Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
File:                     k_6KleVSnXjnIEfU410afprVwRo.mft (raw, json)
Hash identifier:          7bQPuqoJZLsPzUe7n6xSMgDlycZcvVZ2q4G04swZxfo=
Subject key identifier:   72:B7:83:11:E7:EA:E7:65:95:52:20:86:DB:E5:06:38:76:6C:30:7B
Authority key identifier: 93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
Certificate issuer:       /CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Certificate serial:       019EC0DBAF1CE9F1173EAB3CC71A21317ED9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
Manifest number:          13C0
Signing time:             Sat 13 Jun 2026 12:01:23 +0000
Manifest this update:     Sat 13 Jun 2026 12:01:23 +0000
Manifest next update:     Sun 14 Jun 2026 12:01:23 +0000
Files and hashes:         1: 49LQYCKrkmNNL48-Fl8V6rDmWFs.roa (hash: lwI1+7NvumWGlUp1lLMRp57YPYf+J6rbS7utAHBEa2c=)
                          2: k_6KleVSnXjnIEfU410afprVwRo.crl (hash: RerhrziNzJ2I+OrQUhS0W6ZJxdTzzkoyrcZHYX4e9H8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:af:1c:e9:f1:17:3e:ab:3c:c7:1a:21:31:7e:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
        Validity
            Not Before: Jun 13 12:01:23 2026 GMT
            Not After : Jun 14 12:01:23 2026 GMT
        Subject: CN=72b78311e7eae76595522086dbe50638766c307b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2b:85:27:99:5c:65:ba:51:29:8d:49:39:87:
                    45:d8:68:2e:a6:14:6c:83:e8:1d:e1:bc:22:ab:e7:
                    84:c9:d5:6b:0e:70:3f:47:a7:23:0d:ab:d0:4f:06:
                    ef:2e:0b:2a:94:0a:12:31:50:9e:ba:6b:b5:0c:95:
                    57:76:dd:46:b0:ff:f2:c8:ce:b4:48:3a:20:e5:b1:
                    a1:f7:91:b6:87:bb:97:57:4b:f3:1f:7c:cb:eb:47:
                    a0:4b:05:1c:c6:d4:f8:ab:3e:87:3b:0b:a5:85:ad:
                    22:96:cb:3a:bd:32:34:16:8d:c5:c1:d4:48:c9:78:
                    25:b8:84:a3:3c:8f:a1:ca:d8:b6:6c:7f:56:13:26:
                    d1:66:51:5e:55:84:cd:af:9c:0e:f8:bb:ad:6b:0a:
                    93:ef:0e:91:38:86:d2:c0:43:29:73:d4:f4:c5:98:
                    64:03:4e:73:0f:9e:b1:a9:3c:35:b5:69:90:c2:3b:
                    18:d1:81:08:77:70:c8:53:bc:88:ce:16:09:e7:c2:
                    7c:a1:92:d6:97:5c:98:a7:bb:56:0d:52:f0:51:97:
                    85:10:cd:71:14:cd:da:83:c8:d0:e7:3a:17:f4:7f:
                    84:70:da:4d:68:34:e4:7b:ed:0c:b2:4d:3e:21:e6:
                    26:bc:51:d5:f7:a1:eb:37:bd:c2:9d:19:d5:38:0c:
                    92:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B7:83:11:E7:EA:E7:65:95:52:20:86:DB:E5:06:38:76:6C:30:7B
            X509v3 Authority Key Identifier:
                keyid:93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:16:38:8b:a4:2e:1f:68:76:58:b4:f6:85:be:f6:ee:92:89:
         8d:ef:d2:20:ca:ef:2a:1b:1f:7a:25:04:95:0b:05:e2:54:28:
         0c:f8:ac:99:7c:e2:c8:a2:89:e4:e6:3f:db:6a:6f:a0:c7:67:
         8d:f4:07:e4:2e:98:74:a2:3c:a7:ab:6b:21:14:5c:68:99:51:
         39:7f:ce:60:7a:4a:80:fb:16:bf:c3:3d:22:fd:68:f8:e0:88:
         57:af:0a:80:06:be:7b:33:a3:0d:3c:5f:bb:37:63:81:a6:bc:
         3b:97:5f:27:f1:a5:3d:2d:d5:00:5b:27:cb:f4:eb:ea:82:ce:
         70:08:a5:9d:c2:ff:20:70:72:ca:ff:78:ff:14:84:69:f1:a6:
         0b:73:9b:cb:d2:7d:2e:e9:b0:97:e8:95:94:a3:a0:e0:f2:a4:
         cd:f3:3d:ac:c0:78:7f:48:77:aa:98:91:ce:9e:cc:c8:70:9b:
         b4:5f:aa:bd:72:e8:35:d3:46:cf:0e:ce:e8:2d:68:8b:b4:1f:
         34:92:96:5b:89:dd:d2:c6:7e:35:5e:af:3c:c0:90:53:c7:1e:
         6d:70:c4:cc:ab:b9:86:55:22:fa:82:82:13:33:b4:28:9c:72:
         a6:0c:de:8a:a7:b2:4d:05:a3:3b:8e:c7:51:03:f9:65:04:34:
         88:79:f4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:48:02 2026 by rpki-client