Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft
File:                     5PKoZiAvS4y8MzgtboLYHYlkyA4.mft (raw, json)
Hash identifier:          a2R35NsdYWL+E311sguUhXbjYAc5eoSRkFlcAeWpi4g=
Subject key identifier:   17:07:26:F1:A6:55:36:A6:9F:BA:1A:0E:C4:D8:BB:89:0A:27:67:AD
Authority key identifier: E4:F2:A8:66:20:2F:4B:8C:BC:33:38:2D:6E:82:D8:1D:89:64:C8:0E
Certificate issuer:       /CN=e4f2a866202f4b8cbc33382d6e82d81d8964c80e
Certificate serial:       019F11C0E18F9DE8938A66FA12CB1392CD42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5PKoZiAvS4y8MzgtboLYHYlkyA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft
Manifest number:          198E
Signing time:             Mon 29 Jun 2026 05:01:21 +0000
Manifest this update:     Mon 29 Jun 2026 05:01:21 +0000
Manifest next update:     Tue 30 Jun 2026 05:01:21 +0000
Files and hashes:         1: 0w4XcBQywwl1teApjX6VHSPuvgg.roa (hash: /EcXOS7UzKKs89buMydMe2QfoMOWxkfJCW82u93ztaw=)
                          2: 5PKoZiAvS4y8MzgtboLYHYlkyA4.crl (hash: SbRKcFcjddZwlksB5j2AusnT1ySb7xRqYxXFxAc0vJM=)
                          3: av_HZf6EAwlDsvNiqOK233RQvoM.roa (hash: GY5qM+O2sWQRx1EcDLewr4LGFVQxjYE9jkUci4HJmic=)
                          4: ullWMQMNWNs2m-qavM2ZaH0wLLY.asa (hash: Hs+EUjaBHhmBRRhyoMI5LyzKTqwRJd2HGRT6RAN80K8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5PKoZiAvS4y8MzgtboLYHYlkyA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:c0:e1:8f:9d:e8:93:8a:66:fa:12:cb:13:92:cd:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4f2a866202f4b8cbc33382d6e82d81d8964c80e
        Validity
            Not Before: Jun 29 05:01:21 2026 GMT
            Not After : Jun 30 05:01:21 2026 GMT
        Subject: CN=170726f1a65536a69fba1a0ec4d8bb890a2767ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:77:44:28:e7:9c:38:ff:1d:14:f8:fa:22:d7:
                    e0:ab:94:52:63:00:9b:4c:28:44:d7:54:18:5c:88:
                    06:4b:25:18:b2:9a:a4:e5:0e:b0:46:ff:0a:e7:23:
                    44:87:ac:4b:e0:d4:e0:00:96:3b:3c:c0:17:08:30:
                    6d:43:00:40:1e:95:54:08:ba:a9:c2:72:d0:93:bb:
                    fe:b0:ba:1b:95:0a:ee:91:1f:c0:00:bf:9a:97:40:
                    5f:23:7b:df:59:8c:6f:45:1f:fc:0d:53:d0:80:92:
                    ba:d1:36:b2:e6:95:7b:13:09:35:6e:e6:26:d6:52:
                    52:fa:65:09:55:4b:67:0e:cc:25:09:44:b3:98:a3:
                    6b:e7:03:89:d6:03:be:f7:87:5c:c6:36:77:5c:c0:
                    d3:67:03:77:df:26:ba:92:16:1a:34:88:ce:bf:7e:
                    44:71:14:4d:7a:85:c7:83:a8:af:8d:00:16:37:99:
                    c2:0c:42:83:d7:7a:bc:62:a7:b7:61:64:77:5a:8f:
                    75:66:f8:4c:cf:42:5a:0c:02:bb:f4:55:40:01:46:
                    83:a8:34:af:69:18:da:a6:2d:51:66:57:a2:76:7a:
                    54:68:24:d3:6c:53:bb:82:bf:51:39:b5:7a:a0:52:
                    23:56:9c:6e:f9:8a:f2:c5:83:4a:d4:8c:2e:fd:1e:
                    c9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:07:26:F1:A6:55:36:A6:9F:BA:1A:0E:C4:D8:BB:89:0A:27:67:AD
            X509v3 Authority Key Identifier:
                keyid:E4:F2:A8:66:20:2F:4B:8C:BC:33:38:2D:6E:82:D8:1D:89:64:C8:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PKoZiAvS4y8MzgtboLYHYlkyA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:98:ea:c2:32:05:e8:5b:76:48:ae:dd:e0:cc:7a:33:f3:28:
         98:21:f7:d5:98:83:6c:07:5d:aa:f4:f6:68:09:1c:d6:24:68:
         68:42:f7:16:4a:be:db:53:32:44:2c:57:74:6c:10:88:bc:b9:
         4f:1c:11:03:0c:d7:98:bf:5e:af:21:09:4b:44:10:77:44:f3:
         00:2e:47:f5:47:81:e4:07:91:fd:ec:c9:f1:34:9c:7a:9a:9c:
         9a:b8:a7:0c:e9:09:89:dd:ce:3e:62:da:89:d2:e6:d8:e2:b1:
         e1:23:b0:65:64:65:0a:ae:41:45:b7:92:c7:65:98:18:bb:3f:
         bc:32:b7:20:cc:f2:25:50:3e:b0:9f:b0:42:f9:71:84:21:04:
         1c:a8:2c:12:be:66:21:94:7d:19:78:1d:2d:68:1c:2b:e9:5a:
         c1:a5:bf:27:4e:38:5e:60:aa:93:a5:2a:e1:17:4c:3b:5b:4e:
         84:66:83:0d:41:81:8f:c4:f0:89:65:97:90:a0:27:6d:d2:f8:
         f0:3d:91:34:04:51:49:53:8f:36:ab:22:c4:e9:f8:f1:58:c1:
         fc:e4:31:73:0d:2d:df:7f:55:33:f4:ad:4d:9b:28:38:8f:5b:
         a3:66:86:33:f6:91:ac:2f:24:c8:e4:aa:b3:63:71:33:2e:0f:
         70:9d:2c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:41:58 2026 by rpki-client