Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
File:                     H6isN_lpUWlif3XgmJYzlt6WOMw.mft (raw, json)
Hash identifier:          tZZ8pxMGXGyPK3o0SkCiE5xxuLbx4bzTKMwoWSTaN48=
Subject key identifier:   1C:D9:E7:3F:50:F8:53:A9:8C:F2:2A:3D:AE:B8:F2:BF:EE:BC:6D:3A
Authority key identifier: 1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC
Certificate issuer:       /CN=1fa8ac37f9695169627f75e098963396de9638cc
Certificate serial:       019F1944571BE57995EC669793EF45E80C85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
Manifest number:          198A
Signing time:             Tue 30 Jun 2026 16:02:16 +0000
Manifest this update:     Tue 30 Jun 2026 16:02:16 +0000
Manifest next update:     Wed 01 Jul 2026 16:02:16 +0000
Files and hashes:         1: H6isN_lpUWlif3XgmJYzlt6WOMw.crl (hash: cy4uUGfVceC+ni4VLie4u4DC7jRjvixiVAYv+N+hBb4=)
                          2: UTSR5iQJ6IBH6DGdS5VKMlXv2h8.roa (hash: g/yB397DTMizFh5pcVuRPR6yN/SI5ugHQKZHi+BSisU=)
                          3: eBV3wtUeMu2mQzbDRhT7v_8FhCM.roa (hash: dfSD4t+IvLSwRtvheEfZG9CM1+g6QasEUhniYPszLJw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:44:57:1b:e5:79:95:ec:66:97:93:ef:45:e8:0c:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fa8ac37f9695169627f75e098963396de9638cc
        Validity
            Not Before: Jun 30 16:02:16 2026 GMT
            Not After : Jul  1 16:02:16 2026 GMT
        Subject: CN=1cd9e73f50f853a98cf22a3daeb8f2bfeebc6d3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:54:c6:41:c1:53:69:1c:b6:90:64:50:fb:95:
                    a5:c6:45:c7:32:a7:d7:4f:77:4d:e8:b6:40:a2:b9:
                    c8:e1:f2:a4:e9:44:28:2f:be:54:ff:85:3b:bc:c6:
                    04:a3:c5:09:37:74:69:cb:44:65:65:e4:f3:72:36:
                    b1:fa:1a:5e:5e:c8:80:cb:32:4a:d4:5c:69:98:c5:
                    22:7f:dc:f5:68:fd:d0:8d:7a:78:5c:02:37:2e:52:
                    25:2c:45:db:fb:f4:d0:45:91:93:c7:98:e9:13:18:
                    57:16:ff:0f:26:51:94:c3:7b:90:75:78:65:8e:e7:
                    2e:b7:dc:8e:68:a6:5b:0f:eb:61:f6:20:07:4e:11:
                    3b:cd:c8:3b:6a:b2:0f:d2:8a:18:a4:0b:17:84:3f:
                    7b:6e:56:04:db:a9:85:37:3d:97:56:2d:a6:ed:d4:
                    cf:6c:ed:da:77:59:78:ae:8a:05:f1:0e:24:19:07:
                    6d:0e:fb:ad:14:54:8a:df:f3:28:d8:4a:c8:d9:69:
                    c3:9e:f9:56:f1:57:43:92:6d:76:05:02:9d:0e:53:
                    48:d0:76:53:14:0b:9c:7a:77:0b:37:b9:29:36:77:
                    74:cd:27:bf:48:5e:b6:90:bb:d7:fb:a6:53:b8:9d:
                    8c:12:f8:75:4a:ed:fe:ba:48:97:d6:57:28:9b:30:
                    63:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D9:E7:3F:50:F8:53:A9:8C:F2:2A:3D:AE:B8:F2:BF:EE:BC:6D:3A
            X509v3 Authority Key Identifier:
                keyid:1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:5b:94:30:ab:41:da:c2:cc:b5:7b:c7:9b:10:35:24:05:67:
         a7:2c:33:9f:d6:b4:55:85:3c:8e:e6:b7:90:a0:e2:11:2e:b8:
         7a:d4:f1:b9:9c:62:d9:6b:f7:2c:e0:9b:2c:19:dc:0a:88:5d:
         cd:94:24:d7:56:48:4e:8d:fe:40:55:24:58:84:1d:f6:02:c5:
         b5:e9:cd:00:f9:83:90:f9:33:47:9e:8f:07:ba:06:a6:9b:c4:
         36:c3:12:65:07:9a:ed:8d:64:e3:71:b0:07:de:31:57:73:08:
         7b:3b:ce:cf:4d:51:e5:b8:8a:99:e1:a1:f3:9c:da:b2:55:ed:
         13:8f:e5:0c:94:cf:8d:cf:cb:72:b3:8b:5c:c5:93:da:77:88:
         1a:04:2f:9c:d8:19:a5:a6:c7:a1:56:04:e7:8b:1c:b1:3e:8f:
         c3:37:82:6b:76:c4:f5:81:6d:06:d6:8b:fc:1c:c6:a9:b9:d9:
         a2:9c:38:d3:31:2b:05:6a:d8:31:da:0c:06:19:74:4b:d3:77:
         e6:5d:20:f7:3f:d5:52:42:f0:ee:fa:81:c0:9d:f5:ae:56:28:
         e4:6a:8d:d9:d3:9e:57:a7:4a:5d:fb:3c:cf:ef:88:03:9c:44:
         c1:3c:aa:7b:47:05:f3:bf:79:02:a4:f2:53:aa:e9:7a:bf:0b:
         3c:b7:13:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:36:55 2026 by rpki-client