25:3f:6f:80:27:1f:2b:6f:32:01:37:aa:
         c6:04:c7:b4:a3:05:e2:52:9c:f7:15:24:36:55:ff:9f:48:41:
         ba:0a:26:3c:76:26:1b:74:72:25:9e:4e:98:0d:b6:44:ed:a4:
         49:04:f2:58:11:9a:b6:5c:a3:ca:6b:15:89:f7:82:cd:57:5c:
         8e:12:52:4e:88:f8:b8:da:49:bb:02:39:04:4e:c0:68:dd:94:
         43:7f:ed:b8:81:94:7e:f1:e5:0d:24:ae:ec:35:01:42:88:c7:
         0b:39:e0:49:fe:34:d6:33:28:67:68:ae:61:7b:27:b3:06:fb:
         e0:0a:b7:8e:9d:65:1e:bf:91:04:16:18:b4:ac:cf:6f:ac:98:
         cf:b1:04:60:9a:80:d0:c0:d7:2a:77:26:7a:2e:b9:6e:f7:d6:
         a5:ed:52:15:79:89:da:fd:d5:d4:cd:2c:5a:f8:56:cd:e0:32:
         45:6e:1e:3d:21:d5:0a:2e:82:16:b8:16:1e:52:09:bc:b2:f9:
         20:b2:7b:6c:50:8c:25:77:74:2b:90:b2:2d:8f:af:7f:28:34:
         a3:72:6b:e8:56:14:ac:9e:8b:e0:bc:0e:9f:a4:83:b1:12:0e:
         a3:e5:eb:34:95:94:84:ec:83:03:fb:89:ff:55:41:95:56:c7:
         cc:3d:e1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:51 2026 by rpki-client