Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
File:                     B9dTNfd79CQJdid7HdDhm7I6jh0.mft (raw, json)
Hash identifier:          CBqsbmr5/OlcisH1XVCgIN5Yosm7qHpo7S6GWOXfv6U=
Subject key identifier:   DF:98:33:99:D6:C7:2A:84:04:BB:2A:3A:C9:C5:BF:13:44:CC:D3:EE
Authority key identifier: 07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
Certificate issuer:       /CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Certificate serial:       019F1830D61D537AA4B9C541C1D82BE96EB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
Manifest number:          198B
Signing time:             Tue 30 Jun 2026 11:01:21 +0000
Manifest this update:     Tue 30 Jun 2026 11:01:21 +0000
Manifest next update:     Wed 01 Jul 2026 11:01:21 +0000
Files and hashes:         1: B9dTNfd79CQJdid7HdDhm7I6jh0.crl (hash: 7TED7p5pV9xp7hXStlI0sx3iLt2Dgc9i3TsH2zXKDiA=)
                          2: VuZOG8s543NfcGdXf57yIIrySJ8.roa (hash: Z7XKmPS1GYE3f8Q+rg/H8yChwaPlHaJspMgwTyoFFv0=)
                          3: sZxFDMEjV4E6bBsRgrZxjoy7_tk.roa (hash: zq0CNZddr6RR3XPpn+vNQeYgJJau/bg5D4OmfDaVY/s=)
                          4: tdeCucXFWGUBsGHwqe6hB6aeUEQ.roa (hash: enVyFjAXmV6jKlcwgcqYoRWX2/X4d1HEfq19dhiH9Q0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 11:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:30:d6:1d:53:7a:a4:b9:c5:41:c1:d8:2b:e9:6e:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
        Validity
            Not Before: Jun 30 11:01:21 2026 GMT
            Not After : Jul  1 11:01:21 2026 GMT
        Subject: CN=df983399d6c72a8404bb2a3ac9c5bf1344ccd3ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9a:5f:38:06:de:65:eb:c9:9d:05:20:90:ba:
                    fc:2f:01:f9:c5:95:98:9e:d4:23:f0:e9:76:29:e6:
                    37:1e:88:c6:58:40:bf:5b:d5:c6:1b:6c:5d:b7:0f:
                    0b:6b:57:66:2a:df:f4:db:50:22:b5:dc:36:c7:6c:
                    0c:45:b6:98:fc:f3:46:59:d0:e1:7d:82:9b:d1:c1:
                    86:ea:1d:57:51:38:54:7c:ba:5e:2f:2d:cf:e3:a8:
                    e0:bc:65:7c:12:34:9d:79:cd:28:8f:a0:86:c7:0c:
                    e6:8d:48:2a:9a:c8:cf:59:3a:79:4f:c2:39:02:e8:
                    c8:0e:a6:fe:d8:24:00:17:e4:64:18:6b:3b:66:a0:
                    1d:14:05:2c:01:74:32:59:79:04:e9:70:a7:1f:4f:
                    ca:aa:87:05:ff:f7:58:9c:8c:cc:02:78:2f:fb:4d:
                    9f:e6:aa:ea:ec:b0:c6:64:84:ba:1f:ff:54:06:ee:
                    a6:8b:78:ff:c6:b8:1a:2a:23:14:6d:79:15:c2:67:
                    1d:ab:ad:a5:98:3b:03:38:6d:aa:6a:40:7d:be:fa:
                    5e:2a:03:5d:1a:e8:af:69:e4:b6:4a:da:7e:72:d4:
                    e5:9e:63:e9:26:1d:5e:1b:9f:ce:14:0b:cb:19:77:
                    7d:f3:86:01:c9:1d:12:6c:fa:15:47:84:32:17:c6:
                    66:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:98:33:99:D6:C7:2A:84:04:BB:2A:3A:C9:C5:BF:13:44:CC:D3:EE
            X509v3 Authority Key Identifier:
                keyid:07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:c7:87:1f:a4:31:70:53:de:d8:c9:07:05:67:46:26:b3:a3:
         a6:e3:e6:5b:7b:dc:f7:19:16:6c:88:e1:ff:14:eb:a4:91:e6:
         3f:8c:e1:76:8e:22:fd:fb:48:dc:4c:85:ce:40:3b:e1:fc:22:
         91:bf:32:36:37:77:8b:e8:dc:8a:12:e0:dc:1e:7a:19:19:cb:
         d0:4e:10:65:e6:7d:41:b7:6e:cb:e0:d8:28:c8:82:4e:fc:77:
         2f:70:b7:07:ac:7e:d2:c3:03:e1:c4:4b:cb:d1:04:a6:1a:b5:
         2e:22:7e:b0:fd:9f:e0:ea:82:d0:b3:67:83:bd:65:ba:22:e2:
         f1:68:05:b8:e0:c3:6d:ec:4a:6c:63:dd:70:6f:ac:ee:fb:f0:
         4d:5d:50:d5:8d:12:dc:3e:99:e0:d3:c0:de:c7:bd:89:8d:0a:
         26:5f:e2:20:73:6f:5b:95:ef:a4:c7:ab:9e:af:fb:c7:bb:c7:
         fd:f8:05:47:ea:00:8c:05:a7:e7:92:ae:40:8d:50:b5:39:81:
         bb:04:2e:8d:9f:76:e6:6e:32:32:fc:d3:dd:93:22:d4:9d:f2:
         31:7c:5e:69:45:a7:67:1d:5f:44:66:6f:44:9c:c2:4e:7a:b2:
         fe:d1:d6:44:59:8d:14:d4:7c:da:c8:cd:db:58:03:33:5f:fd:
         6e:f5:20:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:17:49 2026 by rpki-client