Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft
File:                     hB82_L9zNO_2uR6AKX6lslxOz9I.mft (raw, json)
Hash identifier:          XHTdDk8zG8DOQpWXHtGyYlTgI+/pecdlbxuaT301PuI=
Subject key identifier:   7F:CA:B5:CA:CC:FA:8D:31:3E:82:08:C9:3B:96:58:45:14:CD:BE:46
Authority key identifier: 84:1F:36:FC:BF:73:34:EF:F6:B9:1E:80:29:7E:A5:B2:5C:4E:CF:D2
Certificate issuer:       /CN=841f36fcbf7334eff6b91e80297ea5b25c4ecfd2
Certificate serial:       019F1A1FA9E85A419F1E8F83045AC76EE2C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft
Manifest number:          191C
Signing time:             Tue 30 Jun 2026 20:01:50 +0000
Manifest this update:     Tue 30 Jun 2026 20:01:50 +0000
Manifest next update:     Wed 01 Jul 2026 20:01:50 +0000
Files and hashes:         1: AJeVrZCLxAoT2hk1jNnC-Wu8ic0.roa (hash: frjC5Gbfb/b6ellH82d+qc/ADaLtRdBgOt68RftUF/k=)
                          2: e352oEgVriZnYK_AKJa-CWKEICc.roa (hash: U/aIt3PG8wiAKdOrpvdQvx37nl+6JO2D4S8tDrL+hpc=)
                          3: hB82_L9zNO_2uR6AKX6lslxOz9I.crl (hash: NgY7/I5w7nFvRxsDFIp3pW7sR6WrhBeU6SPEwR6n2Z8=)
                          4: oRy8UxR8Vc3XM-6AZCofxXbESbU.roa (hash: OxE0g4307Lmb3G4tCr6jdPxniZZCP8iXtLRIdgc9vMc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1a:1f:a9:e8:5a:41:9f:1e:8f:83:04:5a:c7:6e:e2:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=841f36fcbf7334eff6b91e80297ea5b25c4ecfd2
        Validity
            Not Before: Jun 30 20:01:50 2026 GMT
            Not After : Jul  1 20:01:50 2026 GMT
        Subject: CN=7fcab5caccfa8d313e8208c93b96584514cdbe46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:05:e4:80:08:21:58:11:ec:cf:91:9c:6a:4f:
                    3c:ec:b5:dd:4c:b8:68:22:cc:cc:f7:35:46:61:67:
                    6b:23:24:1a:66:c2:a3:64:4e:3e:5d:59:e5:0b:45:
                    00:06:c6:eb:b6:0b:7e:3e:23:fd:66:ff:e8:d3:bc:
                    dd:f4:b7:bb:e1:05:13:3d:ae:09:b4:4b:0a:55:9e:
                    64:4c:fd:a7:8d:8a:69:7c:86:25:31:7e:0f:b0:e8:
                    c2:f2:54:ae:04:6a:de:e9:5d:d1:37:2d:85:48:1c:
                    23:2f:6f:31:eb:c9:3c:aa:15:3c:35:e3:be:c9:6c:
                    0b:11:5b:e0:5c:78:fd:f2:bf:f0:fa:a5:55:5c:cf:
                    87:d9:19:16:58:37:3c:36:cd:63:35:61:0f:21:bb:
                    5e:d0:db:54:f8:10:a8:a9:42:5d:b4:8f:f5:32:36:
                    d9:55:75:d1:53:71:5f:6a:e5:21:cf:3b:32:0c:c2:
                    a0:ee:b8:4a:3c:e4:07:84:a3:a2:37:04:f7:91:dc:
                    48:8e:bf:e9:25:c1:97:ae:23:42:20:22:fd:de:8f:
                    47:ff:1b:98:61:6e:43:dd:a4:40:e5:de:e7:bc:28:
                    cb:94:6a:cd:3a:ee:36:34:5f:8b:e2:99:38:47:e7:
                    df:94:48:77:86:06:91:20:70:70:88:3f:13:48:c5:
                    13:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CA:B5:CA:CC:FA:8D:31:3E:82:08:C9:3B:96:58:45:14:CD:BE:46
            X509v3 Authority Key Identifier:
                keyid:84:1F:36:FC:BF:73:34:EF:F6:B9:1E:80:29:7E:A5:B2:5C:4E:CF:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:be:bc:62:4b:4f:1e:bb:37:fa:d9:4a:fb:4a:fe:4c:1e:28:
         ff:45:10:de:6f:0c:c5:42:67:23:96:ef:db:93:ae:d2:c5:ee:
         54:0d:03:93:a2:1b:bf:d6:a4:c8:df:c1:bc:a7:e3:ee:1b:a3:
         32:ed:b3:52:da:a5:b2:01:3b:82:29:ed:f5:52:d4:46:dd:4a:
         8f:73:5c:18:5a:d1:55:ee:1f:9b:bd:32:67:6a:91:89:d5:6f:
         89:04:5b:45:6c:ef:ed:c4:21:e8:be:a3:06:7f:e8:8b:65:11:
         c0:54:0f:f8:e8:17:18:80:e3:d9:9b:d4:4d:32:a4:22:d3:b9:
         55:6c:a3:fa:87:d3:07:91:d4:58:d7:12:6a:fc:f4:39:d6:32:
         f5:cb:8a:37:e0:20:35:76:aa:03:4e:39:f0:36:aa:4d:b5:ce:
         0a:52:e3:59:9b:1c:d7:63:b1:8f:4d:59:20:be:c0:b9:bf:30:
         c4:f4:96:56:99:85:4e:bb:93:e9:cb:d8:69:a6:68:58:db:94:
         c3:d0:08:84:b6:a0:9a:e4:23:6e:99:f0:44:97:bb:f9:2d:61:
         da:4d:d3:a3:ce:f4:99:f0:cb:61:09:f3:6a:07:ac:77:35:a5:
         a8:7e:5c:d4:a8:c5:ca:af:95:ed:d6:9d:40:eb:1b:01:ce:bf:
         25:51:39:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:23:10 2026 by rpki-client