Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
File:                     fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft (raw, json)
Hash identifier:          keC7CngbFyhxd/dVaJLdKmyfZC80KiuVmhiCRF7vCbY=
Subject key identifier:   48:53:52:C5:88:80:83:7B:3D:3A:59:98:CA:2A:49:FD:68:60:18:E7
Authority key identifier: 7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6
Certificate issuer:       /CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
Certificate serial:       019F190D210E04A49A88715010EDCF018071
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
Manifest number:          199A
Signing time:             Tue 30 Jun 2026 15:01:58 +0000
Manifest this update:     Tue 30 Jun 2026 15:01:58 +0000
Manifest next update:     Wed 01 Jul 2026 15:01:58 +0000
Files and hashes:         1: G0kBNcjhGFcxChx46aWWaNpRXhY.roa (hash: VJoqFME0N6dK/qBA61hfvkkTq2MVQMZWW93hxUvsK8Q=)
                          2: IhUUSRuZPQ93qmBEuCsX-VJJ8_Y.roa (hash: wQMNMlSi7ML40phwxmQnjfrhkgmt/fkZEJZEruvJetM=)
                          3: J7oFZC1CJk2GtQuj_-ICPxLHOsQ.roa (hash: oGKjzDdrrCM7vTukMw0Fba8efuuuaYKCVfCXlBR+Jpc=)
                          4: O_CD_5ALmuh68TK-xyESGxnHW24.roa (hash: A4M+FCTh23fTzIJAI9lDd9sc/Yc7QQultOVy81PYaSo=)
                          5: Y05YWTld1eID__luRs7pp8ewZwY.roa (hash: 02lMUa1OHr9cMSAHSJuLTXNV5rSyX1jxkq8ORZ0rugw=)
                          6: fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl (hash: xPsi2HliEQt8tDbo0ieCZAmVwXvdNikXfgQRCEbAGL4=)
                          7: oFmVPpAqArTolT86zoYzDNps-ck.roa (hash: vxR9GCqj5WIpQWRTxrTVSqLQRxXTFqzFObqIUCYCQMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0d:21:0e:04:a4:9a:88:71:50:10:ed:cf:01:80:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
        Validity
            Not Before: Jun 30 15:01:58 2026 GMT
            Not After : Jul  1 15:01:58 2026 GMT
        Subject: CN=485352c58880837b3d3a5998ca2a49fd686018e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a9:9b:ad:b6:95:a4:a6:94:0b:be:c6:49:78:
                    eb:78:f8:87:5b:06:51:db:f1:50:f8:17:9d:4f:71:
                    7a:33:fd:28:bc:44:84:cd:0a:0a:60:f1:a8:c5:46:
                    e8:79:0d:6b:c4:9b:73:c0:69:80:88:19:43:db:31:
                    8a:d9:4a:23:9e:71:28:89:06:b6:7e:59:f4:45:08:
                    c5:88:d8:ff:80:65:2d:95:95:66:50:a0:1b:02:27:
                    c1:9c:48:de:e4:68:b8:c5:25:b0:3d:64:5a:fa:02:
                    43:b8:bb:de:3f:e4:a3:a8:84:d3:0e:2c:c9:3d:2a:
                    f9:89:be:94:02:a2:f5:c8:03:bf:5f:6a:aa:29:92:
                    9c:fc:64:e8:6c:2d:28:1a:10:07:b4:45:c8:76:d3:
                    b5:28:23:4f:9b:af:ba:01:d1:3a:7e:66:a4:76:00:
                    34:a9:8f:fc:d7:2f:45:8c:c0:49:15:01:0e:51:49:
                    d0:eb:9c:5f:c2:7e:cf:8a:ba:35:c2:d9:a7:58:d3:
                    23:49:75:08:bd:67:36:a7:ab:07:97:f5:9c:bb:bf:
                    7c:b2:90:06:28:b9:6e:77:45:19:fc:e1:e7:b7:dd:
                    3d:7f:a8:6b:c8:f0:ee:08:92:ce:55:b7:bf:df:c4:
                    b5:70:e1:41:a7:05:e1:64:63:ed:20:69:5f:c8:b1:
                    48:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:53:52:C5:88:80:83:7B:3D:3A:59:98:CA:2A:49:FD:68:60:18:E7
            X509v3 Authority Key Identifier:
                keyid:7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:28:21:60:39:92:52:d2:6a:2b:9d:d8:5d:de:96:ec:59:5b:
         33:ca:eb:98:3e:f9:df:a3:aa:d7:fd:3f:91:29:4b:bf:c4:25:
         38:85:2e:5d:d9:95:7c:7e:e9:14:fd:ce:54:b2:15:15:a7:c3:
         c9:40:c6:ea:24:df:4a:27:4e:d3:04:48:17:65:db:2d:09:c7:
         d9:2a:f0:50:b5:06:d7:5d:19:03:f3:42:cd:6e:42:08:96:2a:
         8d:4f:23:9a:87:60:96:fe:3b:c0:80:2c:7e:4d:9e:a2:ed:75:
         51:70:d4:32:98:a8:f4:4e:7c:33:63:03:61:86:3e:3a:30:02:
         a4:2c:a3:57:d5:e1:2c:a6:19:72:0a:55:fb:3b:d3:43:a9:36:
         e1:c4:53:00:ce:54:54:97:d0:09:e1:17:f3:bb:92:3c:30:56:
         c3:b5:c6:95:f7:72:1b:eb:54:76:d1:90:d0:1b:1e:3d:c5:79:
         36:5e:7c:b4:93:30:4c:fa:8c:a9:8d:92:f0:07:c8:25:c4:b0:
         30:36:9e:09:e3:70:31:f3:3a:a0:70:84:c0:22:14:fb:ed:f4:
         84:19:86:33:f3:be:32:f0:c6:11:cf:71:fa:19:f1:c9:05:a8:
         bd:79:b0:61:0e:02:8a:1f:cf:7f:c8:f1:58:fd:e2:5b:59:ce:
         33:c2:b7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:18:02 2026 by rpki-client