Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
File:                     k7dqyfeoSteQrVfIgLyfhirUyec.mft (raw, json)
Hash identifier:          gonA289kGz6Z31D0f0LttnCaF8t4nsXOxn9y+E0zZ1w=
Subject key identifier:   23:C7:ED:71:83:FC:65:EB:40:8B:21:43:AF:73:26:ED:F5:AF:AB:70
Authority key identifier: 93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7
Certificate issuer:       /CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
Certificate serial:       019EF0B5C5D0F06804EB24E52D81D295BA35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
Manifest number:          1999
Signing time:             Mon 22 Jun 2026 19:01:44 +0000
Manifest this update:     Mon 22 Jun 2026 19:01:44 +0000
Manifest next update:     Tue 23 Jun 2026 19:01:44 +0000
Files and hashes:         1: 1-w6BP38irc8ikwIFmua621R4fsA.roa (hash: 04Xau+nR8LEsBKrsIDus90F9cPwGPKiZEygv3ls7WwU=)
                          2: BpdGbagGv2_-Y3TyelIg9iJMEKo.roa (hash: l3T/M5x9/uGHTqM8Mx88SLVI1m/1mGk3r20lwOBjOe8=)
                          3: GAlMaF2krkYTpwYbE6TqEx_Tu_4.roa (hash: YXF5F3qEn+V3ifxgp0F6hZNsJB3RMIymnp6Om4JHbgY=)
                          4: VlwwTSoRiE5X0lO1YkSOmqRJH_8.roa (hash: tELQUfXy5jxakYPvXfDeQLNFwxD9VNjFTkL9svhczLc=)
                          5: k7dqyfeoSteQrVfIgLyfhirUyec.crl (hash: VyTLNcmL/1sXc88XrchSUf5Twb5ZQQXZWODUfUI8J08=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Jun 2026 19:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:f0:b5:c5:d0:f0:68:04:eb:24:e5:2d:81:d2:95:ba:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
        Validity
            Not Before: Jun 22 19:01:44 2026 GMT
            Not After : Jun 23 19:01:44 2026 GMT
        Subject: CN=23c7ed7183fc65eb408b2143af7326edf5afab70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:43:5e:f7:9b:65:bb:59:b1:39:b0:d6:72:db:
                    34:9d:63:cf:fb:16:96:f6:b4:89:04:7f:ef:a5:57:
                    5b:c8:3f:96:ee:d7:6b:ef:a9:95:87:ba:06:49:41:
                    26:f4:65:bd:ec:77:d2:2c:36:85:6e:ef:c4:98:4e:
                    bb:6f:5e:95:af:ce:9a:f6:2b:34:e2:99:63:1e:f0:
                    0d:74:c6:43:ea:09:84:3e:52:1a:d7:0f:8b:50:59:
                    b7:a1:25:82:b8:52:6b:ef:f2:b6:6b:79:50:64:e3:
                    72:57:31:b5:4d:73:c4:71:05:da:5f:8a:f1:a4:a5:
                    7d:43:ea:21:0c:bc:68:3f:5d:0d:bb:e8:e0:2c:2a:
                    f6:ee:fb:92:32:89:87:2c:5c:15:3e:83:ad:e7:41:
                    ae:a6:9b:df:6d:68:0a:9f:bd:e2:7b:d3:41:60:53:
                    b4:9c:9f:30:2c:ee:5b:15:55:de:0e:75:bb:60:6f:
                    5f:8f:95:00:40:bd:8b:6c:e8:db:e5:d4:4a:9b:03:
                    85:28:85:7a:ef:7f:02:aa:b9:9b:7e:ad:4c:aa:96:
                    d5:1b:99:e4:7e:d5:f4:54:7b:88:4e:c6:83:25:ee:
                    d6:04:cf:66:65:c4:bf:6f:6e:2b:93:e5:53:6b:8e:
                    b6:ac:7d:61:cc:e9:b3:6b:f7:3f:8a:e3:e5:a2:60:
                    e9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C7:ED:71:83:FC:65:EB:40:8B:21:43:AF:73:26:ED:F5:AF:AB:70
            X509v3 Authority Key Identifier:
                keyid:93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:fc:c0:ee:ad:ab:8a:f5:4f:c2:ac:5e:f4:b2:b3:ac:d6:ce:
         3a:aa:c3:a7:82:5c:b3:b4:b2:28:44:06:e7:fd:9b:3f:c3:c5:
         e5:d2:34:fb:f0:8c:e5:fb:51:2b:0f:c3:b1:87:49:cf:0e:fe:
         62:6d:3e:b4:59:78:53:1a:00:d1:18:68:53:38:38:22:eb:f3:
         5f:05:d0:13:51:69:33:9c:09:32:71:fe:b8:6a:04:30:68:7f:
         de:86:ab:fc:4f:a1:dc:a3:d8:68:63:51:34:25:f7:30:23:c6:
         b8:b1:84:f5:8c:36:0f:a1:dd:2b:03:34:67:16:6c:7b:fb:b9:
         d4:1b:5b:e4:9f:52:6f:53:44:45:fc:9d:3b:27:d5:6f:5b:3a:
         66:0f:ef:96:4b:c4:33:a2:f2:7b:92:da:df:03:21:1a:37:a7:
         8a:16:9f:15:c2:71:ae:3b:95:0c:35:a5:83:42:aa:77:5f:6d:
         6f:57:d1:0d:be:70:21:c3:96:80:22:16:7b:6d:64:99:8b:56:
         05:38:8f:c7:3b:43:89:70:00:27:9a:27:6e:4f:6a:ef:71:17:
         e1:a1:fb:61:4d:3b:45:83:02:9b:03:47:e5:22:f6:a4:84:d1:
         91:32:b2:f3:e3:04:a0:3f:b5:11:92:a6:1c:dc:8c:5d:84:e7:
         ba:2d:d4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 02:15:03 2026 by rpki-client