Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
File:                     sZQPAAmW6_0tq3HEacxR7ogbP14.mft (raw, json)
Hash identifier:          wW+wdYG7pI9+Tt423lro0tu7o/lZeolWYspCfSPjxCI=
Subject key identifier:   EF:C5:5D:4D:41:62:75:56:DD:18:9C:C2:94:C6:8B:C3:42:2C:9C:97
Authority key identifier: B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E
Certificate issuer:       /CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
Certificate serial:       019F386095B60BD3DBE44F3094533CBB78BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
Manifest number:          199A
Signing time:             Mon 06 Jul 2026 17:01:21 +0000
Manifest this update:     Mon 06 Jul 2026 17:01:21 +0000
Manifest next update:     Tue 07 Jul 2026 17:01:21 +0000
Files and hashes:         1: _innNg-W71__tEWxWqoYCVwYPLc.roa (hash: UBsc5lS9QgRC7N6kPNc37ofHV3RHdTM0d9hSw9Z1W3o=)
                          2: aprsdgtKeFBW6dMDyLpO37V7sYU.roa (hash: 04ZHgWeGk6onOBVuETq5g7lFyguxKvrGp3YmU7j5C7o=)
                          3: sZQPAAmW6_0tq3HEacxR7ogbP14.crl (hash: 2oupYB4StLEAyT80Z4vTbarVbgr+7f+lpwE0GOor5Hc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 14:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:38:60:95:b6:0b:d3:db:e4:4f:30:94:53:3c:bb:78:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
        Validity
            Not Before: Jul  6 17:01:21 2026 GMT
            Not After : Jul  7 17:01:21 2026 GMT
        Subject: CN=efc55d4d41627556dd189cc294c68bc3422c9c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9e:5a:35:c8:5e:b4:03:f2:31:14:ad:84:1f:
                    52:a9:9d:7c:7e:c8:93:17:00:3b:48:45:51:1e:0a:
                    2e:27:8c:42:ec:ee:5a:53:66:ce:af:d0:66:48:cc:
                    c7:e7:7a:37:06:55:24:2f:01:68:a0:72:b6:ec:fe:
                    8a:ba:15:7a:ee:b8:42:10:19:33:f6:16:d2:b8:58:
                    73:e4:dc:58:c0:61:8e:50:46:a4:1f:ad:cf:7c:29:
                    f6:a9:eb:7d:d2:ff:fb:4d:b4:75:12:ab:d3:7f:72:
                    dd:b1:48:0d:fa:b2:e0:62:57:6f:21:c8:2d:78:8a:
                    84:4b:d2:a4:6c:27:74:93:e8:91:4c:ad:df:e8:85:
                    63:95:d2:91:78:35:06:9b:94:99:b3:4c:9f:e3:95:
                    12:a6:56:39:59:3d:cf:6b:71:42:e4:f0:85:92:7a:
                    e1:ef:a1:5c:c7:94:44:83:c1:8a:0e:18:d5:61:fd:
                    8e:95:11:3a:80:32:a7:c1:6e:94:92:f3:76:11:c2:
                    49:b9:d4:0a:c0:38:6a:8f:6f:f3:5c:7a:c2:3a:2c:
                    7d:e4:81:af:3d:03:dd:9a:67:44:4d:91:7f:76:dc:
                    b6:ef:e1:a4:65:ad:f1:c9:fd:ba:d7:bc:07:09:ba:
                    c2:2d:06:40:77:78:7d:8e:98:df:d0:c4:ea:00:1a:
                    80:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C5:5D:4D:41:62:75:56:DD:18:9C:C2:94:C6:8B:C3:42:2C:9C:97
            X509v3 Authority Key Identifier:
                keyid:B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:19:35:68:80:23:24:cd:e0:49:9f:0f:d9:d7:e3:3c:e2:5d:
         49:2d:4a:d0:6a:3f:2a:7e:b6:0d:96:07:c5:45:10:15:58:b2:
         27:bf:3d:61:8a:05:58:da:4d:a9:f3:b3:9c:1c:e0:87:51:c3:
         36:60:ec:7f:1c:b1:50:fc:72:c9:e1:c8:cd:3f:7f:42:67:da:
         b5:5c:3b:bc:cc:1d:34:40:bf:f8:df:9e:ed:42:66:6c:bd:12:
         2a:62:a4:4d:96:fb:d7:3c:97:ae:d3:2a:21:a6:6d:2f:10:1e:
         7b:51:ce:13:77:43:ab:90:f4:25:77:7f:df:8c:8e:d3:8d:61:
         e5:89:5e:f4:67:e1:6d:e5:b2:f3:91:69:a4:6c:db:78:3f:19:
         eb:4d:0d:03:32:ec:82:44:4e:28:d8:bf:5a:3d:b0:71:ae:7b:
         e5:23:8b:ad:b4:03:ea:cb:8a:33:8a:04:23:8a:96:70:a4:94:
         a6:b6:d7:ac:bf:c4:ac:2b:e5:da:e6:c2:a8:e0:52:87:cb:1c:
         b5:87:e6:29:23:4c:bc:c5:e8:80:3d:d6:8e:89:f5:b9:19:b8:
         39:28:5f:c7:61:7c:b1:ca:b4:d2:97:62:16:62:a8:02:45:59:
         1a:bf:16:1d:2c:99:59:e5:3c:3c:6f:ff:6c:28:04:84:d3:ba:
         80:0a:fa:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:15:14 2026 by rpki-client