Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
File:                     kUXq2NPxKEQCtvdWFKhyV1A84bw.mft (raw, json)
Hash identifier:          ladBnoLbBB/j5L2EJWGn9SOPHtymU91n4Y+EWGWoJlg=
Subject key identifier:   0D:87:FB:B4:EE:73:CC:A2:F4:19:1C:BC:D5:E9:C9:34:6B:E5:B9:BD
Authority key identifier: 91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC
Certificate issuer:       /CN=9145ead8d3f1284402b6f75614a87257503ce1bc
Certificate serial:       019EC2C9031C981839574E9115E0F46CCD50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
Manifest number:          1715
Signing time:             Sat 13 Jun 2026 21:00:13 +0000
Manifest this update:     Sat 13 Jun 2026 21:00:13 +0000
Manifest next update:     Sun 14 Jun 2026 21:00:13 +0000
Files and hashes:         1: EA-NEOtP3uDP9jqB_OwjrtlomoQ.roa (hash: f9ettJwQvG7z/vLtWszxNDWQ12P3Qi4WIIeHx0l0KMI=)
                          2: RUWdvZOnBJK0iIW0niXlms-_ZTE.roa (hash: 2+wMNcHhj5TvnlxNSP9HNjiQphs6X1jHdgsBG2jH8oQ=)
                          3: dJ99YeIlqHaqk3MFFpF1s00gLYY.roa (hash: 2get34VvGB/+dlsQY7O9iVM7eMGsBo6doetqxUk2mpw=)
                          4: kUXq2NPxKEQCtvdWFKhyV1A84bw.crl (hash: d6BlRKCl0Cq4JKSFTLLN3tgdzbX9SnMpAjuNn1p3s5U=)
                          5: oZzPr194SGFDBoXBt9T9kB-yFLc.roa (hash: Dw3uJz0rcR+PJswxCLk9+YfSwY4+DIuftXl5NNe/QJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:03:1c:98:18:39:57:4e:91:15:e0:f4:6c:cd:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9145ead8d3f1284402b6f75614a87257503ce1bc
        Validity
            Not Before: Jun 13 21:00:13 2026 GMT
            Not After : Jun 14 21:00:13 2026 GMT
        Subject: CN=0d87fbb4ee73cca2f4191cbcd5e9c9346be5b9bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:73:1d:b5:ab:a1:78:b0:be:70:8a:a4:7c:5f:
                    85:86:5e:11:b5:93:dc:92:34:4e:b8:61:0f:f3:4c:
                    e7:e9:fa:b0:ad:1a:11:dd:87:32:16:91:16:66:6c:
                    cb:f4:57:87:d5:7d:09:7b:cb:2c:c3:f5:14:fc:d1:
                    6d:b8:04:f4:63:9d:66:f7:17:32:ed:fb:ee:af:50:
                    ab:f5:f0:23:85:39:65:0c:55:9d:39:dc:3a:0f:b8:
                    47:1d:78:ed:5f:4e:db:a4:c0:05:5f:8e:b9:78:22:
                    f6:45:0f:7c:c9:31:2e:bb:0a:07:c6:53:b0:c6:79:
                    3f:50:7c:b2:2c:87:bf:df:d2:fc:03:d1:e9:f3:e3:
                    0e:e8:05:02:76:a9:ed:07:09:02:d9:b2:57:25:d5:
                    fd:2b:ca:2f:c5:3a:8e:5d:fc:e8:1e:6f:67:65:2d:
                    6d:c7:4d:0d:ca:d0:dd:55:07:92:50:8f:25:6a:b6:
                    75:d5:0d:06:06:88:d4:3c:75:5c:89:5b:7c:cc:d0:
                    36:72:3e:95:3c:3c:a9:db:06:5c:f5:f5:2a:86:15:
                    d0:be:2a:f8:c5:6b:b9:d1:f8:31:b8:87:bf:42:35:
                    35:cd:22:dd:fb:de:4b:3d:a1:31:29:c5:d6:a3:de:
                    3a:fc:94:40:49:ae:c6:2e:c0:f9:6c:21:9c:9c:02:
                    b3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:87:FB:B4:EE:73:CC:A2:F4:19:1C:BC:D5:E9:C9:34:6B:E5:B9:BD
            X509v3 Authority Key Identifier:
                keyid:91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:55:56:15:0d:90:27:3c:e6:02:c3:af:db:e7:72:f3:7f:17:
         52:bb:97:2d:63:73:af:a0:82:bd:50:dd:b9:18:c2:91:79:5c:
         30:e2:a3:64:64:ab:17:48:41:0f:c9:3c:7b:d6:fe:5a:12:f1:
         8b:04:af:39:30:97:c4:6b:bb:30:a0:36:eb:6f:55:50:94:04:
         a4:88:2c:0d:bc:fb:88:eb:9d:5c:24:f2:fa:65:5d:47:eb:d4:
         e4:0e:76:e2:32:80:0d:ab:58:ca:dd:17:31:72:f0:14:ae:26:
         d9:c2:14:24:d6:4b:91:b4:c8:bb:35:c4:c7:c0:7e:cf:29:82:
         d7:c0:7c:ec:0d:cd:bc:fb:9c:54:55:18:f5:a5:ff:db:0c:69:
         fe:45:78:bf:1c:cf:e8:89:d2:4c:2a:b4:8d:ff:a1:37:c7:59:
         2b:16:75:3b:ee:f6:83:69:8d:25:86:11:03:5c:a1:7f:54:bb:
         fe:22:26:e1:23:ac:3e:8c:65:26:78:51:6e:d4:c9:95:55:f5:
         c3:14:76:75:69:24:e0:1e:e0:87:87:33:a6:ab:5c:8b:39:8d:
         cb:5f:d2:9f:40:da:b5:18:06:32:8c:bb:0e:99:39:1b:14:e7:
         ab:9e:5a:7f:86:87:e3:9a:17:b7:f9:83:44:0d:00:da:b7:40:
         c7:4a:bc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:40:03 2026 by rpki-client