Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
File:                     4kvChw3iWZ2vZkl_VynHSzPvmTo.mft (raw, json)
Hash identifier:          QfgCOVPGlSp4QvwiAMZQfp3brDoXCRSImwqy0s9kMY4=
Subject key identifier:   14:7E:4B:F6:0E:3C:F1:9B:5C:97:C0:8F:2C:18:74:B9:73:01:68:57
Authority key identifier: E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A
Certificate issuer:       /CN=e24bc2870de2599daf66497f5729c74b33ef993a
Certificate serial:       019EF8DD6E041E521BD3CCD1DBA19F2C88A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
Manifest number:          197C
Signing time:             Wed 24 Jun 2026 09:02:01 +0000
Manifest this update:     Wed 24 Jun 2026 09:02:01 +0000
Manifest next update:     Thu 25 Jun 2026 09:02:01 +0000
Files and hashes:         1: 2fN3eFa0bjosUQqjhzxnSC-ZbG4.roa (hash: adZ7mZtP0EOWzdaHjuDb/aCtRN0v7AY6Df2Y3DcoCAs=)
                          2: 4kvChw3iWZ2vZkl_VynHSzPvmTo.crl (hash: /LFeb6vm5Ksu+rYf9EYETROwbJhqkYMcfxZ10TyH+0A=)
                          3: 9v_0JWu-xS3HupRXSgVGs4u-y9E.asa (hash: sTee8C1I1rz26eDODyCBNjrldfLm0tSqfnc3UkcLmsI=)
                          4: VFTnlB7fVRBsXRxIBDV1iFufXkE.asa (hash: iqnFhWzzO6j+t2K9kgwBf/ErkVyc0h9GJuE4NZx67oA=)
                          5: Vq_xfXcXdKcO1UzpZxW6yviyyFE.asa (hash: m8FshAEN/KHrFIoeny5MQ2gIm897mevyMxMfoqG/biI=)
                          6: YivW_0JV1PXQKNZNuU-YZa-0178.asa (hash: UK5xEl6Yl9PtluY9Smceeot0bF0az/oSTMQ4CgDOsRs=)
                          7: fQpqOd1l93-P-yMVY0liF15r3FA.roa (hash: fe669y4X3Xx1cDS4i66TQBvbP8wPt7PZfJZDiZ3TAoM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 09:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:f8:dd:6e:04:1e:52:1b:d3:cc:d1:db:a1:9f:2c:88:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e24bc2870de2599daf66497f5729c74b33ef993a
        Validity
            Not Before: Jun 24 09:02:01 2026 GMT
            Not After : Jun 25 09:02:01 2026 GMT
        Subject: CN=147e4bf60e3cf19b5c97c08f2c1874b973016857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:03:60:8e:1d:a9:c6:3a:55:b4:c6:6a:27:ac:
                    92:bf:0d:51:db:5c:c0:e0:27:f0:f8:59:93:9c:a0:
                    04:9b:bb:f0:2e:a6:c7:6b:1f:6d:d6:a0:79:9a:4f:
                    f6:2d:0e:7c:c5:6b:08:ab:54:fd:6c:27:0d:88:68:
                    31:15:31:79:b1:3e:55:14:33:29:96:97:36:d8:4b:
                    c8:35:6a:bc:06:cd:13:a0:9a:3a:ad:0c:8f:97:08:
                    d6:f5:ac:ff:b8:e3:ea:e4:4f:c5:42:28:3c:22:ef:
                    03:e8:23:b9:80:c9:86:00:8f:cf:7b:af:5e:13:83:
                    7f:cb:2b:38:db:d0:e1:87:75:61:dd:c3:e7:a1:b9:
                    62:d0:d2:de:f5:04:29:3c:ec:89:2c:16:af:6c:3b:
                    b8:e1:59:5a:3e:c5:b7:d1:07:1f:be:7a:77:5a:a7:
                    8f:2c:1c:c0:7a:09:67:d6:da:52:87:b8:8a:74:ec:
                    9b:f1:1e:bb:62:a9:47:8f:e0:ac:21:e1:d4:11:3f:
                    3e:d7:24:b0:31:75:63:74:48:a9:8e:ce:46:b4:b4:
                    82:d5:07:62:05:75:7c:1e:c5:f3:20:8c:df:ed:fa:
                    03:66:d1:b6:92:e1:21:67:3f:3d:e7:0a:13:f2:b7:
                    c7:8c:54:2b:9c:a4:af:9c:be:fc:c4:be:ba:94:4f:
                    bd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:7E:4B:F6:0E:3C:F1:9B:5C:97:C0:8F:2C:18:74:B9:73:01:68:57
            X509v3 Authority Key Identifier:
                keyid:E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:9e:b1:72:9f:0d:c0:78:bb:92:a9:db:c3:99:af:66:e2:94:
         5c:9a:aa:74:d6:f7:69:4b:d2:b0:ce:d5:de:f4:4d:e5:6e:5d:
         75:c8:67:61:f8:fc:ee:62:13:e2:bc:81:9c:81:0a:b8:89:43:
         4f:67:6c:69:9f:df:4c:8f:53:e3:1a:db:26:e3:6a:6e:34:0d:
         c1:55:b9:3f:d1:3b:77:0a:61:87:67:23:c2:89:8c:63:f2:d9:
         0a:63:ea:53:65:84:d3:83:17:bf:f6:95:df:47:8e:ae:a0:24:
         10:36:5f:24:c7:be:96:82:dc:ca:ce:f5:34:fa:5b:9c:83:e9:
         4a:6d:06:bf:94:65:32:a9:aa:5e:df:ee:6a:dd:d1:e7:a5:69:
         e8:c2:93:05:b6:63:66:1e:a4:b9:44:dd:f5:23:74:32:a6:1b:
         7c:c2:3e:d7:86:dc:53:80:6a:77:8a:f2:22:f2:a5:84:f5:e5:
         d1:40:29:4b:50:c0:82:5f:0b:8f:07:62:ac:66:2c:30:b8:b7:
         8e:73:c3:3f:5f:5b:6e:c8:17:66:a6:73:4f:14:1f:b5:3a:ce:
         be:8c:b9:27:ff:07:89:37:30:b4:22:9c:89:5d:c5:04:a4:e0:
         35:36:f9:3b:70:f0:db:f4:fe:f8:2b:95:6e:08:61:88:7e:80:
         d7:cb:ee:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 17:58:44 2026 by rpki-client