Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.mft
File:                     7sxM83JBztFGfJGKonbTiLCoLtU.mft (raw, json)
Hash identifier:          NX24Dj16xe8zL4uYrvARNHW37U/EhHDnqFXDExxgQGM=
Subject key identifier:   06:5A:B8:D4:3D:0D:5F:24:E2:59:7E:4E:9E:6D:A7:23:74:D0:6C:F2
Authority key identifier: EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5
Certificate issuer:       /CN=eecc4cf37241ced1467c918aa276d388b0a82ed5
Certificate serial:       019F17F936757A66B6841945CBB1BF8CE074
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.mft
Manifest number:          198C
Signing time:             Tue 30 Jun 2026 10:00:36 +0000
Manifest this update:     Tue 30 Jun 2026 10:00:36 +0000
Manifest next update:     Wed 01 Jul 2026 10:00:36 +0000
Files and hashes:         1: 7sxM83JBztFGfJGKonbTiLCoLtU.crl (hash: K8U1PB+xH2j53FWJ2Is7IkjlanzIh5CxXsvp6GBNOr8=)
                          2: QxCjxkjtj8M1Cw8s1SanJKG1uKw.roa (hash: yUeAAf/exzaMVpONZcSdDF3y2oSzL/ioLlZZZr6Czjg=)
                          3: hYf0wiSt5UOQBZRTWRiBOS988RY.roa (hash: 4jDomdS9bAQ98ArIxK0xlDy/5jdmzb5p/if3uxmbpbI=)
                          4: jXTSk0KpzmwKGlT8c0WjRwEGGZY.roa (hash: NnQHdGOV+Y72Fq5VRgEhZrBnuzQZy/8YU6VukVFGbMo=)
                          5: yaUBqNTaQMWqSltcjWLwAbI6Dic.roa (hash: sOTKYTUCmoiXCQC706JaxDQN8FM9bOIQlniRkh/J3lM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 10:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:f9:36:75:7a:66:b6:84:19:45:cb:b1:bf:8c:e0:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecc4cf37241ced1467c918aa276d388b0a82ed5
        Validity
            Not Before: Jun 30 10:00:36 2026 GMT
            Not After : Jul  1 10:00:36 2026 GMT
        Subject: CN=065ab8d43d0d5f24e2597e4e9e6da72374d06cf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f2:05:a1:51:58:0b:16:94:12:f4:35:18:8a:
                    07:06:ed:4a:bf:a0:41:8d:db:68:65:57:2b:37:48:
                    cf:1b:75:e8:c6:3f:08:90:57:45:90:d6:bc:0c:58:
                    cd:d4:a3:d8:99:a0:16:1d:b7:cd:dc:e0:63:20:f0:
                    b8:8c:d3:da:c6:37:67:f8:e6:90:58:c5:5f:03:1c:
                    79:74:43:fe:ae:83:34:d4:bb:f7:ad:9b:b7:f6:24:
                    5a:6b:d6:f2:dd:59:72:b9:55:84:19:42:d9:16:1b:
                    39:f0:85:96:cf:ad:64:ec:aa:bc:fd:d7:c6:10:01:
                    e9:ea:98:e3:8e:e3:e1:03:5e:1e:b1:e4:4b:9d:b6:
                    d3:3c:c0:ec:e7:4b:f9:59:9e:89:91:d9:f3:ce:5a:
                    e3:b2:e5:2d:e7:83:fc:aa:c5:2f:83:1c:49:3a:e0:
                    96:d1:8c:e9:9a:cb:3c:59:2d:df:bb:c8:08:3d:3e:
                    3e:ca:6c:92:aa:02:c6:1a:d7:77:25:69:dd:ad:3e:
                    16:73:fd:0e:84:1b:6e:bf:d5:88:48:18:e5:59:02:
                    78:6a:fe:c2:40:8f:f3:7b:bc:3b:b1:7d:b6:c5:c0:
                    bf:46:a3:6f:1f:cf:27:7b:6f:22:91:3a:1a:d0:21:
                    0b:fe:05:6b:28:f4:74:b9:71:d8:31:2e:8d:72:e7:
                    1c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:5A:B8:D4:3D:0D:5F:24:E2:59:7E:4E:9E:6D:A7:23:74:D0:6C:F2
            X509v3 Authority Key Identifier:
                keyid:EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:d5:1e:4b:2a:c4:27:39:14:a1:e4:da:47:88:94:a1:89:45:
         c1:e7:29:f7:8f:30:33:50:b2:c5:30:ce:c4:fc:05:99:fb:a2:
         0f:8c:8c:79:cf:a0:92:96:5d:a0:b9:cb:86:f1:44:7f:4f:13:
         c3:74:ee:f3:74:15:b0:fb:2e:af:92:02:a6:cf:40:66:c9:c0:
         7f:7e:43:9f:d7:91:74:34:b0:91:13:61:32:a8:75:c9:30:a4:
         1e:c8:10:cf:e0:69:ba:6f:8c:50:f7:a3:c4:db:e4:b0:cb:dc:
         c9:75:d4:4e:78:81:9d:c9:25:f9:3b:52:f8:73:43:39:13:a7:
         1a:b3:fe:b5:c1:c2:32:6e:a5:2f:ad:18:87:45:fe:d7:35:a3:
         42:35:d2:32:48:2f:3a:77:63:2a:09:86:24:c3:21:f3:96:23:
         23:9f:67:b6:8c:a8:8f:6c:9b:9a:2c:7e:33:1d:26:c0:ad:ac:
         d8:d5:87:34:fa:11:00:89:14:82:8e:52:38:ca:2c:1e:ed:7c:
         1f:58:80:99:46:fd:4f:20:9c:d8:6f:0c:17:a3:05:e0:a2:b9:
         64:c6:eb:66:09:64:84:74:d1:26:b2:cd:a6:19:1e:30:9d:1f:
         13:84:08:90:0a:37:f4:bd:0a:d9:3c:6b:a7:5a:be:52:44:e4:
         28:87:30:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:15 2026 by rpki-client