Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
File:                     itJAYD7G681i9y1G8dwAy34fCy4.mft (raw, json)
Hash identifier:          e1Z3Qhp00uAXh6T568FKTlb49ndeXklCGOLNZ+EfrZs=
Subject key identifier:   5F:99:C7:1A:11:8C:8F:9E:98:9C:5A:AC:E5:04:EB:D7:10:74:47:D1
Authority key identifier: 8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
Certificate issuer:       /CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Certificate serial:       019F1265B4B23ACE48BC627E9BFCFF34BC86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
Manifest number:          198A
Signing time:             Mon 29 Jun 2026 08:01:22 +0000
Manifest this update:     Mon 29 Jun 2026 08:01:22 +0000
Manifest next update:     Tue 30 Jun 2026 08:01:22 +0000
Files and hashes:         1: KpyePpi0BQOtPpSVVikAIl2skgo.roa (hash: Ukwdvn9MeAWiIbUvrqdNT9WEFPzcoAHZi8Gv9MxSNAs=)
                          2: _OkMfangRHHR3pkyqVAWkqY7mag.roa (hash: 4q+Nhgpids6AoAL8lqsvtN3qpgNozHDLR3s1mrSSncQ=)
                          3: a3zHXiytnxR6C7Yya8cqACPMcyc.roa (hash: T1Jty2//hchc0LCzlubxKMABR/tRMsPUV0k73TQ7gFM=)
                          4: itJAYD7G681i9y1G8dwAy34fCy4.crl (hash: exZG6XP/a+KSyXR+ZbGkQ2hgMH+qjYRAeWot8MJNPdk=)
                          5: m3UYalXj1FlItkx4Rfdvy-zoe3E.roa (hash: fRgZKtug12cWuESnK4ZE4YhyfFuUNO2BSLzpL2F6bjY=)
                          6: qwWdo-9lTcBvLCHf4H2oZNKYs8g.roa (hash: molpqRNT26EZTf8c40L3ZxZs9DbMAoqcJ+gd6HHZ1w4=)
                          7: x-EfdPPH41fBBpjZ7XVWx9BVt_s.roa (hash: GJIuPJGUowMmXdPxeaXLT8tgyWA+GgGHmT3ek3XlWMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 08:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:65:b4:b2:3a:ce:48:bc:62:7e:9b:fc:ff:34:bc:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
        Validity
            Not Before: Jun 29 08:01:22 2026 GMT
            Not After : Jun 30 08:01:22 2026 GMT
        Subject: CN=5f99c71a118c8f9e989c5aace504ebd7107447d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:81:9e:71:f1:4a:02:18:3a:74:0c:d6:6a:71:
                    04:6d:78:73:bb:28:a7:f4:b8:21:ff:f1:b3:2b:1d:
                    78:1f:1a:b4:12:63:89:78:a3:c0:9d:cf:6d:31:35:
                    5f:ec:63:3a:1f:68:58:a4:e5:ee:c0:14:3a:6a:05:
                    05:c0:1d:06:3b:f0:16:9d:54:fe:5a:66:d5:c6:16:
                    5f:4a:9e:43:5f:a8:f0:e1:da:08:7c:85:a2:0c:08:
                    31:95:28:d6:f8:92:e1:6e:0f:ad:e5:31:03:0f:e3:
                    7f:ff:02:56:1e:a1:84:9f:fb:ba:bb:9a:d7:27:32:
                    4f:7d:b7:63:64:16:2f:9e:1a:15:1a:c1:7d:6c:07:
                    5c:6d:0a:6b:bc:bf:f2:3c:3b:1a:06:f5:11:54:a2:
                    f5:1d:47:76:46:f1:ac:8e:a1:53:87:59:73:89:e3:
                    60:32:52:7e:dc:aa:ab:5b:82:63:64:4b:f7:ae:0f:
                    8d:f9:c9:5a:13:c1:97:e5:a0:27:f1:63:5c:c1:1e:
                    bd:f9:7f:83:d3:9d:c7:f8:c7:7e:ff:c0:77:fb:e0:
                    03:6b:4b:31:55:52:07:3d:cc:73:68:c3:bd:c8:2b:
                    12:50:34:6c:db:2f:0d:60:e8:d7:9a:e6:fb:a8:03:
                    b3:13:65:e5:1b:1a:15:9f:61:3f:72:1f:8d:1f:59:
                    8f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:99:C7:1A:11:8C:8F:9E:98:9C:5A:AC:E5:04:EB:D7:10:74:47:D1
            X509v3 Authority Key Identifier:
                keyid:8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:e2:66:7b:51:b3:a5:75:ec:99:cf:7b:81:35:b8:2c:70:55:
         48:b8:9d:5f:d3:6c:9c:e6:00:58:0f:d1:56:4c:d2:97:6e:31:
         36:02:7c:2d:3c:33:54:fb:1b:b0:63:2f:51:ee:05:6a:5b:cf:
         37:2b:da:71:0b:06:33:b4:b8:2e:ac:b6:e0:14:fe:fa:2e:b6:
         42:64:a7:68:e9:77:f8:da:3d:44:4a:73:d7:19:e0:f5:6c:f8:
         f6:48:6a:fe:5f:11:f6:2c:5a:7a:b2:18:41:60:30:1d:19:b7:
         ff:34:ec:d8:bb:de:cc:1a:5e:54:88:cb:85:e5:68:3c:9f:c0:
         d2:80:5f:20:51:90:77:9c:9c:5f:ba:2a:c7:13:55:ef:9e:5c:
         3d:b5:6b:2b:53:fb:07:2d:9c:59:b3:b0:7c:0e:55:1a:5e:e8:
         6c:d2:58:a7:24:78:47:29:83:60:58:35:60:07:6a:b9:6e:97:
         fe:43:91:54:52:55:5d:b8:89:18:d7:51:b9:b9:07:64:c9:2f:
         f9:03:e2:d0:d1:fa:21:82:55:44:9a:76:e8:00:3d:8d:88:1a:
         c2:5a:25:80:9d:a7:53:63:81:05:f8:12:46:8b:b4:1d:13:59:
         7a:b8:7b:a2:fa:e7:35:66:b2:23:cc:cb:d3:ec:ce:bb:26:bb:
         f1:2d:6b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 16:09:02 2026 by rpki-client