Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
File:                     sQw889xTylScA-T19G2RzpC44HA.mft (raw, json)
Hash identifier:          Icy3jEb1VRl8m+Nna5jgsCEzMrcj7qODUQzh1cxPvAk=
Subject key identifier:   8E:AB:3A:2E:49:0D:65:79:A4:26:48:7A:83:7B:7D:D3:B2:36:62:12
Authority key identifier: B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
Certificate issuer:       /CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Certificate serial:       019ED3F444A42BDF17F0077D88397DBFFCA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
Manifest number:          197A
Signing time:             Wed 17 Jun 2026 05:01:01 +0000
Manifest this update:     Wed 17 Jun 2026 05:01:01 +0000
Manifest next update:     Thu 18 Jun 2026 05:01:01 +0000
Files and hashes:         1: o40VleOLDva4l-Hlse3BxkX262M.roa (hash: vt1iL3MNmGtBJoVTbi5X0cqEnKhYSdktMc3RDciLR8w=)
                          2: sQw889xTylScA-T19G2RzpC44HA.crl (hash: S5oE2pVFI2hJVruxEoSDpCsbRRNr3op0LVz29YnpwSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 05:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:f4:44:a4:2b:df:17:f0:07:7d:88:39:7d:bf:fc:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
        Validity
            Not Before: Jun 17 05:01:01 2026 GMT
            Not After : Jun 18 05:01:01 2026 GMT
        Subject: CN=8eab3a2e490d6579a426487a837b7dd3b2366212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:72:dd:d7:79:ca:3a:69:8e:c1:95:1d:39:aa:
                    08:74:91:a5:dd:20:b9:75:89:9d:14:c7:eb:d7:45:
                    c2:6b:1e:aa:7f:31:86:59:21:a4:a3:57:cd:ac:3e:
                    9f:0e:08:86:f8:f0:1a:fe:84:e7:9c:c8:f9:e2:a3:
                    aa:64:38:33:a5:78:37:5d:9c:71:5d:c2:3d:e6:f9:
                    ce:b0:3f:8c:29:ae:e6:88:8d:15:6a:a1:64:47:c2:
                    63:7f:9c:ce:a8:04:33:b9:31:a9:64:4f:23:85:96:
                    95:b2:a8:4b:8b:e0:9d:52:71:33:0e:a9:3f:3c:6b:
                    54:df:b1:38:8e:50:0f:7e:87:a8:35:e8:05:43:4e:
                    db:90:f2:59:53:72:a5:57:28:b3:1c:83:c2:22:93:
                    e5:b7:b3:c7:f0:01:9f:60:2d:b4:b9:91:32:dd:98:
                    df:e7:22:e8:1e:a7:53:a3:aa:73:fe:10:5b:33:33:
                    ac:1c:af:66:89:8d:c3:6f:65:06:4d:d4:2b:bc:f2:
                    62:a1:f5:7f:7c:b4:56:cd:da:88:2c:d1:d9:66:12:
                    62:1d:14:da:1b:69:21:44:54:9d:34:37:6c:53:b9:
                    00:f3:9f:92:ce:54:42:d2:07:63:d5:2f:3b:70:82:
                    74:8c:a5:db:dd:c8:2b:a2:13:a5:bf:62:2e:41:4a:
                    f9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:AB:3A:2E:49:0D:65:79:A4:26:48:7A:83:7B:7D:D3:B2:36:62:12
            X509v3 Authority Key Identifier:
                keyid:B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:b2:91:7e:eb:56:4c:73:a4:cb:31:80:15:48:03:fb:bd:23:
         c6:d1:fd:0b:7d:59:e9:09:7e:59:a7:b4:c2:fa:08:e6:b9:b8:
         b1:30:11:5f:22:de:ba:bc:86:5c:ad:02:45:ad:cd:01:df:af:
         64:7f:fa:ba:12:d4:76:24:43:45:6c:ca:78:88:f8:8d:99:43:
         bc:24:71:c3:f0:71:14:61:66:cf:0e:56:82:73:43:7c:78:1e:
         f0:b9:d0:3f:36:72:37:b8:0c:be:99:69:ce:ff:95:65:6c:9a:
         8a:b5:6b:47:98:7c:48:b8:e6:8f:b4:d1:4d:86:43:d7:fd:5d:
         87:b1:66:4e:b2:99:2b:b8:52:8e:88:f0:28:2e:92:96:e6:45:
         d8:b1:95:02:3a:ae:99:84:fe:d0:59:b6:65:ec:9c:42:0c:05:
         f4:a7:a7:3d:fe:aa:58:16:0a:0b:a5:c5:57:01:34:2a:1b:bd:
         43:11:95:d5:69:3a:90:99:ee:4c:46:32:d9:dc:be:00:9d:51:
         f6:af:cd:66:82:83:d3:27:78:fc:ef:f6:b3:65:5a:fa:67:9a:
         36:0f:84:08:f2:ca:2d:9b:3c:14:ac:c7:61:85:a9:7b:8a:1d:
         82:b2:35:8c:9d:ac:9c:b8:c4:73:cf:f3:38:aa:7e:5c:80:1c:
         34:f5:e4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:53:46 2026 by rpki-client