Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
File:                     v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft (raw, json)
Hash identifier:          BYwBiqVrgvulTlAIyKukM5zZjbA4PWnOQwHaHSPL9DI=
Subject key identifier:   C0:96:43:CD:F7:6D:2E:24:C0:26:38:DB:93:33:73:22:1C:DB:E6:93
Authority key identifier: BF:55:99:C2:67:55:F4:A4:D4:F5:40:E2:FF:D7:B7:4A:39:05:3D:A3
Certificate issuer:       /CN=bf5599c26755f4a4d4f540e2ffd7b74a39053da3
Certificate serial:       019EC2C94AEBAFF651A1E68B73271A5621D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
Manifest number:          10B7
Signing time:             Sat 13 Jun 2026 21:00:32 +0000
Manifest this update:     Sat 13 Jun 2026 21:00:32 +0000
Manifest next update:     Sun 14 Jun 2026 21:00:32 +0000
Files and hashes:         1: iBJ31yh-XKNto6qwkr_lk9nm8Ik.roa (hash: YPdFv2hCP/PkOD/9i/Bu7OVfZju2bdOQgcBdgpKIrw0=)
                          2: v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl (hash: XaluzG4kNq7uVM6cOJaSBp/gO81cLlx7WMpZ9QV8MNA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:4a:eb:af:f6:51:a1:e6:8b:73:27:1a:56:21:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5599c26755f4a4d4f540e2ffd7b74a39053da3
        Validity
            Not Before: Jun 13 21:00:32 2026 GMT
            Not After : Jun 14 21:00:32 2026 GMT
        Subject: CN=c09643cdf76d2e24c02638db933373221cdbe693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1c:b9:53:96:95:13:e2:64:e5:f0:2b:1e:d6:
                    14:39:41:7c:6c:50:cf:89:52:58:42:3e:cb:50:5a:
                    ce:1f:91:c5:c9:b5:47:e0:e4:88:9b:e5:08:f1:28:
                    e8:d2:ba:60:b5:83:61:af:35:dc:ab:65:c4:92:4d:
                    8c:ef:d0:f5:e7:22:22:3e:c0:c5:9b:98:27:a8:6e:
                    f7:7f:9b:42:7a:f2:a5:0f:44:9f:d2:2f:52:69:20:
                    69:40:96:3b:4d:f7:a0:90:2e:d3:c5:b0:14:5d:06:
                    33:91:0e:3f:cd:a8:73:da:73:6b:5e:a1:2a:00:c1:
                    6e:cb:78:99:3e:5d:de:8e:5c:71:b3:4f:24:fd:0e:
                    55:7a:ac:cf:f6:e3:a2:dc:9e:3d:c8:22:37:51:52:
                    7f:8a:ed:81:a2:66:bb:bc:1b:9b:30:a1:c2:7e:56:
                    6f:76:b8:36:3c:bb:61:77:60:f1:d5:29:d5:16:52:
                    c1:53:88:56:c2:99:b6:3a:2a:e5:7e:69:ee:2d:dc:
                    e5:55:9c:14:29:85:10:ae:7c:7c:18:89:cb:03:0c:
                    46:2c:bf:9f:d3:49:0b:fd:20:df:39:ae:23:9f:5f:
                    8f:5f:9d:07:70:62:42:23:6d:f8:33:6a:54:61:be:
                    4a:d0:83:07:c7:48:4d:8f:11:32:5a:b3:ff:95:bd:
                    17:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:96:43:CD:F7:6D:2E:24:C0:26:38:DB:93:33:73:22:1C:DB:E6:93
            X509v3 Authority Key Identifier:
                keyid:BF:55:99:C2:67:55:F4:A4:D4:F5:40:E2:FF:D7:B7:4A:39:05:3D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:5e:7c:94:f1:5b:d8:6e:4c:eb:1d:38:97:d0:57:17:e0:e9:
         82:ef:48:0f:bf:c6:78:ec:64:f6:28:8f:43:e4:d5:44:70:77:
         82:df:d9:df:0d:27:66:62:10:a2:c9:e6:d0:ad:62:73:e8:b1:
         cb:b0:f6:1a:9b:b2:1b:9a:dc:e2:77:4d:71:ea:17:30:ca:05:
         38:fb:ee:44:51:82:15:18:ed:a4:45:ae:a8:5c:be:33:75:1e:
         55:a8:24:af:09:d1:0e:70:14:32:bf:9f:0f:b8:b3:31:90:93:
         42:79:01:aa:7a:86:9d:23:fb:86:e3:05:00:2f:24:2e:48:7a:
         ca:5d:41:9c:2d:15:74:c6:72:65:52:45:85:69:7b:ed:3f:08:
         55:27:53:90:38:c2:58:00:7d:97:7c:3e:b6:92:76:e5:41:ce:
         fa:7c:7d:45:17:67:ea:02:7c:68:a5:ea:07:c3:ce:6d:1f:30:
         0e:0d:11:18:91:12:9b:82:0d:d5:ff:b3:e8:f6:8b:4e:60:70:
         21:93:f2:9e:dc:04:cd:05:a9:c9:28:86:77:0f:aa:b9:ba:54:
         aa:0b:46:8b:5a:b7:f1:9d:47:94:48:2e:50:56:00:79:38:0c:
         b1:4e:e5:2e:dd:df:9b:5e:a1:46:89:ca:50:44:fd:66:32:71:
         53:66:1b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:02:26 2026 by rpki-client