Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
File:                     A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft (raw, json)
Hash identifier:          DDgS/lJHIshp+Jhl34KIVBtSM+tuQq6k+MLKIvOAZJI=
Subject key identifier:   1C:2C:6A:90:94:61:99:EB:A2:9F:F7:1F:D9:9D:82:F5:E1:FC:8C:3F
Authority key identifier: 03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44
Certificate issuer:       /CN=03820e964dfd3d281420afda20ce949e60d4cc44
Certificate serial:       019F189EAC99434921F7239778AE35DAEACD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
Manifest number:          198A
Signing time:             Tue 30 Jun 2026 13:01:19 +0000
Manifest this update:     Tue 30 Jun 2026 13:01:19 +0000
Manifest next update:     Wed 01 Jul 2026 13:01:19 +0000
Files and hashes:         1: 1-7mCdJzh3AJCBzQkr7Lm8UYkVoI.roa (hash: 8hePNi3TWg9ikxMqqbDcHn46RE1As5QHT7LFgD1DtFs=)
                          2: A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl (hash: pdxmnfSL71c7WK7IUT7GjRRj0MQeYsT0Nft/r2iQHc4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:ac:99:43:49:21:f7:23:97:78:ae:35:da:ea:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03820e964dfd3d281420afda20ce949e60d4cc44
        Validity
            Not Before: Jun 30 13:01:19 2026 GMT
            Not After : Jul  1 13:01:19 2026 GMT
        Subject: CN=1c2c6a90946199eba29ff71fd99d82f5e1fc8c3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:05:a6:74:0a:a0:93:83:4e:c3:8d:99:dc:12:
                    35:f0:a8:4c:83:73:93:23:d9:bd:63:24:a0:41:85:
                    48:a1:ae:d9:41:d8:74:49:a7:2c:5e:63:31:f6:ec:
                    57:a2:50:dc:b1:a6:bf:c8:30:0c:82:ef:bc:ef:59:
                    86:40:88:2a:10:c3:86:1d:62:37:90:f1:f0:fb:85:
                    54:c6:97:97:77:32:15:1c:c1:de:a8:7b:4c:b9:ce:
                    7d:90:ef:ba:4b:76:c2:34:c9:de:9f:81:ee:3a:bf:
                    6c:d9:4c:08:f1:b4:4a:a3:b2:60:d3:ec:86:10:4e:
                    f7:ee:52:22:a9:65:b8:fc:9e:54:cf:b9:63:88:8c:
                    cf:32:4c:4a:73:15:fc:2e:18:c0:cb:6e:ab:e9:f2:
                    d2:0b:f2:6e:8a:71:82:d8:c6:b7:24:d0:f6:f1:18:
                    7c:af:16:a5:9f:5b:89:ea:e5:c1:c4:b1:26:45:88:
                    a2:0b:a8:b8:74:60:ad:be:c4:e8:44:a1:79:20:24:
                    e2:3a:ee:77:a4:0c:2d:ea:99:ff:8a:4f:60:0e:2a:
                    e7:fe:50:48:cb:a5:de:ef:d0:c1:4b:24:f3:90:1d:
                    8c:48:2e:60:38:be:c1:82:27:22:3a:47:57:26:1f:
                    3a:01:73:0a:0d:17:49:30:22:b7:ba:be:57:0a:dd:
                    b4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:2C:6A:90:94:61:99:EB:A2:9F:F7:1F:D9:9D:82:F5:E1:FC:8C:3F
            X509v3 Authority Key Identifier:
                keyid:03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:9f:14:c1:b8:10:23:2b:46:04:28:22:99:6d:e4:04:53:e8:
         e2:ee:61:45:22:48:ca:97:ae:c5:7d:a4:ec:41:05:8a:87:fc:
         15:5c:db:4f:c8:8b:2e:8f:a9:83:c1:71:7d:71:6b:7a:cb:57:
         98:37:30:70:2a:0d:1c:82:8a:40:5b:69:67:72:de:22:83:15:
         33:b8:a9:c2:11:86:2d:3e:a9:1a:da:72:0f:6c:07:c8:9a:b1:
         c1:39:d9:fa:36:76:99:28:59:8c:36:ff:f0:61:48:67:b9:d3:
         94:4a:da:3a:23:83:25:14:c9:b5:47:05:c1:40:33:78:23:11:
         a8:ff:f2:77:91:b2:0f:ae:f1:92:dc:ad:b3:7b:10:31:c9:03:
         66:09:84:36:7f:4c:c3:d8:1b:53:bc:7a:93:4e:b5:c8:2d:3b:
         ce:dc:b2:6a:ad:e8:0b:3c:b9:aa:17:d8:a0:d8:f0:4f:46:58:
         c4:ad:0f:e7:ea:78:57:ab:eb:53:ab:ce:cf:67:cf:28:cf:6e:
         9b:9f:7e:3d:a5:ba:47:6c:7d:9d:79:0f:46:c4:d9:7a:d5:40:
         be:0e:f6:0d:a1:94:04:52:44:45:21:f1:5e:09:1c:12:a3:14:
         5b:21:50:0c:b2:59:57:9c:39:51:a3:e7:32:e6:f4:f5:22:0a:
         3c:c0:9e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:20:17 2026 by rpki-client