Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
File:                     xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft (raw, json)
Hash identifier:          twIGvoqXU6xKeHfH103Ua95tOMvFTpIfYPW4KHeD9Dg=
Subject key identifier:   A1:2D:07:89:EF:54:9C:45:C6:CE:FB:F8:F7:24:50:B4:6B:18:90:72
Authority key identifier: C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71
Certificate issuer:       /CN=c441738baab988b1d68693bb05e29bfbb4f0f671
Certificate serial:       019F18D7126F0961EFC97D55EC85C276DD2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
Manifest number:          198B
Signing time:             Tue 30 Jun 2026 14:02:55 +0000
Manifest this update:     Tue 30 Jun 2026 14:02:55 +0000
Manifest next update:     Wed 01 Jul 2026 14:02:55 +0000
Files and hashes:         1: 0sxkLDFdb4QelHCb0OZcMbO1jDM.roa (hash: 1xnWSoVsnQK8dLyDSxHxSRJdCC9QJVhSYDLS7qz0b0o=)
                          2: AjeR0O3ITsCO65xWw0QykqgxNA4.roa (hash: DgIKpLNUmEsPkrau/sY/HOWPCo1ggWtDwl6wxDzmrWM=)
                          3: JYg_CAMB4ZN8DGnRJNHFpnRes5M.roa (hash: 8yyEuQEPL63uz0pA2x8egSWHyWTxI5pMdw0GJbheT0g=)
                          4: XfbSuzWnSJ0R_yOnkIG4F7s1WPk.roa (hash: I7f3HuHYguoVsLgmKIELlpLwLVz1wyD/5cmJZXhghjI=)
                          5: cUu6zP1qDNJzdBpEfOD7tH9ZEq8.roa (hash: voL4FK/goy3Ucp4jv2hDvT1VmoRVg+99FBMAXu49zQk=)
                          6: sQNC3PZhtT00aBnksKdxFAVZzQQ.roa (hash: 0L2z2BzNlMPl3E12ZeAaZbBCG9ys89MDIPcvR5FtVNI=)
                          7: tfaKP8IvgQkAwmU3RK8qZmHmzts.roa (hash: hyWKZ+AjnMpt6LR61ItU5+Wmy9Q8i+PxJ269z65RWH0=)
                          8: xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl (hash: V4E4XZcXw7MkhKHzdg2kxt6P3tAsOzvU5eBBJOWpT0I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:d7:12:6f:09:61:ef:c9:7d:55:ec:85:c2:76:dd:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c441738baab988b1d68693bb05e29bfbb4f0f671
        Validity
            Not Before: Jun 30 14:02:55 2026 GMT
            Not After : Jul  1 14:02:55 2026 GMT
        Subject: CN=a12d0789ef549c45c6cefbf8f72450b46b189072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4b:60:83:88:a7:9a:6c:b2:4b:00:24:c6:af:
                    85:7a:4f:ed:9b:5b:01:59:a5:02:94:a6:4b:24:39:
                    8c:0d:0b:e5:65:02:45:52:90:0c:60:42:b7:01:7e:
                    9f:a7:74:be:6a:56:52:25:fd:c1:70:e6:ab:b2:65:
                    3e:2a:f7:6a:a5:9c:f8:be:8d:00:87:23:44:d7:56:
                    1f:e9:fd:75:77:3d:90:bc:85:10:08:1f:41:68:6b:
                    b8:25:fd:71:75:36:cb:8d:d3:af:ab:37:0b:ad:0a:
                    f5:57:5c:ae:c5:bb:13:e4:21:c9:8b:2b:d5:25:00:
                    cd:30:9d:41:35:95:c7:a5:60:27:77:28:06:a0:eb:
                    9d:c9:98:8d:8a:09:01:89:ed:57:cd:e9:5c:06:f3:
                    34:1c:f5:5d:44:c9:a0:84:3a:b6:03:33:96:9a:cb:
                    d8:f5:91:6d:d0:77:45:48:e5:3c:8b:00:6b:9a:eb:
                    0f:89:fa:92:39:09:cb:15:b5:3f:70:0c:04:89:21:
                    47:34:36:e0:61:e2:f6:1d:2f:54:9a:86:a9:94:e7:
                    ae:65:ba:b9:c7:a0:e6:74:b3:17:22:6b:46:2d:aa:
                    37:11:bd:bb:fb:8c:7e:0d:6e:91:83:35:aa:e1:e3:
                    b3:00:72:48:ea:e2:2e:46:11:f0:22:a6:89:64:e2:
                    d5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:2D:07:89:EF:54:9C:45:C6:CE:FB:F8:F7:24:50:B4:6B:18:90:72
            X509v3 Authority Key Identifier:
                keyid:C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:92:54:d5:76:03:4c:a4:69:69:f5:66:46:a4:e6:42:6b:7d:
         ec:b9:ba:55:b7:c4:88:95:3f:98:0c:7b:72:4b:80:e1:b9:43:
         d8:92:06:94:c4:72:b1:1e:77:05:f7:f3:c6:40:9a:95:5b:64:
         62:ba:3a:73:90:e0:d5:9d:8f:be:01:3d:7e:12:8b:f0:7f:37:
         a5:cb:bc:d3:41:92:bb:d3:c6:5a:71:4b:91:05:52:f0:77:a0:
         9f:00:54:f4:a3:a9:18:d1:69:cc:17:62:4b:74:3c:8d:ae:6d:
         68:45:92:fd:75:0f:c0:75:94:31:1b:1a:3b:b1:e6:b8:6d:f3:
         b6:d6:e0:22:79:f0:f5:e8:96:bc:44:01:e4:f6:25:5c:66:24:
         e5:ee:57:96:42:33:f3:7f:50:71:ae:ba:ee:8e:9d:dd:d7:0a:
         68:45:02:9a:1b:c5:81:91:81:dd:de:f0:43:e7:1a:f8:9a:39:
         b5:2b:6e:a9:06:47:29:c5:63:be:a7:eb:ef:eb:f6:12:b2:23:
         62:86:12:13:8d:19:22:5e:d9:d0:f7:1e:54:df:d5:5e:10:03:
         e3:01:1d:41:c6:07:7e:f7:da:ee:aa:18:af:9a:1f:2a:54:49:
         03:fb:2a:f9:18:9b:5b:20:b4:c1:f8:3f:c8:26:10:d1:45:39:
         ed:d2:d8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:43:14 2026 by rpki-client