Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft
File:                     AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft (raw, json)
Hash identifier:          Jwd4MCGqran7z/dGgrBOz+YgcAHlduaoAq/XnyCMKWY=
Subject key identifier:   78:DE:44:D8:9A:5E:AE:E2:60:42:3D:38:CF:B0:61:B9:8C:90:FC:59
Authority key identifier: 01:E6:22:56:44:84:64:9A:5A:65:7B:45:C9:D3:BB:30:C7:89:A3:E4
Certificate issuer:       /CN=01e622564484649a5a657b45c9d3bb30c789a3e4
Certificate serial:       019EC0DB0EE55E09067BD3BBE11EF89CF2FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AeYiVkSEZJpaZXtFydO7MMeJo-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft
Manifest number:          03CC
Signing time:             Sat 13 Jun 2026 12:00:42 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:42 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:42 +0000
Files and hashes:         1: AeYiVkSEZJpaZXtFydO7MMeJo-Q.crl (hash: R2G+UjHpHGlr6TpnHTIUTqxkoYrO5JqQ2JYiNe6ed5A=)
                          2: sh8M4KLHuLakVIud2TbaHMeCEjw.roa (hash: vWKdYFJEWQq1vzlyAwLNl/BBt4KHaNS4rv484R5g4EE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AeYiVkSEZJpaZXtFydO7MMeJo-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:0e:e5:5e:09:06:7b:d3:bb:e1:1e:f8:9c:f2:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01e622564484649a5a657b45c9d3bb30c789a3e4
        Validity
            Not Before: Jun 13 12:00:42 2026 GMT
            Not After : Jun 14 12:00:42 2026 GMT
        Subject: CN=78de44d89a5eaee260423d38cfb061b98c90fc59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8a:e6:78:70:9e:3c:4c:14:17:ee:99:b2:ac:
                    0d:09:4e:c6:a0:13:4b:19:56:61:41:e5:52:9a:6d:
                    e5:d1:3a:5a:ed:5c:b9:42:8c:a5:ee:98:c2:36:9c:
                    4f:07:fd:6b:af:7d:4e:1c:c0:c6:c9:8c:c4:f9:66:
                    36:a5:89:d8:fb:96:ca:ad:96:13:70:10:bb:4c:9e:
                    6c:93:8d:78:ab:67:2a:b9:6f:38:ac:c2:8c:bf:06:
                    0f:40:98:c4:51:c4:a2:9f:18:8f:b5:90:80:f9:cf:
                    c9:ca:fd:84:6d:b8:2d:ce:07:98:b9:ca:15:86:2d:
                    2c:78:6f:14:40:43:22:b3:10:f8:92:4e:3d:8d:5d:
                    1a:42:79:de:1e:1e:c4:75:35:7b:49:b4:bd:85:78:
                    f3:b6:21:71:66:16:67:56:c7:67:2f:2d:77:bf:b3:
                    11:0c:fd:c6:ff:3c:b6:1a:22:e6:03:b7:ce:46:3f:
                    7c:c8:b4:d3:a8:ed:29:82:aa:1d:7e:1b:d6:be:98:
                    62:3a:ed:48:d1:0c:2d:65:33:ab:ce:df:02:55:9a:
                    1d:24:da:fc:77:d2:33:ad:e3:e4:ab:21:c7:f2:4f:
                    b8:a8:ce:f9:45:7c:31:64:b7:fb:79:0f:41:88:ad:
                    4d:0b:0b:70:06:19:16:a0:3b:c2:a3:ea:f8:f9:f2:
                    80:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:DE:44:D8:9A:5E:AE:E2:60:42:3D:38:CF:B0:61:B9:8C:90:FC:59
            X509v3 Authority Key Identifier:
                keyid:01:E6:22:56:44:84:64:9A:5A:65:7B:45:C9:D3:BB:30:C7:89:A3:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AeYiVkSEZJpaZXtFydO7MMeJo-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:c1:bc:1a:e8:5e:43:b1:f9:fc:30:f6:33:b3:45:2c:85:62:
         f5:36:4b:4c:88:b5:c4:f1:e7:eb:22:78:f0:61:fc:39:f6:56:
         93:69:2e:3f:10:6c:6d:b5:8d:a6:99:b3:11:de:c6:02:b7:05:
         05:1f:05:fa:1b:0a:1c:31:d6:39:e2:dd:b2:e1:52:eb:96:ed:
         5d:2d:f9:52:76:8c:3c:2f:f4:f2:4a:77:eb:5e:a2:f1:95:e7:
         7c:4e:d1:46:5c:77:d0:72:f1:58:61:ed:03:a9:38:c8:83:e8:
         fe:9b:26:25:f3:fe:b4:3c:86:15:7c:32:dc:27:9f:15:38:3a:
         f8:de:8d:55:f1:a4:61:a8:96:57:a0:cb:a2:2c:1f:f4:c7:7c:
         9a:23:9d:f7:82:5e:7c:50:50:f6:d3:b8:1c:08:d9:0d:62:ef:
         a7:04:4d:04:8c:94:7a:84:0b:66:d6:a4:64:9a:e2:4e:d2:22:
         3d:7e:f4:0a:14:ea:d0:f8:14:be:4c:9b:7e:7b:20:96:e9:0a:
         12:ee:cb:4e:d1:52:ef:5d:fa:94:41:f7:d6:60:10:65:45:f2:
         bc:d1:4e:08:17:18:3f:e2:4f:ee:71:77:bf:eb:7f:88:e8:1b:
         5a:a6:4d:38:2b:84:a8:92:bb:67:21:c7:25:9c:f7:32:a3:31:
         eb:6a:98:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:27:33 2026 by rpki-client