Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
File:                     XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft (raw, json)
Hash identifier:          ggNuy+280y4DZCHotC0+Yz4s6Nnv2mdKc1c7GjdKa+4=
Subject key identifier:   CC:84:81:FC:F3:7F:C8:46:6A:12:D7:86:E0:AF:C6:38:C8:E6:67:36
Authority key identifier: 5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
Certificate issuer:       /CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Certificate serial:       019EC111ED62A9BAC3A42BC9946C6E89FF53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
Manifest number:          199A
Signing time:             Sat 13 Jun 2026 13:00:37 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:37 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:37 +0000
Files and hashes:         1: CZ1LSUniiHGNKwvHak6fSDmBxdc.roa (hash: Mosbvu2i3W9lRSEMHDa5n4kbGcSkA8mN4bx3wDReYfc=)
                          2: JhlPUIaiuE2YohDfzMjZESoyDBM.roa (hash: 7exMhOdMj9M/aNI0j3yYX3O6VN6kNC8RAmHhooROzJc=)
                          3: XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl (hash: zPD5jWZOX9A5jRkmXBbM0MNY0L4syk+1n/b6ygeLWgc=)
                          4: i9Jjligy-EqoCiaFX_JoZgf9dZ4.roa (hash: XW8rc6v037pilJaZxg9f1SStjDu20ZBHUdc/h3ZDPqs=)
                          5: j2M12KSK7yupbk2QrIFnkpZ-KPM.roa (hash: yQynIUWOty/ocy5JzISGlHN5/AewbIRpARiMe1+4m+I=)
                          6: kSIrlNkYtxjevrUOWqXwGaCeFxQ.roa (hash: P1EFKe/doBtEMdSkydhZWieCIypvlDRY3TVJIkRt4p8=)
                          7: rgypQg1mq_y1PkBJTzbgugJszfU.roa (hash: 2UJiTYNC2SMcM+K20BC59uzzBZrc7ob9nA7WO1YUWjI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:11:ed:62:a9:ba:c3:a4:2b:c9:94:6c:6e:89:ff:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cf4501b755002d9143e8fa6736815e9f0f93695
        Validity
            Not Before: Jun 13 13:00:37 2026 GMT
            Not After : Jun 14 13:00:37 2026 GMT
        Subject: CN=cc8481fcf37fc8466a12d786e0afc638c8e66736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:72:17:7e:60:1f:91:16:c3:a4:6a:ae:56:fb:
                    21:10:25:1c:28:c4:f1:da:77:bf:f5:3b:26:25:0c:
                    57:57:a4:05:7e:e1:ad:42:02:fc:85:a8:d6:05:6b:
                    88:b6:c5:94:17:f0:68:b2:fe:36:10:a0:fc:2a:4f:
                    91:1e:49:1b:60:36:47:18:d4:7d:45:fb:95:ce:4b:
                    07:a9:b4:21:a2:c9:64:e6:7b:19:43:cd:be:ef:dc:
                    58:3a:2b:3d:9a:60:86:a3:06:85:88:4c:83:1f:b3:
                    35:02:66:06:0a:7d:f9:c4:ea:39:d0:34:1e:4e:1a:
                    dc:23:7b:32:01:4f:c8:6b:15:e2:5e:0b:4f:60:61:
                    ac:80:ad:bc:aa:88:12:bc:63:c8:bb:4a:8d:a9:e5:
                    6e:2c:6c:c2:2d:21:fc:eb:c0:ab:f9:1c:94:58:15:
                    46:83:60:3c:be:c6:a4:db:fe:4c:24:aa:92:c7:fd:
                    d3:63:72:9d:64:9d:be:cc:64:29:42:bb:65:15:f4:
                    aa:0c:46:ca:eb:9e:d4:14:c7:84:75:82:4a:47:e5:
                    2f:20:e2:43:25:44:15:70:09:8c:25:ab:fc:ba:5b:
                    d7:b0:0b:10:98:39:67:4f:63:88:3d:4b:29:c2:9f:
                    99:05:8e:c7:34:e3:c8:dd:f3:3c:e1:ad:ae:fa:a6:
                    ca:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:84:81:FC:F3:7F:C8:46:6A:12:D7:86:E0:AF:C6:38:C8:E6:67:36
            X509v3 Authority Key Identifier:
                keyid:5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:7b:48:8b:b7:f0:89:bd:57:43:06:37:3e:80:d5:9f:ae:17:
         02:03:31:1e:86:8b:1d:36:eb:6a:26:44:88:cc:6c:8c:ba:8e:
         ad:56:90:cd:4c:4b:ca:3e:25:b3:3c:c4:4e:26:00:bc:b8:b5:
         1b:8d:b6:1c:02:1e:c7:73:ea:03:1a:56:0b:e3:01:39:c6:b5:
         a2:bb:e1:47:b2:ec:0f:40:01:57:18:0c:09:25:64:67:80:e4:
         31:f9:43:7f:8b:d0:f0:bb:a0:b1:f2:08:01:4b:f6:d1:68:ae:
         87:68:07:9d:33:6e:73:d1:1c:85:b7:ad:7d:96:9c:5c:63:62:
         2a:d3:ca:e2:55:c2:ca:2a:ca:75:9d:2f:2c:1d:25:1d:40:dd:
         eb:09:f2:5c:00:93:87:02:38:58:00:fb:f7:09:64:d0:72:d1:
         e2:c5:43:18:c3:3f:b6:44:d0:4a:9d:9e:a5:3c:d9:45:fd:20:
         bc:b5:af:bb:10:4b:d1:b9:3c:98:f3:9f:75:67:2d:20:13:44:
         a8:6a:e4:28:45:64:f0:2b:78:17:1f:b4:b3:7f:ca:f8:42:fd:
         b0:26:75:4d:dc:4d:6a:e3:77:66:f1:8b:73:8c:57:ab:9f:7e:
         87:49:3d:ed:46:85:1c:2a:1e:8d:1e:6a:c2:83:c3:70:4d:3d:
         34:65:c8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:21:44 2026 by rpki-client