Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
File:                     B_Khdb4gEIZBxklVMhPyElEWZ6U.mft (raw, json)
Hash identifier:          2nd4Z13pkrdd4VhcMUrbMQj9Zk9i7cw8Wjz6W9tmxO8=
Subject key identifier:   66:88:49:43:9B:BC:A8:A8:C5:06:3E:95:91:B6:2C:40:FF:F7:3C:58
Authority key identifier: 07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5
Certificate issuer:       /CN=07f2a175be20108641c649553213f212511667a5
Certificate serial:       019F18D6FC77436821FBEB0E3D13903CF6B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
Manifest number:          198A
Signing time:             Tue 30 Jun 2026 14:02:49 +0000
Manifest this update:     Tue 30 Jun 2026 14:02:49 +0000
Manifest next update:     Wed 01 Jul 2026 14:02:49 +0000
Files and hashes:         1: B_Khdb4gEIZBxklVMhPyElEWZ6U.crl (hash: IqzjrXk03r7Fmn2DBHgsDXvTtRcXWMv+yLhgyk3BFPA=)
                          2: OaG9G9Rkeg7MQ9HAOpMM6Qb2lyE.roa (hash: 2tlWpqcv4FYW9H4L8bdUATgM+St3ZdyU2sE6jN6ILxk=)
                          3: YXSgyUgUnB863rJPTcWCW7mGwFc.roa (hash: V1Uuys2uya26ArEHIls/PYBVdC0Vm3sFwdUGRo5ZhTA=)
                          4: lMQfwH-V7Yhd6sNgC8BpN5Ho3vc.roa (hash: 80PQfjBzEobkUlg1u1KjDZCEtHTRyd3Qm3q0fmEsPoY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:d6:fc:77:43:68:21:fb:eb:0e:3d:13:90:3c:f6:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07f2a175be20108641c649553213f212511667a5
        Validity
            Not Before: Jun 30 14:02:49 2026 GMT
            Not After : Jul  1 14:02:49 2026 GMT
        Subject: CN=668849439bbca8a8c5063e9591b62c40fff73c58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:92:ab:35:7d:2d:05:c7:c4:51:cf:a2:dd:0b:
                    b0:df:bc:b3:e9:7f:b1:de:a7:76:f3:71:09:ea:7a:
                    b6:8e:ca:f2:eb:30:08:50:e3:91:0b:9e:d0:fb:66:
                    d2:9c:71:c0:0d:98:a7:50:3c:a2:7b:2d:38:53:8f:
                    2b:f5:57:e8:6c:62:be:0b:ed:c9:99:a6:29:3b:3f:
                    2b:d9:4b:99:ec:3c:3c:7b:20:9e:70:b9:6d:83:a0:
                    68:09:c5:ad:00:d3:4d:8c:4e:46:25:95:9f:a3:59:
                    82:5b:a4:2d:36:e1:91:49:9c:d4:ca:2f:63:09:30:
                    d9:a4:da:e7:26:2c:5f:55:37:79:78:3b:77:af:40:
                    1f:ae:87:81:8f:4c:27:80:9f:2c:1b:fb:93:7a:a0:
                    c4:56:b1:c6:ae:6e:35:d4:d3:e2:1f:13:ec:44:fc:
                    a8:ba:01:bb:ee:73:3c:ee:bb:30:e0:c4:0a:bd:f4:
                    20:06:fc:0b:00:df:07:9c:f9:ce:cb:a3:30:88:a3:
                    21:92:99:0f:35:87:58:71:62:b0:9c:e9:f6:e1:06:
                    75:d7:8d:8c:ef:4a:52:d0:d0:30:7d:79:cc:b1:19:
                    d3:c3:19:c4:a8:45:0b:ef:ff:e4:70:93:24:a3:0a:
                    d6:8b:43:88:01:45:6a:a7:28:d7:ee:07:b5:56:6e:
                    fb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:88:49:43:9B:BC:A8:A8:C5:06:3E:95:91:B6:2C:40:FF:F7:3C:58
            X509v3 Authority Key Identifier:
                keyid:07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:95:a0:cb:b9:3c:f3:bc:ac:27:d1:6d:24:64:80:9b:a7:a6:
         74:b1:c1:71:17:4b:4f:88:74:89:d0:d3:84:1d:e2:5f:eb:ed:
         55:79:6d:09:ad:5b:28:d7:fd:4a:45:e0:3e:28:1e:1b:5d:84:
         3d:ca:08:21:66:10:41:5c:cf:e8:de:6a:f4:8f:44:2e:d7:04:
         41:52:56:97:10:ed:21:2d:74:e1:25:b7:d5:16:dc:03:d1:ba:
         b4:f4:f7:42:9e:44:02:f3:d2:f6:5d:ca:68:e4:ec:e6:e4:19:
         f1:a6:05:88:4f:b4:8b:3a:64:62:ef:87:db:e2:26:83:0a:42:
         e0:a7:f4:ca:30:30:39:43:22:a5:e9:87:2e:5d:56:12:5e:90:
         3c:e1:5d:ef:4c:f7:d0:82:a2:35:3a:48:98:5f:e7:0b:f3:26:
         4e:27:4f:77:d8:3d:7d:f8:af:eb:6e:29:aa:23:d6:4b:16:06:
         f6:4c:48:82:e8:c2:47:b9:d0:34:20:85:87:03:c0:89:da:b0:
         1e:17:61:b0:f4:13:f1:da:33:cd:41:ff:7c:5d:93:ef:9c:b6:
         3b:12:cb:12:84:74:87:77:f3:62:99:61:bd:a2:52:99:fe:a0:
         6e:09:2b:a3:a0:4f:27:33:25:c4:d0:11:23:2a:6c:40:2c:75:
         7d:1d:c7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:18:11 2026 by rpki-client