Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
File:                     pW4itGIL0EL3OiqWIfDJJH1RJIo.mft (raw, json)
Hash identifier:          El+vi/8HO6irtCWcA5i6pSSZwKsH6g0yc2JIhXrvJng=
Subject key identifier:   F9:02:2B:4B:BE:35:F4:3B:22:47:8A:49:CE:7D:9C:39:A5:EF:22:FD
Authority key identifier: A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A
Certificate issuer:       /CN=a56e22b4620bd042f73a2a9621f0c9247d51248a
Certificate serial:       019EC3A4CF42CD9721C95F9C99928B3388F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
Manifest number:          037F
Signing time:             Sun 14 Jun 2026 01:00:18 +0000
Manifest this update:     Sun 14 Jun 2026 01:00:18 +0000
Manifest next update:     Mon 15 Jun 2026 01:00:18 +0000
Files and hashes:         1: Kkl_6cJ2NW9gkA52-5jv-Obc7ns.roa (hash: 4jf6X5p/dhPdcVjaKtN3T7ju4heIpjF/dGvY5hyoUAg=)
                          2: pW4itGIL0EL3OiqWIfDJJH1RJIo.crl (hash: Om9Njcmxu6+ivz+YosLtQy4H0HkybY69R5L9BE8jo5Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:a4:cf:42:cd:97:21:c9:5f:9c:99:92:8b:33:88:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a56e22b4620bd042f73a2a9621f0c9247d51248a
        Validity
            Not Before: Jun 14 01:00:18 2026 GMT
            Not After : Jun 15 01:00:18 2026 GMT
        Subject: CN=f9022b4bbe35f43b22478a49ce7d9c39a5ef22fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:27:27:8e:36:ae:e7:5c:0b:22:4d:d2:48:09:
                    8e:d5:69:15:f4:e1:46:4e:7f:2d:c2:56:eb:35:30:
                    2b:4b:74:37:60:43:07:3a:15:d6:07:2d:17:99:85:
                    34:19:90:6f:35:07:40:d2:11:f4:eb:85:66:07:4c:
                    fd:ff:9b:db:fc:3e:39:96:b2:57:92:77:12:2d:08:
                    0c:32:97:45:40:23:b9:75:28:a8:6d:ac:41:62:c8:
                    0a:2b:c7:75:d0:f0:ca:cd:81:79:95:b9:01:35:09:
                    b3:95:fb:31:af:28:a3:07:8a:04:94:61:1e:21:bd:
                    8b:34:ed:3d:d6:58:84:60:e0:16:68:42:55:3b:a3:
                    d6:be:44:fe:6f:de:1b:ac:d8:80:de:fa:cf:f4:71:
                    62:72:86:b1:98:cc:a1:9e:f0:20:5f:90:48:98:75:
                    34:b8:47:ac:32:6f:f4:21:40:03:df:bd:c2:27:12:
                    5d:48:79:52:05:29:34:c5:31:9d:8a:2a:fd:96:86:
                    50:57:67:45:43:82:b2:37:d8:ba:a0:a8:f6:8b:35:
                    44:a0:47:7c:f9:b2:12:f8:14:5b:64:84:74:2e:f8:
                    87:84:41:6d:83:23:c9:e0:61:2c:23:c9:65:c9:ae:
                    ce:db:26:2f:a2:cd:3c:9b:94:9a:b3:48:31:01:38:
                    bd:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:02:2B:4B:BE:35:F4:3B:22:47:8A:49:CE:7D:9C:39:A5:EF:22:FD
            X509v3 Authority Key Identifier:
                keyid:A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:eb:ae:48:8b:6b:01:45:f3:f5:28:50:35:65:1f:e3:02:60:
         6f:7c:f1:63:55:f4:b3:2e:d5:2f:53:ed:9c:15:4a:49:f4:d0:
         11:9c:f8:46:4c:c7:cd:9c:e4:ad:89:48:1a:03:c7:36:3d:33:
         6c:e6:a0:b3:e6:5a:52:66:7e:86:7c:fe:23:9e:c7:ca:d3:a2:
         5e:a9:8e:14:a9:8c:25:23:c4:f7:13:a1:d1:7a:3d:fb:77:09:
         9e:71:42:83:4d:f7:10:bb:d5:ab:b9:b8:4c:14:c4:3f:53:41:
         4a:a8:b6:0c:d0:6f:da:78:d1:61:3e:5c:18:09:9a:10:f5:6c:
         10:3e:ab:47:f6:2b:17:a8:0b:8e:4c:70:d3:b3:a6:b4:a5:e9:
         29:b2:89:ca:f1:b4:c8:ac:0f:32:9c:5c:8a:1a:fa:22:93:48:
         5a:3f:3e:b9:92:9c:c8:26:26:55:fa:e6:9a:71:34:cc:e5:40:
         7f:c8:b9:ee:a0:a3:2c:f0:e6:5d:c6:f7:15:0b:07:59:fa:00:
         1f:59:a7:98:ac:cd:46:1c:74:90:d4:ad:f1:a9:35:03:a1:c3:
         90:85:6d:b0:f8:43:b7:af:e4:47:c5:c7:07:3d:1f:52:fe:3f:
         dc:fc:51:7f:d8:8b:ed:77:a3:a9:77:a5:ce:a4:46:c2:d7:61:
         e4:5d:ca:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:35:49 2026 by rpki-client