Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
File:                     02fRY1tGs8InSyh1Bbu9fZFdyvU.mft (raw, json)
Hash identifier:          pRkSbygImw/+0TED9BhE5GjjcCWE9FkE5JKk6YySdlc=
Subject key identifier:   D8:16:14:26:52:FB:D4:07:5F:A6:91:4B:BA:6E:36:11:D6:57:0F:D5
Authority key identifier: D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5
Certificate issuer:       /CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
Certificate serial:       019F1868104271BE9739CD7CCAF6552EC4CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
Manifest number:          198A
Signing time:             Tue 30 Jun 2026 12:01:40 +0000
Manifest this update:     Tue 30 Jun 2026 12:01:40 +0000
Manifest next update:     Wed 01 Jul 2026 12:01:40 +0000
Files and hashes:         1: 02fRY1tGs8InSyh1Bbu9fZFdyvU.crl (hash: w0i/qJPVJbEYlDqUKcdCNSDGD31/GjjyqE3U/z1x0M8=)
                          2: Zs-v1rw9g1MYTe4z_xC60lFfzak.roa (hash: gDQsejW5I6NwbA9XiA+PvZS2jChO/DirRuBkqy+plZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 12:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:68:10:42:71:be:97:39:cd:7c:ca:f6:55:2e:c4:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
        Validity
            Not Before: Jun 30 12:01:40 2026 GMT
            Not After : Jul  1 12:01:40 2026 GMT
        Subject: CN=d816142652fbd4075fa6914bba6e3611d6570fd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4b:56:99:c4:78:5a:4a:96:8b:70:af:db:2c:
                    64:0c:8b:ce:36:da:3e:d9:7b:39:4e:3f:a9:74:87:
                    c6:58:c1:0e:a7:0f:a9:e8:dd:44:69:e8:53:d7:3a:
                    9e:b7:1b:9b:34:d6:11:1a:ae:6a:e3:8b:28:75:d3:
                    81:fd:09:c1:c8:12:76:c4:3d:5b:95:94:81:7d:25:
                    b8:fe:61:7f:4d:34:01:7b:91:32:aa:c8:d8:17:62:
                    4d:c8:e8:d7:29:9d:2a:91:07:80:2c:9b:d0:cc:5f:
                    87:20:51:47:3b:5f:54:b3:08:fa:1c:f9:64:b9:53:
                    3d:fe:a7:f4:1e:66:aa:24:c4:0d:62:7f:56:b0:e5:
                    99:dd:81:b5:68:85:c3:e8:13:1c:9b:cf:79:f3:bd:
                    05:73:bc:81:19:14:5e:85:28:c1:92:43:96:d9:cb:
                    00:7d:8e:9c:2c:4c:8b:8c:e3:d1:b0:58:7b:b6:ce:
                    00:a0:28:ce:b6:14:0e:21:6a:1f:54:b5:2d:e9:16:
                    c4:af:9f:15:a7:86:ab:cc:d4:81:74:95:a2:45:35:
                    ab:0b:a6:bc:dd:2d:e8:e5:dc:15:ae:f4:4a:20:27:
                    a4:c9:4e:ae:54:ce:0d:1f:9a:ad:6a:65:b6:57:a9:
                    29:4a:16:fa:b8:5e:4e:fb:9a:c2:15:35:f5:0d:a6:
                    d5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:16:14:26:52:FB:D4:07:5F:A6:91:4B:BA:6E:36:11:D6:57:0F:D5
            X509v3 Authority Key Identifier:
                keyid:D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:0a:a1:7e:23:7f:67:33:8b:5f:93:04:cd:4f:4f:5b:e3:f5:
         0b:5a:b3:32:fe:7b:6b:1f:0f:55:eb:aa:ab:0a:0a:3f:8c:82:
         f4:d8:f8:b9:b3:24:54:64:8a:d4:e1:27:95:2c:ef:71:1f:ca:
         7a:bb:70:0b:cd:d2:72:10:3e:97:a0:2c:d3:f8:af:1a:5f:13:
         5d:56:56:ae:b4:cf:7d:c4:c5:7e:3d:93:d8:0e:d6:fd:91:7f:
         ab:ef:d7:c2:ba:92:e2:1c:30:8c:6d:c4:c8:00:7e:1d:a8:0f:
         e6:7e:b2:19:da:87:f4:73:8e:00:c2:fb:10:0c:10:ad:47:13:
         2d:d1:9a:22:3e:99:63:38:83:17:bd:8e:25:7b:a0:37:bf:c6:
         99:f7:e7:1f:e7:5c:9b:30:ee:45:17:86:83:9c:6c:4a:b5:2a:
         27:a4:6c:5c:8b:8e:73:d7:7e:21:64:4c:a4:e4:80:92:0c:18:
         5d:86:c9:4e:c2:e5:dc:1c:f2:b5:2d:8e:43:25:05:4c:0d:6e:
         77:49:17:ba:aa:98:08:93:e1:44:57:65:04:a5:91:2e:15:3e:
         46:c2:bf:76:14:e6:9a:dc:4c:86:8d:97:d6:4b:9d:85:a1:51:
         86:29:f7:67:3d:3f:9f:1f:5f:ac:eb:1f:e3:11:96:9a:c4:c8:
         5e:15:85:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:22:05 2026 by rpki-client