Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
File:                     9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft (raw, json)
Hash identifier:          1HDOQhIX/LLRqtiEhrMnri6pPjWNyiYMfhLwPUTPyTM=
Subject key identifier:   29:AB:51:65:DC:B5:A0:AD:DD:A0:AC:AF:DB:C2:5D:D3:26:C3:90:DD
Authority key identifier: F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38
Certificate issuer:       /CN=f68b2f4e668ef0a176a8bd0004e2777670833238
Certificate serial:       019F18301554B582C6B22518FFC3B7C258C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
Manifest number:          198B
Signing time:             Tue 30 Jun 2026 11:00:32 +0000
Manifest this update:     Tue 30 Jun 2026 11:00:32 +0000
Manifest next update:     Wed 01 Jul 2026 11:00:32 +0000
Files and hashes:         1: 9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl (hash: CSo+1K/rGjQbITbCOMYi7ixlc8QoNDGqYjg9KkCpb/g=)
                          2: YOETByGoQWvX1MVQbtKSNQjPq4I.roa (hash: e5Ix1WhHdMT4rCzknHHsERtns5aDH3xdPuHebqlTS6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 11:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:30:15:54:b5:82:c6:b2:25:18:ff:c3:b7:c2:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f68b2f4e668ef0a176a8bd0004e2777670833238
        Validity
            Not Before: Jun 30 11:00:32 2026 GMT
            Not After : Jul  1 11:00:32 2026 GMT
        Subject: CN=29ab5165dcb5a0addda0acafdbc25dd326c390dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ba:2b:51:28:a2:36:c1:53:47:66:1a:df:22:
                    75:3e:f1:8a:bb:66:bf:e9:d1:e9:53:ca:5c:09:5e:
                    24:60:ff:c2:e8:5d:be:9f:33:4a:d9:e4:d6:76:8d:
                    f0:0a:d4:05:c9:70:17:84:0a:49:1a:36:55:e4:2c:
                    da:07:10:e6:f1:68:03:7f:7f:10:1a:29:4f:83:b4:
                    25:e7:1f:7f:ea:70:e7:40:12:cf:35:a7:c2:91:44:
                    99:4d:cb:4d:d1:15:92:dc:63:c1:aa:de:01:35:30:
                    f3:5a:f9:38:8b:a2:d7:2a:88:3b:0d:6e:7d:15:2e:
                    aa:6b:83:23:5d:4d:e1:0f:8d:44:dd:71:57:f0:26:
                    e7:90:f0:db:ca:5a:1b:c8:e1:30:eb:33:fc:9a:e5:
                    41:6a:35:c4:5d:23:cb:61:6f:c7:84:e2:23:99:5a:
                    09:f9:bf:35:a8:1c:2a:4b:50:7d:96:de:d7:d5:d4:
                    e7:ce:75:07:3a:90:35:fd:04:a2:41:b8:a6:36:01:
                    59:35:dd:78:c6:72:a5:49:56:67:dd:bd:89:11:dd:
                    1e:5e:75:a6:f2:f3:52:3b:04:fc:77:9c:6b:b5:b6:
                    03:4d:98:51:81:b2:24:52:20:1a:4d:99:d6:ef:f7:
                    09:83:8a:b4:4e:bd:92:c4:df:0a:a8:0e:60:2d:2b:
                    f9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:AB:51:65:DC:B5:A0:AD:DD:A0:AC:AF:DB:C2:5D:D3:26:C3:90:DD
            X509v3 Authority Key Identifier:
                keyid:F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:ae:e1:34:c8:e3:29:db:21:76:b3:39:0f:a6:ce:b5:fb:c8:
         7f:29:1c:bf:44:0f:36:49:cb:d1:38:e5:95:a5:6a:63:ab:e7:
         05:1f:a5:5e:12:49:a9:88:64:44:d5:dd:d7:4b:9c:85:7f:ba:
         54:06:0b:e2:9f:dd:fe:76:9b:57:7f:38:d2:19:aa:66:28:8e:
         5a:b3:f2:2a:52:fc:7c:16:f1:eb:44:c9:12:10:8f:4d:23:c8:
         0b:a1:ed:70:68:c9:e3:cc:d3:fa:f8:98:23:b9:25:de:bd:73:
         db:76:87:29:ad:30:2b:4f:4b:4e:d2:13:29:be:1f:84:0c:a4:
         ff:ce:8d:7e:0f:a6:db:9e:86:76:19:16:ff:8d:e0:97:29:95:
         cd:e5:fd:8a:be:e5:4a:d0:31:6f:2c:40:d3:2e:bc:33:78:cb:
         44:4e:0c:56:f6:8e:ee:3f:5c:2e:b3:b6:eb:fb:e2:ad:cc:88:
         09:ba:d3:aa:3f:a7:a9:e7:bb:9c:3e:83:ae:c1:6b:03:55:c4:
         a7:77:e1:6f:eb:99:23:1a:3a:11:9e:98:3a:07:05:57:15:41:
         eb:aa:25:49:6a:f7:03:d1:61:7f:09:32:af:c9:7e:4f:07:45:
         eb:df:ff:33:30:8b:61:31:3b:19:6c:d7:ff:b4:b4:83:a3:fe:
         ab:a1:95:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YMBVUtYLGsiUY/8O3wljAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OGIyZjRlNjY4ZWYwYTE3NmE4YmQwMDA0ZTI3Nzc2NzA4
MzMyMzgwHhcNMjYwNjMwMTEwMDMyWhcNMjYwNzAxMTEwMDMyWjAzMTEwLwYDVQQD
EygyOWFiNTE2NWRjYjVhMGFkZGRhMGFjYWZkYmMyNWRkMzI2YzM5MGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrorUSiiNsFTR2Ya3yJ1PvGKu2a/
6dHpU8pcCV4kYP/C6F2+nzNK2eTWdo3wCtQFyXAXhApJGjZV5CzaBxDm8WgDf38Q
GilPg7Ql5x9/6nDnQBLPNafCkUSZTctN0RWS3GPBqt4BNTDzWvk4i6LXKog7DW59
FS6qa4MjXU3hD41E3XFX8CbnkPDbylobyOEw6zP8muVBajXEXSPLYW/HhOIjmVoJ
+b81qBwqS1B9lt7X1dTnznUHOpA1/QSiQbimNgFZNd14xnKlSVZn3b2JEd0eXnWm
8vNSOwT8d5xrtbYDTZhRgbIkUiAaTZnW7/cJg4q0Tr2SxN8KqA5gLSv5EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCmrUWXctaCt3aCsr9vCXdMmw5DdMB8GA1UdIwQY
MBaAFPaLL05mjvChdqi9AATid3ZwgzI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOW9zdlRtYU84S0YycUwwQUJPSjNkbkNETWpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9mZGM1OTktNzgwYi00NDE0LTllMmEt
NTJiMDc3NWM3Y2I0LzEvOW9zdlRtYU84S0YycUwwQUJPSjNkbkNETWpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9mZGM1OTktNzgwYi00NDE0LTllMmEtNTJiMDc3NWM3Y2I0
LzEvOW9zdlRtYU84S0YycUwwQUJPSjNkbkNETWpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkq7hNMjj
KdshdrM5D6bOtfvIfykcv0QPNknL0TjllaVqY6vnBR+lXhJJqYhkRNXd10uchX+6
VAYL4p/d/nabV3840hmqZiiOWrPyKlL8fBbx60TJEhCPTSPIC6HtcGjJ48zT+viY
I7kl3r1z23aHKa0wK09LTtITKb4fhAyk/86Nfg+m256GdhkW/43glymVzeX9ir7l
StAxbyxA0y68M3jLRE4MVvaO7j9cLrO26/vircyICbrTqj+nqee7nD6DrsFrA1XE
p3fhb+uZIxo6EZ6YOgcFVxVB66olSWr3A9Fhfwkyr8l+TwdF69//MzCLYTE7GWzX
/7S0g6P+q6GVyw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:12 2026 by rpki-client