Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft
File:                     1mc4qNrawtDTrt25NPggBmufX-s.mft (raw, json)
Hash identifier:          YqZPHtjd6lKHLuhVALSFdoxBqK3zflbNtYwNv6MaJVg=
Subject key identifier:   6F:68:02:4D:13:80:4E:0C:A4:F2:20:38:F5:60:3C:F1:51:4F:06:03
Authority key identifier: D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB
Certificate issuer:       /CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb
Certificate serial:       019F189E93F68CA1C7A66980CD6FFF720AB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft
Manifest number:          198A
Signing time:             Tue 30 Jun 2026 13:01:13 +0000
Manifest this update:     Tue 30 Jun 2026 13:01:13 +0000
Manifest next update:     Wed 01 Jul 2026 13:01:13 +0000
Files and hashes:         1: 1mc4qNrawtDTrt25NPggBmufX-s.crl (hash: sGHV//rqkFz+tLQR4QPwlRFbNssfwtL/oPjmvrnRiXg=)
                          2: PvHMHD0aeuQ9T3MtfIs2XmJyQOY.roa (hash: EfRNqiHIBaBfAkezAxeKdTs07evzHPZKbuFa+2c+KMc=)
                          3: TIYeUVbpvuyDC2t31dkXKX77tpM.roa (hash: jq2yqV/pOREhu3bPBF+p4OSILcPoLvkCkURypiB0/n0=)
                          4: cOxS0E2XjVzTbopS5QPfLKjjtnk.roa (hash: mNaGGlEdJbAJ+qyD+c0RDVAtGl4B6iWrOcUapyB/UK4=)
                          5: pI-v5uJ1SgQhhfO7bCx9EJHVnoY.roa (hash: QNyQpokvQqLnIzlnj95bhIcxCT1zZNKDcQ4ODnYC8DE=)
                          6: rCFpqnF0TcjxMo0Y1C5GR4qc4ng.roa (hash: PMdlGjc9Af5sq4QJ2HwfDr1apnmai7YobB9Ga0B6v3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:93:f6:8c:a1:c7:a6:69:80:cd:6f:ff:72:0a:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb
        Validity
            Not Before: Jun 30 13:01:13 2026 GMT
            Not After : Jul  1 13:01:13 2026 GMT
        Subject: CN=6f68024d13804e0ca4f22038f5603cf1514f0603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:33:d2:cc:45:0a:9a:63:81:c4:91:38:42:e2:
                    00:bb:4d:f3:53:89:d7:b2:8f:0d:13:b3:36:fd:b8:
                    8b:79:cb:49:00:2b:cd:51:f8:05:42:c9:af:1a:ef:
                    1c:be:c9:4c:2f:4a:6e:99:eb:89:7d:24:a1:fd:2f:
                    d2:ef:f0:c6:2b:81:7c:de:fe:77:d9:ae:a6:6d:59:
                    98:1f:6b:ef:5b:72:6a:ff:81:52:cf:01:fa:46:13:
                    ef:52:04:c2:78:6a:96:64:b5:cb:88:9a:22:d6:bd:
                    8e:f8:0a:40:95:37:cb:15:36:48:7e:79:7b:53:3c:
                    d1:1f:e3:df:61:b6:13:fc:9c:f0:68:7f:4b:ea:1d:
                    ed:60:b7:ae:fa:78:71:c0:0f:b0:94:dc:35:6e:b5:
                    80:07:08:51:49:b7:93:1e:91:d0:e3:d9:7b:40:48:
                    6d:50:44:b7:c6:51:4d:8e:ab:2f:9c:e1:b3:a2:bf:
                    d4:08:19:09:44:a1:d3:d8:de:80:56:7a:09:ca:db:
                    e2:e8:9c:e2:5e:83:6d:77:e1:47:fd:fa:4c:6a:4b:
                    61:31:63:0a:b8:9c:a1:d4:a6:5f:d1:4d:9f:d8:b0:
                    c7:ee:95:1d:db:5d:44:e1:41:38:4b:5d:79:2a:9e:
                    21:cc:a8:10:03:62:b8:a9:18:a5:08:b0:9c:54:ef:
                    68:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:68:02:4D:13:80:4E:0C:A4:F2:20:38:F5:60:3C:F1:51:4F:06:03
            X509v3 Authority Key Identifier:
                keyid:D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:a6:67:b9:6c:f9:d9:a7:2b:1a:b2:32:f1:a3:f0:57:cc:98:
         ee:c5:ca:b9:1f:af:60:d8:67:82:47:e3:a8:6e:ac:e7:8b:fa:
         dd:d5:91:99:3e:99:25:c7:ab:3e:31:12:48:6f:6d:d8:67:04:
         b7:f0:07:7f:e0:4e:8c:42:03:76:3b:02:05:c0:19:5d:49:ca:
         93:35:31:e4:83:08:c1:7a:d9:0e:97:15:0d:bb:cc:cd:74:5d:
         e3:e5:f3:96:72:d2:b5:a7:cc:8e:7f:2a:e6:1b:24:a0:c8:1a:
         b9:ea:e6:bc:42:73:44:67:57:a0:c7:42:07:eb:48:a9:9a:2b:
         4f:a6:57:7a:2c:47:5b:70:52:34:0e:cd:bb:3d:1a:17:4c:70:
         67:0e:90:37:a9:9f:4f:39:89:e9:d5:7f:a0:c4:47:b7:21:99:
         2d:c2:73:c1:bb:e2:60:19:14:d5:7a:24:98:b1:d3:41:fe:4b:
         d7:91:a6:db:e2:de:0d:24:79:ae:4c:d2:56:34:8e:03:6f:cb:
         5d:fc:a0:c9:7a:44:ce:11:5b:fd:3c:bd:72:51:d3:2d:30:f1:
         22:74:d4:69:a9:81:05:5c:c5:aa:0d:87:3b:0f:90:4f:48:16:
         69:4c:94:90:40:d6:14:ed:6d:50:fb:81:1c:75:1a:a9:8c:a0:
         ec:c8:1c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:17:45 2026 by rpki-client