Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
File:                     47NZVqQDigk4zNqFWSrVMeSog60.mft (raw, json)
Hash identifier:          uBZb407bJcu0YBXXLiX7jwtNPvObVk4sJ1qi5uq0E7g=
Subject key identifier:   CE:11:90:2C:EC:1B:A0:77:9B:55:83:F8:A1:DA:0D:B8:74:F2:4B:14
Authority key identifier: E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD
Certificate issuer:       /CN=e3b35956a4038a0938ccda85592ad531e4a883ad
Certificate serial:       019F189F0BA9BCA160BFD2F7838CE810B2FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
Manifest number:          198C
Signing time:             Tue 30 Jun 2026 13:01:43 +0000
Manifest this update:     Tue 30 Jun 2026 13:01:43 +0000
Manifest next update:     Wed 01 Jul 2026 13:01:43 +0000
Files and hashes:         1: 47NZVqQDigk4zNqFWSrVMeSog60.crl (hash: uYg0l8Wr77O/Od7xt9XZJDNRxaOji+R+1ZzFDFXUdS0=)
                          2: CshAZZODRLNLmNGlI2avtLyw1y8.roa (hash: Hf1RE2bw+HGP7b/6j+X1+6eXzCajo5UkBDMdWtNUDgc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9f:0b:a9:bc:a1:60:bf:d2:f7:83:8c:e8:10:b2:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3b35956a4038a0938ccda85592ad531e4a883ad
        Validity
            Not Before: Jun 30 13:01:43 2026 GMT
            Not After : Jul  1 13:01:43 2026 GMT
        Subject: CN=ce11902cec1ba0779b5583f8a1da0db874f24b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:21:ea:63:b5:59:ab:75:24:eb:cd:b6:5a:16:
                    41:cf:25:e0:a5:11:f8:03:d7:4b:f9:f6:b4:77:c6:
                    68:cb:cd:2b:8f:39:3a:1a:09:63:8f:e5:fd:91:d6:
                    85:c0:10:ef:2d:4d:02:a2:4d:16:ec:33:95:df:cb:
                    ec:b5:cd:68:57:05:03:e1:a4:f4:15:fb:6c:29:c4:
                    67:21:03:02:fb:3c:71:08:bb:b3:56:fa:99:67:79:
                    12:3a:cb:59:37:ba:8c:50:a7:22:b7:1b:76:62:b8:
                    56:f1:2d:10:f5:06:22:42:58:24:9d:92:a6:00:12:
                    15:bc:40:0e:33:83:01:ea:f2:35:c8:c8:3e:5c:59:
                    21:8c:a3:94:50:5f:19:c7:f7:b5:e3:68:28:be:d9:
                    68:d3:e7:4d:07:6d:02:38:d0:bb:2f:34:30:60:0b:
                    ff:6f:eb:4f:80:d1:34:67:3e:93:e6:e6:8c:ad:c0:
                    2d:64:52:e0:d3:fd:2c:1d:f9:37:e5:97:53:39:d1:
                    9b:42:33:2e:77:4f:fe:44:42:23:db:c4:de:ac:63:
                    67:9b:ff:38:6b:5b:82:f0:64:2d:6f:8c:8a:91:66:
                    69:49:1e:bc:3a:67:aa:e1:09:55:2c:67:b6:b2:e4:
                    38:70:8e:da:15:07:55:39:02:41:72:ee:fd:64:6d:
                    a6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:11:90:2C:EC:1B:A0:77:9B:55:83:F8:A1:DA:0D:B8:74:F2:4B:14
            X509v3 Authority Key Identifier:
                keyid:E3:B3:59:56:A4:03:8A:09:38:CC:DA:85:59:2A:D5:31:E4:A8:83:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47NZVqQDigk4zNqFWSrVMeSog60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17bf85-e2c0-46f9-b0fb-07ae682c1262/1/47NZVqQDigk4zNqFWSrVMeSog60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:8e:2e:7a:60:bd:79:fd:2b:f5:4d:16:81:47:de:6e:6c:5c:
         38:0a:c9:57:53:09:8e:12:0e:c1:87:ce:bc:6f:5b:b0:05:d7:
         53:44:df:08:0e:1a:3c:fe:5b:1d:3b:7c:fc:d8:28:83:0f:2a:
         5f:03:e6:e4:59:6e:81:d3:1e:1e:01:77:39:75:fd:35:43:33:
         f1:29:c1:7c:50:02:bc:08:cd:a6:e9:45:32:25:87:10:62:ad:
         dc:cf:fe:67:74:42:a5:5e:97:61:62:08:7d:49:31:16:94:a8:
         60:db:53:a0:de:24:fe:2d:f4:1d:af:43:3b:96:92:28:0c:07:
         e7:2e:d6:15:3f:0a:58:6e:80:c4:ef:5e:e6:8f:e1:3e:d7:a7:
         62:48:bf:59:3d:ce:e3:06:96:45:a7:39:1c:64:f7:e4:7b:fe:
         fe:49:a4:72:fb:73:fc:bd:b3:46:9d:ee:6e:af:c1:d2:d6:70:
         1b:e8:4f:58:4b:47:8c:de:51:21:a2:44:cd:7b:93:dc:75:38:
         11:38:1c:53:d8:92:a0:8a:a0:07:4c:a9:31:c7:09:73:1c:16:
         3c:23:7f:4d:ed:dd:bd:78:2b:84:52:44:f2:7c:d1:ca:53:df:
         e7:d9:74:db:31:9d:25:56:47:e9:5f:e1:de:30:3b:d7:8c:c0:
         3a:fa:52:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:09:08 2026 by rpki-client