Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
File:                     idpg8EnfujS-S06EGLn_SSElxEk.mft (raw, json)
Hash identifier:          RpXcf1geLtnh0pdGHR+1yHrtTknL1R5wMQaSZ5VrRKI=
Subject key identifier:   B0:3C:14:2E:97:42:1F:64:11:F0:F3:AB:03:D4:10:01:A3:47:48:B9
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Certificate issuer:       /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial:       019EBE10C66816E5115D5A9F458C7C526D53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
Manifest number:          198A
Signing time:             Fri 12 Jun 2026 23:00:30 +0000
Manifest this update:     Fri 12 Jun 2026 23:00:30 +0000
Manifest next update:     Sat 13 Jun 2026 23:00:30 +0000
Files and hashes:         1: 1qEKqAJdH_5JUlUOsEMtQdOuv-Q.roa (hash: OkbONL4Kv2cLwbDetNkEjbv+0531gLH+WXA/3kqlV9c=)
                          2: 9SsHjlBtd69QJ3ndqo-1KhdedKw.roa (hash: qiOm4Fr0eZzz2bsbkMUTFYSa9lmGOwKDeaQIOpLMzdY=)
                          3: JVABJxvLxkj1mSPSAUuE7d0cXpc.roa (hash: 1hA/cynNPGLtZN3nQtWNzvj3MUG4llVicN6VIwab6HU=)
                          4: gX9Z7p1Ob66YosJCGXnZh4miO-s.roa (hash: elm/BD7Osd0BcHbQbq55e8rpGxN0X0LtIG/FC4qO27s=)
                          5: idpg8EnfujS-S06EGLn_SSElxEk.crl (hash: JXpSKs8Yw87IQ5gX4gx+zI6yl6K1XP8yKJY1BzrwsZU=)
                          6: pDrr_bf7Ghe4a7lfLdGTUedQJ4s.roa (hash: hckgwXDzkDTS3YgN/PyJxO9PpMuWCR3QafiNrBSQrgA=)
                          7: sFz5mtE3Mde8lSIcx7T2y7lO-zw.roa (hash: NxGgl9GbDugZBPBW0o4P8z6yiV+CD/pDM33YvrxHjSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 16:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:10:c6:68:16:e5:11:5d:5a:9f:45:8c:7c:52:6d:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
        Validity
            Not Before: Jun 12 23:00:30 2026 GMT
            Not After : Jun 13 23:00:30 2026 GMT
        Subject: CN=b03c142e97421f6411f0f3ab03d41001a34748b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a4:9c:dd:c4:5d:ef:2a:f9:7c:37:e4:9c:8c:
                    d3:b6:69:45:e7:c5:ab:92:61:01:2c:80:5a:bd:1a:
                    e2:4b:52:d9:20:62:4b:11:7b:0e:cf:9f:58:72:fe:
                    7b:39:4b:20:f1:d0:1f:17:c1:e1:3c:92:20:96:94:
                    18:a6:86:09:f9:6e:2a:f2:33:a1:0a:15:c0:23:19:
                    3e:38:9f:6f:a7:0e:72:e5:e0:02:23:35:84:61:82:
                    f2:fb:4e:3e:bb:d1:96:b3:6b:84:f7:5d:a3:8f:c7:
                    87:82:fd:fb:e4:82:79:e2:9f:88:72:58:40:fe:f2:
                    24:5f:37:9d:cf:c4:bf:2e:db:66:7e:cb:f3:24:bc:
                    d7:75:c5:5b:f6:42:8f:e8:e4:e3:e5:40:2e:09:27:
                    4c:37:03:b4:cb:3a:88:19:ca:08:61:d0:7e:0d:6f:
                    48:c2:7b:3a:f8:50:94:b0:7d:44:b0:7d:71:7a:22:
                    da:b5:ad:71:f7:ae:37:8d:ea:11:4d:a5:6a:ae:2f:
                    a2:54:6c:45:40:ce:e5:5d:b9:21:a9:9d:2b:d6:b4:
                    a3:f0:0e:14:22:39:0d:16:05:0a:4a:cd:73:d3:84:
                    39:89:df:8a:4d:3e:56:6d:64:a0:30:1b:1d:a4:04:
                    42:8a:fd:99:94:b5:70:c8:e0:9c:2b:a9:7c:cb:c1:
                    1d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:3C:14:2E:97:42:1F:64:11:F0:F3:AB:03:D4:10:01:A3:47:48:B9
            X509v3 Authority Key Identifier:
                keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:7e:48:b2:05:88:98:f0:0e:d8:5e:e9:4a:da:66:85:7c:0f:
         61:fc:4c:65:41:6d:a2:a9:3f:ac:b6:c4:96:39:4b:93:5e:42:
         a1:4f:28:f8:58:28:ea:c2:42:84:67:f1:0a:e0:3c:14:19:d0:
         b8:8b:4b:6b:15:a8:d4:bd:e0:b0:75:3a:4f:27:8e:cb:39:1d:
         e5:27:4f:6a:7c:0c:86:a7:7c:b7:1b:19:c4:45:45:bb:26:35:
         55:a5:50:fe:b5:f8:59:fb:30:16:60:ad:cb:b1:07:de:9b:d2:
         82:3c:4a:4a:f1:04:4e:63:66:c5:61:30:98:cf:b7:65:2b:4d:
         66:2e:e1:f3:08:02:1f:53:33:07:cd:27:08:b0:d6:3c:7d:e8:
         bf:ab:64:74:83:06:51:6b:2e:8a:c9:8e:ff:7f:e7:0f:fe:0a:
         0e:8c:82:30:6c:7d:0f:66:5e:40:0b:2f:7c:c7:1d:94:f5:a0:
         4d:a4:e7:c5:a8:58:43:99:fd:f6:90:7a:b1:f2:28:22:df:13:
         f4:de:71:9b:16:c0:f7:e8:9f:fb:b6:b6:d3:9b:90:99:93:e1:
         49:29:75:84:31:f1:24:0b:14:65:e8:33:e9:5a:e8:b7:1e:ad:
         f9:b3:eb:b3:28:0d:4f:1e:e3:17:1e:4e:62:24:c6:77:6c:8c:
         72:33:fd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 02:21:58 2026 by rpki-client