Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
File:                     1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft (raw, json)
Hash identifier:          VivyC0uUVTIOem8pyOf9LrHB5OnfuMIeU8O5r5EPZ9s=
Subject key identifier:   06:69:42:1F:A9:DA:04:9A:3D:6B:1D:E1:FD:D7:2E:D7:5D:2F:88:41
Authority key identifier: F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
Certificate issuer:       /CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Certificate serial:       019F18D6C95575574AC1A837C2F475E2DC33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
Manifest number:          198E
Signing time:             Tue 30 Jun 2026 14:02:37 +0000
Manifest this update:     Tue 30 Jun 2026 14:02:37 +0000
Manifest next update:     Wed 01 Jul 2026 14:02:37 +0000
Files and hashes:         1: 1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl (hash: iUWgYFdYBGKNKrZlux2nUXSIXRk2OTEPcMECwxnwiSk=)
                          2: 2NBuPX9Sr7_9fzAA2_SqLU2A0xs.roa (hash: qnZc+3b2NxrywxDp6pPyOY9sOLIQiJ8XLeTOBtAP7ro=)
                          3: 5o42lxEDEDt3W8NdF-yOn7UvTZc.roa (hash: oNLBYQIHXcwUoe2IZOdpad4iTA7mmS0+SZkfH4CWA+E=)
                          4: FP32CXa4bJkrAzn-mUypAVuTRcU.roa (hash: 2l89ddYZWse7SniAD+u1r0X1fyl4WgZC/mow8ll5aKY=)
                          5: TfDEDSgAF-UuRojXKYwf49xN9QY.roa (hash: l+8RUoTM1uw0SrqFD9LLiUFpKCi1Zds5YbMXCL51Vlw=)
                          6: VmYFVolGbLMMfwkvFM8kJCuQGzE.roa (hash: /WuPYjGHN6jIW+r1DMVdwmeNT1yyt/R8q6y8mp9Mt4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:d6:c9:55:75:57:4a:c1:a8:37:c2:f4:75:e2:dc:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
        Validity
            Not Before: Jun 30 14:02:37 2026 GMT
            Not After : Jul  1 14:02:37 2026 GMT
        Subject: CN=0669421fa9da049a3d6b1de1fdd72ed75d2f8841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:50:45:32:80:e9:7e:5d:42:f3:85:a9:df:da:
                    50:56:c5:b0:f2:07:54:1e:f4:56:48:1b:c1:a3:76:
                    f6:c1:62:81:42:cd:79:fd:36:4e:0a:47:85:95:94:
                    53:f6:17:a2:ca:55:92:93:98:bd:2e:de:59:ae:b3:
                    61:35:f4:da:40:9a:8b:5c:e1:4e:67:a2:19:77:f4:
                    21:25:f1:ac:d8:af:b2:be:29:6d:c9:ea:ea:bb:fe:
                    08:8e:f3:06:1a:45:f1:72:f0:62:39:8b:a8:7c:cf:
                    71:08:cf:30:09:a3:8c:3e:5b:bd:db:7c:61:26:ff:
                    0b:4f:f6:25:f2:5f:87:83:80:d1:42:f7:38:f6:cf:
                    22:87:68:c2:b8:40:3f:66:c9:16:f8:bd:65:8c:bd:
                    82:04:3e:6b:66:09:a1:10:b9:2b:b4:82:6d:a1:3f:
                    0c:73:2f:65:cb:b4:f4:a3:96:ee:7e:1b:fe:30:a6:
                    d4:28:f5:4e:1c:30:8f:56:88:68:e0:ba:47:d3:c4:
                    45:51:c9:73:79:94:7d:9d:de:0e:04:c1:5a:a0:07:
                    b3:2d:a5:19:2f:c8:46:25:e7:bd:a0:5b:aa:13:55:
                    29:2d:22:ab:ee:17:95:49:09:df:59:3f:fc:d6:24:
                    9c:07:19:1c:a5:d5:f7:79:72:7f:61:5f:9d:3f:28:
                    2c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:69:42:1F:A9:DA:04:9A:3D:6B:1D:E1:FD:D7:2E:D7:5D:2F:88:41
            X509v3 Authority Key Identifier:
                keyid:F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:32:7e:5c:d6:18:3c:0d:7c:d4:40:6e:9e:c9:5b:16:06:d1:
         da:99:91:6a:18:ac:29:ab:30:64:32:b1:b0:b1:ea:2c:a1:42:
         18:45:a5:42:3b:7f:b3:ef:fe:90:65:c9:71:09:41:25:fc:58:
         0a:53:e2:4b:4d:4d:65:9d:44:c9:2d:a0:1c:87:87:06:ba:20:
         3a:0a:b6:19:20:f6:54:22:9a:10:38:1d:e4:98:e5:2e:00:aa:
         12:2d:6b:9a:69:9a:5d:14:ec:13:ff:f9:bf:14:34:7a:00:1e:
         1a:93:5e:38:7e:f0:07:85:33:2b:18:91:d6:98:1c:fe:82:8b:
         63:62:2e:fe:46:82:eb:35:ed:50:a0:39:83:6e:6b:17:f5:3a:
         da:e3:21:78:1f:f5:a9:f5:69:d9:a6:f1:95:3e:23:62:55:1d:
         3f:ab:dd:98:8c:62:3a:d7:47:af:88:0c:98:f3:fa:3b:1b:83:
         18:df:1d:cc:cc:f8:dc:97:cf:d8:32:6e:2f:31:4c:2b:ce:5b:
         2e:db:4a:db:be:b9:21:20:1d:df:06:4a:6f:45:15:1a:e1:51:
         86:7a:06:a1:6e:b6:75:16:18:f2:43:40:b1:0e:83:c1:c2:24:
         8c:1a:cd:e3:e4:c8:e8:9a:05:9e:4b:b3:77:e5:87:e1:89:b0:
         6c:45:f0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:53 2026 by rpki-client