Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
File:                     ksWu7-nRJuw2Et_ywIITVLFbu6g.mft (raw, json)
Hash identifier:          CwQ6Obv2CpdnmlU5g7HjWpYDxZxLZ5Ue/ehu9KhENPM=
Subject key identifier:   3F:66:B5:FC:60:8B:02:D4:D0:91:22:05:1D:6E:3B:42:93:40:63:65
Authority key identifier: 92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8
Certificate issuer:       /CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
Certificate serial:       019EC1B6E7D772CA30125F98ED1C5C10B1DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
Manifest number:          062F
Signing time:             Sat 13 Jun 2026 16:00:50 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:50 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:50 +0000
Files and hashes:         1: 3mjwWXgkTmZynhO0MwwYYfeUgYQ.roa (hash: LoggYH1kpzYGA8Tu1WeRvVr5FGcv4gtJiNCI/Z5f+Ho=)
                          2: ksWu7-nRJuw2Et_ywIITVLFbu6g.crl (hash: PyKbGq1eHsia+1TWb9tJcxil5ZEGDD6/MLoG1KvrD38=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b6:e7:d7:72:ca:30:12:5f:98:ed:1c:5c:10:b1:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
        Validity
            Not Before: Jun 13 16:00:50 2026 GMT
            Not After : Jun 14 16:00:50 2026 GMT
        Subject: CN=3f66b5fc608b02d4d09122051d6e3b4293406365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2c:2e:78:48:ed:ab:87:44:51:02:c1:19:1e:
                    49:3d:2b:7f:ba:65:07:56:bb:cb:2a:3b:a6:a3:39:
                    f8:56:93:f4:02:c2:35:ef:26:0d:f5:c7:b6:d5:2d:
                    26:9c:04:fc:73:b2:29:a5:4f:91:f6:f3:45:69:44:
                    57:68:91:1e:7f:2c:bc:3b:b5:88:51:6e:f4:fc:9c:
                    5b:85:df:12:a5:87:c2:fe:4f:c3:d1:00:dc:a5:62:
                    a2:62:b3:fc:2b:bc:ef:78:c4:db:d1:82:c3:d1:dc:
                    c4:a4:ea:a3:c2:21:0d:f5:84:df:42:e8:42:8a:5d:
                    c9:c4:1e:33:aa:fb:31:6d:e9:02:31:d9:76:26:da:
                    1e:2b:1e:ed:7d:af:08:9b:85:e3:e8:42:9f:b2:63:
                    cf:59:31:2a:a1:c4:fb:40:d9:a9:a3:9a:e6:5d:22:
                    87:ab:26:21:9f:df:90:e9:17:58:e7:b6:f6:e2:b2:
                    ca:71:42:b9:b2:0f:15:b4:d7:b1:5a:8a:64:8c:78:
                    01:cc:13:8a:2b:a4:57:54:df:a7:f1:0d:48:cb:42:
                    1d:37:d6:26:87:ca:f4:7f:5e:14:bf:06:17:95:fd:
                    96:23:96:6b:16:85:ad:c2:98:a5:81:5f:2e:6d:85:
                    0a:c0:aa:98:ac:83:a2:97:29:6f:f0:2d:3c:af:9e:
                    8c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:66:B5:FC:60:8B:02:D4:D0:91:22:05:1D:6E:3B:42:93:40:63:65
            X509v3 Authority Key Identifier:
                keyid:92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:ea:66:79:40:71:a9:98:b7:ad:1a:fc:a8:a2:58:7f:a5:35:
         da:df:64:b8:dd:16:6a:f4:f3:1e:bf:9b:a4:a6:1a:c1:bf:2b:
         76:8e:e6:1e:22:e3:78:23:77:1f:21:7a:36:c5:b9:18:b1:86:
         12:6b:7a:c5:c5:51:2c:6d:c9:99:9f:ce:07:be:01:3d:fa:e4:
         eb:f5:df:0c:9b:9f:69:de:42:5a:54:b0:33:69:fd:69:c0:97:
         7c:19:a7:54:df:d9:3f:f4:dc:90:91:f3:83:4b:44:95:6c:ed:
         10:d8:b8:b0:14:6c:e1:47:73:68:ae:d4:e7:08:a0:11:96:19:
         b3:a7:19:58:cd:4c:7e:9a:36:8b:40:8a:56:8c:bc:06:03:76:
         e6:d6:e5:21:fd:b5:ec:48:a0:5f:ab:7b:f6:78:3d:de:85:4e:
         87:d0:f5:12:09:e3:01:5c:71:69:ca:5a:38:c3:3e:88:20:9f:
         e4:a2:61:92:3f:c6:29:87:a6:1b:02:f3:1d:ae:84:0f:5a:80:
         e3:6b:4d:2d:87:60:51:3f:9d:48:19:3c:94:08:2c:cb:54:34:
         67:0b:84:96:39:5f:dd:38:b1:f7:9a:c0:3e:e6:a9:52:6e:ac:
         10:ea:5a:e5:b7:49:14:d0:1f:99:b5:c7:62:ca:11:90:dd:a7:
         57:d2:08:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:29:11 2026 by rpki-client